last executing test programs: 42.856708489s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 33.879738767s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 26.259613019s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 18.788819793s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 10.58650202s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 3.971161584s ago: executing program 2 (id=1841): syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x128, 0x178, 0x290, 0x22b, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x108, 0x128, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x8, 0x2, 0x1f5c, 0x8472, 0x9, 0x1, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xfff7, 0xe, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x26a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 3.970661081s ago: executing program 2 (id=1842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r0, r2, 0x25, 0x4, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x9}}, 0x30) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0xb, 0x8, 0x101, 0x1, 0x8, 0x81, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x6, 0x1, 0xeb]}) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r8, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "711fbe", 0xf98, 0x2f, 0x1, @loopback={0x12}, @mcast2, {[@dstopts={0x87, 0x0, '\x00', [@pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0xffff}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x8, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2a, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}, 0xfce) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 3.969499018s ago: executing program 2 (id=1843): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f, 0x89}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @empty, 0x20, 0x14}}) listen(r2, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="05001d00030000000500a2000800000005001c0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040001) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x0, @local, 0x4}}}, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) sendmmsg$sock(r0, &(0x7f0000000b00)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="563c8538dc437a9ef6c645cad7776da1cb81b2760d97a5aa15ec50047a20551b1291140c6bd052611e1bdd2b684ce30c62bf9af54e8949815b9ad333a699c65a17259554f27c730ce4bf2e853738724a605ea29549b4c88b7cf97e82fdf00435b9a80705649ab19dbd2f55193da2ae2448da2899d9508e9a7595b46b772d1b58eb60bcf5525b391a69fe3ce990cfd8dd7d41f64a1b0a32e1bad2c3be2c3120502b639bfa0332a75edc83936b64a54874a28aa46223648e8f94be3c09b489356077b14529", 0xc4}, {&(0x7f0000000300)="16eaafda7ac12e05d9790024cf7c431669e89a4c9edea68ac6d126ab58d6cc1e68a1b7af6d93bba55e6b9e5a2786696e390ce4b2afa771cf8f5a1fb81a0e5649bbd1e22b0bd34aade493fdf2fc4563342a7f63917a1351779a9ebd5a555683cf66e0a2ba8cefa76c3102098e084149d7b5c9631ddcea6eb77a254e377785c726af5cd695ba1756dec2a248dce830bf7b00a037febd", 0x95}, {&(0x7f00000003c0)="a861ee50309194a9caf913eaca77674b1c68f0fb68c3e21c585c7abd7ec783c143aacf3be12f6cb617cc5bbd71c06d821b4dec630d59864108728648d39924", 0x3f}, {&(0x7f0000000400)="db3423e605186d2f45612b29546223ec02210547bb204f944c442eea6e96500a784b9ba8ba08", 0x26}, {&(0x7f0000000440)="2c44c10b4c2c440d435560f8d63216f4dd0128ade6a865335ce6598fa0cf72e881d6cafb881215431cddf56e8a7cc9b80d653446d596ccc2013332182d47d8d3fc70e612d4de6dc4397712ef9acae834b817d2ab10da5a2715c84583eb77dea18e9460a9bf4293068aa962bf127f92784affbcbb444a4e16b24a37f03fefbc9a2410403a5bf00e02bcdec0afdd021134a4eea0d01a34", 0x96}, {&(0x7f0000000500)="b92baa5d71c7e501d635140a0a2a14645ec7363fbfb64a1864ebcd835eae7cfd663916433b7439a526caab8f240344c58a6a78ed12b29f8e630b87c79941e240568acd9225c7a00c800c0b6f0fecc8717ed8ae919467aec85e1b2e891cccf408869ff859de7ee96681d19992df2a331125ec37557d664202a471dc64378d010295", 0x81}], 0x6}}, {{&(0x7f0000000640)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)="78f18c715aa235a7ae08eb4cb476b03d1f109dcc67005d24710b7dbb782171242498c1a8c10515ddb0fa1c724b8fb3edd153a7068579c2ae7945d8858ada7ff7920b5cecd3122a406d3aeb7091693e5f60758028b33641e6deba6119afe8a93d38b3a5294bd36e49cb8210cab510c61cca34096aafe53c4078384eb4ae32", 0x7e}, {&(0x7f0000000740)="1c5fd5dcd558601528acafa8c8846abbe1979c1f6171d6070c57fe86673c843fb011cc0d9e92158f948225b4733abc4a52902849e9485aa6b9e94a6ae11dcb711505cd325dc65eb3e84bb4d1fd3df8021281798ba751783fc6674bf20dc75dcc69bc51b5583c672d0492dc3cae65144092a24f22d923b4c211f3f8b124f10e5c1bf1a185c6792577927f8fb1401e7f647e09faa1a00361d1036a0e39b798b585db30ec60b4448c0ee0a1cdc6f06d0ccddfa092365832599ebc4648b658d2084dca2ada1c7a57", 0xc6}, {&(0x7f0000000840)="2c80eabe37655021ac2b5fbc94000a68c3fe85d4851b54ce00fdf26c44a71b2490f8e672eadd70", 0x27}, {&(0x7f0000000900)="021ecfdf30dd56ee377a4a3e2fbacfd353e39d54132449280fd548bb6a4907d7b37e63ecc0bfe7ef42af522dcc7bf4162e98ac7192c250a14d9c1a86bb2fef0088a8c2a256caef7333b62f187cf93093397e8e36fb77d41e499262d6f61b737694175e9d93c8f256dee6629bc03952402fd5c0b5640c49c5f96e0b2e96e2acf7c6effd6332d993b7df8173f07eb97fb501c26887c049d98d399465479829ae176926d3f93182018f7c79b19c57130f9e615068627dff8d87db2dc01e557e350e6b4a1ac55da77380f7f90193f804341ef9795ad7cb7b207ed6b85b68b8e7dd6a0b6e58c495d7b2906a453caf57", 0xed}, {&(0x7f0000000880)="cd95634208f6", 0x6}, {&(0x7f0000000a00)="3512a52cf19b67fe5090b6b398e0081957970e7532f9a2f317fc80da4c50a17eea681b91d6c1544d15921799ebaad3038eccdac6c635daeadebed027ac2f7858810eb3a34ca3a74d707e8a2cf4dc008af6da523a60593ad3f7f28d246694a584f9d3fa4c8564df7876be066f492b82513cb729f3", 0x74}], 0x6}}], 0x2, 0x24004011) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d00)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x6, 0x0, 0x400, 0xc08}}, 0x11c) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_INPUT2(r8, &(0x7f0000000200)={0xc, {0x3, "2f919a"}}, 0x9) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x4000, 0x2) mmap(&(0x7f0000467000/0xe000)=nil, 0xe000, 0x27ffffa, 0x4011, r8, 0x8a90b000) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x105, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x4745504a}) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x138}}, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0xb8) 3.190582045s ago: executing program 1 (id=1856): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10002, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x1a0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r3, 0x8921, &(0x7f0000000040)="a43a") ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)=0x401) ioctl$USBDEVFS_RESET(r2, 0x5514) 3.071087481s ago: executing program 1 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000500000d"], 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) 3.069878139s ago: executing program 2 (id=1858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000019000100000a56b018d36f122d"], 0x34}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x9, 0x7, 0x401, 0xb}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000019000100000a56b018d36f122d"], 0x34}}, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) dup2(r2, r2) (async) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x9, 0x7, 0x401, 0xb}) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) 2.989820389s ago: executing program 1 (id=1859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001"], 0x34}}, 0x4) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006480)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000100)="c40888c66370c101e20e9cbe2c72da88b0835ad475b798e326851409678c17dad6805398ddc7b9b1eefbf69f56a04a4a5c3674b79ee6fc7fcfb96e2632b56a5098b6db127899581d38b8224d390015cade9c7c5ca553ee3dc7ddd55c123cda474d15e25376e6cba9e096757d3f6f4e85941e8d6be0bce07f9a04e27b4bd61413e409953d9791e7eb1e1238c132f1347f73b4e594b58d4e57691a5e59b1dd4eeb751be90e0779b5a5d9af3e8fad087a5e8fe9b5380ed4639af6c080b0535208d26c7d34fa448a3c44864e4ed6e8b4f754c2fef67c63f29d7cdd", 0xd9}], 0x2, 0x0, 0x0, 0x20000800}], 0x1, 0x24064011) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002500)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000026c0)={0xffff682b, 0x4, {}, {0xee00}, 0xff, 0x9}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002780)={0x5, 0x8a4, {}, {0xee00}, 0x2, 0x1}) (async) r6 = getegid() stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async) fstat(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = getgid() (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r12, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresuid(&(0x7f0000002d00)=0x0, &(0x7f0000002d40), &(0x7f0000002d80)) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) syz_fuse_handle_req(r2, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004f40)={&(0x7f0000002380)={0x50, 0x0, 0x101, {0x7, 0x2b, 0x95, 0x800, 0x9, 0x5, 0x0, 0xbc, 0x0, 0x0, 0x1, 0xfffffff7}}, &(0x7f0000002400)={0x18, 0x0, 0x3, {0x1}}, &(0x7f0000002440)={0x18, 0x0, 0x100000000, {0x8}}, &(0x7f0000002480)={0x18, 0xfffffffffffffff5, 0xffff, {0xa}}, &(0x7f00000024c0)={0x18, 0x0, 0xd6, {0x7c}}, &(0x7f0000002540)={0x28, 0x0, 0x2, {{0x2, 0x6, 0x0, r3}}}, &(0x7f0000002580)={0x60, 0x0, 0x4, {{0x9, 0xf16, 0x401, 0xffffffffffff86ad, 0x3, 0x3, 0x0, 0x10000}}}, &(0x7f0000002600)={0x18, 0x0, 0x7fffffffffffffff, {0x5}}, &(0x7f0000002640)={0x1d, 0x0, 0xede, {'.(%*^#&#:,,+\x00'}}, &(0x7f0000002680)={0x20, 0xfffffffffffffff5, 0xa2a, {0x0, 0x4}}, &(0x7f0000002700)={0x78, 0x0, 0xffffffffffffffff, {0xade4, 0x5, 0x0, {0x0, 0x2, 0x6, 0x4, 0x8023, 0x9e, 0x1cfd3b39, 0x1000, 0x4, 0x8000, 0xffffff1f, r4, 0xee00, 0x800, 0x2}}}, &(0x7f00000027c0)={0x90, 0xfffffffffffffffe, 0x6e8, {0x1, 0x2, 0x7fffffff, 0x4, 0x8, 0x6, {0x4, 0x40, 0x4, 0xff, 0x5f, 0xd69, 0x6, 0x10, 0x3, 0x6000, 0x3f52e810, r5, r6, 0x100, 0xb8}}}, &(0x7f0000002880)={0x50, 0x0, 0x6, [{0x3, 0x9, 0xc, 0x6939, '@\xf7!-]++&^}-:'}, {0x0, 0x7, 0x0, 0x4}]}, &(0x7f0000008280)=ANY=[@ANYBLOB="4801100000000000000000000000000003000000000000000200000000000000010400000000000050ffffffffffffff00020000030200000200000000000000fdffffffffffffffd0710000000000000800000000000000050000000000000009000000000000000103000005000000000400000020000002000000e6715c643ab7c12b2604908a4560cfbefa14a0931c463455c06148dd3bc81fc47525553d44f425bf", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2464805d210d00000000000004000000000000000300000000000000000000000400000006000000000000000100000000000000cd06000000000000cafaffffffffffff080000000300000001000000000000000a000000000000000100000000000000ffffff7f0000000004000000000000004eef00000000000004000000060000000800000000a0000005000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0200000006000000000000000400000000000000080000000000000003000000040000002a7b7d0000000000"], &(0x7f0000002c00)={0xa0, 0xfffffffffffffff5, 0x1, {{0x6, 0x0, 0x8, 0x9, 0xc, 0x40, {0x3, 0x8, 0x8000000000000000, 0x8, 0x5, 0xffffffffffff947e, 0x5, 0x5, 0x3, 0x4000, 0x10, r12, 0xffffffffffffffff, 0x8, 0xffff7a72}}, {0x0, 0x2}}}, &(0x7f0000002cc0)={0x20, 0x0, 0x84e, {0x5, 0x0, 0x8, 0x5f82}}, &(0x7f0000004e00)={0x130, 0xfffffffffffffffe, 0x6, {0x1, 0x6, 0x0, '\x00', {0x2000, 0x7, 0x7, 0x7, r13, r14, 0x8000, '\x00', 0x7fffffffffffffff, 0x2, 0x8, 0x0, {0x6, 0x100}, {0x1ff, 0x40}, {0x2, 0x8}, {0x1, 0x6}, 0x2, 0x200, 0x2, 0x6}}}}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) (async) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.980062599s ago: executing program 0 (id=555): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x4, 0x1, 0x0, 0x0, [{{r1}, 0x2a}]}) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0xd, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@end, @end, @ssrr={0x89, 0xf, 0xa2, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x7, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x6, 0x1, 0x20, @loopback, @mcast1, 0x20, 0x1, 0xab}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@initdev, @empty, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@private, @multicast1, 0x0}, &(0x7f0000000680)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x9, 0x90, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@ssrr={0x89, 0x13, 0xf2, [@broadcast, @rand_addr=0x64010100, @broadcast, @remote]}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xe, "33956bc8d14de0e2c61b34c2"}, {0x7, 