last executing test programs: 59.760119456s ago: executing program 1 (id=33): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x4, 0x1, 0x4, 0x0, 0x81}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x3, 0x7, 0x805, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x0, 0x139, 0x7, 0x5, 0x3, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0x2, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (rerun: 64) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x80000001, 0x3, 0x8, 0x100, 0x0, 0x8, 0x8, 0x1, 0xa79b, 0x70384838, 0x27c, 0xb, 0x1ff, 0x100, 0x36fc2bb3], 0xa000, 0x10}) 59.690368598s ago: executing program 1 (id=34): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYRES32=r0], 0x44}, 0x1, 0x2}, 0x40000) 59.690038808s ago: executing program 1 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x1000, 0x200, 0x7, 0x1, 0x0, 0x7, 0xc6, 0x1, 0xff, 0x6, 0x8, 0x8, 0x9}, {0x8, 0xaef3, 0xe, 0x8, 0xc, 0x1, 0x8, 0x14, 0xac, 0x5, 0x1, 0x6, 0x12005}, {0x8, 0x7, 0x1, 0x9, 0x7, 0x4, 0x1, 0xfe, 0x1, 0x15, 0x1, 0x3, 0x2}], 0x1}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000bae2538f04663ee0", @ANYRES64=r0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) io_setup(0x3ff, &(0x7f0000000000)=0x0) io_pgetevents(r7, 0x6ad7, 0x5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000600)={&(0x7f0000000040)={[0x8001]}, 0x8}) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) io_destroy(r7) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$inet6(0xa, 0x2, 0x3a) 58.815006846s ago: executing program 1 (id=47): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_emit_ethernet(0x16a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x134, 0x6, 0x0, @local, @local, {[@fragment={0x67, 0x0, 0xdf, 0x1, 0x0, 0x2, 0x67}, @fragment={0x33, 0x0, 0x5d, 0x1, 0x0, 0x1e, 0x66}, @dstopts={0x1d}, @dstopts={0x29, 0x3, '\x00', [@hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x6}]}, @routing={0x11, 0x4, 0x0, 0x7f, 0x0, [@loopback, @loopback]}, @dstopts={0x6, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x3, 0x0, 0xf4, 0x4}}, @jumbo={0xc2, 0x4, 0x7fff00}, @calipso={0x7, 0x30, {0x0, 0xa, 0xe, 0x4, [0x5, 0x6, 0x80000001, 0x3ff, 0x5]}}]}, @dstopts={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x2}]}, @dstopts={0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @fragment={0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x66}], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x122, 0x0, 0x0) 58.708385208s ago: executing program 1 (id=48): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket(0x2, 0x3, 0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)=0x9) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(0x0, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='binder\x00', 0x1214040, 0x0) chdir(0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="8ce2ad4d4f95e087a7846d3f8178f7ea503e4b855e91ff3791ec60eb496335e9", 0x20, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 58.610251748s ago: executing program 1 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@allocspi={0x1d8, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x20, 0x80, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x7, 0x6, 0x400}, 0x70bd2c, 0x0, 0xa, 0x0, 0x0, 0x9c}, 0x0, 0x4ad}, [@sec_ctx={0xdf, 0x8, {0xdb, 0x8, 0x1, 0xb2, 0xd3, "63c2435c61e39d34b4498604970853d05f37924de4dc1da6741af3a86a5c144a9bf3b1c501906cfc7e3c271e7245bba64624fe1087d72efe8e431490eeb7d9e09ef861ca8a048bf03964b37dcafb453887389b8987bb0c3e0dede2f26c370a7823eb436902041552786314a5442b59accedf266a6de4d5d1635f1ed80a08faf5f718e183719923edcc9cfcd05904cc97d96f70c83eea8e67759cbd05344dc9218b42b84e0462a522aa273833dc88546da11740c3606e5bfa8ea74763c8133a2c69cd72582ca89061ed8501eb3c2484adfb8512"}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000003c0)) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffa000/0x4000)=nil) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000001800010600000000000000001c140000fc0000010000000084001300000001000000000000000c0000000600000000000000000000000100000000000000000000000000000004000000000000000000000f0c0000000000000f00000000000000000000000000000000000000000000000000000000000000000000000005000000000000000a0000000400"/160], 0xa0}}, 0x20000040) 46.273999381s ago: executing program 3 (id=215): keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 46.214617371s ago: executing program 3 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x120, 0x0) recvfrom$llc(r1, &(0x7f0000000000)=""/46, 0x2e, 0x2, &(0x7f0000000040)={0x1a, 0x10e, 0x2, 0x0, 0x49, 0xe8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 45.32600543s ago: executing program 3 (id=222): syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) (async) ioctl(r0, 0x8b1b, &(0x7f0000000040)) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008180)=@newtaction={0x2498, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_mirred={0x64, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffe6d9, 0x4, 0x6, 0x0, 0xfffffff9}, 0x3}}]}, {0x15, 0x6, "78e308ee0f9a4e8ddc77981e9f8ab960dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x4}, {0x20a4, 0x1, [@m_police={0x20a0, 0x0, 0x0, 0x0, {{0xb}, {0x2074, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x8, 0x4, 0x408, 0x40, 0x0, 0xd8de, 0x437, 0xa, 0x10000, 0x2, 0xdc9, 0xf9, 0x8, 0xffffffff, 0x6, 0x5, 0x1, 0x5, 0x2f9, 0x9, 0x9, 0x2, 0xa3, 0x6, 0x5152, 0x6, 0x7, 0x80000000, 0x3, 0x0, 0xfff, 0xfff, 0x6, 0xe8, 0x5, 0x9e, 0xfa0, 0x5, 0x6, 0x20, 0x7, 0xb46, 0x5, 0x8, 0x8, 0x96e, 0xfffffffa, 0xfffffffd, 0x2c, 0x4, 0x6, 0x5, 0x1, 0x5, 0x0, 0xfb34, 0x7fffffff, 0xfff, 0x9, 0x81, 0x4, 0x3, 0x200, 0x6, 0x7, 0x2, 0x372, 0x5, 0x0, 0x4, 0x2ab4, 0x40, 0x2, 0x7, 0x4, 0x39ac, 0xb59, 0x7, 0x4, 0x7, 0x2, 0x867, 0x1, 0x8, 0x3, 0x8001, 0x6, 0x9, 0x2, 0x6, 0xf76, 0xa, 0xf00000, 0x99f8, 0x1468, 0x7, 0x401, 0x5, 0x400, 0x9, 0x6, 0x9, 0x2, 0x7, 0x1, 0x8, 0x5, 0x1, 0x7, 0x4, 0x1, 0x4, 0x5, 0x4, 0x6, 0x75db, 0x6, 0x1, 0x800000, 0x6180, 0xf6a0, 0x5, 0x9, 0x1ff, 0x0, 0x5, 0x0, 0xeca, 0xfffff0da, 0xca3, 0x7f, 0xffffffff, 0x5, 0x3, 0x8, 0xfffffe00, 0x3, 0x5, 0xee4, 0x0, 0x5, 0x9f, 0xf583, 0x4, 0xc6f, 0x8, 0x3, 0x80000, 0x1, 0x2, 0x2, 0x5, 0x2, 0xffffffff, 0x8, 0x1, 0x1, 0x9, 0x9, 0x5, 0x7, 0x8, 0x5, 0x401, 0x1, 0x8, 0x80000001, 0x401, 0x2400000, 0x1, 0x1, 0x8, 0x3, 0x80000000, 0x1000, 0x3, 0x8, 0x1, 0x0, 0x9, 0x5, 0x1f, 0x1, 0x3, 0x100, 0x42, 0x0, 0x4, 0x4, 0x80000001, 0x1, 0xffffffff, 0x7, 0xfffffe00, 0x5, 0x4, 0x0, 0x1, 0x6, 0x0, 0x3, 0x8000, 0x2, 0x6, 0x3f55, 0x6, 0x9, 0x8, 0x2, 0x1, 0x5, 0xa6, 0x0, 0x9, 0x3, 0x200, 0x1, 0x6, 0x0, 0x6, 0x1, 0x6, 0x81, 0x7, 0x5c86, 0xfff, 0x1577, 0xfffff001, 0xfffffff7, 0x3, 0xafc4, 0xf, 0x57d, 0x0, 0x9, 0x80, 0x200, 0x6, 0x6, 0x79542d27, 0xfffffffb, 0x6, 0x7fffffff, 0x3, 0x4, 0x401, 0x36ac, 0x8000, 0x80000000, 0x0, 0x0, 0x40, 0x3f6, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7fffffff, 0x5, 0xfffffffe, 0x0, 0x4, 0xa78, 0x8000, 0x1, 0x9, 0x4, 0x1000, 0x2, 0x4f77, 0x8134, 0x7, 0xa, 0xf, 0x1, 0x2, 0x2, 0x6, 0x6, 0x8, 0x3, 0xebf5, 0x2, 0xfffffff9, 0xe, 0x1, 0x8, 0x6, 0x5, 0xc3d5, 0x6, 0x3c, 0x6, 0x6, 0x9, 0x7, 0x9, 0xe2, 0x401, 0x7, 0x276, 0x9, 0x7, 0x100, 0x8, 0x6127, 0xc, 0x200, 0x8, 0x200, 0x23e, 0x0, 0x0, 0xf, 0x84, 0x8, 0xfffffa08, 0x2, 0xffff, 0x3, 0x8, 0x0, 0x8, 0x6, 0x7, 0x5, 0xdad2, 0x80000001, 0x0, 0x10001, 0x3, 0x940d, 0x4000, 0x200, 0xff, 0x3, 0xe7a, 0x1, 0x1, 0x9c7, 0xb87b, 0xff, 0x510, 0xfffffffb, 0x2257, 0x9, 0xb4c5, 0x8000, 0x10001, 0xd, 0x5, 0x1, 0x6, 0x0, 0x1, 0x3, 0x6, 0x2, 0x4, 0x3, 0x5, 0x1, 0x0, 0x7, 0x71d, 0x2, 0x6, 0x3, 0x1000, 0x5, 0x81, 0x3, 0x7fff, 0x2, 0x6, 0x8000, 0xfffffc01, 0x1, 0x2, 0x6, 0x5, 0xffff, 0x3979, 0x8, 0xff, 0x4, 0x6, 0x80000000, 0x100000, 0x2, 0x3ff, 0x1d, 0x0, 0x800, 0x4, 0xc12, 0x4a, 0x10, 0xc7ac, 0x3, 0x9, 0xfffffffb, 0xfa7, 0x6, 0x1, 0x10000, 0xd, 0x800, 0x5, 0x800, 0x3, 0x6, 0x7f, 0x7, 0x1ff, 0x552cee17, 0x3ff, 0x6, 0x8, 0x2d2, 0xbc9c, 0xfc, 0x4a676372, 0x2, 0x1ff, 0xf, 0x8, 0x3, 0xffffffff, 0x8, 0x4, 0x1, 0x8, 0x85, 0xf, 0x6, 0x7, 0x2, 0x8, 0x8c7, 0xfffffffd, 0x9, 0x5, 0xe0f6, 0x3, 0x0, 0x1c0000, 0x5, 0x6, 0x3, 0x8001, 0x5, 0x2, 0x7, 0x1800000, 0x7fffffff, 0x1, 0x89, 0xc, 0x24000, 0x7, 0x6, 0x10, 0xe, 0x4, 0x5a, 0x7f, 0x9, 0x40, 0x4, 0x4, 0x6, 0x800, 0x7, 0x3, 0x3, 0x9b56, 0x6f, 0x6, 0x1000, 0x68, 0xfff, 0xea46, 0x3f2, 0x7d, 0x0, 0x9, 0x2, 0x8f4, 0x9, 0x81, 0xa3, 0x8, 0x7, 0x3, 0x3, 0x8000, 0x80000001, 0x10000, 0x8, 0xff, 0x1, 0x7, 0x3, 0x1, 0x4, 0x0, 0x9, 0x4, 0xaa9, 0x9, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0xcac, 0x1, 0x7f, 0xaa, 0x8, 0xaf2d, 0x6, 0x80, 0x475a, 0x9, 0x9d, 0x800, 0x9, 0x1, 0x3, 0x366, 0x0, 0x3, 0x4, 0x6, 0x1, 0x2, 0xff, 0x7fffffff, 0x3, 0xfffffff7, 0x6, 0x903, 0x1, 0x5, 0x800, 0x1, 0x7, 0x8, 0x7, 0x0, 0xfffffffe, 0xbe, 0xc8, 0x1, 0x9, 0x800, 0x1, 0x93a, 0xfffffffc, 0xdf2, 0x1000, 0xfffffff7, 0x3, 0x80000001, 0x7fffffff, 0x3, 0x4, 0x1, 0x8, 0xf5a, 0x0, 0x8001, 0x5, 0x7, 0x4, 0x3ff, 0xcb8, 0x5, 0x4, 0x4, 0x4, 0x2, 0xb, 0x1000, 0xf, 0x8, 0xfffffffc, 0x6, 0x4, 0x0, 0xf, 0x4, 0x66, 0x7, 0x7, 0x2, 0x9, 0x5, 0xffffffca, 0x6, 0x0, 0x4, 0x7, 0x1000, 0xc2e, 0x1, 0x1ff, 0x3, 0x4, 0x9, 0x7, 0x7f, 0x80000000, 0x80000000, 0xc, 0xd, 0x20000, 0x8, 0x7, 0xffff9e6c, 0x2, 0x1, 0x9f64, 0x7, 0x5, 0xdb42, 0x0, 0x4, 0xcd35, 0x8000, 0xb, 0xf58, 0x440, 0x7fffffff, 0xb355, 0xb2, 0x7, 0x741, 0x0, 0xc6, 0xffff, 0x1, 0x3, 0x7, 0x5, 0x11, 0x7ff, 0x2, 0x3, 0x1, 0xb, 0xb22, 0x2, 0xffffffff, 0xe4, 0x9, 0x1f5, 0x4, 0x3, 0x4277, 0xb9a4, 0x0, 0x4, 0x2, 0x5, 0x6, 0x800, 0x0, 0xfffffff7, 0x9, 0x7, 0x6, 0x4a, 0x10, 0x3, 0xffffffbe, 0x5, 0x80000001, 0x1, 0x3108e998, 0x0, 0x49f9a3eb, 0xffffff00, 0x9, 0x5, 0x3, 0x5, 0x1, 0x0, 0x80000000, 0x0, 0x1, 0x8, 0x1, 0x3, 0x1e, 0x7, 0x5, 0x8, 0x8b7, 0x3, 0x6, 0x3, 0x7f, 0x7fffffff, 0x2, 0x4, 0x200, 0x81, 0x8, 0x6, 0x1, 0x7b0, 0xfffff547, 0xb1, 0x9, 0x4, 0x3, 0xec, 0x0, 0x0, 0x8, 0xcf, 0x4, 0x1, 0x6, 0xa96, 0x7, 0x20, 0x80000001, 0xffff90ed, 0x7fff, 0xfffff001, 0xffffff7f, 0x0, 0x10001, 0xffffffff, 0x3ff, 0x3, 0x5, 0x3, 0x0, 0x8, 0x1, 0x575, 0x7f, 0x3, 0x5e, 0x2, 0x8, 0x6, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x2, 0x8, 0x22a, 0x89, 0x40, 0x1, 0x8, 0x818, 0x2, 0x5, 0xfff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xaa}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4000, 0x1, 0x80000001, 0x10001, 0x3, 0x3, 0x5, 0x2a, 0x100, 0x7, 0x81, 0x6, 0x8, 0x0, 0x9ef, 0x1, 0x7, 0x5, 0x81, 0x3, 0x7b, 0x2, 0x7, 0x3000, 0x4, 0x4, 0xd, 0x1, 0x0, 0xfd3, 0x2, 0x28000, 0x44e, 0x7fffffff, 0x1, 0x5, 0x0, 0x1ff, 0x1, 0x5, 0x0, 0x993a, 0x5, 0xfffffff8, 0x5, 0x80000001, 0x8, 0x7, 0x9, 0xff, 0x100, 0x2, 0x2ba9, 0x8001, 0x8a5, 0x0, 0x5, 0x5, 0x100, 0x2, 0x1, 0x2, 0x9, 0x686, 0x7fff, 0x5, 0x1, 0x9, 0x0, 0x5c92, 0x1, 0x7, 0xe8, 0x7fffffff, 0x8, 0x4, 0x7, 0x5, 0xf, 0x4, 0x2, 0x100, 0x7fffffff, 0x4, 0x4, 0x9f16, 0x7, 0x4, 0x4, 0x100, 0x5, 0x9, 0x1, 0x9, 0xa5c, 0x75, 0xff, 0x38, 0x10, 0x5, 0x800, 0xed, 0x3, 0x2fab, 0x401, 0x4, 0x9, 0x7f, 0x0, 0xfff, 0x8, 0x1, 0x2654c548, 0x0, 0x7fffffff, 0x4, 0x2, 0xa4, 0x5, 0x8c, 0x3, 0xffff, 0x4, 0x5, 0x10000, 0xffff, 0x6, 0x6, 0x8, 0x4, 0x1ff, 0x3, 0x2, 0x7, 0x7fff, 0x4, 0x4, 0x4800000, 0x10, 0x9, 0xa55, 0x6, 0x20000, 0x6e70, 0x8001, 0x2, 0x9, 0xe, 0x6, 0x4, 0x2f, 0x5, 0x4, 0x1, 0x3, 0x4, 0x0, 0x0, 0x80000001, 0x5, 0x4, 0x8, 0x5, 0x80000000, 0x5, 0x96, 0x3, 0x6, 0xbf6, 0x6, 0xf8000000, 0x9, 0xaec0ed63, 0x8, 0x80, 0x1ff, 0x1, 0x4, 0x100, 0x9, 0x12a338f4, 0x487ed4d0, 0xb71, 0x1be, 0x8, 0xedf4, 0x8e, 0x2, 0x8, 0x0, 0x7, 0x9, 0xff, 0x60ab, 0x5, 0x543, 0x3, 0xa408, 0xe, 0x4, 0x2, 0x40, 0xc, 0x3ff, 0x10001, 0x6, 0x0, 0x4, 0x6, 0x5, 0x5, 0x3, 0xf67e, 0x10, 0x3, 0xffffffc4, 0x8, 0x6, 0x3, 0x3, 0x1, 0x8, 0x3, 0xffffd09a, 0x8, 0x8, 0x3, 0x10, 0xfffffffd, 0xfffff801, 0xff1, 0x4, 0x9, 0x0, 0x70cd, 0x3, 0x1294, 0x6, 0xfff, 0x66, 0x8, 0x7, 0x1ff, 0xff, 0x8, 0xab84, 0x9, 0x80, 0x53fdef26, 0x29, 0x0, 0x5, 0x9, 0x81, 0xff18]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2b118008, 0x4, 0xa6, 0x7, 0x4, 0x3, 0x3, 0x1000, 0x3, 0x6, 0x7f, 0x9, 0x7, 0x80000001, 0xffff, 0x5, 0x401, 0x5, 0xfb9, 0xfb8c, 0x8, 0xb, 0x2, 0xd60a, 0xfffffffa, 0x8000, 0x4, 0x21a, 0xfff, 0xda2, 0xd459, 0x0, 0x3d, 0x1, 0x5, 0x8, 0x6, 0x5, 0x1, 0x31d5, 0x1, 0x1d, 0x2, 0x8, 0xff, 0x10000, 0x1ff, 0x2, 0x1, 0x5, 0x2, 0x8, 0x1, 0x6, 0x5, 0x7e05379b, 0x400, 0xfffffff9, 0x4770af19, 0x6, 0x4, 0x4, 0x8000, 0x2c51, 0x8, 0x5, 0xd, 0x4, 0xe00000, 0x9, 0x4, 0x200, 0x5, 0x3, 0x3, 0x8001, 0x7493, 0xfff, 0x4, 0x0, 0x48, 0x800, 0x80, 0xb8fa, 0x7, 0x80000000, 0xc, 0xffffffff, 0x8, 0x7fffffff, 0x375, 0x1ff, 0x2, 0x9, 0x5, 0x0, 0x8, 0x6, 0xc39, 0x4, 0x7, 0x9, 0x6, 0xffff4a56, 0xa, 0x1000, 0x6, 0xd7, 0x578c81dc, 0x3, 0x1, 0x6, 0x2cd42a45, 0x1, 0xffffffc0, 0x1, 0x7f, 0x7fffffff, 0x3, 0x5, 0x7, 0x3, 0x6, 0xfffffffd, 0x4, 0x1, 0x1, 0x8, 0x8, 0x1000, 0x6, 0x90609d3c, 0x1, 0x3, 0x4, 0x0, 0xb, 0x0, 0x45b, 0x3, 0x1, 0xf, 0x4, 0xe, 0x3, 0xfffffe01, 0xb, 0x1e, 0x9, 0x3, 0x99c, 0x0, 0x6, 0x7, 0x8, 0x2, 0x4, 0x6999, 0x7, 0x9, 0xfffffffc, 0x1, 0x100, 0x37f6, 0x2, 0x9, 0xa3, 0x2, 0x7, 0x9e, 0x80000000, 0x0, 0xb65, 0x8, 0xffffff00, 0x5, 0xe, 0x0, 0x0, 0xe180000, 0x6, 0x4, 0x10, 0xf2a, 0x7fffffff, 0x3, 0x7, 0x5, 0x7, 0x6, 0x1, 0x55, 0xc, 0x723, 0xfd2c, 0x0, 0x3300000, 0xc775, 0x5, 0x9, 0x4c5bc4d9, 0x0, 0x7, 0x2000, 0x6, 0x0, 0x7, 0x5, 0xd161, 0x6, 0x3d1d, 0x0, 0x9, 0x8, 0x80000000, 0x2, 0x5, 0x7f, 0xd3eb, 0x3, 0xfffffbff, 0x1, 0x4, 0x6c6, 0x8, 0x58c20c01, 0x71a, 0x9, 0x6, 0xd, 0x4, 0xfffffff8, 0xffff, 0x6, 0x2000, 0x8001, 0x3, 0x10, 0x0, 0x0, 0x0, 0xe818, 0x80, 0x6, 0x2, 0x5, 0x200, 0x5, 0x5, 0x4, 0x401, 0x5c, 0x43, 0x5, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80, 0x5, 0x1, 0x4, 0x8, 0x7, 0x6, 0x10000, 0xf7, 0x2, 0xc, 0x1, 0x7, 0x5, 0xffff8427, 0x8, 0x0, 0x1, 0x7f, 0x4, 0x4, 0xfff, 0x6, 0x7, 0x9, 0x7f, 0x363, 0x5e, 0x5, 0xef49, 0x0, 0x6, 0x1, 0x7fffffff, 0x7, 0x6, 0x8, 0x0, 0x0, 0x8f5d, 0x400, 0x5, 0xffffff7f, 0x1, 0x3, 0x4, 0x0, 0x100, 0x9, 0x13, 0xffff8000, 0x4, 0x5, 0x1, 0x39f, 0x5, 0x5, 0xf, 0x5, 0x81, 0x4, 0x2, 0xffffb126, 0xffff, 0x0, 0xe, 0x1532, 0x5, 0x3f99c54f, 0x0, 0x4, 0xf9cf, 0x9, 0x8000, 0x7, 0x3060, 0x1, 0x3, 0xe664, 0x1, 0x5, 0x6, 0x1, 0x1, 0x4, 0x3, 0x6, 0x7fffffff, 0x3, 0x10000, 0xf0, 0x1, 0x81, 0x0, 0x800, 0x9, 0x8, 0x5, 0x2, 0x0, 0xd, 0x5, 0x0, 0x29fc, 0x1, 0x3, 0x8, 0x3, 0x80, 0x3, 0x1, 0x4, 0x100, 0xcda, 0x8, 0x5, 0x955, 0x4, 0x6, 0xfbf, 0xf55, 0x8, 0x71, 0x9, 0x80, 0x7, 0x4, 0x2, 0x2aedf30d, 0x6, 0x0, 0x2, 0x8, 0x7fff, 0xeff, 0xfffffffb, 0x5, 0x9, 0x1b, 0x6, 0x8001, 0x4, 0x4, 0x3df7, 0x74b, 0x4, 0x1, 0x9, 0xc, 0x2, 0x1, 0x72e, 0x100, 0x9, 0x4d7, 0x8, 0xd5d7, 0x7f, 0x7, 0x3, 0x5, 0xd, 0x0, 0xb, 0x2a, 0x9, 0x800, 0x0, 0x3, 0x3, 0x5, 0xff, 0x7f, 0xc000000, 0x247b, 0x40400000, 0x0, 0x8, 0x1ff, 0x7ff, 0x4, 0xfffffc00, 0x0, 0x5fa, 0x1, 0x6, 0x3, 0x9, 0x6ea, 0xb, 0x8d, 0x2, 0x3, 0x3, 0x0, 0x7, 0x6, 0x4, 0x4, 0xc, 0x7ff, 0x7, 0x8a2, 0x6, 0x4, 0x80000000, 0x3, 0x90f, 0x4, 0x8, 0x4, 0x10001, 0x0, 0x9ec, 0x2, 0xfffff000, 0x8, 0x80000001, 0x4, 0x7, 0x1, 0x2, 0x8, 0x4, 0x7, 0x6, 0x4, 0x1, 0x4, 0x6, 0x8000, 0xcb34, 0x0, 0x7ff, 0x6, 0x9, 0xd15, 0x1, 0x4, 0x5, 0xa50, 0x6, 0x6, 0xb, 0x1000, 0xb9, 0x8, 0xc1c0, 0x0, 0x8, 0x1000, 0x8, 0x10, 0x7, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2000000, 0xd, 0x3, 0x76, 0x5, 0x9, 0x10001, 0x550, 0xba2c, 0x9, 0x40, 0x0, 0x7fffffff, 0x8, 0x8e, 0x7fffffff, 0x0, 0x7, 0x5, 0x4, 0x8, 0x8000, 0x3, 0x9, 0x0, 0x2, 0x8, 0x7, 0x4, 0x2, 0x3, 0x2, 0x4, 0x19, 0x80000000, 0x6, 0x0, 0x0, 0x10000, 0xfffffff7, 0x8, 0x1, 0x0, 0xd88, 0x401, 0x7fff, 0x1ff, 0xffff0000, 0x8, 0x6, 0xb7200000, 0x6, 0x0, 0x14000000, 0x0, 0x2, 0x6, 0x5, 0x400, 0x4, 0x1ff, 0x5, 0x4, 0x1ff, 0x1ff, 0xfffffffd, 0xffff0001, 0xffff1ac6, 0x1, 0x3, 0x5, 0x49e, 0x2, 0x2, 0x0, 0x80000001, 0x8, 0x7edd, 0x1, 0xf, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x6b8460ac, 0xc, 0xf, 0x5, 0xa, 0xee92, 0x78, 0x4, 0x3, 0x3, 0x7ff, 0xfffffffd, 0x5, 0x3, 0x7fffffff, 0x3, 0xffffff0c, 0xff, 0x8000000, 0x7, 0x2, 0x80, 0x8000, 0xe, 0xfffffffe, 0x0, 0x40, 0x4, 0x800, 0x4, 0xb9, 0x0, 0x7, 0x2, 0xfffffffb, 0x3, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x8, 0xdfb, 0x101, 0x8, 0x9, 0x2f2, 0x6, 0x10, 0x5, 0xffffff80, 0x6, 0x10, 0x5, 0x7, 0x0, 0x101, 0x9, 0x2, 0x6, 0x8, 0x32a7, 0x1000, 0x0, 0x3, 0x404, 0x9, 0x1, 0xc, 0x2, 0x3, 0xb1e3, 0x7, 0x4, 0xd, 0x3, 0x2, 0x0, 0xffff86d2, 0x27, 0x4, 0x8, 0x8, 0x9, 0x9, 0x2, 0x6f7, 0xffff, 0x8, 0x80008, 0x3, 0x6, 0x9, 0x4, 0x4, 0x9, 0x0, 0x2, 0x4, 0xfffffffb, 0x5, 0xffe00000, 0x4, 0x69c3, 0x800, 0x2, 0x4, 0x7, 0x52, 0x0, 0x0, 0x8, 0xfffffffa, 0x3, 0xb5, 0xfc, 0x7, 0xff, 0xfffffe00, 0x63b1, 0x7, 0x2, 0xf9, 0x2, 0x9, 0x4, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x9, 0x0, 0x5, 0x77e, 0x7, 0x0, 0x3, 0xa5, 0x80000000, 0x0, 0x100, 0x8, 0x2f4fbf8, 0x2, 0x3, 0x7, 0xfffffc01, 0x2, 0x1, 0x5, 0x3ff, 0x6, 0x3, 0xfffffffe, 0x0, 0x5, 0x24, 0x0, 0x4, 0x2, 0x3, 0x8, 0xc74, 0x14b, 0x7fda, 0x7, 0x8, 0x2fe00a58]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x10001, 0x8, 0x10000, 0x80000001, 0x2, 0x6, 0x0, 0xa, 0x4, 0xfffffffe, 0x9, 0x2, 0x8, 0x2, 0xf6, 0x1ff, 0x6, 0x7, 0x0, 0x6, 0x1, 0xfff, 0x7, 0x2, 0xffffffff, 0x34ae, 0x2, 0x3, 0xa, 0x2, 0x7, 0x4, 0x3, 0x9, 0x6201f31a, 0x80000000, 0x9, 0xff, 0x3, 0x50, 0x9a61e1a, 0x6, 0x1, 0x4, 0x8, 0x7, 0xe93, 0x6, 0x0, 0x69d, 0x7caa, 0x4, 0x7, 0x8, 0xe3, 0x8001, 0x8001, 0x1, 0x5132, 0x7ff, 0x7fffffff, 0xa, 0x1, 0xfffff801, 0x2, 0x0, 0x3, 0xb, 0x0, 0x6, 0x8, 0x6a, 0x5b28722c, 0x4, 0x5, 0x14, 0x6, 0x4, 0x800, 0x0, 0x4, 0x3ff, 0x4b, 0x2, 0x8, 0x4, 0x7, 0x6, 0x7fff, 0xf2fd, 0x8be7, 0x5, 0x4, 0x3, 0x0, 0x450ee652, 0x8, 0xd, 0x0, 0x8, 0x8, 0xf3, 0x101, 0x401, 0x3, 0xc6, 0xdc2, 0x1, 0x9, 0x8, 0x36e1e602, 0x337b, 0x7fffffff, 0x3, 0x7, 0x4c51, 0x80, 0x3, 0x378, 0x8, 0x7, 0x2, 0x100, 0x7, 0x10, 0xffffffff, 0xd, 0x8, 0x2f, 0x7ff, 0x0, 0xab, 0x10000, 0x1, 0xecd, 0x8, 0x55fa9262, 0x50d, 0xfffeffff, 0xfffffff9, 0x0, 0x3, 0x2, 0xd4, 0x6, 0x1, 0x8, 0x5, 0xffffffff, 0xffff, 0x1, 0x0, 0x6, 0x0, 0x8, 0xfffffffc, 0x80, 0x8, 0x6, 0x1, 0x0, 0xf, 0x1, 0x3, 0x4, 0x2, 0x51, 0x9, 0x9, 0x9, 0x6, 0x6, 0x80000000, 0x2, 0x7, 0xffff, 0xa2, 0x1, 0x4, 0xf04, 0x1, 0x5, 0x1, 0x0, 0xd0000000, 0xb, 0x7, 0x0, 0x7055, 0x6, 0x0, 0xa, 0x8, 0x4, 0x200, 0x69, 0x6bc53b56, 0xb7c, 0x3f1, 0xe2, 0xffff, 0x1, 0x2, 0x10, 0xffffffff, 0x3, 0x8001, 0x0, 0x0, 0x5, 0xb, 0x3, 0x5, 0x2, 0xfffffffc, 0x4, 0xd, 0x8001, 0x5, 0x2, 0x8000, 0x3c, 0x7, 0x93, 0x2, 0x7, 0x10000, 0x7, 0x7, 0xe5, 0x6e, 0xffff, 0x0, 0x7, 0x2, 0x4, 0x0, 0x3, 0x6, 0x1, 0x6, 0x0, 0xffff8001, 0x3396, 0x8, 0x1, 0x9e18, 0x83fd, 0x8, 0x8, 0x1, 0x0, 0x3, 0x1000]}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x374, 0x1, [@m_tunnel_key={0xdc, 0xa, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0xa3, 0x6, "b512534ccaaa7a35c632e8190b69e9ad6e0ad14f678b37756712f61a72119099f93d58037c8c25f5966f83777cfd93410045e25563ff98ecab6386345b28199a3a01318c81c1288fc7144eabb2b4d957065cc1295a1c4da1b20f7d60bf5366e88b46089c21882d991b40eb5e3a690b0ae2857d96249e1ae57d32a67c3d767db6fdb64b6efce2ea1559d65cdfe71c19ca8c5bc04244d0e564e18957a6b9f6cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x120, 0x7, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "7023bc22d840b4944877a63efc128d2958e4de8b5cad6666ba0b86af67d1f6451633aa13abefd796919046ad0c9657ae8faf9bfc5475fb37ecf2cf0bbc801cf5142b3c3f39e7534a44ab7e64097d81cab8cb95be2ecd99a10537e525555326f8a6e219c752449101f3b5534fc0f5e480201f46d335d3a8ef5cf95aa4f7db21218420e0d45636fb3a5757846cc20c2c5166d99c19da88f4c6bb3329f9cc251cb7687bb5898f323f4954a2b9c001617778d2357f356afaf88250773329c8436d179be8958922d998d52f64900863521a4e7ab6b2707e45230e521c5049150d09ec9afdea2742dfc04da5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x88, 0x16, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc71}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x9, 0x0, 0x800}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x17, 0x6, "04aa470e8e19abe9be446c607db36046181728"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x9c, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x5, 0x10000000, 0x0, 0xcec9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffbff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xea4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb26}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x3, 0x1, 0x401, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffa}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xf, 0x6, "e114b870552217f3e371a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x50, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x22, 0x6, "2e9184cdb44a2702dc41d89ed5c6b78016f3fc1019b0b5bb144e14febe00"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x2498}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006140)={0x2020, 0x0, 0x0}, 