0x7, "0c948ad2fc"}, {0x5, 0xa, "6f70b475ce8ab994"}, {0x2, 0x5, "3408d0"}, {0x7, 0x7, "29d5e00df6"}]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x20, 0x7801, 0x9, 0x2, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x7, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@rr={0x7, 0x1b, 0x49, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xde, [@loopback]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x10, "4d8c86a5576eca45defe68ed7d89"}, {0x1, 0x12, "fd8141aaef2e7ce39c5994cd0ca6cb99"}]}, @rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @multicast1, @multicast1, @local, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x49c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3674}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x1, 0xfb, 0x1}, {0x7, 0x81}, {0xa8f, 0x3, 0x2, 0x800}, {0x26e, 0xe, 0x5, 0x3}, {0x7, 0x9e, 0x0, 0x400}, {0x8, 0x5, 0xfb, 0x2}, {0x7f, 0x9f, 0x7, 0xcf}]}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) listen(r1, 0x0) (async) recvmsg(r1, &(0x7f0000002100)={&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000fc0)=""/171, 0xab}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}], 0x3}, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002140)=0x0) process_vm_readv(r19, &(0x7f0000002200)=[{&(0x7f0000002180)=""/20, 0x14}, {&(0x7f00000021c0)=""/10, 0xa}], 0x2, &(0x7f0000002380)=[{&(0x7f0000002240)=""/193, 0xc1}, {&(0x7f0000002340)=""/38, 0x26}], 0x2, 0x0) r20 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x0, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "05beccb7b1"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x1, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xa7d8, 0xa, 0x4, 0x3, 0x9}, @mdlm_detail={0xab, 0x24, 0x13, 0x2, "3be48d04a9f7725fcfc31569f33581e075e7c42dabb97f3d71f862931cedba499391be427409137bf42aab5d96afe3a850f76827b92e2dc6ffe91891f44618c40eef743679025e91c9393c541fbab53554b7d093e4e8ef3108f7fea48b1567c23bc074bc802429232a6bf97aa690a3a3383bbd08ed42c03112e23087dfc981293f05be0ea90611daff483ac55f7d437b5d50e3672f6acb45cdf0a79261b2bd26be4771951c38d9"}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x10, 0xf, 0x5, 0x8000, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfc, 0x1, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x78}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0xff, 0x3}, 0x6e, &(0x7f0000002540)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "68ef9b9e90e5f98d58bd4730bdfaf7c1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x80, 0xfff4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x5, 0x80, 0x0, 0x80}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7ff, 0xff00, 0x72, [0x30, 0xffff00, 0xc0, 0xc1b0, 0x1fe00f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "033df0dddd974c07e00d05b607fdd763"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x4, 0x2}]}, 0x2, [{0x54, &(0x7f00000025c0)=@string={0x54, 0x3, "2dbfb218605a5ecb54cb18a71b6a5c6a1ac3f9142a4a0f4d1485c3b03970cd569c9e074eca951c2a0669b9ade9f9df84c676a28baeaa3d4ef0f9d27ff7d5392b63674fd8078ff2f1f898a089c08b48918c79"}}, {0x48, &(0x7f0000002640)=@string={0x48, 0x3, "50c29e8024752c8568f34e419cde07ce7905aa68721be9c60e73790742fc0649f8c23ec2bdf0f1e5539caaf5953fffd2a5973b5e1c6ce921015912854bc4a90e90496ae2fe7a"}}]}) syz_usb_disconnect(r20) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002700)={0x0, 0xd, 0x1, 0x7, 0x742, 0xadf3, 0x100, 0x6, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x10001, 0xfff, 0x1ff, 0x3, 0x7}}, &(0x7f00000027c0)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002800)={r21, 0x1, 0x3, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x2, 0xb}, {0x0, 0xa}, {0xd, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x7fff, 0x59, 0x50, 0x4}, {0x2, 0x9, 0x3, 0x4}, {0x3, 0xb, 0x6, 0x4}, {0x1, 0x8, 0x5, 0x5}, {0x1, 0x80, 0x3, 0x401}, {0x7ff, 0x9, 0x8, 0x200}, {0x2, 0x3, 0x0, 0xfffffffe}, {0x7, 0xc0, 0x7f}, {0x0, 0x3, 0x9, 0xb3b3}, {0x6, 0x8, 0x2, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff7, 0xa}}, @TCA_BPF_FD={0x8}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 2.979894563s ago: executing program 1 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x3c8) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8}) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0xcd1d, 0x10100, 0xfffffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9a}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xbda}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8001) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000002001c0012800b00010062726964676500000c0002807a435c52d0fe08001c0081000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000300)) 918.421294ms ago: executing program 2 (id=1861): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$qrtrtun(r2, &(0x7f0000000100)="4cd92a7c4a8e54f9", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0x8}, 0xe) listen(r0, 0x9) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_l2cap(r6, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x40400) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 918.162181ms ago: executing program 1 (id=1862): syz_open_dev$dri(0x0, 0x2, 0x40502) r0 = socket$inet6(0xa, 0xa, 0xcb) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000482b0020010000000000000000000000000002fe8000000000000000000000000000aa8704000000"], 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, {0xa, 0x4e20, 0x7, @loopback, 0xffffff6d}, 0xffffffffffffffff, {[0x7ff, 0x26, 0xd96, 0x6, 0xc, 0xfffffff8, 0x1, 0x719]}}, 0x5c) 861.268066ms ago: executing program 1 (id=1864): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x14, r2, 0x200}, 0x14}}, 0x400c0c0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="0103fe0f3f"], 0x38}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000200)="3e0f381d860040bad004b000ee2e0f550136660f383df73e0f011b2e660f383b229a56c12a00b8f1000f00d89f640f06", 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="030100"], 0xc8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 591.142096ms ago: executing program 2 (id=1865): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0x6}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) write$bt_hci(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0xd) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x0, @private}, 0x4}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x2, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x6, 0x80}}]}]}}}}}}}, 0x0) 280.249008ms ago: executing program 3 (id=1869): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 199.041636ms ago: executing program 3 (id=1870): syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x2a0a02) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x800000) 198.623086ms ago: executing program 3 (id=1871): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xd85, 0x40003}) close_range(r0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_file_write_iter\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) 91.311841ms ago: executing program 3 (id=1872): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) r4 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) 273.543µs ago: executing program 3 (id=1873): r0 = socket(0x2b, 0x80000, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010800000002000000000a0000000c000080080009"], 0x20}}, 0x0) 0s ago: executing program 3 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) read$FUSE(r2, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) (async) read$FUSE(r2, 0x0, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async) 0s ago: executing program 1 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): nregistering): (slave bridge_slave_1): Releasing backup interface [ 138.912217][T10688] bond0 (unregistering): Released all slaves [ 138.923518][T10691] vxcan1 speed is unknown, defaulting to 1000 [ 139.104285][T10691] chnl_net:caif_netlink_parms(): no params data found [ 139.115225][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 139.118305][T10721] erspan0: default FDB implementation only supports local addresses [ 139.156897][ T1219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.177438][ T40] audit: type=1400 audit(1750002624.259:850): avc: denied { ioctl } for pid=10710 comm="syz.1.1220" path="/372/file0/blkio.throttle.io_service_bytes_recursive" dev="9p" ino=38142137 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.219546][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.221819][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.231191][T10691] bridge_slave_0: entered allmulticast mode [ 139.235609][T10691] bridge_slave_0: entered promiscuous mode [ 139.243076][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.245323][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.247612][T10691] bridge_slave_1: entered allmulticast mode [ 139.250212][T10691] bridge_slave_1: entered promiscuous mode [ 139.263195][ T1219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.297321][ T40] audit: type=1400 audit(1750002624.379:851): avc: denied { map } for pid=10728 comm="syz.3.1225" path="socket:[43107]" dev="sockfs" ino=43107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.316189][T10691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.321136][T10691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.351826][ T40] audit: type=1400 audit(1750002624.429:852): avc: denied { setopt } for pid=10732 comm="syz.3.1226" lport=35484 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 139.354210][ T1219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.359968][ T40] audit: type=1400 audit(1750002624.429:853): avc: denied { getopt } for pid=10732 comm="syz.3.1226" lport=35484 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 139.386761][T10691] team0: Port device team_slave_0 added [ 139.391664][T10691] team0: Port device team_slave_1 added [ 139.425178][T10691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.427435][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.435449][T10691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.439594][T10691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.441765][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.449718][T10691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.488735][T10738] usb usb8: usbfs: process 10738 (syz.3.1228) did not claim interface 0 before use [ 139.522456][T10691] hsr_slave_0: entered promiscuous mode [ 139.524938][T10691] hsr_slave_1: entered promiscuous mode [ 139.527033][T10691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.529373][T10691] Cannot create hsr debugfs directory [ 139.531380][ T1219] bridge_slave_1: left allmulticast mode [ 139.534476][ T1219] bridge_slave_1: left promiscuous mode [ 139.536346][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.542264][ T1219] bridge_slave_0: left allmulticast mode [ 139.546348][ T1219] bridge_slave_0: left promiscuous mode [ 139.548818][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.607473][T10698] overlayfs: statfs failed on './file0' [ 139.824715][ T1219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.829784][ T1219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.834874][ T1219] bond0 (unregistering): Released all slaves [ 140.017279][T10759] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 140.028937][T10759] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 140.031599][T10759] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.043322][ T40] audit: type=1326 audit(1750002625.119:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.2.1235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492818e929 code=0x7ffc0000 [ 140.052096][ T40] audit: type=1326 audit(1750002625.119:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.2.1235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492818e929 code=0x7ffc0000 [ 140.074355][ T40] audit: type=1326 audit(1750002625.129:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.2.1235" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f492818e929 code=0x7ffc0000 [ 140.081485][ T40] audit: type=1326 audit(1750002625.129:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.2.1235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492818e929 code=0x7ffc0000 [ 140.278553][T10768] veth1_macvtap: mtu greater than device maximum [ 140.301876][ T1219] hsr_slave_0: left promiscuous mode [ 140.319180][ T1219] hsr_slave_1: left promiscuous mode [ 140.328721][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.332105][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.345228][ T1219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.347718][ T1219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.380946][ T1219] veth1_macvtap: left promiscuous mode [ 140.382985][ T1219] veth0_macvtap: left promiscuous mode [ 140.384771][ T1219] veth1_vlan: left promiscuous mode [ 140.386481][ T1219] veth0_vlan: left promiscuous mode [ 140.816112][T10778] SET target dimension over the limit! [ 140.819840][T10778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10778 comm=syz.3.1238 [ 140.842579][ T5944] Bluetooth: hci3: command tx timeout [ 140.905489][T10787] sctp: [Deprecated]: syz.2.1240 (pid 10787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.905489][T10787] Use struct sctp_sack_info instead [ 141.072988][ T1219] team0 (unregistering): Port device team_slave_1 removed [ 141.147385][ T1219] team0 (unregistering): Port device team_slave_0 removed [ 141.813134][T10691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.842589][T10691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.855913][T10691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.873690][T10818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.875270][T10691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.930415][T10832] mac80211_hwsim hwsim4 wlan0: default FDB implementation only supports local addresses [ 141.981370][ T5944] Bluetooth: hci2: unexpected event for opcode 0x080e [ 141.988118][T10691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.996088][T10837] __nla_validate_parse: 4 callbacks suppressed [ 141.996098][T10837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1249'. [ 142.005943][T10691] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.012280][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.014635][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.021263][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.023876][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.032295][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 142.050971][T10691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.054447][T10691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.066988][T10841] tmpfs: Bad value for 'huge' [ 142.110792][T10851] netlink: 'syz.2.1256': attribute type 2 has an invalid length. [ 142.115989][T10851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1256'. [ 142.123842][T10851] nbd: must specify a device to reconfigure [ 142.170637][T10691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.194641][T10691] veth0_vlan: entered promiscuous mode [ 142.199644][T10691] veth1_vlan: entered promiscuous mode [ 142.216415][T10691] veth0_macvtap: entered promiscuous mode [ 142.220010][T10691] veth1_macvtap: entered promiscuous mode [ 142.232885][T10691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.236289][T10691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.237713][T10691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.237742][T10691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.237757][T10691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.237772][T10691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.310814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.313603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.321718][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.322702][T10884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26806 sclass=netlink_route_socket pid=10884 comm=syz.3.1264 [ 142.332285][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.349845][T10886] overlay: filesystem on ./bus not supported as upperdir [ 142.372829][T10893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.376228][T10893] IPv6: NLM_F_CREATE should be set when creating new route [ 142.378069][T10890] overlay: filesystem on ./bus is read-only [ 142.379242][T10893] lo: entered allmulticast mode [ 142.385504][T10893] tunl0: entered allmulticast mode [ 142.389284][T10893] gre0: entered allmulticast mode [ 142.396673][T10893] gretap0: entered allmulticast mode [ 142.411473][T10893] erspan0: entered allmulticast mode [ 142.415429][T10893] ip_vti0: entered allmulticast mode [ 142.417675][T10893] ip6_vti0: entered allmulticast mode [ 142.420270][T10893] sit0: entered allmulticast mode [ 142.424279][T10893] ip6tnl0: entered allmulticast mode [ 142.426770][T10893] ip6gre0: entered allmulticast mode [ 142.429432][T10893] syz_tun: entered allmulticast mode [ 142.432204][T10893] ip6gretap0: entered allmulticast mode [ 142.437993][T10893] bridge0: entered allmulticast mode [ 142.442268][T10893] team0: entered allmulticast mode [ 142.445581][T10893] team_slave_1: entered allmulticast mode [ 142.447923][T10893] dummy0: entered allmulticast mode [ 142.452410][T10893] nlmon0: entered allmulticast mode [ 142.455745][T10893] caif0: entered allmulticast mode [ 142.457493][T10893] batadv0: entered allmulticast mode [ 142.459234][T10893] vxcan0: entered allmulticast mode [ 142.460936][T10893] vxcan1: entered allmulticast mode [ 142.462817][T10893] veth0: entered allmulticast mode [ 142.464565][T10893] veth1: entered allmulticast mode [ 142.466293][T10893] wg0: entered allmulticast mode [ 142.467906][T10893] wg1: entered allmulticast mode [ 142.469539][T10893] wg2: entered allmulticast mode [ 142.471324][T10893] veth0_to_bridge: entered allmulticast mode [ 142.473509][T10893] veth1_to_bridge: entered allmulticast mode [ 142.475451][T10893] bridge_slave_1: entered allmulticast mode [ 142.477406][T10893] veth0_to_bond: entered allmulticast mode [ 142.479309][T10893] bond_slave_0: entered allmulticast mode [ 142.481397][T10893] veth1_to_bond: entered allmulticast mode [ 142.483403][T10893] bond_slave_1: entered allmulticast mode [ 142.485338][T10893] veth1_to_team: entered allmulticast mode [ 142.487365][T10893] veth0_to_batadv: entered allmulticast mode [ 142.489377][T10893] batadv_slave_0: entered allmulticast mode [ 142.491427][T10893] veth1_to_batadv: entered allmulticast mode [ 142.493781][T10893] batadv_slave_1: entered allmulticast mode [ 142.495771][T10893] xfrm0: entered allmulticast mode [ 142.497550][T10893] veth0_to_hsr: entered allmulticast mode [ 142.499488][T10893] hsr_slave_0: entered allmulticast mode [ 142.501371][T10893] veth1_to_hsr: entered allmulticast mode [ 142.503443][T10893] hsr_slave_1: entered allmulticast mode [ 142.505357][T10893] hsr0: entered allmulticast mode [ 142.507124][T10893] veth1_virt_wifi: entered allmulticast mode [ 142.509131][T10893] veth0_virt_wifi: entered allmulticast mode [ 142.511147][T10893] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 142.513827][T10893] veth1_vlan: entered allmulticast mode [ 142.515696][T10893] veth0_vlan: entered allmulticast mode [ 142.517591][T10893] vlan0: entered allmulticast mode [ 142.519336][T10893] vlan1: entered allmulticast mode [ 142.521080][T10893] macvlan0: entered allmulticast mode [ 142.523283][T10893] macvlan1: entered allmulticast mode [ 142.525139][T10893] ipvlan0: entered allmulticast mode [ 142.526883][T10893] ipvlan1: entered allmulticast mode [ 142.528581][T10893] veth1_macvtap: entered allmulticast mode [ 142.530466][T10893] veth0_macvtap: entered allmulticast mode [ 142.532406][T10893] macvtap0: entered allmulticast mode [ 142.534170][T10893] macsec0: entered allmulticast mode [ 142.535944][T10893] geneve0: entered allmulticast mode [ 142.537666][T10893] geneve1: entered allmulticast mode [ 142.539385][T10893] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 142.541748][T10893] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 142.544258][T10893] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 142.546722][T10893] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 142.549071][T10893] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 142.551290][T10893] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 142.553582][T10893] sit1: entered allmulticast mode [ 142.555223][T10893] ip6erspan0: entered allmulticast mode [ 142.557107][T10893] bridge1: entered allmulticast mode [ 142.558820][T10893] vxlan0: entered allmulticast mode [ 142.560498][T10893] bridge2: entered allmulticast mode [ 142.562207][T10893] bond1: entered allmulticast mode [ 142.564192][T10893] hsr1: entered allmulticast mode [ 142.565866][T10893] xfrm1: entered allmulticast mode [ 142.567641][T10893] geneve2: entered allmulticast mode [ 142.569947][T10893] bond2: entered allmulticast mode [ 142.571916][T10893] bond3: entered allmulticast mode [ 142.573666][T10893] erspan1: entered allmulticast mode [ 142.575736][T10893] ipip0: left promiscuous mode [ 142.577293][T10893] ipip0: entered allmulticast mode [ 142.579801][T10893] bond4: entered allmulticast mode [ 142.617905][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 142.617917][ T40] audit: type=1400 audit(1750002627.699:872): avc: denied { bind } for pid=10898 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.644472][ T40] audit: type=1400 audit(1750002627.729:873): avc: denied { bind } for pid=10900 comm="syz.3.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.668907][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1270'. [ 142.673242][T10901] vfat: Unknown parameter 'barrier' [ 142.673521][ T61] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 142.687120][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1271'. [ 142.823747][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 142.827140][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.830255][ T61] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.835203][ T61] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.838052][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.840625][ T61] usb 6-1: SerialNumber: syz [ 142.844530][T10895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.849215][ T61] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.989715][T10917] 9p: Unknown Cache mode or invalid value fs [ 143.084237][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.088305][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.093798][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.097574][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.102044][ T2220] usb 6-1: USB disconnect, device number 15 [ 143.108517][T10926] netlink: 'syz.3.1278': attribute type 11 has an invalid length. [ 143.238910][T10944] vxcan1 speed is unknown, defaulting to 1000 [ 143.276337][ T40] audit: type=1400 audit(1750002628.359:874): avc: denied { accept } for pid=10942 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.699754][ T40] audit: type=1326 audit(1750002628.779:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.1.1288" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43d6f8e929 code=0x0 [ 144.326302][ T40] audit: type=1400 audit(1750002629.409:876): avc: denied { map } for pid=10958 comm="syz.2.1289" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.353429][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.550797][T10965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1291'. [ 145.601240][T10970] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 145.682176][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.686062][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.688961][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.691880][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.695014][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.711029][T10981] netlink: 'syz.1.1295': attribute type 1 has an invalid length. [ 145.730937][T10978] vxcan1 speed is unknown, defaulting to 1000 [ 145.881869][T10978] chnl_net:caif_netlink_parms(): no params data found [ 145.922242][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 