0xfffffe24) (async) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xffffffffffffff50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000500), 0x0}, 0x20) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1b54}], 0x1, 0x1820b, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000280)=@rnullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, &(0x7f00000001c0)='discard') write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x40, 0x7, 0x10}}, 0x50) 45.325073327s ago: executing program 3 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0), 0x1bd0c2c, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x97cd, 0x1000, 0x0, 0x8040, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1}, 0x50) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0x84, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x140}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x1000}}, './file0\x00'}) 45.265311287s ago: executing program 3 (id=224): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 45.264714915s ago: executing program 3 (id=225): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="feffffffbbbbbb86dd716b88ef00403a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000a75f622f6a88e5b5b03b32f55160bdd7c38476c5f45df2cf2b73c300000000000000000000000000527cad69f33adf2af674f80000000000"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setgroups(0x0, 0x0) getgroups(0x8, &(0x7f0000000480)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0), 0x1000000000000008}}], 0x1, 0x4004050) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e61, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40001500", @ANYRES16=r3, @ANYBLOB="000027bd7000ffdbdf25060000000500050080000000080003000300000008000200030000001400018005000200b70000000800060004000000"], 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000001}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x401, 0x8040) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, 0xfffffffffffffffc) 44.784335789s ago: executing program 0 (id=231): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) 44.776668336s ago: executing program 0 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x26000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x10000, @value=r4}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44.641227495s ago: executing program 0 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x60000000}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5035, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="102f59969535cd10e4db599178cc76dd74df77a7b1b01fafe55c399b09000000000000004d0f4f4ea6fa5132649d90bbd2c13575263a0c5d70ae37d54f7f516691e9f7a94817dca40f39a158840bd506003657e7349e56d6a6a8f4981ed74e60fe71d133367e685fbfc7254e82e07ca7f6c124dd362da0625c9e584409954a5bb108a7944aa72b42059d240b87adf3937659dd6fd9caa6fcd988b0b796c3ae8e37fd6ef213a53e97b5f965abd984e836ec8203ef9c80fe2d35d4267ec3fd2e7dd11c5f40"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 44.529238198s ago: executing program 0 (id=237): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000100)='GPL\x00'}, 0x6a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @random="0eb56ba79404", @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2140800, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x78, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mouse_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0xc, 0x2, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) 44.44855535s ago: executing program 0 (id=238): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff", 0xd}], 0x1}], 0x1, 0x40800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r2, &(0x7f0000000a80)=""/243, 0xf3) (async) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x14, 0xff}, @in=@rand_addr=0x64010100, {0x2, 0x1000000001000, 0x0, 0x3e, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x0, 0x401, 0x3}, 0x0, 0x0, 0x2, 0x1, 0x6, 0xeb}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 44.060622017s ago: executing program 0 (id=241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20}, 0x50) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 44.016359468s ago: executing program 32 (id=241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20}, 0x50) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 43.386352979s ago: executing program 33 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@allocspi={0x1d8, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x4, 0x2, 0x2, 0x20, 0x80, 0xc}, {@in6=@private2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x7, 0x6, 0x400}, 0x70bd2c, 0x0, 0xa, 0x0, 0x0, 0x9c}, 0x0, 0x4ad}, [@sec_ctx={0xdf, 0x8, {0xdb, 0x8, 0x1, 0xb2, 0xd3, "63c2435c61e39d34b4498604970853d05f37924de4dc1da6741af3a86a5c144a9bf3b1c501906cfc7e3c271e7245bba64624fe1087d72efe8e431490eeb7d9e09ef861ca8a048bf03964b37dcafb453887389b8987bb0c3e0dede2f26c370a7823eb436902041552786314a5442b59accedf266a6de4d5d1635f1ed80a08faf5f718e183719923edcc9cfcd05904cc97d96f70c83eea8e67759cbd05344dc9218b42b84e0462a522aa273833dc88546da11740c3606e5bfa8ea74763c8133a2c69cd72582ca89061ed8501eb3c2484adfb8512"}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000003c0)) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffa000/0x4000)=nil) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000001800010600000000000000001c140000fc0000010000000084001300000001000000000000000c0000000600000000000000000000000100000000000000000000000000000004000000000000000000000f0c0000000000000f00000000000000000000000000000000000000000000000000000000000000000000000005000000000000000a0000000400"/160], 0xa0}}, 0x20000040) 40.401074185s ago: executing program 4 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='fd', 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x0) r5 = dup2(r0, r0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000240)=0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x3, 0x0, 0x8, 0x7}) add_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="91e7750ff97287f92da40765446006dae4e13c3f5122ef5c904f62cd7760c05e79d2b79a1057156d3995e516d53a601e4e584478067d00c69942be8c1d54f025d5a4228d59b3c4e198c5445c4eb4eaac40c6f0886232cd74496705c17729c3f5889567e0a812", 0x66, r2) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1000, 0x0) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @local}, 0x4, 0x2, 0x1, 0x2}}, 0x26) 40.323034793s ago: executing program 4 (id=281): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = dup3(r7, r6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x80}, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900002ee83c8169000b00"/29], 0x18}}], 0x1, 0x810) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) dup3(r7, r6, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x80}, 0x800, 0x0, 0x2, 0x9}, 0x20) (async) sendmmsg$inet6(r8, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900002ee83c8169000b00"/29], 0x18}}], 0x1, 0x810) (async) 40.091216922s ago: executing program 4 (id=284): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ac"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 40.030419696s ago: executing program 4 (id=286): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x64, 0x0, 0xf7}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000040)="79f292ab0d", 0x5, 0x80000001) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) umount2(&(0x7f0000000040)='.\x00', 0x2) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) msgget$private(0x0, 0x80) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)={[{@verity_off}], [{@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/rtc0\x00'}}]}) 39.945809007s ago: executing program 4 (id=288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x188, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x188}, 0x1, 0x0, 0x0, 0x814}, 0x880) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0xb8, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_MAP={0x24, 0xe, {0x3ff, 0x435, 0x40080000000, 0x8, 0xa, 0x2}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0xb8}}, 0x4c000) 39.359948855s ago: executing program 4 (id=299): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4041, 0x120) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x28, "9ea8884b145b37e6040c50831708e3779e24c09759d73ee8c4f21400afce78c98547a101b296da11"}, &(0x7f0000000080)=0x30) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x3d5, 0x8, 0x9, 0xb, 0x3, 0x1}, &(0x7f0000000180)=0x9c) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x1, 'ipvlan0\x00', {}, 0x7f}) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0xb6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r4, 0x6, 0x7, 0xebd6}, 0x10) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r3}) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)=""/128, &(0x7f0000000380)=0x80) (async) recvfrom$phonet(r0, &(0x7f00000003c0)=""/203, 0xcb, 0x2000, &(0x7f00000004c0)={0x23, 0xfd, 0x9, 0xc}, 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000005c0)={r2, 0x8c, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x81, @empty, 0x200}, @in6={0xa, 0x4e21, 0xcc, @local, 0x7}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, 0xa}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000600)=0x10) r8 = fsmount(r0, 0x0, 0xf9) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000640)={0x54, 0x6, 0xff, 0x8, 0xfa, 0xa0}) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000680)={0x8, 0xf3, 0x7f, 0x8f, 0x0, 0x40, 0x94, 0x0, 0x4, 0x81, 0x5c, 0x5, 0xff, 0x6}, 0xe) (async) mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x420, &(0x7f0000000740)={[{@verity_require}, {@volatile}, {@xino_off}, {@verity_on}, {@redirect_dir_off}, {@uuid_auto}, {@verity_on}], [{@dont_appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, 0xfffffffffffffffe, 0x40000) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x8600, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000000}, 0x4890) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r10}, &(0x7f0000000a40), &(0x7f0000000a80)=r8}, 0x20) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000b00)={r7, 0x1f}, 0x8) (async) r12 = accept4(r9, &(0x7f0000000b40)=@qipcrtr, &(0x7f0000000bc0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) (async) read$FUSE(r8, &(0x7f0000000c80)={0x2020}, 0x2020) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000002cc0)={r7, 0x7f}, 0x8) 39.301266591s ago: executing program 34 (id=299): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4041, 0x120) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x28, "9ea8884b145b37e6040c50831708e3779e24c09759d73ee8c4f21400afce78c98547a101b296da11"}, &(0x7f0000000080)=0x30) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x3d5, 0x8, 0x9, 0xb, 0x3, 0x1}, &(0x7f0000000180)=0x9c) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x1, 'ipvlan0\x00', {}, 0x7f}) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0xb6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r4, 0x6, 0x7, 0xebd6}, 0x10) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r3}) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)=""/128, &(0x7f0000000380)=0x80) (async) recvfrom$phonet(r0, &(0x7f00000003c0)=""/203, 0xcb, 0x2000, &(0x7f00000004c0)={0x23, 0xfd, 0x9, 0xc}, 0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000005c0)={r2, 0x8c, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x81, @empty, 0x200}, @in6={0xa, 0x4e21, 0xcc, @local, 0x7}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, 0xa}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000600)=0x10) r8 = fsmount(r0, 0x0, 0xf9) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000640)={0x54, 0x6, 0xff, 0x8, 0xfa, 0xa0}) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000680)={0x8, 0xf3, 0x7f, 0x8f, 0x0, 0x40, 0x94, 0x0, 0x4, 0x81, 0x5c, 0x5, 0xff, 0x6}, 0xe) (async) mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x420, &(0x7f0000000740)={[{@verity_require}, {@volatile}, {@xino_off}, {@verity_on}, {@redirect_dir_off}, {@uuid_auto}, {@verity_on}], [{@dont_appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, 0xfffffffffffffffe, 0x40000) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x8600, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000000}, 0x4890) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r10}, &(0x7f0000000a40), &(0x7f0000000a80)=r8}, 0x20) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000b00)={r7, 0x1f}, 0x8) (async) r12 = accept4(r9, &(0x7f0000000b40)=@qipcrtr, &(0x7f0000000bc0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) (async) read$FUSE(r8, &(0x7f0000000c80)={0x2020}, 0x2020) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000002cc0)={r7, 0x7f}, 0x8) 29.744155784s ago: executing program 35 (id=225): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="feffffffbbbbbb86dd716b88ef00403a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000a75f622f6a88e5b5b03b32f55160bdd7c38476c5f45df2cf2b73c300000000000000000000000000527cad69f33adf2af674f80000000000"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setgroups(0x0, 0x0) getgroups(0x8, &(0x7f0000000480)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0), 0x1000000000000008}}], 0x1, 0x4004050) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e61, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40001500", @ANYRES16=r3, @ANYBLOB="000027bd7000ffdbdf25060000000500050080000000080003000300000008000200030000001400018005000200b70000000800060004000000"], 0x40}, 0x1, 0x0, 0x0, 0x40014}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000001}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x401, 0x8040) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, 0xfffffffffffffffc) 7.635620354s ago: executing program 7 (id=668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r4, 0x0, 0xf}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x40, 0x8001, 0x4, 0x7, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0xd3, [@multicast1, @rand_addr=0x64010100, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'rose0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x76, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x1, 0x7, 0x4}}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r11, {}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xc8, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x60000080}, 0x8010) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r12, 0x0, 0xf}, 0x18) r13 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r14, r15, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r13, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 6.968661169s ago: executing program 7 (id=678): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000001c0)=0x6, 0x4) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(0x3) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x10) 6.910945s ago: executing program 7 (id=679): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x16, 0x20000000, 0x4, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) io_setup(0x4, &(0x7f00000021c0)=0x0) io_submit(r2, 0x2, &(0x7f0000002740)=[&(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, 0x0, 0x0, 0xe37}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x4, 0x0, 0x2}]) 6.777432678s ago: executing program 7 (id=681): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0xb9, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf307000000647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5d3d90796463a92dda53a52ec85816c6ac9ecd40991ffbb12f0903d9e092d3f3931c9c6dd230ddc587d972a313679685ad93b0e5ee9f9ea653779511445db70b8de13392f4d75ef"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xbf4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x8, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@generic={0xb0, 0x3, "8ae746"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x1b8}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x3d, @mcast1, 0x80000001}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)="57bbc3197e46ca25f41db401c4ca4dc94ea5377239b93fa5ed68f0575a2a155f8f5724a96e825a4a1760884435ba55a9a090586eade701603bf0e860fea9f0bbb183c627bab8ab4c942ed87e3608656953c571123ebf60f28cf8e629815efe79fa89a424", 0x64}, {&(0x7f00000004c0)="42bbe58a", 0x4}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000000500)="177df0f85a66122f39a3fe7bc527241f45b8a23191c933e55a364620bf865abd975db5842a76fc3d28e5180e47a94fced8a52b6bd02336a15e01321ade86e051ec1290a42a17d32276f7fb602a28d1ae468266b8481399a3cda72cf39dfdba50666644b6a918f351cda563f97ef878b7d760cdb282d5944687ff4bffd2292bdd08fd592f1b89", 0x86}, {&(0x7f0000000600)="c1b59297bb3f8fe5340125c0268536d0877dd3ed83ec3d778e9f46851cbdb6e6569184fb9eb2717a389c5b60c66c136e10183ab8f0c05943749f7d9d514fd57ab88bea972a3147170caf08f26bf1ba179698e63771bc3823ec10a860eaa46c377677c5a3a78d7dd942f3adde0620667fce3f1f15c576e4b0e6b120061372ec650c394561058c474f9c41bd4613cafb19d21659004b218085411bf9c940ce5dbb8661dfdd73adf9f42dfe9cae7db04e48eda9cd4e7dccb613", 0xb8}, {&(0x7f0000000780)="4bb2d64818e54951e32f8a26ee49b5bb592ddcc08cbd0013d20f9bc9c144af451fcb64ee940026df28d2ba9d772da3d979555ffe28d642bccd81b743f2e0b26a568c74adb426ac202ee71e6dcb28279a42187fc637420124cf01091e45904ebae32ab053bba0382777d0974a9e36c67dc06fa8c4f2850a9a96465a543354291a876e240ec934c4", 0x87}], 0x6, &(0x7f0000000cc0)=[@rthdr={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0x9, 0x0, [@empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x11, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff8}, @jumbo={0xc2, 0x4, 0x48a}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3c, 0xcb, [0x5, 0xabb, 0x5, 0x7, 0x5, 0x4, 0x400]}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0xe, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @dstopts={{0xa8, 0x29, 0x37, {0x2f, 0x11, '\x00', [@generic={0x5, 0x81, "6375410e52b1be25da20e665829052fa2db2ce50759388e440e489661c508fe91e4b828e8d2dd3afe7418aa60f380b805ccc52b2153bf6be32a32c4da1b050a0ac4996ce7cce7dfbe894d6243121feb1e2ed6f95b4c1766a567e88920efd31b50107abef1cb5ac0e153397b425103ad328971f7de8a0eeefa26cf07d9103e339d2"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc}}], 0x208}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/123, 0x7b, 0x841) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r5, 0x401) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) close_range(r8, r8, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.376424897s ago: executing program 7 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) rt_tgsigqueueinfo(r3, r3, 0x400000a, &(0x7f0000000600)={0x81, 0x40000003, 0xfffff2bb}) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x28000, 0x153) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x17c, 0x15, 0x2, 0x70bd2d, 0x25dfdbfb, {0x11, 0xfe}, [@INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "e3a31f94cb6532e4bdf14ae81a2a607e01a8e252c7792ce7b5d369d2a1a3bca5ada05087d897593484421ef5720b8a1e101d66547f92f482eee79c6ef1d55adbe22893cf65fd07efa756c007c5477439c6aa813aed10eb1378ef0bb9c7426eed79fa4046863b643033cdf2112236a88cfffb9d10cc2a988a0f0344b876ed5731e65ed2aeb29b5d"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "b057b82fd6d643d105cd1574c003e822bd22791f408cad411166e11fcd667852e2a2a2804c238ac7346d527896545d95372766f89818b8d2b424289162e19e424b8ee13e4e3a612908adc8941a3301f7d927af688a48544729a2738fd0b0ec0799266c2ef7ac97c5d2ba921ee90b14ceb6fbd4146eb0ab6177ecd9271e05448fad6d466fa6ec921d1400e5894498e2b68ee5f545211df35beb9ffc88afff8d33897adb7893ca438da9c15ae5b82ee7d30d7c9f3228fe5588bd2a2ec8e134b97f8a71b11af66fa65187c9804e76e7c4b3282dbe627f"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 6.30599765s ago: executing program 7 (id=685): syz_emit_ethernet(0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x2519, &(0x7f0000009a80)={0x0, 0xf150, 0x800, 0x40000000, 0x212}) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0x7, 0xfff3}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x44a03, 0x0) r5 = dup(r4) write$P9_RMKNOD(r5, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="01032bbd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x40, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r6, 0x0, 0x160) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX]) (async) write$P9_RVERSION(r8, &(0x7f0000000200)=ANY=[@ANYRES64=r8], 0x41) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5.291933938s ago: executing program 2 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYRESOCT=r0], 0x1cdc}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 5.230535389s ago: executing program 2 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xe7, @rand_addr=' \x01\x00', 0x1}}}, 