145.949709][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.952993][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.955924][T10978] bridge_slave_0: entered allmulticast mode [ 145.958592][T10978] bridge_slave_0: entered promiscuous mode [ 145.961837][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.965209][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.967546][T10978] bridge_slave_1: entered allmulticast mode [ 145.970264][T10978] bridge_slave_1: entered promiscuous mode [ 146.017784][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.026368][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.030768][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.079037][T10978] team0: Port device team_slave_0 added [ 146.084480][T10978] team0: Port device team_slave_1 added [ 146.098670][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.133535][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.135751][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.143919][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.148105][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.150285][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.158668][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.179523][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.203755][ T40] audit: type=1326 audit(1750002631.289:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11024 comm="syz.2.1306" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492818e929 code=0x0 [ 146.218258][T10978] hsr_slave_0: entered promiscuous mode [ 146.220558][T10978] hsr_slave_1: entered promiscuous mode [ 146.223201][T10978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.225604][T10978] Cannot create hsr debugfs directory [ 146.335085][ T81] bridge_slave_1: left allmulticast mode [ 146.336926][ T81] bridge_slave_1: left promiscuous mode [ 146.338787][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.342873][ T81] bridge_slave_0: left allmulticast mode [ 146.344645][ T81] bridge_slave_0: left promiscuous mode [ 146.347891][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.383092][T11028] netlink: 'syz.3.1307': attribute type 3 has an invalid length. [ 146.387976][T11028] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1307'. [ 146.606167][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.610564][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.618069][ T81] bond0 (unregistering): Released all slaves [ 147.031150][ T81] hsr_slave_0: left promiscuous mode [ 147.043180][ T81] hsr_slave_1: left promiscuous mode [ 147.045175][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.047437][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.050396][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.052985][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.081824][ T81] veth1_macvtap: left promiscuous mode [ 147.083786][ T81] veth0_macvtap: left promiscuous mode [ 147.085665][ T81] veth1_vlan: left promiscuous mode [ 147.087366][ T81] veth0_vlan: left promiscuous mode [ 147.678520][ T81] team0 (unregistering): Port device team_slave_1 removed [ 147.722420][ T5948] Bluetooth: hci3: command tx timeout [ 147.751585][ T81] team0 (unregistering): Port device team_slave_0 removed [ 148.229723][T11050] syzkaller1: entered allmulticast mode [ 148.313268][T10978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.319347][T10978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.352964][T10978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.365681][T10978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.451455][ T40] audit: type=1800 audit(1750002633.529:878): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1319" name="bus" dev="overlay" ino=1908 res=0 errno=0 [ 148.476851][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.487307][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.494610][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.496869][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.504695][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.506959][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.555593][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1324'. [ 148.565624][T11111] efs: device does not support 512 byte blocks [ 148.568294][T11111] device does not support 512 byte blocks [ 148.568294][T11111] [ 148.614323][T11119] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20002 [ 148.630141][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.662050][T10978] veth0_vlan: entered promiscuous mode [ 148.671194][T10978] veth1_vlan: entered promiscuous mode [ 148.689389][T10978] veth0_macvtap: entered promiscuous mode [ 148.696319][T10978] veth1_macvtap: entered promiscuous mode [ 148.705266][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.713554][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.719865][T10978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.724177][T10978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.727069][T10978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.730048][T10978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.741691][T11138] vxcan1 speed is unknown, defaulting to 1000 [ 148.771821][T11141] lo: left allmulticast mode [ 148.775343][T11141] tunl0: left allmulticast mode [ 148.777594][T11141] gre0: left allmulticast mode [ 148.780102][T11141] gretap0: left allmulticast mode [ 148.787205][T11141] erspan0: left allmulticast mode [ 148.790289][T11141] ip_vti0: left allmulticast mode [ 148.792621][T11141] ip6_vti0: left allmulticast mode [ 148.795046][T11141] sit0: left allmulticast mode [ 148.798553][T11141] ip6tnl0: left allmulticast mode [ 148.800979][T11141] ip6gre0: left allmulticast mode [ 148.805952][T11141] bridge0: left allmulticast mode [ 148.810901][T11141] team0: left allmulticast mode [ 148.813300][T11141] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.816520][T11141] dummy0: left allmulticast mode [ 148.820186][T11141] nlmon0: left allmulticast mode [ 148.823504][T11141] caif0: left allmulticast mode [ 148.825136][T11141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.843132][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.845614][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.857217][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.859635][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.909048][T11145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11145 comm=syz.1.1331 [ 148.919381][T11148] syz.2.1333: attempt to access beyond end of device [ 148.919381][T11148] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 148.925574][T11148] gfs2: error -5 reading superblock [ 148.929916][T11147] syz.2.1333: attempt to access beyond end of device [ 148.929916][T11147] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 148.940411][T11147] gfs2: error -5 reading superblock [ 148.972272][T11154] gretap1: entered allmulticast mode [ 148.975936][T11154] bridge0: port 2(gretap1) entered blocking state [ 148.978245][T11154] bridge0: port 2(gretap1) entered disabled state [ 148.981870][T11154] gretap1: entered promiscuous mode [ 148.985676][T11154] bridge0: port 2(gretap1) entered blocking state [ 148.987965][T11154] bridge0: port 2(gretap1) entered forwarding state [ 148.994717][T11157] cgroup: Name too long [ 149.002245][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11154 comm=syz.3.1335 [ 149.025771][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 149.067922][T11168] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 149.086658][T11172] misc userio: Invalid payload size [ 149.091106][ T40] audit: type=1400 audit(1750002634.169:879): avc: denied { map } for pid=11170 comm="syz.2.1340" path="/proc/1455/maps" dev="proc" ino=45564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 149.104155][ T40] audit: type=1400 audit(1750002634.189:880): avc: denied { write } for pid=11163 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.319985][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1347'. [ 149.323194][T11197] netlink: 'syz.1.1347': attribute type 7 has an invalid length. [ 149.325903][T11197] netlink: 'syz.1.1347': attribute type 8 has an invalid length. [ 149.328755][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 149.334230][T11197] gretap0: entered promiscuous mode [ 149.336459][T11197] batadv_slave_1: entered promiscuous mode [ 149.339349][T11197] gretap0: left promiscuous mode [ 149.341287][T11197] batadv_slave_1: left promiscuous mode [ 150.092813][ T5348] pmem0: [POWERTEC] [ 150.159644][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 150.325459][T11249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1364'. [ 150.351505][T11255] program syz.3.1366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.849514][ T40] audit: type=1400 audit(1750002635.929:881): avc: denied { write } for pid=11301 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.881524][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.124485][ T40] audit: type=1400 audit(1750002637.209:882): avc: denied { mounton } for pid=11304 comm="syz.1.1379" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 152.171559][T11315] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 152.195376][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'. [ 152.214410][T11320] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.218436][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 152.222084][T11320] IPVS: Error joining to the multicast group [ 152.250236][T11323] pimreg3: entered allmulticast mode [ 152.270888][T11331] netlink: 'syz.1.1387': attribute type 11 has an invalid length. [ 152.273057][T11328] vxcan1 speed is unknown, defaulting to 1000 [ 152.287160][T11331] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1387'. [ 152.299460][T11331] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 152.306572][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.312635][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.318627][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.322029][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.325062][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.382421][T11334] vxcan1 speed is unknown, defaulting to 1000 [ 152.454565][T11345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1389'. [ 152.472617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.494205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.619973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.666841][ T6029] hid-generic 0005:16C0:05DF.000A: item fetching failed at offset 0/1 [ 152.669660][ T6029] hid-generic 0005:16C0:05DF.000A: probe with driver hid-generic failed with error -22 [ 152.700512][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.713496][T11334] chnl_net:caif_netlink_parms(): no params data found [ 152.768207][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.814463][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.817310][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.820059][T11334] bridge_slave_0: entered allmulticast mode [ 152.824218][T11334] bridge_slave_0: entered promiscuous mode [ 152.827302][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.829603][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.831877][T11334] bridge_slave_1: entered allmulticast mode [ 152.835293][T11334] bridge_slave_1: entered promiscuous mode [ 152.886267][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.969208][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.975385][T11384] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 152.981959][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.027013][T11334] team0: Port device team_slave_0 added [ 153.031143][T11334] team0: Port device team_slave_1 added [ 153.093680][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.095907][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.105529][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.114580][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.116877][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.125099][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.133190][ T46] bridge_slave_1: left allmulticast mode [ 153.135039][ T46] bridge_slave_1: left promiscuous mode [ 153.136932][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.142000][ T46] bridge_slave_0: left allmulticast mode [ 153.145350][ T46] bridge_slave_0: left promiscuous mode [ 153.147440][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.444032][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.447984][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.451975][ T46] bond0 (unregistering): Released all slaves [ 153.500213][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 153.505755][T11334] hsr_slave_0: entered promiscuous mode [ 153.508417][T11334] hsr_slave_1: entered promiscuous mode [ 153.511036][T11334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.515018][T11334] Cannot create hsr debugfs directory [ 153.595999][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 153.686393][T11424] jfs: Unknown parameter '?BDPY' [ 153.772022][ T40] audit: type=1400 audit(1750002638.849:883): avc: denied { read } for pid=11434 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.850955][T11450] __nla_validate_parse: 3 callbacks suppressed [ 153.850966][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1417'. [ 153.860882][ T40] audit: type=1400 audit(1750002638.939:884): avc: denied { connect } for pid=11449 comm="syz.2.