0x84) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000010000000000000001"]) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, 0x0) 5.230000325s ago: executing program 2 (id=698): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x53}], 0x1}, 0x40fd) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x5, 0x80000400, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x700, 0x1, 0x8}}) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 3.2075284s ago: executing program 2 (id=714): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x6, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f00000001c0)) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050000"], 0x1c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c040000000000480012800b000100697036677265000038000280040012"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x10, &(0x7f0000000040)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 3.075858806s ago: executing program 6 (id=715): madvise(&(0x7f0000355000/0x4000)=nil, 0x4000, 0x66) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.074222501s ago: executing program 2 (id=716): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}}, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0xb, 0x8, &(0x7f0000000040)={0x84, "43124675050566a3ae00"}}) 2.984418505s ago: executing program 6 (id=717): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xa, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5e770b21}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000403, r1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c63000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000f51000/0x3000)=nil) 2.983603195s ago: executing program 6 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 32) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=""/194, 0xc2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="1fa8b926288ca87e00000000f8ecc8b64f3b69cf04b1bfe17cd82a51ddebf828bd5d0e843ddd505042b7b9dc136849879bedeb1af8c15217cefadfa2cd"], 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) r9 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) (rerun: 32) read(r9, &(0x7f0000000000)=""/81, 0x51) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="65960000100001738216f1fabcb741fa04480000", @ANYRES32=r12, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) 2.891993489s ago: executing program 2 (id=721): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c) (async) r1 = socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0xa, 0x12d5c, 0x12d5c}}, 0x44) (async, rerun: 64) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x11) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000304c09d67e06138f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r6, 0x2c8ad000) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (rerun: 32) 2.739666143s ago: executing program 6 (id=723): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) pidfd_send_signal(r0, 0x2e, &(0x7f0000000080)={0x3, 0x400, 0x3}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x57b, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x18, 0xf6, 0xc, 0x10, 0x4d8, 0x82, 0xd92b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x569, 0x4, 0xdb, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x7f, 0x8, 0x4, 0x14, 0x99, 0xf, 0xb, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xa, 0xf7, 0xffe23d3461285938}, @as_header={0x7, 0x24, 0x1, 0xf, 0x1e, 0x4}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x5}, @as_header={0x7, 0x24, 0x1, 0x79, 0x6, 0x3}]}], [{{0x9, 0x5, 0xf, 0xc, 0x20, 0x2, 0x81, 0x10, [@generic={0x10, 0x21, "3b2723ce9adaf53e4ab023db9774"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x6, 0xff, 0x4, [@generic={0x63, 0x23, "9a30154153f9a85df141b3436a4cfc2cf25d422eda43b026a161d7f5ce6476db3f512f913102439439786177393d014acdb32b0023f05da1a82165765b0f2f78d8910536976988ac3c1aaa888d1ff83f1b0ba4c8046486daf50c899406addd265d"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x5, 0xfe, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0xde, 0x2f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x400}, @generic={0xcc, 0xc, "b627ee8826df4f8b6781e27726efc88c844275f11650174191c366606e5e4844bc19850304ea19dd3318b1633d53134fb9383162f2dc90985d0709f17928f08af37406a5d4b047c923bace37c59610e19975c106a3776eec330ab491aed89f0ae21ae7ba4f88e5ea2f9ebac3cb9cd98aad7b3f005b54fbc1f204d8195098eec0d67a1ebbb88c122567613889877e4aa58a5321939b854e5f013b93848e007b1e4786bd198f968046ea3ee4c2c911c2d96ed45a9be8759a13e6fd83a467f1547a94144ed10fa8c357732d"}]}}]}}, {{0x9, 0x4, 0x4e, 0xff, 0xc, 0xaf, 0xae, 0xa9, 0x81, [], [{{0x9, 0x5, 0x6, 0x8, 0x410, 0xfc, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x7, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0xf}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xfd, 0x2f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xb, 0xe3, 0xd3}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x4, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0xf7a0dae1c6c9ca44, 0x0, 0x20, 0x9, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x7f, 0x61}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x8, 0x4, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x8}, @generic={0xb2, 0x2, "42e2550a893f08d65117a9976010497f5b567425e8e2ba03c6356de762c6b4dd36727f7e995a822fc11049bd11acf1ea29a2c95e5e5c4744135f6bd7b899dd938934f738b0125843dbba860e9b5090bb0b8bce4a4b1e0093d6ab9d810dd78c6c2a3efb750a91c29df59cb094a6e551526f29cd15d338090e1ed942b91e7c72c53bedf0fe303c015a65a2ea64c2d6f3c1caf7cc4a4fbb4afaf06913afaee35a14ddbf8c17c2e0ed62ac27b35e4a058b84"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xf, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x400}]}}]}}, {{0x9, 0x4, 0x8, 0xd2, 0x3, 0xb8, 0x40, 0xf7, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x6, 0x3, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x2, 0x2, 0xae1c, 0xc0, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x53a, 0x40}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x4, 0xe, "af"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x2, 0x1, 0x0, 0x4, 0x3, 0x7], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x4, 0x6, 0x6}]}], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x40, 0x6, [@generic={0xc1, 0x5, "270bb7086a3217cfe8571128ae34bfe26caa5469f4abfc539aef791e379676cdd56a0c17d002c4df7034368f76c2ea73c258d4809a692167bebe831658eb352d7d55bc07296661a4a612a49990454f07805983015a659801c927d39c032c54e2c42dd85d92921d0d32f44c89028261bdfe679cbfa72201589268ee710037dc7d428038ae5035d79dbfd687c51de94f867cddeb169d958fee9124a0520ce85526ffa0aea6928208d167c2477e568d28e597499b03a098fdc68989b3cdab526e"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x7, 0x9a, 0x9, [@generic={0x97, 0xa, "a29018a35ff064cc1690d8cbbd60f6bb3934c2f8f2dccd1f30d6216f81b6f43a3cf9b302bbf5b08ff7cbae8765a99b5dcfb02017f1a2b51ce1ce98fb97bc95300e590829893536a80715668e06c411a65ba959c8e1c557e2d80652e5129070231f3d2852c9815dedb46638b79d1cfca405ea58c3e1d153080cfb2200327bc28ecb003b9eb6cb693c6d7fe92d3860907fb6960d1397"}, @generic={0x48, 0x21, "81e16ca9c105535ab13f59301d9ba2e6e6ed2baa0b38493e673481db60eae66f33ffeb76b4ba01ae221a49d67937c5e06d2b242a31a5c67242ff735204a5269b915019ee639f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4a, 0x9, 0x8}}]}}, {{0x9, 0x4, 0x79, 0x0, 0x1, 0xff, 0x22, 0xd4, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '$\a'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xfffd, 0x1ff, 0xe9}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x8, 0x6d, 0xc0}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x5, 0x9, 0x1, 0x40}, 0xc, &(0x7f0000000740)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0x6, 0xd31}]}, 0x4, [{0x6c, &(0x7f0000000780)=@string={0x6c, 0x3, "bb1870c3708808d0d0643baa32d3719aede57ad81b6ba63aeeef8d83ecd11952027849eee6d9a68ca8a59b0382bdc4c3d3a5374cfd558607e39af8edd99585a1aed46ae095965fbaad0a258030c039cc882afaef058ed0c6f983d814100ac0ba5e3858863212f4ccb588"}}, {0xf7, &(0x7f0000000800)=@string={0xf7, 0x3, "f5268bc9f9178c6191d61dcb25f942e9c3b15e89a1bada307ee59fac8fefb87e57cf933ff727bf2f57b1583faf3b9670e905ec6907ca2227a1b758dbc12432171096c66de16585e3b36c0b5448b3ed51b75f99cedf7f70bc450e2cf27df077f03718d363707fdc7b2e5e0921f764cc870e1147e60a33c8b7c79e78ce3570ffea356c28f9c2f7c1331c230cb52546f05079974bea86c80ae850652533faf31697f4a718062529a83fa6eccc0841948a96536b41ed87d33e6bd8b6b07e5983276fd01e6bb4b76dcf07dfec382451998fd05b3d5fcdc4c7e897d389c507a2aedee9e053ee2d9afe303846a19b35cf8c69097734bcacd5"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2c0f}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc09}}]}) 589.224521ms ago: executing program 6 (id=735): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x7, 0x3, 0x801, 0x3, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x9}, [{0x3, 0x7, 0x2, 0x7, 0xd, 0x80000801, 0x9, 0x7}]}, 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x725c, 0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x23}, @remote, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1_to_team\x00', 'wg0\x00', {}, {0xff}, 0x21, 0x6, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0x31fb}}}, {{@ipv6={@local, @private0, [0x0, 0x0, 0xff000000], [0xff000000, 0xffffff, 0xffffff00], 'veth1_to_batadv\x00', 'batadv_slave_1\x00', {}, {0x101}, 0x0, 0x8, 0x0, 0x1c}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x1, [0x7f, 0x8, 0x7, 0x9, 0x7, 0x400, 0xffff, 0x7a, 0x0, 0x0, 0x6, 0x400, 0x8000, 0x3, 0x4, 0x7c], 0xb}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) setrlimit(0x6, &(0x7f0000000000)={0x0, 0x6}) syz_clone(0x2202080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 484.195899ms ago: executing program 6 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) readahead(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9e", 0x50}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) setreuid(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a050000000076690e42462adc0000000000020000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x486702, 0x0) write$binfmt_aout(r6, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x1020) 483.465738ms ago: executing program 5 (id=738): epoll_create1(0x80000) r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) socket(0x40000000015, 0x5, 0x0) epoll_create1(0x80000) (async) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x20000) (async) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) 364.249896ms ago: executing program 5 (id=739): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0x109800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000001040)={"aa77bf73973f8c39decb2b05", &(0x7f0000000f40)="d1b7", 0x2, 0x3, 0x0, 0x2, 0x401, 0xffff, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140), &(0x7f00000001c0)=0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086201, &(0x7f0000000080)=0x1) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) r8 = epoll_create1(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x406, r8) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x20000001}) 214.417083ms ago: executing program 5 (id=740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='@', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) 153.479165ms ago: executing program 5 (id=741): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x178}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000001c0)={0x58, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "60ea03000000f3ff000000f4d0faf9ef"}, @NL80211_ATTR_PMKID={0x14, 0x55, "6076172a0033657b000058b5d52d00"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0x403, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x56}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1711], 0x6af) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r15, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x387a}]}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$bt_rfcomm_RFCOMM_LM(r14, 0x12, 0x3, &(0x7f0000000080), 0x4) ioctl$sock_netdev_private(r12, 0x89fb, &(0x7f0000000900)="ef30b8586e828a43c53239a8dc293d179415631ff199db829285e492737af10aef1e09b05ea89b5eb88747cf4afaa1b8e3eafdeb1964ebdcd2398b9610185b6e") 1.124721ms ago: executing program 5 (id=742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 0s ago: executing program 5 (id=743): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000000)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0xc8, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x8000}}, @cpuid={0x64, 0x18, {0xf, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x16e}, @rdmsr={0x66, 0x18, {0x9f8}}, @out_dx={0x6a, 0x28, {0x3a1d, 0x1, 0x401}}, @wr_crn={0x67, 0x20, {0x8}}, @code={0xa, 0x48, {"3c03450f07f0460fb1bf9651cebaf30f0964f30f0966ba200066ed420f08420f009f58000000b9800000c00f3235000800000f3046fe00"}}, @wr_drn={0x68, 0x20, {0x2, 0xab}}, @rdmsr={0x66, 0x18, {0x91a}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x6810, 0x3, 0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x9, 0x3ff}}, @cpuid={0x64, 0x18, {0x1, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x6}}, @wr_drn={0x68, 0x20, {0x7, 0x1}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x101}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600c, 0x7, 0x8000000000000001, 0x617}}, @in_dx={0x69, 0x20, {0x864d, 0x3}}], 0x338}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000380)={0x3, 0x0, 0x5}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$sndpcmc(&(0x7f0000002440), 0x7, 0x204001) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000002540)={0x90, 0xfffffffffffffffe, r2, {0x0, 0x1, 0xfffffffffffffff8, 0x3, 0x4, 0x23d, {0x3, 0x200, 0x3, 0x9, 0xff, 0x7fffffffffffffff, 0x5, 0xa00000, 0x1, 0x2000, 0xfffffffb, r5, r3, 0x5c8, 0x5}}}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002780)={&(0x7f0000002600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x5, [@fwd={0x5}, @fwd={0x4}, @typedef={0x1, 0x0, 0x0, 0x8, 0x4}, @enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x7}, {0x3, 0x9}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2d, 0x0, 0x4e, 0x6}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x7, 0x3860}, {0x1, 0x36}, {0x2, 0x2}, {0x9, 0x5}, {0x9, 0x8}, {0x9, 0x1}, {0x1, 0x19}, {0xe, 0x3}, {0xa, 0x770}]}, @enum64={0xb, 0x6, 0x0, 0x13, 0x1, 0x6, [{0x5, 0x3, 0x7}, {0x1, 0xc1e, 0xfffffffa}, {0x9, 0x400, 0x4}, {0xe, 0x8, 0x5}, {0x3, 0xfffffffd, 0x2}, {0x1}]}]}, {0x0, [0xcc, 0x30, 0x5f]}}, &(0x7f0000002740)=""/51, 0x115, 0x33, 0x0, 0x1}, 0x28) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000027c0), 0x2a8242, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f0000002800)={'#! ', './file0', [{0x20, '/dev/snd/pcmC#D#c\x00'}], 0xa, "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"}, 0x101e) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000003880)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000003840)=0x1}) close(r4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000038c0)=0x709, 0x8, 0x5) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000003900)='./file0\x00', 0x200000, 0x101) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000003940)=@v2={0x2, @adiantum, 0x13, '\x00', @a}) lchown(&(0x7f0000003980)='./file0\x00', r5, r3) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) sendmsg$nl_route(r6, &(0x7f0000003a80)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)=@ipv4_newroute={0x24, 0x18, 0x300, 0x70bd29, 0x25dfdbfd, {0x2, 0x89eb2630dabacd96, 0x10, 0x9, 0xfe, 0x3, 0xfe, 0x8, 0x2000}, [@RTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40440d5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) r11 = openat$incfs(r8, &(0x7f0000003c00)='.pending_reads\x00', 0x2, 0x100) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r11, 0x4068aea3, &(0x7f0000003c40)={0xbc, 0x0, 0x5}) connect$llc(r1, &(0x7f0000003cc0)={0x1a, 0x305, 0x1, 0x27, 0x76, 0x81}, 0x10) r12 = accept4$tipc(r11, 0x0, &(0x7f0000003d00), 0x800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r12, 0x10f, 0x83, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, 0x0) 0s ago: executing program 5 (id=744): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r5], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, r1, r2, r3, r5, r6, r7], &(0x7f0000000180)=[0x7, 0x488], 0x5, 0x7, 0x4}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x8001, 0x3}) (async) poll(&(0x7f0000000200)=[{r8, 0xe000}], 0x1, 0x4) kernel console output (not intermixed with test programs): 4474 sclass=netlink_route_socket pid=6259 comm=syz.0.75 [ 60.325084][ T6249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.442688][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.609849][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.613696][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.617286][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.621475][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.625008][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.629356][ T10] usb 8-1: config 0 descriptor?? [ 60.662599][ T5936] Bluetooth: hci3: command tx timeout [ 61.044066][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 61.224617][ T6304] bond1: ARP target 4.0.0.0 is already present [ 61.227405][ T6304] bond1: option arp_ip_target: invalid value (4) [ 61.232270][ T6304] bond1 (unregistering): Released all slaves [ 61.292626][ T5936] Bluetooth: hci0: command tx timeout [ 61.293847][ T5289] Bluetooth: hci1: command tx timeout [ 61.372965][ T5289] Bluetooth: hci2: command tx timeout [ 61.438857][ T6311] __nla_validate_parse: 1 callbacks suppressed [ 61.438868][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.91'. [ 61.675474][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.678304][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.848466][ T6330] program syz.2.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.889194][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 61.892103][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 62.088249][ T6342] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 62.135325][ T34] IPVS: starting estimator thread 0... [ 62.222638][ T6348] IPVS: using max 46 ests per chain, 110400 per kthread [ 62.492906][ T6193] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 62.613449][ T6392] misc userio: Can't change port type on an already running userio instance [ 62.620289][ T6394] qnx4: no qnx4 filesystem (no root dir). [ 62.623169][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 62.676993][ T6395] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 62.680117][ T6395] netlink: 56 bytes leftover after parsing attributes in process `syz.2.119'. [ 62.684934][ T6395] loop9: detected capacity change from 0 to 7 [ 62.689237][ T6395] Dev loop9: unable to read RDB block 7 [ 62.691463][ T6395] loop9: unable to read partition table [ 62.693628][ T6395] loop9: partition table beyond EOD, truncated [ 62.702596][ T6395] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 62.901980][ T6401] process 'syz.0.122' launched './file0' with NULL argv: empty string added [ 62.906934][ T6401] Invalid argument reading file caps for ./file0 [ 62.980268][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 62.980283][ T40] audit: type=1400 audit(1766492572.777:324): avc: denied { create } for pid=6405 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.040334][ T40] audit: type=1400 audit(1766492572.837:325): avc: denied { create } for pid=6411 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.040874][ T6410] dvmrp6: entered allmulticast mode [ 63.048868][ T40] audit: type=1400 audit(1766492572.847:326): avc: denied { ioctl } for pid=6411 comm="syz.0.126" path="socket:[13353]" dev="sockfs" ino=13353 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.124038][ T6418] tipc: Started in network mode [ 63.131178][ T6425] validate_nla: 1 callbacks suppressed [ 63.131192][ T6425] netlink: 'syz.0.129': attribute type 8 has an invalid length. [ 63.133051][ T6418] tipc: Node identity ac14140f, cluster identity 4711 [ 63.138896][ T6418] tipc: New replicast peer: 255.255.255.255 [ 63.141412][ T6418] tipc: Enabled bearer , priority 10 [ 63.142122][ T40] audit: type=1400 audit(1766492572.937:327): avc: denied { nlmsg_read } for pid=6419 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.143649][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 63.143682][ T6422] tipc: Disabling bearer [ 63.157106][ T40] audit: type=1400 audit(1766492572.957:328): avc: denied { ioctl } for pid=6419 comm="syz.3.128" path="socket:[11748]" dev="sockfs" ino=11748 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.285345][ T40] audit: type=1400 audit(1766492573.087:329): avc: denied { ioctl } for pid=6437 comm="syz.2.134" path="socket:[11762]" dev="sockfs" ino=11762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.294929][ T6439] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 63.297452][ T29] usb 8-1: USB disconnect, device number 2 [ 63.387048][ T40] audit: type=1400 audit(1766492573.187:330): avc: denied { create } for pid=6441 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.395646][ T40] audit: type=1400 audit(1766492573.187:331): avc: denied { ioctl } for pid=6441 comm="syz.3.135" path="socket:[9756]" dev="sockfs" ino=9756 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.427188][ T40] audit: type=1400 audit(1766492573.227:332): avc: denied { prog_load } for pid=6441 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.427996][ T6442] warning: `syz.3.