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.902513][ T40] audit: type=1400 audit(1750002638.979:885): avc: denied { mounton } for pid=11447 comm="syz.3.1416" path="/380/file0" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.917434][ T46] hsr_slave_0: left promiscuous mode [ 153.919915][ T46] hsr_slave_1: left promiscuous mode [ 153.930650][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.934055][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.938267][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.940645][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.983782][ T46] veth1_macvtap: left promiscuous mode [ 153.985564][ T46] veth0_macvtap: left promiscuous mode [ 153.987371][ T46] veth1_vlan: left promiscuous mode [ 153.989136][ T46] veth0_vlan: left promiscuous mode [ 154.027798][T11470] syz.3.1420: attempt to access beyond end of device [ 154.027798][T11470] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 154.032045][T11470] exFAT-fs (nbd3): unable to read boot sector [ 154.034147][T11470] exFAT-fs (nbd3): failed to read boot sector [ 154.036361][T11470] exFAT-fs (nbd3): failed to recognize exfat type [ 154.294308][T11476] Invalid source name [ 154.295629][T11476] UBIFS error (pid: 11476): cannot open "ubifs", error -22 [ 154.352440][ T5948] Bluetooth: hci3: command tx timeout [ 154.486926][T11481] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.631951][ T46] team0 (unregistering): Port device team_slave_1 removed [ 154.702574][ T46] team0 (unregistering): Port device team_slave_0 removed [ 155.210523][T11476] bridge: RTM_NEWNEIGH with invalid ether address [ 155.244470][T11487] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1425'. [ 155.248976][T11488] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1425'. [ 155.380493][T11334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.386177][T11334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.398869][T11334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.413671][T11334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.485393][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.497934][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.509118][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.512061][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.513640][T11518] KVM: debugfs: duplicate directory 11518-6 [ 155.524939][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.527197][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.668327][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.698540][T11334] veth0_vlan: entered promiscuous mode [ 155.705209][T11334] veth1_vlan: entered promiscuous mode [ 155.720389][T11334] veth0_macvtap: entered promiscuous mode [ 155.725714][T11334] veth1_macvtap: entered promiscuous mode [ 155.734680][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.740864][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.745740][T11334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.748589][T11334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.750671][T11532] netlink: 'syz.2.1431': attribute type 10 has an invalid length. [ 155.751385][T11334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.757394][T11334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.762197][T11532] lo: entered promiscuous mode [ 155.803615][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.806193][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.823841][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.826341][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.830784][T11534] loop5: detected capacity change from 0 to 7 [ 155.837237][T11534] Dev loop5: unable to read RDB block 7 [ 155.839073][T11534] loop5: AHDI p1 p2 p3 [ 155.840411][T11534] loop5: partition table partially beyond EOD, truncated [ 155.845366][T11534] loop5: p1 start 1601398130 is beyond EOD, truncated [ 155.847528][T11534] loop5: p2 start 1702059890 is beyond EOD, truncated [ 155.961403][ T40] audit: type=1400 audit(1750002641.039:886): avc: denied { read } for pid=11538 comm="syz.1.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 156.833775][T11549] vxcan1 speed is unknown, defaulting to 1000 [ 156.975735][T11562] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 156.991323][T11562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1441'. [ 156.995205][T11563] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 157.013858][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1441'. [ 157.052685][T11569] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 157.067880][T11569] fuse: Bad value for 'fd' [ 157.078536][T11569] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 157.085159][T11569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.088591][ T81] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 157.127015][ T40] audit: type=1400 audit(1750002642.209:887): avc: denied { setopt } for pid=11574 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.202726][T11579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1446'. [ 157.223318][ T1148] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 157.378969][T11584] syzkaller1: left promiscuous mode [ 157.380690][T11584] syzkaller1: left allmulticast mode [ 157.415625][T11588] netfs: Couldn't get user pages (rc=-14) [ 157.546483][T11601] vlan4: entered promiscuous mode [ 157.548210][T11601] bridge0: entered promiscuous mode [ 157.687590][ T40] audit: type=1400 audit(1750002642.769:888): avc: denied { setattr } for pid=11602 comm="syz.2.1452" name="PPPOL2TP" dev="sockfs" ino=47891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.810619][ T40] audit: type=1400 audit(1750002642.889:889): avc: denied { mount } for pid=11616 comm="syz.2.1455" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 157.827933][ T1180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.190280][T11626] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 159.193401][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 159.195774][ T40] audit: type=1400 audit(1750002644.279:890): avc: denied { getopt } for pid=11623 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 159.297479][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.302439][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.305606][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.309501][T11635] SELinux: Context is not valid (left unmapped). [ 159.311078][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.312536][ T40] audit: type=1400 audit(1750002644.389:891): avc: denied { remount } for pid=11633 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.314616][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.342555][T11631] vxcan1 speed is unknown, defaulting to 1000 [ 159.447162][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 159.517864][T11631] chnl_net:caif_netlink_parms(): no params data found [ 159.602249][ T1180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.613535][T11667] pim6reg: entered allmulticast mode [ 159.615386][T11631] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.617732][T11631] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.620049][T11631] bridge_slave_0: entered allmulticast mode [ 159.624269][T11631] bridge_slave_0: entered promiscuous mode [ 159.627905][T11631] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.630239][T11631] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.632649][T11631] bridge_slave_1: entered allmulticast mode [ 159.635222][T11631] bridge_slave_1: entered promiscuous mode [ 159.671004][T11631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.675815][T11631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.705507][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.709790][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.733132][ T1180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.741045][T11631] team0: Port device team_slave_0 added [ 159.746363][T11631] team0: Port device team_slave_1 added [ 159.776909][T11631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.779100][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.787112][T11631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.791231][T11631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.793461][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.801518][T11631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.817611][ T1180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.867092][T11631] hsr_slave_0: entered promiscuous mode [ 159.869325][T11631] hsr_slave_1: entered promiscuous mode [ 159.871346][T11631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.875807][T11631] Cannot create hsr debugfs directory [ 159.916558][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 159.929871][T11667] bridge0 (unregistering): left allmulticast mode [ 160.072617][ T1180] bridge_slave_1: left allmulticast mode [ 160.074470][ T1180] bridge_slave_1: left promiscuous mode [ 160.076302][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.080782][ T1180] bridge_slave_0: left allmulticast mode [ 160.083527][ T1180] bridge_slave_0: left promiscuous mode [ 160.086063][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.372002][T11673] netlink: 'syz.3.1469': attribute type 30 has an invalid length. [ 160.399378][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.405575][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.410903][ T1180] bond0 (unregistering): Released all slaves [ 160.423518][T11675] xt_nat: multiple ranges no longer supported [ 160.683695][T11688] macvtap0: entered allmulticast mode [ 160.685433][T11688] veth0_macvtap: entered allmulticast mode [ 160.687539][T11688] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 160.690343][T11688] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 160.777648][ T1180] hsr_slave_0: left promiscuous mode [ 160.779896][ T1180] hsr_slave_1: left promiscuous mode [ 160.781971][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.786963][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.799558][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.805666][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.837435][ T1180] veth1_macvtap: left promiscuous mode [ 160.839218][ T1180] veth0_macvtap: left promiscuous mode [ 160.840995][ T1180] veth1_vlan: left promiscuous mode [ 160.843725][ T1180] veth0_vlan: left promiscuous mode [ 160.847890][T11700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1474'. [ 161.008509][T11709] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1476'. [ 161.060065][T11710] netlink: 'syz.2.1476': attribute type 142 has an invalid length. [ 161.274774][ T40] audit: type=1400 audit(1750002646.359:892): avc: denied { listen } for pid=11720 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 161.394803][ T5944] Bluetooth: hci3: command tx timeout [ 161.495113][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 161.560372][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 162.071145][T11631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.076796][T11631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.081256][T11729] IPv6: Can't replace route, no match found [ 162.083490][T11631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.087395][T11631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.140104][T11740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 162.147356][T11631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.156823][T11748] dlm: no locking on control device [ 162.166847][T11631] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.170167][ T40] audit: type=1400 audit(1750002647.249:893): avc: denied { accept } for pid=11749 comm="syz.2.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.178045][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.180332][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.197124][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.199385][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.210677][ T5944] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 162.247285][T11759] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 162.285205][ T40] audit: type=1400 audit(1750002647.369:894): avc: denied { cmd } for pid=11761 comm="syz.2.1492" path="socket:[49633]" dev="sockfs" ino=49633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.297098][T11766] openvswitch: netlink: Key type 30 is not supported [ 162.324347][T11631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.351614][T11631] veth0_vlan: entered promiscuous mode [ 162.361304][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'. [ 162.361774][T11631] veth1_vlan: entered promiscuous mode [ 162.393438][T11631] veth0_macvtap: entered promiscuous mode [ 162.399122][T11631] veth1_macvtap: entered promiscuous mode [ 162.406040][T11787] bond0: left promiscuous mode [ 162.406947][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'. [ 162.407601][T11787] bond_slave_0: left promiscuous mode [ 162.411538][T11782] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 162.412258][T11787] bond_slave_1: left promiscuous mode [ 162.414816][T11782] UDF-fs: Scanning with blocksize 2048 failed [ 162.416683][T11782] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 162.421156][T11782] UDF-fs: Scanning with blocksize 4096 failed [ 162.421479][T11787] ip6t_srh: unknown srh match flags 4000 [ 162.423372][T11785] cgroup: subsys name conflicts with all [ 162.434276][T11631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.439770][T11631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.455247][T11631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.457952][T11631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.460758][T11631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.472478][T11631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.480763][T11791] mkiss: ax0: crc mode is auto. [ 162.486627][T11794] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 162.490825][T11794] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 162.578692][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.583220][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.609506][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.612227][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.617579][ T40] audit: type=1400 audit(1750002647.699:895): avc: denied { ioctl } for pid=11810 comm="syz.2.1506" path="socket:[49784]" dev="sockfs" ino=49784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.739440][T11815] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.741910][T11815] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 162.772163][T11825] 9pnet_fd: Insufficient options for proto=fd [ 162.775733][T11825] 9pnet_fd: Insufficient options for proto=fd [ 162.801024][T11828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 162.803132][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.805740][T11828] vhci_hcd vhci_hcd.0: Device attached [ 162.919581][T11849] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 162.941301][T11847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.953695][T11854] SELinux: syz.2.1518 (11854) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.031383][ T40] audit: type=1400 audit(1750002648.109:896): avc: denied { mount } for pid=11857 comm="syz.2.1520" name="/" dev="hugetlbfs" ino=50659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 163.032255][T11858] hugetlbfs: Bad value 'e' for mount option 'size' [ 163.032255][T11858] [ 163.038540][ T40] audit: type=1400 audit(1750002648.109:897): avc: denied { remount } for pid=11857 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 163.052475][ T34] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 163.115902][ T40] audit: type=1400 audit(1750002648.199:898): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 163.385474][T11883] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 163.389263][T11883] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 163.476829][T11892] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 163.537925][T11899] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 163.545946][T11899] Error validating options; rc = [-22] [ 163.733673][T11903] xt_socket: unknown flags 0xc [ 163.818692][T11910] tmpfs: Unknown parameter 'mpolatic:0' [ 164.039946][ T5944] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 164.040391][T11915] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 164.077239][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 164.080590][ T40] audit: type=1400 audit(1750002649.159:899): avc: denied { listen } for pid=11917 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.461076][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.792037][T11832] vhci_hcd: connection reset by peer [ 165.794760][ T1143] vhci_hcd: stop threads [ 165.796084][ T1143] vhci_hcd: release socket [ 165.798865][ T1143] vhci_hcd: disconnect device [ 165.940185][T11928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1544'. [ 165.957316][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 165.957327][ T40] audit: type=1400 audit(1750002651.039:901): avc: denied { nlmsg_read } for pid=11929 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.965542][ T40] audit: type=1400 audit(1750002651.039:902): avc: denied { listen } for pid=11929 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.050211][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.054105][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.057352][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.064435][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.067386][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.086557][T11938] xt_cgroup: path and classid specified [ 166.094024][T11935] vxcan1 speed is unknown, defaulting to 1000 [ 166.095080][ T40] audit: type=1400 audit(1750002651.179:903): avc: denied { shutdown } for pid=11937 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.268380][T11935] chnl_net:caif_netlink_parms(): no params data found [ 167.300872][ T40] audit: type=1400 audit(1750002652.379:904): avc: denied { execute_no_trans } for pid=11960 comm="syz.1.1552" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=50090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 168.112771][ T5944] Bluetooth: hci3: command tx timeout [ 168.194365][ T34] vhci_hcd: vhci_device speed not set [ 168.302512][T11935] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.305665][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.307864][T11935] bridge_slave_0: entered allmulticast mode [ 168.310307][T11935] bridge_slave_0: entered promiscuous mode [ 168.315934][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.318120][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.320331][T11935] bridge_slave_1: entered allmulticast mode [ 168.322958][T11935] bridge_slave_1: entered promiscuous mode [ 168.339189][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.365448][T11971] @: renamed from vlan0 [ 168.385734][T11935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.391539][T11935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.423537][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.449081][T11935] team0: Port device team_slave_0 added [ 168.453466][T11935] team0: Port device team_slave_1 added [ 168.484272][T11935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.486393][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.495566][T11935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.512949][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.527746][T11935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.529957][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.530744][T11983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.537711][T11935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.541632][T11983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.577737][T11935] hsr_slave_0: entered promiscuous mode [ 168.579985][T11935] hsr_slave_1: entered promiscuous mode [ 168.582061][T11935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.591641][T11935] Cannot create hsr debugfs directory [ 168.646074][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 168.683436][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 168.686273][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 168.688923][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 168.691154][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 168.699377][T11998] loop9: detected capacity change from 0 to 524288000 [ 168.742525][ T46] bridge_slave_1: left allmulticast mode [ 168.744760][ T46] bridge_slave_1: left promiscuous mode [ 168.747233][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.749756][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1563'. [ 168.754050][ T46] bridge_slave_0: left allmulticast mode [ 168.755747][ T46] bridge_slave_0: left promiscuous mode [ 168.757519][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.875476][T12005] XFS (nullb0): Invalid superblock magic number [ 169.032417][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.036600][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.040166][ T46] bond0 (unregistering): Released all slaves [ 169.080077][T12022] usb usb8: usbfs: process 12022 (syz.2.1568) did not claim interface 0 before use [ 169.133601][T12027] /dev/nullb0: Can't open blockdev [ 169.142889][T12031] delete_channel: no stack [ 169.215817][ T40] audit: type=1400 audit(1750002654.299:905): avc: denied { write } for pid=12041 comm="syz.1.1573" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 169.238959][ T40] audit: type=1400 audit(1750002654.299:906): avc: denied { open } for pid=12041 comm="syz.1.1573" path="/dev/btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 169.250093][ T40] audit: type=1400 audit(1750002654.299:907): avc: denied { ioctl } for pid=12041 comm="syz.1.1573" path="/dev/btrfs-control" dev="devtmpfs" ino=1336 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 169.272883][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 169.393277][T12044] hsr_slave_1 (unregistering): left promiscuous mode [ 169.400372][T12059] input: syz0 as /devices/virtual/input/input22 [ 169.538978][ T46] hsr_slave_0: left promiscuous mode [ 169.541082][ T46] hsr_slave_1: left promiscuous mode [ 169.543616][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.546019][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.549239][T12067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.553466][T12067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.553589][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.558420][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.581388][ T46] veth1_macvtap: left promiscuous mode [ 169.590890][ T46] veth0_macvtap: left promiscuous mode [ 169.593456][ T46] veth1_vlan: left promiscuous mode [ 169.595590][ T46] veth0_vlan: left