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.439232][ T40] audit: type=1400 audit(1766492573.237:333): avc: denied { read append } for pid=6441 comm="syz.3.135" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 63.552114][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6442 comm=syz.3.135 [ 63.629626][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 63.806466][ T6101] usb 7-1: USB disconnect, device number 2 [ 63.820361][ T6461] kernel profiling enabled (shift: 34) [ 63.822579][ T6461] profiling shift: 34 too large [ 63.824497][ T6461] binder: 6460:6461 ioctl 40046205 0 returned -22 [ 63.826800][ T6461] binder: 6460:6461 ioctl c0306201 200000000300 returned -11 [ 64.233891][ T6473] cgroup: fork rejected by pids controller in /syz0 [ 64.363466][ T6530] fuse: Bad value for 'group_id' [ 64.365186][ T6530] fuse: Bad value for 'group_id' [ 64.371296][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 64.517901][ T6543] netlink: 'syz.0.152': attribute type 9 has an invalid length. [ 64.544854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803a10d800: rx timeout, send abort [ 64.548605][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803a10d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.586338][ T6551] EXT4-fs (nbd2): unable to read superblock [ 64.621510][ T6554] openvswitch: netlink: Key type 248 is out of range max 32 [ 64.680263][ T6557] netlink: 'syz.0.157': attribute type 3 has an invalid length. [ 64.708644][ T6560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.756014][ T6563] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 64.764682][ T6565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.854122][ T6570] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 64.867559][ T6570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.922864][ T6101] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.104205][ T6101] usb 7-1: config 7 has an invalid interface number: 9 but max is 2 [ 65.106839][ T6101] usb 7-1: config 7 has an invalid interface number: 137 but max is 2 [ 65.109175][ T6101] usb 7-1: config 7 has an invalid interface number: 242 but max is 2 [ 65.111846][ T6101] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 65.114744][ T6101] usb 7-1: config 7 has no interface number 0 [ 65.116742][ T6101] usb 7-1: config 7 has no interface number 1 [ 65.118817][ T6101] usb 7-1: config 7 has no interface number 2 [ 65.120588][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 65.124168][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 65.127711][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 65.131148][ T6101] usb 7-1: config 7 interface 137 altsetting 8 endpoint 0x8 has invalid maxpacket 528, setting to 64 [ 65.134691][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 65.138151][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has an endpoint descriptor with address 0x7F, changing to 0xF [ 65.141924][ T6101] usb 7-1: config 7 interface 137 altsetting 8 endpoint 0xF has invalid maxpacket 63391, setting to 64 [ 65.145524][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 65.148956][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 65.152397][ T6101] usb 7-1: config 7 interface 137 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 65.156035][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 65.159489][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 65.163048][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 65.166472][ T6101] usb 7-1: config 7 interface 137 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 65.170844][ T6101] usb 7-1: config 7 interface 242 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 65.174350][ T6101] usb 7-1: config 7 interface 242 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 65.177894][ T6101] usb 7-1: config 7 interface 242 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 65.181441][ T6101] usb 7-1: config 7 interface 242 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 65.185127][ T6101] usb 7-1: config 7 interface 9 has no altsetting 0 [ 65.187338][ T6101] usb 7-1: config 7 interface 137 has no altsetting 0 [ 65.191164][ T6101] usb 7-1: New USB device found, idVendor=0db0, idProduct=871a, bcdDevice=c6.a1 [ 65.194114][ T6101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.196687][ T6101] usb 7-1: Product: 㮝责㺀긙몽쳍ⵛ䋽ྡྷ᫭ꦤ唯▝か靇贛٪訴匉㧚烐体桜듧ሱ鼀鎦뱰쵎Ҝ፰쑜鵂肴ስ叼俕鰝楙ⴋꙹ젙䞫ᕧ੊浂啳➂䔆饩龴㟖㠾暷ꆝ௰躤竭✗덙䑆捚軃⠹瞠ℂ褍흜풰雮ೌﮍ佶켳捥孹溺传㙏憀蕓킓鬷ᙱꂇ㍘垕〆秽 [ 65.206552][ T6101] usb 7-1: Manufacturer: 웯価즰⾸埛쀑蜷⤕䞱绅ⓑ瓸ꈨߗ鷇䵦鶓蜫앏겺ᶶ࢑ਈ︉ƾ㽜븸쫂䒀퉂䀕ㅴ̌㑗啮⨨᷐﹩䝗ʔ⧲醡튺揿䮏꘏炲言㵅䨾텀滛ꮣ⩕ꛠ꧗뢨唐깈쐮눻즔鳎匒⎕૤庀ꝃ瘅䶊鼤⃛当ȿ갏㾢鹩ꛄ橄ύஒ媝溟⩥ [ 65.215652][ T6101] usb 7-1: SerialNumber: ᠁ [ 65.431513][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.434233][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.740837][ T6581] SELinux: syz.0.164 (6581) set checkreqprot to 1. This is no longer supported. [ 66.545671][ T6580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.547820][ T6580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.552599][ T6580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.557866][ T6580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.560007][ T6580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.562961][ T6580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.565803][ T6580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.567984][ T6580] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.570677][ T6580] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.573868][ T6580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.576549][ T6580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.579936][ T6580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.667966][ T6588] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 66.719292][ T6591] __nla_validate_parse: 3 callbacks suppressed [ 66.719349][ T6591] netlink: 80 bytes leftover after parsing attributes in process `syz.0.167'. [ 66.882950][ T6593] binder: Bad value for 'max' [ 67.019187][ T6599] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 67.025950][ T6599] cramfs: wrong magic [ 67.035316][ T6599] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 67.037642][ T6599] dvmrp1: persist disabled [ 67.234726][ T6601] nbd0: detected capacity change from 0 to 127 [ 67.240870][ T5930] block nbd0: Send control failed (result -32) [ 67.241063][ T5289] block nbd0: Receive control failed (result -104) [ 67.243369][ T5930] block nbd0: Request send failed, requeueing [ 67.249459][ T25] block nbd0: Dead connection, failed to find a fallback [ 67.251914][ T25] block nbd0: shutting down sockets [ 67.253936][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.255375][ T5930] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 67.257442][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 67.262298][ T5930] Buffer I/O error on dev nbd0, logical block 3, async page read [ 67.410454][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 67.445425][ T6612] tmpfs: Unknown parameter '' [ 67.686929][ T6101] usb 7-1: USB disconnect, device number 3 [ 67.809976][ T6193] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.849035][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 67.851163][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.894213][ T5289] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 67.973804][ T6519] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.986210][ T6193] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 67.992477][ T6193] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 67.998718][ T6193] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.004233][ T6193] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.015581][ T6193] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.018840][ T6193] usb 5-1: Product: syz [ 68.020506][ T6193] usb 5-1: Manufacturer: syz [ 68.025940][ T6193] usb 5-1: SerialNumber: syz [ 68.033338][ T6193] usb 5-1: config 0 descriptor?? [ 68.040365][ T6193] hub 5-1:0.0: bad descriptor, ignoring hub [ 68.042824][ T6193] hub 5-1:0.0: probe with driver hub failed with error -5 [ 68.050064][ T6193] usb 5-1: selecting invalid altsetting 0 [ 68.248125][ T6619] mkiss: ax0: crc mode is auto. [ 68.261056][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 68.261066][ T40] audit: type=1400 audit(1767016865.968:363): avc: denied { search } for pid=5641 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.270705][ T40] audit: type=1400 audit(1767016865.968:364): avc: denied { search } for pid=5641 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.278300][ T40] audit: type=1400 audit(1767016865.968:365): avc: denied { search } for pid=5641 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.285730][ T40] audit: type=1400 audit(1767016865.978:366): avc: denied { mount } for pid=6653 comm="syz.3.185" name="/" dev="hugetlbfs" ino=13225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 68.341399][ T40] audit: type=1400 audit(1767016866.046:367): avc: denied { read write } for pid=6655 comm="syz.3.186" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.351425][ T40] audit: type=1400 audit(1767016866.046:368): avc: denied { open } for pid=6655 comm="syz.3.186" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.351468][ T40] audit: type=1400 audit(1767016866.046:369): avc: denied { ioctl } for pid=6655 comm="syz.3.186" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.351504][ T40] audit: type=1400 audit(1767016866.046:370): avc: denied { setopt } for pid=6655 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.470176][ T40] audit: type=1400 audit(1767016866.182:371): avc: denied { execute } for pid=6661 comm="syz.3.187" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.673283][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.676824][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.679035][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.982286][ T6619] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 69.158142][ T6619] usb 5-1: device firmware changed [ 69.161208][ T5937] usb 5-1: USB disconnect, device number 2 [ 69.332075][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.500392][ T5937] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 69.504395][ T5937] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.508645][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.514162][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 69.517238][ T5937] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.521187][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 69.527380][ T5937] usb 5-1: config 0 descriptor?? [ 69.536944][ T5937] hub 5-1:0.0: bad descriptor, ignoring hub [ 69.539614][ T5937] hub 5-1:0.0: probe with driver hub failed with error -5 [ 69.547600][ T5937] usb 5-1: selecting invalid altsetting 0 [ 69.731257][ T6688] gfs2: not a GFS2 filesystem [ 69.934828][ T60] usb 5-1: USB disconnect, device number 3 [ 69.982315][ T6699] (syz.0.196,6699,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 69.985992][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.988946][ T6699] (syz.0.196,6699,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 69.998790][ T6699] (syz.0.196,6699,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 70.002018][ T6699] (syz.0.196,6699,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 70.032175][ T40] audit: type=1400 audit(1767016867.703:372): avc: denied { write } for pid=6708 comm="syz.3.198" path="socket:[13789]" dev="sockfs" ino=13789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.032291][ T6709] Bluetooth: MGMT ver 1.23 [ 70.047016][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.053974][ T6709] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.198'. [ 70.067690][ T5289] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.068039][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 70.100552][ T6713] netlink: 'syz.0.199': attribute type 20 has an invalid length. [ 70.152558][ T6714] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 70.267563][ T6719] ipvlan2: entered allmulticast mode [ 70.270055][ T6719] team0: entered allmulticast mode [ 70.272890][ T6719] team_slave_0: entered allmulticast mode [ 70.275553][ T6719] team_slave_1: entered allmulticast mode [ 70.279570][ T6719] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 70.288130][ T6719] loop4: detected capacity change from 0 to 7 [ 70.465741][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.469238][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.472810][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.477150][ T6731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.492729][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.553355][ T6737] syzkaller0: entered promiscuous mode [ 70.555932][ T6737] syzkaller0: entered allmulticast mode [ 70.573439][ T6737] overlay: filesystem on ./bus is read-only [ 70.728290][ T6741] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 70.765653][ T6745] trusted_key: encrypted_key: insufficient parameters specified [ 70.770261][ T6745] : renamed from lo (while UP) [ 70.804985][ T5289] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.805423][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.805529][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.919618][ T6759] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 70.924257][ T6759] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 70.929206][ T6759] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 71.235386][ T6766] option changes via remount are deprecated (pid=6765 comm=syz.0.220) [ 72.113386][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.277885][ T6798] netlink: 'syz.2.229': attribute type 16 has an invalid length. [ 72.280423][ T6798] __nla_validate_parse: 1 callbacks suppressed [ 72.280431][ T6798] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.229'. [ 72.488365][ T6812] batman_adv: batadv0: Adding interface: gretap2 [ 72.490542][ T6812] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.504137][ T6812] batman_adv: batadv0: Interface activated: gretap2 [ 72.699088][ T6818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.929998][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.930250][ T5289] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.930273][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.129622][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.133124][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.136352][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.139346][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.141973][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.283780][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 73.343394][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.345729][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.348086][ T6826] bridge_slave_0: entered allmulticast mode [ 73.350840][ T6826] bridge_slave_0: entered promiscuous mode [ 73.353924][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356238][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.358748][ T6826] bridge_slave_1: entered allmulticast mode [ 73.361349][ T6826] bridge_slave_1: entered promiscuous mode [ 73.376381][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.380984][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.395559][ T6826] team0: Port device team_slave_0 added [ 73.398660][ T6826] team0: Port device team_slave_1 added [ 73.411783][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.414149][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.424027][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.428443][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.430973][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.439573][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.461744][ T6826] hsr_slave_0: entered promiscuous mode [ 73.464084][ T6826] hsr_slave_1: entered promiscuous mode [ 73.466247][ T6826] debugfs: 'hsr0' already exists in 'hsr' [ 73.468197][ T6826] Cannot create hsr debugfs directory [ 73.561924][ T6826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.566344][ T6826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.570468][ T6826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.575332][ T6826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.599912][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.602552][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.606875][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.610117][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.685027][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.688763][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.699469][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.729719][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.737885][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.741167][ T6509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.754916][ T6858] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 73.761425][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.763986][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.769567][ T5289] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 73.772357][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 73.772366][ T40] audit: type=1400 audit(1767016871.354:398): avc: denied { setopt } for pid=6857 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.783680][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.795287][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.799799][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.804801][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.809434][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.974822][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 74.034579][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.042221][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 74.148187][ T6512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.173849][ T6883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.254'. [ 74.212167][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.224814][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.227307][ T6859] bridge_slave_0: entered allmulticast mode [ 74.230927][ T6859] bridge_slave_0: entered promiscuous mode [ 74.252024][ T6512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.260332][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.262724][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.265261][ T6859] bridge_slave_1: entered allmulticast mode [ 74.270283][ T6859] bridge_slave_1: entered promiscuous mode [ 74.287035][ T40] audit: type=1400 audit(1767016871.864:399): avc: denied { bind } for pid=6888 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.299307][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 74.305900][ T6889] hsr_slave_0: left promiscuous mode [ 74.308698][ T6889] hsr_slave_1: left promiscuous mode [ 74.329239][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.333937][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.356895][ T6512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.378107][ T6859] team0: Port device team_slave_0 added [ 74.381685][ T6859] team0: Port device team_slave_1 added [ 74.416091][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.419501][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.430168][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.435985][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.439877][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.450979][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.466954][ T6826] veth0_vlan: entered promiscuous mode [ 74.484489][ T6826] veth1_vlan: entered promiscuous