promiscuous mode [ 169.659182][T12070] overlayfs: failed to resolve './file1/file0': -2 [ 170.114448][T12078] ipt_REJECT: TCP_RESET invalid for non-tcp [ 170.193171][ T5944] Bluetooth: hci3: command tx timeout [ 170.283747][ T46] team0 (unregistering): Port device team_slave_1 removed [ 170.358422][ T46] team0 (unregistering): Port device team_slave_0 removed [ 170.895354][T12065] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 170.898315][T12065] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 170.971814][T11935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.986412][T11935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.994505][T11935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.000534][T11935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.027635][T12101] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20000 - 0 [ 171.030887][T12101] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.035106][T12101] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.037844][T12101] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.040867][T12101] geneve2: entered promiscuous mode [ 171.043954][T12101] geneve2: entered allmulticast mode [ 171.066701][T11935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.078775][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.096654][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.098841][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.103550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.103596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.115041][T11935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.115056][T11935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.135231][T12115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=12115 comm=syz.2.1590 [ 171.139548][T12115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1590'. [ 171.185074][T12126] netlink: 'syz.1.1594': attribute type 32 has an invalid length. [ 171.187462][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 171.190155][T12126] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 171.194720][ T40] audit: type=1400 audit(1750002656.279:908): avc: denied { setopt } for pid=12124 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.196463][T12128] tmpfs: Unknown parameter 'indo64' [ 171.201592][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 171.205933][T12126] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 171.207495][T12128] overlay: ./file1 is not a directory [ 171.219678][T12126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1594'. [ 171.222700][T12127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1594'. [ 171.250473][T12137] overlay: Unknown parameter 'audit' [ 171.251954][T11935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.268210][ T40] audit: type=1400 audit(1750002656.349:909): avc: denied { link } for pid=12135 comm="syz.2.1596" name="file1" dev="tmpfs" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 171.279634][T11935] veth0_vlan: entered promiscuous mode [ 171.288622][T11935] veth1_vlan: entered promiscuous mode [ 171.316563][T11935] veth0_macvtap: entered promiscuous mode [ 171.320135][T11935] veth1_macvtap: entered promiscuous mode [ 171.321450][T12148] netlink: 'syz.2.1598': attribute type 9 has an invalid length. [ 171.334510][T11935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.341028][T11935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.346261][T11935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.349008][T11935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.351681][T11935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.354902][T11935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.358968][ T40] audit: type=1400 audit(1750002656.439:910): avc: denied { lock } for pid=12152 comm="syz.3.1600" path="socket:[51137]" dev="sockfs" ino=51137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.374334][T12157] use of bytesused == 0 is deprecated and will be removed in the future, [ 171.376959][T12157] use the actual size instead. [ 171.399350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.401794][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.408164][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.410618][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.483919][T12171] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 171.591129][T12181] netlink: 'syz.2.1608': attribute type 11 has an invalid length. [ 171.594380][T12182] xt_hashlimit: size too large, truncated to 1048576 [ 171.686390][ T40] audit: type=1400 audit(1750002656.769:911): avc: denied { create } for pid=12192 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 171.693074][ T40] audit: type=1400 audit(1750002656.769:912): avc: denied { getopt } for pid=12192 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 171.751613][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 171.752541][T12202] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 171.854033][T12210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.857050][T12210] overlayfs: failed to set xattr on upper [ 171.859280][T12210] overlayfs: ...falling back to redirect_dir=nofollow. [ 171.861418][T12210] overlayfs: ...falling back to index=off. [ 171.863682][T12210] overlayfs: ...falling back to uuid=null. [ 171.905846][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'. [ 171.911064][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 171.939399][T12215] vxcan1 speed is unknown, defaulting to 1000 [ 172.206561][T12237] openvswitch: netlink: Duplicate or invalid key (type 0). [ 172.208921][T12237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.213454][T12238] openvswitch: netlink: Duplicate or invalid key (type 0). [ 172.215683][T12238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.267308][T12244] tmpfs: Unknown parameter 'oboer' [ 172.269091][T12244] tmpfs: Unknown parameter 'oboer' [ 172.270793][T12244] tmpfs: Unknown parameter 'oboer' [ 172.284362][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.304123][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.314101][ T40] audit: type=1400 audit(1750002657.399:913): avc: denied { append } for pid=12248 comm="syz.1.1627" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.335201][ T40] audit: type=1400 audit(1750002657.399:914): avc: denied { execute } for pid=12248 comm="syz.1.1627" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.369995][T12252] netlink: 'syz.1.1629': attribute type 2 has an invalid length. [ 172.426431][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 172.553622][T12265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.557942][T12265] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 172.794039][T12275] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 172.797336][T12275] overlayfs: missing 'lowerdir' [ 173.154145][ T1123] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 173.157336][ T1123] sr 2:0:0:0: [sr0] tag#1 Sense Key : Not Ready [current] [ 173.159617][ T1123] sr 2:0:0:0: [sr0] tag#1 Add. Sense: Medium not present [ 173.161974][ T1123] sr 2:0:0:0: [sr0] tag#1 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 173.164829][ T1123] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 173.181780][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.187871][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.192153][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1649'. [ 173.202815][T12312] overlay: Unknown parameter 'smackfstransmute' [ 173.243248][ T1123] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 173.247299][ T1123] sr 2:0:0:0: [sr0] tag#31 Sense Key : Not Ready [current] [ 173.249947][ T1123] sr 2:0:0:0: [sr0] tag#31 Add. Sense: Medium not present [ 173.252233][ T1123] sr 2:0:0:0: [sr0] tag#31 CDB: Read(10) 28 00 00 00 00 08 00 00 10 00 [ 173.255466][ T1123] I/O error, dev sr0, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 173.325555][ T1123] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 173.329125][ T1123] sr 2:0:0:0: [sr0] tag#20 Sense Key : Not Ready [current] [ 173.331554][ T1123] sr 2:0:0:0: [sr0] tag#20 Add. Sense: Medium not present [ 173.334096][ T1123] sr 2:0:0:0: [sr0] tag#20 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 173.337427][ T1123] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 173.340841][ T1123] buffer_io_error: 7 callbacks suppressed [ 173.340850][ T1123] Buffer I/O error on dev sr0, logical block 0, async page read [ 173.346779][ T1123] Buffer I/O error on dev sr0, logical block 1, async page read [ 173.349970][ T1123] Buffer I/O error on dev sr0, logical block 2, async page read [ 173.353174][ T1123] Buffer I/O error on dev sr0, logical block 3, async page read [ 173.392522][T12330] netlink: 'syz.1.1654': attribute type 2 has an invalid length. [ 173.395128][T12330] nbd: must specify a device to reconfigure [ 173.416752][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.024755][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.036560][T12338] IPv6: sit3: Disabled Multicast RS [ 175.130418][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.140376][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.144772][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.145836][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.151797][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.155505][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.184410][T12349] vxcan1 speed is unknown, defaulting to 1000 [ 175.212392][ T40] audit: type=1400 audit(1750002660.289:915): avc: denied { getopt } for pid=12357 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.250943][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.426295][ T13] bridge_slave_1: left allmulticast mode [ 175.430354][ T13] bridge_slave_1: left promiscuous mode [ 175.432284][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.436308][ T13] bridge_slave_0: left allmulticast mode [ 175.438124][ T13] bridge_slave_0: left promiscuous mode [ 175.441172][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.694905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.699250][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.703094][ T13] bond0 (unregistering): Released all slaves [ 175.709165][T12349] chnl_net:caif_netlink_parms(): no params data found [ 175.785536][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.788150][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.790427][T12349] bridge_slave_0: entered allmulticast mode [ 175.794170][T12349] bridge_slave_0: entered promiscuous mode [ 175.797222][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.799462][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.801763][T12349] bridge_slave_1: entered allmulticast mode [ 175.805052][T12349] bridge_slave_1: entered promiscuous mode [ 175.861923][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.870656][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.951431][T12349] team0: Port device team_slave_0 added [ 175.973556][T12349] team0: Port device team_slave_1 added [ 176.014166][T12349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.017087][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.026774][T12349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.031525][T12349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.037110][T12349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.049587][T12349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.180779][ T13] hsr_slave_0: left promiscuous mode [ 176.192628][ T13] hsr_slave_1: left promiscuous mode [ 176.195163][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.197558][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.210355][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.213404][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.263515][ T13] veth1_macvtap: left promiscuous mode [ 176.266032][ T13] veth0_macvtap: left promiscuous mode [ 176.268451][ T13] veth1_vlan: left promiscuous mode [ 176.270691][ T13] veth0_vlan: left promiscuous mode [ 176.652207][T12423] syz.2.1673: attempt to access beyond end of device [ 