mode [ 74.511879][ T6859] hsr_slave_0: entered promiscuous mode [ 74.514551][ T6859] hsr_slave_1: entered promiscuous mode [ 74.516864][ T6859] debugfs: 'hsr0' already exists in 'hsr' [ 74.518839][ T6859] Cannot create hsr debugfs directory [ 74.531587][ T6512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.591087][ T6826] veth0_macvtap: entered promiscuous mode [ 74.615307][ T6826] veth1_macvtap: entered promiscuous mode [ 74.644534][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.659763][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.686247][ T6520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.702660][ T6520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.705493][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 74.705946][ T6520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724619][ T6520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790038][ T6859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.802795][ T6859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.808687][ T6512] bridge_slave_1: left allmulticast mode [ 74.810824][ T6512] bridge_slave_1: left promiscuous mode [ 74.813563][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.825029][ T6512] bridge_slave_0: left allmulticast mode [ 74.828901][ T6512] bridge_slave_0: left promiscuous mode [ 74.831333][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.061652][ T6512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.069053][ T6512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.070827][ T6911] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 75.078234][ T6512] bond0 (unregistering): Released all slaves [ 75.087439][ T6859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.100519][ T6859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.181269][ T40] audit: type=1400 audit(1767016872.739:400): avc: denied { read open } for pid=6926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.190836][ T40] audit: type=1400 audit(1767016872.739:401): avc: denied { getattr } for pid=6926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.193491][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.200343][ T40] audit: type=1400 audit(1767016872.748:402): avc: denied { add_name } for pid=6916 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.212205][ T5936] Bluetooth: hci0: command tx timeout [ 75.218454][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.247170][ T40] audit: type=1400 audit(1767016872.807:403): avc: denied { remove_name } for pid=6928 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.272276][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.277686][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.281470][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.302245][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.312126][ T40] audit: type=1400 audit(1767016872.866:404): avc: denied { mounton } for pid=6826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.335675][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.338052][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.347955][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.350653][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.410073][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 75.413910][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 75.436904][ T6940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6940 comm=syz.2.265 [ 75.482097][ T6512] hsr_slave_0: left promiscuous mode [ 75.484816][ T6512] hsr_slave_1: left promiscuous mode [ 75.488888][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.491334][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.501326][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.503760][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.541014][ T40] audit: type=1400 audit(1767016873.102:405): avc: denied { execmod } for pid=6947 comm="syz.4.266" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 75.543936][ T6512] veth1_macvtap: left promiscuous mode [ 75.552484][ T6512] veth0_macvtap: left promiscuous mode [ 75.554388][ T6512] veth1_vlan: left promiscuous mode [ 75.556226][ T6512] veth0_vlan: left promiscuous mode [ 75.575125][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 75.864457][ T5936] Bluetooth: hci4: command tx timeout [ 75.896713][ T6512] team0 (unregistering): Port device team_slave_1 removed [ 75.916872][ T6512] team0 (unregistering): Port device team_slave_0 removed [ 76.121418][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.299664][ T6859] veth0_vlan: entered promiscuous mode [ 76.312691][ T6859] veth1_vlan: entered promiscuous mode [ 76.337176][ T6859] veth0_macvtap: entered promiscuous mode [ 76.341433][ T6859] veth1_macvtap: entered promiscuous mode [ 76.350316][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.365264][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.371893][ T6520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376627][ T6520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380484][ T6520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.387216][ T6520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447119][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.449739][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.471025][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.475529][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.585968][ T40] audit: type=1326 audit(1767016874.125:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.5.249" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f238f7c9 code=0x0 [ 76.597246][ T40] audit: type=1400 audit(1767016874.135:407): avc: denied { mount } for pid=7001 comm="syz.4.277" name="/" dev="ramfs" ino=17625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.642975][ T7004] netlink: 256 bytes leftover after parsing attributes in process `syz.5.249'. [ 76.651123][ T7004] unsupported nlmsg_type 40 [ 76.668115][ T7006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.278'. [ 76.678141][ T7006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 76.679836][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.695077][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.057818][ T7042] hugetlbfs: Bad value for 'uid' [ 77.059894][ T7042] hugetlbfs: Bad value for 'uid' [ 77.331750][ T7054] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 77.420451][ T7058] tmpfs: Bad value for 'huge' [ 77.450990][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.295'. [ 77.454749][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.295'. [ 77.566672][ T6101] libceph: connect (1)[c::]:6789 error -101 [ 77.568932][ T6101] libceph: mon0 (1)[c::]:6789 connect error [ 77.573683][ T6101] libceph: connect (1)[c::]:6789 error -101 [ 77.575717][ T6101] libceph: mon0 (1)[c::]:6789 connect error [ 77.665298][ T7068] ceph: No mds server is up or the cluster is laggy [ 77.711848][ T6014] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.725772][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.806537][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.843106][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.847203][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.851290][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.855429][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.858410][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.875030][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.895935][ T6014] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.898765][ T6014] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.902066][ T6014] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.905803][ T6014] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.909345][ T6014] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.914260][ T6014] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.918074][ T6014] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.920685][ T6014] usb 7-1: Product: syz [ 77.922074][ T6014] usb 7-1: Manufacturer: syz [ 77.927490][ T6014] cdc_wdm 7-1:1.0: skipping garbage [ 77.929226][ T6014] cdc_wdm 7-1:1.0: skipping garbage [ 77.933218][ T6014] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 77.935306][ T6014] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.970515][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 77.975696][ T5289] Bluetooth: hci4: command tx timeout [ 77.994681][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.027306][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.029751][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.032254][ T7081] bridge_slave_0: entered allmulticast mode [ 78.034989][ T7081] bridge_slave_0: entered promiscuous mode [ 78.040135][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042512][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.044862][ T7081] bridge_slave_1: entered allmulticast mode [ 78.047626][ T7081] bridge_slave_1: entered promiscuous mode [ 78.065273][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.071744][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.088225][ T7081] team0: Port device team_slave_0 added [ 78.092628][ T7081] team0: Port device team_slave_1 added [ 78.142572][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.143146][ T6014] usb 7-1: USB disconnect, device number 4 [ 78.144953][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.158957][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.164428][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.166721][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.177983][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.233310][ T7081] hsr_slave_0: entered promiscuous mode [ 78.235629][ T7081] hsr_slave_1: entered promiscuous mode [ 78.237759][ T7081] debugfs: 'hsr0' already exists in 'hsr' [ 78.240222][ T7081] Cannot create hsr debugfs directory [ 78.289302][ T7103] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 78.293685][ T82] bridge_slave_1: left allmulticast mode [ 78.295839][ T82] bridge_slave_1: left promiscuous mode [ 78.298221][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.306190][ T82] bridge_slave_0: left allmulticast mode [ 78.308752][ T82] bridge_slave_0: left promiscuous mode [ 78.313229][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.343388][ T7106] 9pnet_virtio: no channels available for device syz [ 78.493305][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.497558][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.501365][ T82] bond0 (unregistering): Released all slaves [ 78.658563][ T7081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.662967][ T7081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.673410][ T7081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.678296][ T7081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 78.777934][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.799027][ T82] hsr_slave_0: left promiscuous mode [ 78.802040][ T82] hsr_slave_1: left promiscuous mode [ 78.804556][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.807559][ T6014] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.814022][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.820825][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.823757][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.854059][ T82] veth1_macvtap: left promiscuous mode [ 78.856562][ T82] veth0_macvtap: left promiscuous mode [ 78.858767][ T82] veth1_vlan: left promiscuous mode [ 78.860680][ T82] veth0_vlan: left promiscuous mode [ 78.984190][ T6014] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.988171][ T6014] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.995250][ T6014] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.999384][ T6014] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 79.004378][ T6014] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.010884][ T6014] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.015017][ T6014] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.018602][ T6014] usb 7-1: Product: syz [ 79.021827][ T6014] usb 7-1: Manufacturer: syz [ 79.038245][ T6014] cdc_wdm 7-1:1.0: skipping garbage [ 79.041694][ T6014] cdc_wdm 7-1:1.0: skipping garbage [ 79.046071][ T6014] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 79.048742][ T6014] cdc_wdm 7-1:1.0: Unknown control protocol [ 79.151081][ T82] team0 (unregistering): Port device team_slave_1 removed [ 79.171272][ T82] team0 (unregistering): Port device team_slave_0 removed [ 79.255967][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 79.255982][ T40] audit: type=1400 audit(1767016876.757:420): avc: denied { map } for pid=7063 comm="syz.2.296" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.272909][ T40] audit: type=1400 audit(1767016876.767:421): avc: denied { execute } for pid=7063 comm="syz.2.296" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.401824][ T7133] tipc: Enabling of bearer rejected, failed to enable media [ 79.427691][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.437963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.441054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.455206][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.457080][ T40] audit: type=1400 audit(1767016876.954:422): avc: denied { connect } for pid=7141 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.457617][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.522469][ T75] usb 7-1: USB disconnect, device number 5 [ 79.613580][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.614079][ T40] audit: type=1400 audit(1767016877.112:423): avc: denied { getopt } for pid=7161 comm="syz.5.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.670661][ T7167] netlink: 56 bytes leftover after parsing attributes in process `syz.5.312'. [ 79.673660][ T7167] netlink: 56 bytes leftover after parsing attributes in process `syz.5.312'. [ 79.774308][ T7081] veth0_vlan: entered promiscuous mode [ 79.779416][ T7081] veth1_vlan: entered promiscuous mode [ 79.795558][ T7081] veth0_macvtap: entered promiscuous mode [ 79.799491][ T7081] veth1_macvtap: entered promiscuous mode [ 79.812640][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.818864][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.826131][ T6519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.829025][ T6519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.832495][ T6519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.836000][ T6519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.892664][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.895338][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.917575][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.920514][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.922290][ T5289] Bluetooth: hci0: command tx timeout [ 80.076881][ T7191] netlink: 'syz.6.314': attribute type 1 has an invalid length. [ 80.080365][ T7191] netlink: 224 bytes leftover after parsing attributes in process `syz.6.314'. [ 80.147396][ T7200] geneve2: entered promiscuous mode [ 80.149742][ T7200] geneve2: entered allmulticast mode [ 80.151851][ T214] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.155977][ T214] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.158950][ T214] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.161723][ T214] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 80.216243][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.220398][ T7205] bond0: (slave bond1): Enslaving as an active interface with an up link [ 80.448741][ T5937] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.601068][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 80.601961][ T5937] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.603449][ T40] audit: type=1400 audit(1767016878.089:424): avc: denied { getopt } for pid=7219 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.614713][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.618282][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.621627][ T5937] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.623173][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.323'. [ 80.625745][ T5937] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.632034][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.636171][ T5937] usb 7-1: config 0 descriptor?? [ 80.670420][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.324'. [ 80.674917][ T7223] openvswitch: netlink: Flow actions attr not present in new flow. [ 80.754741][ T34] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.758727][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 80.772620][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.776675][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.780909][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.784062][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.787859][ T34] usb 11-1: config 0 descriptor?? [ 80.790814][ T7218] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 80.941741][ T7227] netlink: 'syz.5.325': attribute type 39 has an invalid length. [ 81.051289][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.059049][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.061489][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.063948][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.067382][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.069793][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.072381][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.074802][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.077577][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.080011][ T5937] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.089713][ T5937] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.268726][ T34] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 81.317465][ T34] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 81.380173][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 81.488985][ T34] usb 7-1: USB disconnect, device number 6 [ 81.536006][ T29] usb 11-1: USB disconnect, device number 2 [ 81.866607][ T40] audit: type=1400 audit(1767016879.335:425): avc: denied { create } for pid=7245 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 81.875748][ T40] audit: type=1400 audit(1767016879.335:426): avc: denied { setopt } for pid=7245 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.882624][ T40] audit: type=1400 audit(1767016879.335:427): avc: denied { write } for pid=7245 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 81.904776][ T40] audit: type=1400 audit(1767016879.364:428): avc: denied { write } for pid=7247 comm="syz.5.330" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.024493][ T40] audit: type=1326 audit(1767016879.493:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.2.331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66eb98f7c9 code=0x7ffc0000 [ 82.028208][ T5289] Bluetooth: hci0: command tx timeout [ 82.050759][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.332'. [ 82.053494][ T7255] netlink: 'syz.5.332': attribute type 7 has an invalid length. [ 82.055785][ T7255] netlink: 'syz.5.332': attribute type 8 has an invalid length. [ 82.058346][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.332'. [ 82.212288][ T7279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.233859][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.236889][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.286463][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.292914][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.406638][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.411909][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.416698][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.420998][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.678703][ T7304] fuse: Bad value for 'user_id' [ 82.680628][ T7304] fuse: Bad value for 'user_id' [ 82.725444][ T6101] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 82.822437][ T7313] tipc: Enabling of bearer rejected, media not registered [ 82.826964][ T7313] __nla_validate_parse: 3 callbacks suppressed [ 82.826975][ T7313] netlink: 96 bytes leftover after parsing attributes in process `syz.5.349'. [ 82.835337][ T7313] netlink: 36 bytes leftover after parsing attributes in process `syz.5.349'. [ 82.898162][ T6101] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 82.902758][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.905818][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.909565][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.912632][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.915683][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.928452][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.931406][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.934375][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.938029][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.940929][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.943924][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.947552][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.950425][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.953364][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.956967][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.960149][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.963080][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.966564][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.970082][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.973039][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.976582][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.979826][ T6101] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.983041][ T6101] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.986634][ T6101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.990784][ T6101] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.993906][ T6101] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.997601][ T6101] usb 7-1: Product: syz [ 82.999175][ T6101] usb 7-1: Manufacturer: syz [ 83.000766][ T6101] usb 7-1: SerialNumber: syz [ 83.003591][ T6101] usb 7-1: config 0 descriptor?? [ 83.012575][ T6101] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.072337][ T7324] netlink: 'syz.5.354': attribute type 21 has an invalid length. [ 83.121246][ T7330] XFS (nbd5): no-recovery mounts must be read-only. [ 83.181580][ T7332] netlink: 'syz.6.357': attribute type 2 has an invalid length. [ 83.185288][ T7332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.194109][ T7332] binder_alloc: 7331: binder_alloc_buf, no vma [ 83.273436][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 83.273551][ T6013] usb 7-1: USB disconnect, device number 7 [ 83.282277][ T6013] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 83.301801][ T7353] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 83.441635][ T7360] xt_SECMARK: invalid mode: 2 [ 83.709425][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.368'. [ 83.718071][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.368'. [ 83.722019][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.368'. [ 83.775439][ T7373] netlink: 152 bytes leftover after parsing attributes in process `syz.5.369'. [ 83.790150][ T7373] program syz.5.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.837518][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 83.840020][ T1115] ata1.00: irq_stat 0x40000000 [ 83.841682][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 83.843855][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 13 [ 83.843855][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 83.856810][ T1115] ata1.00: status: { DRDY ERR } [ 83.858752][ T1115] ata1.00: error: { ABRT } [ 83.860277][ T1115] ata1.00: device reported invalid CHS sector 0 [ 83.909903][ T7383] netlink: 830 bytes leftover after parsing attributes in process `syz.2.371'. [ 83.920135][ T7383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.371'. [ 84.011087][ T7387] sctp: [Deprecated]: syz.2.373 (pid 7387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.011087][ T7387] Use struct sctp_sack_info instead [ 84.122240][ T7398] loop5: detected capacity change from 0 to 7 [ 84.132250][ T5289] Bluetooth: hci0: command tx timeout [ 84.138678][ T6650] Dev loop5: unable to read RDB block 7 [ 84.143240][ T6650] loop5: unable to read partition table [ 84.145231][ T6650] loop5: partition table beyond EOD, truncated [ 84.155452][ T7398] Dev loop5: unable to read RDB block 7 [ 84.158559][ T7398] loop5: unable to read partition table [ 84.162463][ T7398] loop5: partition table beyond EOD, truncated [ 84.168252][ T7398] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 84.212061][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.377'. [ 84.262510][ T7405] netlink: 'syz.5.378': attribute type 21 has an invalid length. [ 84.441270][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 84.441286][ T40] audit: type=1400 audit(1767016881.878:451): avc: denied { map } for pid=7412 comm="syz.6.381" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.457916][ T40] audit: type=1400 audit(1767016881.898:452): avc: denied { execute } for pid=7412 comm="syz.6.381" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.583537][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 84.734864][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 84.738192][ T34] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 84.741699][ T34] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 84.751294][ T34] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.762070][ T34] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.769556][ T34] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 84.773545][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.777713][ T34] usb 10-1: Product: syz [ 84.786948][ T34] usb 10-1: Manufacturer: syz [ 84.788867][ T34] usb 10-1: SerialNumber: syz [ 84.794793][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 84.799433][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input11 [ 84.810875][ T40] audit: type=1400 audit(1767016882.245:453): avc: denied { read } for pid=5324 comm="acpid" name="mouse2" dev="devtmpfs" ino=2943 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.824868][ T40] audit: type=1400 audit(1767016882.245:454): avc: denied { open } for pid=5324 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2943 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.833874][ T40] audit: type=1400 audit(1767016882.245:455): avc: denied { ioctl } for pid=5324 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2943 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.007356][ T34] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.010271][ T34] (id 0x00) [ 85.067940][ T34] rc_core: IR keymap rc-imon-pad not found [ 85.067969][ T34] Registered IR keymap rc-empty [ 85.070249][ T34] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 85.070262][ T34] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.140226][ T7449] hpfs: Bad magic ... probably not HPFS [ 85.140945][ T40] audit: type=1400 audit(1767016882.581:456): avc: denied { ioctl } for pid=7446 comm="syz.2.392" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.143354][ T7448] hpfs: Bad magic ... probably not HPFS [ 85.166215][ T7449] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 85.233728][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 85.239039][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input12 [ 85.246385][ T34] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:2> initialized [ 85.404286][ T7411] imon:vfd_write: invalid payload size [ 85.407065][ T7410] imon:display_open: display port is already open [ 85.461581][ T59] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.592957][ T59] usb 7-1: device descriptor read/64, error -71 [ 85.696292][ T5982] usb 10-1: USB disconnect, device number 2 [ 85.844994][ T59] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 85.996227][ T59] usb 7-1: device descriptor read/64, error -71 [ 86.005895][ T7493] Malformed UNC in devname [ 86.005895][ T7493] [ 86.009271][ T7493] CIFS: VFS: Malformed UNC in devname [ 86.117447][ T59] usb usb7-port1: attempt power cycle [ 86.230897][ T5289] Bluetooth: hci0: command tx timeout [ 86.277986][ T7531] sock: sock_set_timeout: `syz.5.397' (pid 7531) tries to set negative timeout [ 86.282997][ T40] audit: type=1400 audit(1767016883.711:457): avc: denied { ioctl } for pid=7530 comm="syz.5.397" path="socket:[19698]" dev="sockfs" ino=19698 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.380613][ T7544] overlay: Bad value for 'verity' [ 86.387431][ T7545] overlay: Bad value for 'verity' [ 86.432405][ T40] audit: type=1400 audit(1767016883.860:458): avc: denied { nlmsg_read } for pid=7548 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.465629][ T40] audit: type=1400 audit(1767016883.890:459): avc: denied { ioctl } for pid=7553 comm="syz.5.403" path="socket:[19713]" dev="sockfs" ino=19713 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.470579][ T59] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.521378][ T59] usb 7-1: device descriptor read/8, error -71 [ 86.533740][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.404'. [ 86.537154][ T7558] bridge_slave_1: left allmulticast mode [ 86.539424][ T7558] bridge_slave_1: left promiscuous mode [ 86.542560][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.547756][ T7558] bridge_slave_0: left allmulticast mode [ 86.549917][ T7558] bridge_slave_0: left promiscuous mode [ 86.553050][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.554476][ T40] audit: type=1400 audit(1767016883.979:460): avc: denied { accept } for pid=7546 comm="syz.6.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 86.773192][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.794255][ T59] usb 7-1: device descriptor read/8, error -71 [ 86.820903][ T7568] Malformed UNC in devname [ 86.820903][ T7568] [ 86.823384][ T7568] CIFS: VFS: Malformed UNC in devname [ 86.904626][ T59] usb usb7-port1: unable to enumerate USB device [ 86.961036][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 86.966452][ T1115] ata1: failed to read log page 10h (errno=-5) [ 86.969298][ T1115] ata1.00: exception Emask 0x1 SAct 0xc0000 SErr 0x0 action 0x0 [ 86.972742][ T1115] ata1.00: irq_stat 0x40000000 [ 86.975039][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 86.977434][ T1115] ata1.00: cmd 61/48:90:36:31:08/00:00:00:00:00/40 tag 18 ncq dma 36864 out [ 86.977434][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 86.983385][ T1115] ata1.00: status: { DRDY } [ 86.985071][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 86.987196][ T1115] ata1.00: cmd 61/08:98:36:81:08/00:00:00:00:00/40 tag 19 ncq dma 4096 out [ 86.987196][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 86.992905][ T1115] ata1.00: status: { DRDY } [ 86.994548][ T1115] ata1.00: error: { ABRT } [ 86.999921][ T1115] ata1.00: configured for UDMA/100 [ 87.003316][ T1115] ata1: EH complete [ 87.047170][ T9] cfg80211: failed to load regulatory.db [ 87.389863][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.394072][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.398647][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.402008][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.405517][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.543107][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 87.620570][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.623031][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.625434][ T7577] bridge_slave_0: entered allmulticast mode [ 87.628233][ T7577] bridge_slave_0: entered promiscuous mode [ 87.631539][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.633914][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.636325][ T7577] bridge_slave_1: entered allmulticast mode [ 87.641077][ T7577] bridge_slave_1: entered promiscuous mode [ 87.724702][ T7488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.743185][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.750055][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.786051][ T7577] team0: Port device team_slave_0 added [ 87.789176][ T7577] team0: Port device team_slave_1 added [ 87.817197][ T7488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.817752][ T7621] (syz.5.419,7621,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.825369][ T7621] (syz.5.419,7621,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.843864][ T7620] (syz.5.419,7620,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.846741][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.847698][ T7620] (syz.5.419,7620,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.849963][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.865154][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.873023][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.876046][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.887262][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.930268][ T7488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.005563][ T7577] hsr_slave_0: entered promiscuous mode [ 88.008844][ T7577] hsr_slave_1: entered promiscuous mode [ 88.011436][ T7577] debugfs: 'hsr0' already exists in 'hsr' [ 88.014625][ T7577] Cannot create hsr debugfs directory [ 88.031681][ T7488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.208530][ T7577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 88.217093][ T7488] bridge_slave_1: left allmulticast mode [ 88.219662][ T7488] bridge_slave_1: left promiscuous mode [ 88.223571][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.229381][ T7488] bridge_slave_0: left allmulticast mode [ 88.231929][ T7488] bridge_slave_0: left promiscuous mode [ 88.234820][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.399931][ T7488] dvmrp6 (unregistering): left allmulticast mode [ 88.435900][ T7648] __nla_validate_parse: 2 callbacks suppressed [ 88.435919][ T7648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 88.476774][ T7488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.481102][ T7488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.485492][ T7488] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 88.489592][ T7488] bond0 (unregistering): Released all slaves [ 88.494308][ T7488] bond1 (unregistering): Released all slaves [ 88.556224][ T7488] bond2 (unregistering): Released all slaves [ 88.648932][ T7488] bond3 (unregistering): Released all slaves [ 88.664293][ T7577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 88.678933][ T7577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 88.695552][ T7577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 88.803634][ T7663] input: syz1 as /devices/virtual/input/input13 [ 88.882659][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.896663][ T7670] bond2: Unable to set up delay as MII monitoring is disabled [ 88.903027][ T7670] bond2 (unregistering): Released all slaves [ 88.991015][ T7680] tmpfs: Bad value for 'mpol' [ 89.001774][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.023836][ T7682] Bluetooth: hci3: Frame reassembly failed (-84) [ 89.025169][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.030313][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.051329][ T7488] hsr_slave_0: left promiscuous mode [ 89.054107][ T7488] hsr_slave_1: left promiscuous mode [ 89.060505][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.068089][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.079583][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.082873][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.092505][ T7488] veth1_macvtap: left promiscuous mode [ 89.094347][ T7488] veth0_macvtap: left promiscuous mode [ 89.095013][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.433'. [ 89.096371][ T7488] veth1_vlan: left promiscuous mode [ 89.102715][ T7488] veth0_vlan: left promiscuous mode [ 89.376532][ T7488] team0 (unregistering): Port device team_slave_1 removed [ 89.397503][ T7488] team0 (unregistering): Port device team_slave_0 removed [ 89.453664][ T5289] Bluetooth: hci2: command tx timeout [ 89.572413][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.574820][ T7508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.580973][ T7687] macvlan2: entered allmulticast mode [ 89.582948][ T7687] veth1_to_hsr: entered allmulticast mode [ 89.591089][ T7693] 8021q: VLANs not supported on ip6gre0 [ 89.657870][ T7702] binder: 7700:7702 ioctl 4018620d 0 returned -22 [ 89.763577][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.940625][ T7577] veth0_vlan: entered promiscuous mode [ 89.945626][ T7577] veth1_vlan: entered promiscuous mode [ 89.962123][ T7577] veth0_macvtap: entered promiscuous mode [ 89.965901][ T7577] veth1_macvtap: entered promiscuous mode [ 89.975535][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.984940][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.993686][ T7508] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.997562][ T7508] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.000880][ T7508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.004638][ T7508] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.045687][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.050865][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.066799][ T7508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.070034][ T7508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.081947][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 90.081956][ T40] audit: type=1400 audit(1767016887.483:471): avc: denied { mounton } for pid=7577 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 90.126180][ T40] audit: type=1400 audit(1767016887.523:472): avc: denied { execute } for pid=7740 comm="syz.2.439" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.180124][ T40] audit: type=1400 audit(1767016887.582:473): avc: denied { read } for pid=7746 comm="syz.7.440" laddr=::ffff:172.20.20.10 lport=52466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.367895][ T7766] random: crng reseeded on system resumption [ 90.531039][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 90.533969][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 90.536968][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 90.566691][ T7778] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.446' resets device [ 90.909029][ T40] audit: type=1400 audit(1767016888.297:474): avc: denied { listen } for pid=7781 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.919015][ T40] audit: type=1400 audit(1767016888.307:475): avc: denied { accept } for pid=7781 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.063985][ T5289] Bluetooth: hci3: command 0x1003 tx timeout [ 91.066931][ T5936] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 91.140698][ T7792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.449'. [ 91.165907][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.168856][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.192750][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 91.194803][ T40] audit: type=1400 audit(1767016888.586:476): avc: denied { map } for pid=7801 comm="syz.7.453" path="socket:[20404]" dev="sockfs" ino=20404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.207898][ T4659] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.209207][ T7805] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.211264][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 91.218991][ T40] audit: type=1400 audit(1767016888.596:477): avc: denied { read } for pid=7801 comm="syz.7.453" path="socket:[20404]" dev="sockfs" ino=20404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.219133][ T4659] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.229014][ T7800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.242849][ T4659] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.247290][ T4659] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.503487][ T7838] ip6t_srh: unknown srh invflags 4000 [ 91.547161][ T5936] Bluetooth: hci2: command tx timeout [ 91.556777][ T5982] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 91.709832][ T5982] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.712383][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.716335][ T5982] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.720297][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.723917][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.728841][ T5982] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.731414][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.735933][ T5982] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.752537][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.756189][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.760871][ T5982] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 91.763406][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.766880][ T5982] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.771793][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.776176][ T5982] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.783319][ T5982] usb 7-1: string descriptor 0 read error: -22 [ 91.786182][ T5982] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.790345][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.800356][ T5982] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.086263][ T40] audit: type=1400 audit(1767016889.470:478): avc: denied { write } for pid=7869 comm="syz.7.465" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.344664][ T40] audit: type=1400 audit(1767016889.729:479): avc: denied { shutdown } for pid=7893 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.355402][ T7896] sctp: [Deprecated]: syz.6.473 (pid 7896) Use of int in max_burst socket option. [ 92.355402][ T7896] Use struct sctp_assoc_value instead [ 92.363809][ T40] audit: type=1400 audit(1767016889.749:480): avc: denied { map } for pid=7895 comm="syz.6.473" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.713442][ T53] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 92.876653][ T53] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 92.880349][ T53] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.884805][ T53] usb 11-1: config 0 interface 0 has no altsetting 0 [ 92.890977][ T53] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.895098][ T53] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.898604][ T53] usb 11-1: Product: syz [ 92.900040][ T53] usb 11-1: Manufacturer: syz [ 92.901618][ T53] usb 11-1: SerialNumber: syz [ 92.904516][ T53] usb 11-1: config 0 descriptor?? [ 92.907485][ T53] hub 11-1:0.0: bad descriptor, ignoring hub [ 92.909509][ T53] hub 11-1:0.0: probe with driver hub failed with error -5 [ 92.913272][ T53] usb 11-1: selecting invalid altsetting 0 [ 93.370271][ T7904] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 93.629029][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.5.485'. [ 93.638547][ T5936] Bluetooth: hci2: command tx timeout [ 93.886469][ T7947] overlay: filesystem on ./file0 not supported as upperdir [ 94.071917][ T7949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.487'. [ 94.071952][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.5.487'. [ 94.192550][ T7958] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 94.202848][ T7957] 9pnet_virtio: no channels available for device syz [ 94.204500][ T34] usb 7-1: USB disconnect, device number 12 [ 94.467295][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.490'. [ 94.475002][ T7967] xfrm1: entered promiscuous mode [ 94.476772][ T7967] xfrm1: entered allmulticast mode [ 94.504035][ T7974] program syz.2.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.568191][ T7981] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.495'. [ 94.571945][ T7981] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 94.578940][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 94.702790][ T7987] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 94.766989][ T7990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.768122][ T7995] 9pnet_virtio: no channels available for device syz [ 94.770176][ T7990] bond0: (slave bond1): Enslaving as an active interface with an up link [ 94.782813][ T7990] xt_hashlimit: max too large, truncated to 1048576 [ 94.791136][ T7990] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 95.031295][ T8007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.072597][ T8013] macvtap0: refused to change device tx_queue_len [ 95.548035][ T8023] bridge0: port 3(gretap0) entered blocking state [ 95.550388][ T8023] bridge0: port 3(gretap0) entered disabled state [ 95.552981][ T8023] gretap0: entered allmulticast mode [ 95.556057][ T8023] gretap0: entered promiscuous mode [ 95.732596][ T5936] Bluetooth: hci2: command tx timeout [ 95.747864][ T8041] befs: (nbd5): unable to read superblock [ 95.791284][ T8043] netlink: 75 bytes leftover after parsing attributes in process `syz.5.516'. [ 95.795502][ T8044] netlink: 75 bytes leftover after parsing attributes in process `syz.5.516'. [ 95.943432][ T8053] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 95.946917][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 95.946926][ T40] audit: type=1400 audit(1767016893.310:493): avc: denied { setopt } for pid=8052 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.955321][ T29] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 95.958360][ T40] audit: type=1400 audit(1767016893.320:494): avc: denied { accept } for pid=8054 comm="syz.7.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 95.958643][ T8055] netlink: 'syz.7.521': attribute type 29 has an invalid length. [ 95.958792][ T8053] netlink: 'syz.5.520': attribute type 4 has an invalid length. [ 95.968399][ T8055] netlink: 'syz.7.521': attribute type 3 has an invalid length. [ 95.978566][ T8055] netlink: 76 bytes leftover after parsing attributes in process `syz.7.521'. [ 96.028856][ T8061] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 96.079119][ T8065] netlink: 120 bytes leftover after parsing attributes in process `syz.7.526'. [ 96.079148][ T8065] netlink: 'syz.7.526': attribute type 1 has an invalid length. [ 96.101325][ T29] usb 7-1: Invalid ep0 maxpacket: 64 [ 96.103345][ T40] audit: type=1400 audit(1767016893.470:495): avc: denied { bind } for pid=8067 comm="syz.7.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.151495][ T8075] netlink: 'syz.5.529': attribute type 8 has an invalid length. [ 96.161409][ T40] audit: type=1400 audit(1767016893.529:496): avc: denied { read } for pid=8074 comm="syz.5.529" path="socket:[24792]" dev="sockfs" ino=24792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.218894][ T8077] overlayfs: empty lowerdir [ 96.231296][ T29] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 96.369175][ T5936] Bluetooth: hci4: Unable to find connection for big 0x76 [ 96.381722][ T29] usb 7-1: Invalid ep0 maxpacket: 64 [ 96.383773][ T29] usb usb7-port1: attempt power cycle [ 96.540709][ T8099] bond2: invalid ARP target 0.0.0.0 specified for addition [ 96.543581][ T8099] bond2: option arp_ip_target: invalid value (0) [ 96.547683][ T8099] bond2 (unregistering): Released all slaves [ 96.684650][ T40] audit: type=1400 audit(1767016894.047:497): avc: denied { setopt } for pid=8115 comm="syz.7.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.723454][ T29] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 96.739518][ T8116] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64512 sclass=netlink_xfrm_socket pid=8116 comm=syz.7.541 [ 96.744185][ T29] usb 7-1: Invalid ep0 maxpacket: 64 [ 96.874195][ T29] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 96.907289][ T29] usb 7-1: Invalid ep0 maxpacket: 64 [ 96.910039][ T29] usb usb7-port1: unable to enumerate USB device [ 97.003131][ T40] audit: type=1400 audit(1767016894.356:498): avc: denied { connect } for pid=8133 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.037864][ T8136] fuse: Unknown parameter '\0x0000000000000003' [ 97.041186][ T8136] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 97.047939][ T8137] fuse: Unknown parameter '\0x0000000000000003' [ 97.140704][ T8148] SELinux: policydb version 1694646769 does not match my version range 15-35 [ 97.143852][ T40] audit: type=1400 audit(1767016894.495:499): avc: denied { load_policy } for pid=8147 comm="syz.7.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.151205][ T8148] SELinux: failed to load policy [ 97.241321][ T8153] fuse: root generation should be zero [ 97.288067][ T40] audit: type=1400 audit(1767016894.644:500): avc: denied { write } for pid=8154 comm="syz.7.554" lport=45364 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.295977][ T40] audit: type=1400 audit(1767016894.654:501): avc: denied { setopt } for pid=8154 comm="syz.7.554" lport=45364 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.315764][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 97.354315][ T8160] tipc: Started in network mode [ 97.356936][ T8160] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 97.360242][ T8160] tipc: Enabled bearer , priority 0 [ 97.364544][ T40] audit: type=1400 audit(1767016894.714:502): avc: denied { write } for pid=8159 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.467716][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.471497][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 97.475129][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.479661][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.483914][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.483928][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.485230][ T9] usb 10-1: config 0 descriptor?? [ 97.492814][ T8142] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 97.927383][ T8179] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.959569][ T9] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 97.965930][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 97.980314][ T25] block nbd0: Possible stuck request ffff8880289d0000: control (read@0,1024B). Runtime 30 seconds [ 97.984392][ T25] block nbd0: Possible stuck request ffff8880289d0200: control (read@1024,1024B). Runtime 30 seconds [ 98.212694][ T53] usb 10-1: USB disconnect, device number 3 [ 98.361429][ T1342] tipc: Node number set to 9611946 [ 98.601009][ T7904] usb 11-1: device descriptor read/64, error -110 [ 98.837160][ T8196] fuse: Bad value for 'group_id' [ 98.838870][ T8196] fuse: Bad value for 'group_id' [ 98.878858][ T7904] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 98.899943][ T8202] program syz.5.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.023259][ T7904] usb 11-1: device descriptor read/64, error -32 [ 99.124386][ T8200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.129080][ T8200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.134164][ T8200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.153521][ T8215] batman_adv: batadv0: Adding interface: gretap1 [ 99.155773][ T8215] batman_adv: batadv0: Interface activated: gretap1 [ 99.205545][ T8200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.209334][ T8200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.212907][ T8200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.266992][ T7904] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 99.283838][ T7904] usb 11-1: device descriptor read/8, error -32 [ 99.312103][ T8200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.316797][ T8200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321268][ T8200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.390080][ T8217] can0: slcan on ttyS3. [ 99.452200][ T8200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.456227][ T8200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.460142][ T8200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.475159][ T7904] raw-gadget.1 gadget.6: failed to queue resume event [ 99.534636][ T7904] usb 11-1: reset high-speed USB device number 3 using dummy_hcd [ 99.554780][ C2] raw-gadget.1 gadget.6: ignoring, device is not running [ 99.557993][ T7904] usb 11-1: device descriptor read/8, error -32 [ 99.596520][ T7475] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.600154][ T7475] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.602901][ T7475] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.606307][ T8216] can0 (unregistered): slcan off ttyS3. [ 99.629512][ T7475] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.632788][ T7475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.636754][ T7475] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.645942][ T7475] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.648686][ T7475] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.651608][ T7475] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.664959][ T7904] raw-gadget.1 gadget.6: failed to queue suspend event [ 99.671219][ T6101] usb 11-1: USB disconnect, device number 3 [ 99.675400][ T7483] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.678880][ T7483] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.683295][ T7483] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.705285][ T7904] raw-gadget.1 gadget.6: failed to queue disconnect event [ 99.719892][ T8225] netlink: 'syz.7.574': attribute type 1 has an invalid length. [ 99.722500][ T8225] netlink: 'syz.7.574': attribute type 2 has an invalid length. [ 99.901862][ T8252] syzkaller0: entered promiscuous mode [ 99.903771][ T8252] syzkaller0: entered allmulticast mode [ 99.913028][ T8252] tipc: Enabled bearer , priority 0 [ 99.934375][ T8252] bridge0: port 3(veth0_to_bridge) entered blocking state [ 99.937737][ T8252] bridge0: port 3(veth0_to_bridge) entered disabled state [ 99.940169][ T8252] veth0_to_bridge: entered allmulticast mode [ 99.942945][ T8252] veth0_to_bridge: entered promiscuous mode [ 99.944965][ T8252] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.956087][ T8252] bridge0: port 3(veth0_to_bridge) entered blocking state [ 99.958478][ T8252] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 99.966228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.970312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.974442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.978530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.982703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.986784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.990777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.994954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.999111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.003338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.033548][ T8251] tipc: Resetting bearer [ 100.396965][ T8286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8286 comm=syz.6.588 [ 104.268824][ T8251] tipc: Disabling bearer [ 104.447410][ T8293] trusted_key: syz.7.590 sent an empty control message without MSG_MORE. [ 104.465803][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 104.465818][ T40] audit: type=1400 audit(1767016901.800:508): avc: denied { create } for pid=8296 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 104.479070][ T40] audit: type=1400 audit(1767016901.810:509): avc: denied { setopt } for pid=8296 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 104.602955][ T40] audit: type=1400 audit(1767016901.940:510): avc: denied { name_connect } for pid=8310 comm="syz.5.594" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 104.676351][ T8319] xt_limit: Overflow, try lower: 271964/0 [ 104.766919][ T40] audit: type=1400 audit(1767016902.100:511): avc: denied { map } for pid=8325 comm="syz.5.597" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.807226][ T8333] sctp: [Deprecated]: syz.2.598 (pid 8333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.807226][ T8333] Use struct sctp_sack_info instead [ 104.832093][ T8328] sctp: [Deprecated]: syz.2.598 (pid 8328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.832093][ T8328] Use struct sctp_sack_info instead [ 104.962886][ T40] audit: type=1400 audit(1767016902.299:512): avc: denied { mounton } for pid=8343 comm="syz.2.600" path="/proc/452/task" dev="proc" ino=26897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.982222][ T40] audit: type=1400 audit(1767016902.319:513): avc: denied { create } for pid=8338 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 104.991310][ C0] net_ratelimit: 19868 callbacks suppressed [ 104.991322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.997545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:af:3b:65:7e:66, vlan:0) [ 104.997638][ T40] audit: type=1400 audit(1767016902.319:514): avc: denied { sys_admin } for pid=8338 comm="syz.5.599" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 105.001642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.001840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.016570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.020712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.024870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:af:3b:65:7e:66, vlan:0) [ 105.029175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.033495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.037726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:af:3b:65:7e:66, vlan:0) [ 105.369350][ T40] audit: type=1400 audit(1767016902.698:515): avc: denied { ioctl } for pid=8357 comm="syz.2.603" path="socket:[26914]" dev="sockfs" ino=26914 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.378018][ T8356] efs: device does not support 512 byte blocks [ 105.380226][ T8356] device does not support 512 byte blocks [ 105.380226][ T8356] [ 105.384405][ T40] audit: type=1400 audit(1767016902.708:516): avc: denied { read } for pid=8357 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.385218][ T40] audit: type=1400 audit(1767016902.718:517): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 105.405889][ T8359] __nla_validate_parse: 9 callbacks suppressed [ 105.405900][ T8359] netlink: 696 bytes leftover after parsing attributes in process `syz.5.602'. [ 105.546388][ T8366] x_tables: duplicate underflow at hook 3 [ 105.616254][ T8372] netlink: 'syz.5.607': attribute type 7 has an invalid length. [ 105.619568][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.607'. [ 105.670158][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.002197][ T8384] netlink: 'syz.2.611': attribute type 12 has an invalid length. [ 106.005222][ T8384] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 106.007813][ T8384] netlink: 148 bytes leftover after parsing attributes in process `syz.2.611'. [ 106.010833][ T8384] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 106.013606][ T8384] netlink: 'syz.2.611': attribute type 2 has an invalid length. [ 106.016397][ T8384] netlink: 31 bytes leftover after parsing attributes in process `syz.2.611'. [ 106.103557][ T8396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8396 comm=syz.6.614 [ 106.127711][ T8397] netlink: 92 bytes leftover after parsing attributes in process `syz.2.615'. [ 106.133126][ T7483] Bluetooth: Error in BCSP hdr checksum [ 106.361932][ T8406] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 106.553753][ T8416] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.789719][ T8430] overlayfs: failed to resolve './file0': -2 [ 106.807961][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.7.628'. [ 106.813925][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.628'. [ 106.958070][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 107.052368][ T8457] tipc: New replicast peer: 255.255.255.255 [ 107.054986][ T8457] tipc: Enabled bearer , priority 10 [ 107.079135][ T8457] "syz.7.635" (8457) uses obsolete ecb(arc4) skcipher [ 107.083463][ T8457] devpts: Unknown parameter 'm4' [ 107.185427][ T8470] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 107.191551][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.6.639'. [ 107.961781][ T8499] netlink: 'syz.6.648': attribute type 21 has an invalid length. [ 107.965226][ T8499] netlink: 128 bytes leftover after parsing attributes in process `syz.6.648'. [ 107.968317][ T8499] netlink: 'syz.6.648': attribute type 4 has an invalid length. [ 107.970889][ T8499] netlink: 'syz.6.648': attribute type 5 has an invalid length. [ 108.146434][ T8506] tmpfs: Unknown parameter 'grpquotaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.240294][ T5289] Bluetooth: hci3: command 0x1003 tx timeout [ 108.269642][ T5936] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 108.391914][ T8516] sctp: [Deprecated]: syz.2.653 (pid 8516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.391914][ T8516] Use struct sctp_sack_info instead [ 109.119310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 109.131134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 109.141412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 109.151734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.162366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.172478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.182539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.192802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 109.258211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 109.594263][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 109.594280][ T40] audit: type=1400 audit(1767541193.807:556): avc: denied { write } for pid=8568 comm="syz.7.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 109.737440][ T40] audit: type=1400 audit(1767541193.953:557): avc: denied { read } for pid=8568 comm="syz.7.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 109.829490][ T8587] XFS (nbd6): SB validate failed with error -5. [ 110.064010][ T8605] program syz.6.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.128273][ T40] audit: type=1400 audit(1767541194.333:558): avc: denied { ioctl } for pid=8604 comm="syz.6.675" path="socket:[25571]" dev="sockfs" ino=25571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.188221][ C2] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 110.191832][ C2] sr 2:0:0:0: [sr0] tag#29 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 110.196774][ T40] audit: type=1400 audit(1767541194.402:559): avc: denied { read } for pid=8618 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.216736][ T8620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.230575][ T40] audit: type=1400 audit(1767541194.431:560): avc: denied { wake_alarm } for pid=8618 comm="syz.5.680" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.618370][ T40] audit: type=1400 audit(1767541194.811:561): avc: denied { connect } for pid=8631 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.690893][ T40] audit: type=1400 audit(1767541194.880:562): avc: denied { shutdown } for pid=8631 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.847800][ T8642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8642 comm=syz.2.686 [ 110.911016][ T8643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8643 comm=syz.2.686 [ 111.004412][ T8650] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.008267][ T8650] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 111.568558][ T8666] netlink: 'syz.6.693': attribute type 10 has an invalid length. [ 111.571677][ T8666] __nla_validate_parse: 5 callbacks suppressed [ 111.571685][ T8666] netlink: 40 bytes leftover after parsing attributes in process `syz.6.693'. [ 111.602671][ T8666] team0: Port device geneve0 added [ 111.609751][ T8666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8666 comm=syz.6.693 [ 111.699514][ T8668] loop4: detected capacity change from 0 to 524288000 [ 111.728431][ T8667] [U]  [ 111.765590][ T40] audit: type=1400 audit(1767541195.925:563): avc: denied { connect } for pid=8670 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.948069][ T8672] overlayfs: statfs failed on './file0' [ 112.190239][ T8692] could not open pipe file descriptor [ 112.193269][ T8692] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.234107][ T40] audit: type=1400 audit(1767541196.384:564): avc: denied { bind } for pid=8694 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.284549][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.703'. [ 112.331944][ T8695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.633967][ T40] audit: type=1400 audit(1767541196.776:565): avc: denied { read } for pid=8717 comm="syz.5.708" name="file0" dev="9p" ino=71827833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.730339][ T6193] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 112.884495][ T6193] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 112.887288][ T6193] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.891766][ T6193] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.896889][ T6193] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.901479][ T6193] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.905920][ T6193] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.909716][ T6193] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.924947][ T6193] usb 11-1: config 0 descriptor?? [ 112.927146][ T8710] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 113.142717][ T6193] hid_parser_main: 5 callbacks suppressed [ 113.142730][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.147060][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.149820][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.152301][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.154720][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.157114][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.159912][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.162389][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.164853][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.167225][ T6193] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.179514][ T6193] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 113.305531][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.712'. [ 113.360150][ T8731] hsr_slave_0: left promiscuous mode [ 113.367231][ T8731] hsr_slave_1: left promiscuous mode [ 113.887473][ T8737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.714'. [ 113.890786][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.714'. [ 113.900504][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.714'. [ 113.988682][ T29] usb 11-1: USB disconnect, device number 5 [ 114.080635][ T8744] exFAT-fs (nbd5): unable to read boot sector [ 114.082876][ T8744] exFAT-fs (nbd5): failed to read boot sector [ 114.084900][ T8744] exFAT-fs (nbd5): failed to recognize exfat type [ 114.313379][ T29] delete_channel: no stack [ 114.381504][ T8765] netlink: 45 bytes leftover after parsing attributes in process `syz.5.724'. [ 114.648419][ T75] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 114.660631][ T8778] sg_write: process 524 (syz.5.728) changed security contexts after opening file descriptor, this is not allowed. [ 114.801584][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 114.801594][ T40] audit: type=1400 audit(1767541198.912:568): avc: denied { read } for pid=8781 comm="syz.5.730" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.813109][ T75] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.816007][ T75] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.819360][ T75] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.822867][ T75] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 114.826539][ T75] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 114.834242][ T75] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.837287][ T75] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.839967][ T75] usb 11-1: Product: syz [ 114.841688][ T75] usb 11-1: Manufacturer: syz [ 114.844321][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.848180][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.852607][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.856960][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.860888][ T75] cdc_wdm 11-1:1.0: skipping garbage [ 114.863105][ T75] cdc_wdm 11-1:1.0: skipping garbage [ 114.867009][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.870301][ T75] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 114.872929][ T75] cdc_wdm 11-1:1.0: Unknown control protocol [ 114.876693][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.880979][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.884506][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.887743][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.890942][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.894429][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.897805][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.900915][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.904372][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.907503][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.910757][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.914165][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.917382][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.920575][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.923874][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.927052][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.930300][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.933404][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.937069][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.940332][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.943700][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.947177][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.950487][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.953694][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.957062][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.960289][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.963555][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 114.966898][ T8782] nvme_fabrics: unknown parameter or missing value 'ELF' in ctrl creation request [ 115.065267][ T29] usb 11-1: USB disconnect, device number 6 [ 115.524961][ T29] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 115.678514][ T29] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.681420][ T29] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.684870][ T29] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.687906][ T29] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 115.692685][ T29] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.695878][ T29] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.698640][ T29] usb 11-1: Product: syz [ 115.700045][ T29] usb 11-1: Manufacturer: ⛵즋៹憌횑쬝拉뇃襞몡ペ겟纸콗㾓⟷⾿녗㽘㮯炖ש槬쨇✢랡Ⓛᜲ阐淆旡河吋덈凭德캙翟뱰ๅᠷ揓罰篜帮℉擷蟌ᄎ㌊럈黇칸瀵氵廊㏁⌜딌䘥僰靹좆敐㌥霖ꟴؘ⤥㾨࣌鑁隊歓펇款뛘纰荙漧Ố둫涷ߏ␸饑킏㵛쵟쟄韨觓߅꺢叠ⷮﺚ㠰ꅆ㖛賏३㑷겼 [ 115.718673][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 115.720450][ T29] cdc_wdm 11-1:1.0: skipping garbage [ 115.726058][ T29] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 115.731584][ T29] cdc_wdm 11-1:1.0: Unknown control protocol [ 115.941298][ T29] usb 11-1: USB disconnect, device number 7 [ 116.081369][ T8789] net_ratelimit: 6474 callbacks suppressed [ 116.081386][ T8789] openvswitch: netlink: Key type 5152 is out of range max 32 [ 116.485416][ T40] audit: type=1400 audit(1767541200.562:569): avc: denied { watch watch_reads } for pid=8796 comm="syz.6.735" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.518310][ T8797] x_tables: duplicate underflow at hook 2 [ 116.614791][ T8803] NILFS (nbd6): device size too small [ 116.632002][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.6.737'. [ 116.737080][ T40] audit: type=1400 audit(1767541200.808:570): avc: denied { getopt } for pid=8810 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.743936][ T8813] ip6gre1: entered promiscuous mode [ 116.747120][ T8813] ip6gre1: entered allmulticast mode [ 116.754073][ T8813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.754589][ T7483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.760322][ T40] audit: type=1400 audit(1767541200.828:571): avc: denied { block_suspend } for pid=8810 comm="syz.5.739" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.768463][ T7483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.776662][ T75] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.912869][ T8819] netlink: 'syz.5.741': attribute type 1 has an invalid length. [ 116.924066][ T8819] bond2: entered promiscuous mode [ 116.926087][ T8819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.953012][ T8819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.956251][ T8819] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 116.962157][ T8819] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 116.967086][ T8819] bond2: (slave ip6gre2): making interface the new active one [ 116.970934][ T8819] ip6gre2: entered promiscuous mode [ 116.974507][ T8819] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 117.020149][ T75] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.068433][ T8825] macsec1: entered promiscuous mode [ 117.070146][ T8825] macsec1: entered allmulticast mode [ 117.150110][ T8829] ------------[ cut here ]------------ [ 117.152639][ T8829] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#1: syz.5.744/8829 [ 117.157118][ T8829] Modules linked in: [ 117.159295][ T8829] CPU: 1 UID: 0 PID: 8829 Comm: syz.5.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.163903][ T8829] Tainted: [L]=SOFTLOCKUP [ 117.163912][ T8829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.163924][ T8829] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 117.163949][ T8829] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d e9 4b 56 0e 00 75 0b c6 05 e0 4b 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 117.163966][ T8829] RSP: 0018:ffffc9000322f7c8 EFLAGS: 00010246 [ 117.163982][ T8829] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.163993][ T8829] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 117.164004][ T8829] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 117.164014][ T8829] R10: 0000000000000016 R11: ffff888026b32ff0 R12: 0000000000040cc0 [ 117.164026][ T8829] R13: 1ffff92000645f0f R14: ffffffff9ac42ac4 R15: 0000000000000016 [ 117.164038][ T8829] FS: 00007fd3f32036c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 117.164072][ T8829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.164086][ T8829] CR2: 00007fd3f2373460 CR3: 00000000341fd000 CR4: 0000000000352ef0 [ 117.164098][ T8829] Call Trace: [ 117.164105][ T8829] [ 117.164112][ T8829] ? is_bpf_text_address+0x94/0x1a0 [ 117.164134][ T8829] ? kernel_text_address+0x8d/0x100 [ 117.164158][ T8829] ? __kernel_text_address+0xd/0x40 [ 117.164180][ T8829] ? unwind_get_return_address+0x59/0xa0 [ 117.164206][ T8829] ? arch_stack_walk+0xa6/0x100 [ 117.164233][ T8829] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.164255][ T8829] ? stack_trace_save+0x8e/0xc0 [ 117.164274][ T8829] ? __pfx_stack_trace_save+0x10/0x10 [ 117.164294][ T8829] ? __lock_acquire+0x436/0x2890 [ 117.164320][ T8829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.164342][ T8829] ? policy_nodemask+0xea/0x4e0 [ 117.164378][ T8829] alloc_pages_mpol+0x1fb/0x550 [ 117.164403][ T8829] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.164428][ T8829] ? find_held_lock+0x2b/0x80 [ 117.164458][ T8829] ___kmalloc_large_node+0x10c/0x150 [ 117.164492][ T8829] __kmalloc_large_node_noprof+0x1c/0x70 [ 117.164520][ T8829] __kmalloc_noprof.cold+0xc/0x62 [ 117.164546][ T8829] ? drm_syncobj_array_find+0x35/0x3c0 [ 117.164576][ T8829] ? drm_syncobj_array_find+0x35/0x3c0 [ 117.164601][ T8829] drm_syncobj_array_find+0x35/0x3c0 [ 117.164631][ T8829] drm_syncobj_signal_ioctl+0x20c/0x450 [ 117.164660][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.164688][ T8829] ? drm_dev_exit+0x41/0x60 [ 117.164717][ T8829] drm_ioctl_kernel+0x1f4/0x3e0 [ 117.164741][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.164770][ T8829] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 117.164802][ T8829] drm_ioctl+0x5c9/0xc30 [ 117.164829][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.164857][ T8829] ? __pfx_drm_ioctl+0x10/0x10 [ 117.164891][ T8829] ? selinux_file_ioctl+0x180/0x270 [ 117.164914][ T8829] ? selinux_file_ioctl+0xb4/0x270 [ 117.164938][ T8829] ? __pfx_drm_ioctl+0x10/0x10 [ 117.164963][ T8829] __x64_sys_ioctl+0x18e/0x210 [ 117.164985][ T8829] do_syscall_64+0xcd/0xf80 [ 117.165020][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.165037][ T8829] RIP: 0033:0x7fd3f238f7c9 [ 117.165051][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.165068][ T8829] RSP: 002b:00007fd3f3203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.165085][ T8829] RAX: ffffffffffffffda RBX: 00007fd3f25e5fa0 RCX: 00007fd3f238f7c9 [ 117.165097][ T8829] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 117.165108][ T8829] RBP: 00007fd3f2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.165119][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.165130][ T8829] R13: 00007fd3f25e6038 R14: 00007fd3f25e5fa0 R15: 00007fff1b213d28 [ 117.165154][ T8829] [ 117.165162][ T8829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.165176][ T8829] CPU: 1 UID: 0 PID: 8829 Comm: syz.5.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.165200][ T8829] Tainted: [L]=SOFTLOCKUP [ 117.165206][ T8829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.165217][ T8829] Call Trace: [ 117.165222][ T8829] [ 117.165228][ T8829] dump_stack_lvl+0x3d/0x1f0 [ 117.165250][ T8829] vpanic+0x640/0x6f0 [ 117.165269][ T8829] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 117.165287][ T8829] panic+0xca/0xd0 [ 117.165305][ T8829] ? __pfx_panic+0x10/0x10 [ 117.165330][ T8829] ? check_panic_on_warn+0x1f/0xb0 [ 117.165351][ T8829] check_panic_on_warn+0xab/0xb0 [ 117.165372][ T8829] __warn+0x108/0x3c0 [ 117.165393][ T8829] __report_bug+0x2a0/0x520 [ 117.165410][ T8829] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 117.165430][ T8829] ? __pfx___report_bug+0x10/0x10 [ 117.165452][ T8829] ? __lock_acquire+0x436/0x2890 [ 117.165484][ T8829] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 117.165503][ T8829] report_bug+0xb2/0x220 [ 117.165521][ T8829] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 117.165539][ T8829] handle_bug+0x127/0x260 [ 117.165565][ T8829] exc_invalid_op+0x17/0x50 [ 117.165590][ T8829] asm_exc_invalid_op+0x1a/0x20 [ 117.165606][ T8829] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 117.165625][ T8829] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d e9 4b 56 0e 00 75 0b c6 05 e0 4b 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 117.165641][ T8829] RSP: 0018:ffffc9000322f7c8 EFLAGS: 00010246 [ 117.165655][ T8829] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.165665][ T8829] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 117.165675][ T8829] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 117.165686][ T8829] R10: 0000000000000016 R11: ffff888026b32ff0 R12: 0000000000040cc0 [ 117.165697][ T8829] R13: 1ffff92000645f0f R14: ffffffff9ac42ac4 R15: 0000000000000016 [ 117.165720][ T8829] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.165740][ T8829] ? is_bpf_text_address+0x94/0x1a0 [ 117.165761][ T8829] ? kernel_text_address+0x8d/0x100 [ 117.165785][ T8829] ? __kernel_text_address+0xd/0x40 [ 117.165807][ T8829] ? unwind_get_return_address+0x59/0xa0 [ 117.165832][ T8829] ? arch_stack_walk+0xa6/0x100 [ 117.165860][ T8829] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.165882][ T8829] ? stack_trace_save+0x8e/0xc0 [ 117.165901][ T8829] ? __pfx_stack_trace_save+0x10/0x10 [ 117.165925][ T8829] ? __lock_acquire+0x436/0x2890 [ 117.165952][ T8829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.165976][ T8829] ? policy_nodemask+0xea/0x4e0 [ 117.166004][ T8829] alloc_pages_mpol+0x1fb/0x550 [ 117.166030][ T8829] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.166055][ T8829] ? find_held_lock+0x2b/0x80 [ 117.166085][ T8829] ___kmalloc_large_node+0x10c/0x150 [ 117.166114][ T8829] __kmalloc_large_node_noprof+0x1c/0x70 [ 117.166143][ T8829] __kmalloc_noprof.cold+0xc/0x62 [ 117.166171][ T8829] ? drm_syncobj_array_find+0x35/0x3c0 [ 117.166204][ T8829] ? drm_syncobj_array_find+0x35/0x3c0 [ 117.166263][ T8829] drm_syncobj_array_find+0x35/0x3c0 [ 117.166295][ T8829] drm_syncobj_signal_ioctl+0x20c/0x450 [ 117.166326][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.166356][ T8829] ? drm_dev_exit+0x41/0x60 [ 117.166388][ T8829] drm_ioctl_kernel+0x1f4/0x3e0 [ 117.166413][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.166443][ T8829] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 117.166482][ T8829] drm_ioctl+0x5c9/0xc30 [ 117.166512][ T8829] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 117.166542][ T8829] ? __pfx_drm_ioctl+0x10/0x10 [ 117.166578][ T8829] ? selinux_file_ioctl+0x180/0x270 [ 117.166601][ T8829] ? selinux_file_ioctl+0xb4/0x270 [ 117.166626][ T8829] ? __pfx_drm_ioctl+0x10/0x10 [ 117.166652][ T8829] __x64_sys_ioctl+0x18e/0x210 [ 117.166673][ T8829] do_syscall_64+0xcd/0xf80 [ 117.166694][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.166709][ T8829] RIP: 0033:0x7fd3f238f7c9 [ 117.166721][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.166735][ T8829] RSP: 002b:00007fd3f3203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.166750][ T8829] RAX: ffffffffffffffda RBX: 00007fd3f25e5fa0 RCX: 00007fd3f238f7c9 [ 117.166760][ T8829] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 117.166770][ T8829] RBP: 00007fd3f2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.166780][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.166789][ T8829] R13: 00007fd3f25e6038 R14: 00007fd3f25e5fa0 R15: 00007fff1b213d28 [ 117.166810][ T8829] [ 117.167537][ T8829] Kernel Offset: disabled