176.652207][T12423] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 176.660742][T12423] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 176.708563][T12423] __nla_validate_parse: 5 callbacks suppressed [ 176.708574][T12423] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1673'. [ 176.975480][ T13] team0 (unregistering): Port device team_slave_1 removed [ 177.042685][ T13] team0 (unregistering): Port device team_slave_0 removed [ 177.233911][ T5944] Bluetooth: hci3: command tx timeout [ 177.654825][T12349] hsr_slave_0: entered promiscuous mode [ 177.657923][T12349] hsr_slave_1: entered promiscuous mode [ 177.660770][T12349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.664770][T12349] Cannot create hsr debugfs directory [ 177.975656][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.980638][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.038221][T12451] lo speed is unknown, defaulting to 1000 [ 178.041703][T12451] lo speed is unknown, defaulting to 1000 [ 178.044353][T12451] lo speed is unknown, defaulting to 1000 [ 178.227365][T12451] infiniband syz0: set down [ 178.229358][ T29] lo speed is unknown, defaulting to 1000 [ 178.231717][T12451] infiniband syz0: added lo [ 178.256847][T12451] RDS/IB: syz0: added [ 178.258565][T12451] smc: adding ib device syz0 with port count 1 [ 178.261025][T12451] smc: ib device syz0 port 1 has pnetid [ 178.265932][ T838] lo speed is unknown, defaulting to 1000 [ 178.269365][T12451] lo speed is unknown, defaulting to 1000 [ 178.315650][T12349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.321137][T12349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.330744][T12349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.342033][T12349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.378398][T12451] lo speed is unknown, defaulting to 1000 [ 178.398476][T12349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.408964][T12349] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.414334][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.416543][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.424632][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.426950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.474859][T12451] lo speed is unknown, defaulting to 1000 [ 178.561206][T12349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.565068][T12451] lo speed is unknown, defaulting to 1000 [ 178.587957][T12349] veth0_vlan: entered promiscuous mode [ 178.595180][T12349] veth1_vlan: entered promiscuous mode [ 178.612243][T12349] veth0_macvtap: entered promiscuous mode [ 178.618144][T12349] veth1_macvtap: entered promiscuous mode [ 178.639135][T12349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.651550][T12349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.660101][T12349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.663606][T12349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.666476][T12349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.669312][T12349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.677347][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1684'. [ 178.711501][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1685'. [ 178.718209][T12500] netlink: 'syz.3.1685': attribute type 28 has an invalid length. [ 178.718867][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.721534][T12500] netlink: 'syz.3.1685': attribute type 3 has an invalid length. [ 178.727173][T12500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1685'. [ 178.735574][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.751054][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.754643][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.758978][T12504] tmpfs: Unknown parameter 'ino\e32' [ 179.329473][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'. [ 179.902792][T12559] afs: Unknown parameter 'dyn<' [ 180.459766][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.465052][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.658697][T12572] random: crng reseeded on system resumption [ 180.764232][T12579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 180.767057][T12579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.770427][T12579] vhci_hcd vhci_hcd.0: Device attached [ 180.782555][T12580] vhci_hcd: connection closed [ 180.783668][ T13] vhci_hcd: stop threads [ 180.787261][ T13] vhci_hcd: release socket [ 180.788763][ T13] vhci_hcd: disconnect device [ 180.823123][T12583] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 180.826351][T12583] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1709'. [ 181.040626][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.222490][ T59] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 181.387410][ T59] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 181.390715][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 181.393923][ T59] usb 6-1: Product: syz [ 181.395353][ T59] usb 6-1: Manufacturer: syz [ 181.396842][ T59] usb 6-1: SerialNumber: syz [ 181.400743][ T59] usb 6-1: config 0 descriptor?? [ 181.407174][ T59] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 181.410516][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 181.421024][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.425207][ T59] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 181.429457][ T59] usb 6-1: media controller created [ 181.447557][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.657477][ T59] cxusb: set interface failed [ 181.659007][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 181.679229][ T59] DVB: Unable to find symbol mt352_attach() [ 181.681468][ T59] dvb-usb: bulk message failed: -22 (5/0) [ 181.683629][ T59] zl10353_read_register: readreg error (reg=127, ret==-121) [ 181.686078][ T59] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 181.732964][ T59] rc_core: IR keymap rc-dvico-mce not found [ 181.734886][ T59] Registered IR keymap rc-empty [ 181.739193][ T59] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 181.744151][ T59] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input24 [ 181.751874][ T59] dvb-usb: schedule remote query interval to 100 msecs. [ 181.754330][ T59] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 181.760653][ T59] usb 6-1: USB disconnect, device number 17 [ 181.802165][ T59] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 182.696794][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.768144][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.791612][T12604] tmpfs: Cannot disable swap on remount [ 182.814144][ T40] audit: type=1400 audit(1750002667.899:916): avc: denied { write } for pid=12596 comm="syz.1.1712" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 182.839288][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.860922][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.867034][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.870074][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.874483][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.877346][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.889279][T12613] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 182.899359][ T40] audit: type=1400 audit(1750002667.979:917): avc: denied { accept } for pid=12612 comm="syz.3.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 182.910537][T12609] vxcan1 speed is unknown, defaulting to 1000 [ 182.988666][T12623] tipc: Enabling of bearer rejected, failed to enable media [ 183.011556][T12609] lo speed is unknown, defaulting to 1000 [ 183.026125][ T1143] bridge_slave_1: left allmulticast mode [ 183.027947][ T1143] bridge_slave_1: left promiscuous mode [ 183.029965][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.034835][ T1143] bridge_slave_0: left allmulticast mode [ 183.036661][ T1143] bridge_slave_0: left promiscuous mode [ 183.038510][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.324565][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.330687][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.336313][ T1143] bond0 (unregistering): Released all slaves [ 183.437637][T12609] chnl_net:caif_netlink_parms(): no params data found [ 183.522964][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.525258][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.527490][T12609] bridge_slave_0: entered allmulticast mode [ 183.530335][T12609] bridge_slave_0: entered promiscuous mode [ 183.534426][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.536773][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.539017][T12609] bridge_slave_1: entered allmulticast mode [ 183.542361][T12609] bridge_slave_1: entered promiscuous mode [ 183.598269][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.621077][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.655741][T12609] team0: Port device team_slave_0 added [ 183.660038][T12609] team0: Port device team_slave_1 added [ 183.689265][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.691470][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.699385][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.703609][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.705815][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.719250][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.726604][T12658] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 183.846426][T12658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.850934][T12658] bond4: (slave bond5): making interface the new active one [ 183.853901][T12658] bond4: (slave bond5): Enslaving as an active interface with an up link [ 183.869846][T12664] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 183.891997][ T1143] hsr_slave_0: left promiscuous mode [ 183.902383][ T1143] hsr_slave_1: left promiscuous mode [ 183.909213][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.912956][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.915579][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.917896][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.918232][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1729'. [ 183.952858][ T1143] veth1_macvtap: left promiscuous mode [ 183.954660][ T1143] veth0_macvtap: left promiscuous mode [ 183.956443][ T1143] veth1_vlan: left promiscuous mode [ 183.958101][ T1143] veth0_vlan: left promiscuous mode [ 184.197638][T12669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=12669 comm=syz.2.1730 [ 184.389701][T12676] Invalid source name [ 184.391123][T12676] UBIFS error (pid: 12676): cannot open "/dev/sg0", error -22 [ 184.683844][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 184.758376][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 184.824927][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.830389][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.922612][ T5944] Bluetooth: hci3: command tx timeout [ 185.275574][T12609] hsr_slave_0: entered promiscuous mode [ 185.277912][T12609] hsr_slave_1: entered promiscuous mode [ 185.280213][T12609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.283067][T12609] Cannot create hsr debugfs directory [ 185.285012][T12658] netlink: 'syz.1.1729': attribute type 15 has an invalid length. [ 185.293919][T12664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.886483][T12609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.892042][T12609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.896777][T12609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.903915][T12609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.942266][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.954783][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.961394][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.963714][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.967340][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.969554][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.036779][T12734] syz.2.1741: attempt to access beyond end of device [ 186.036779][T12734] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 186.044098][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 186.047540][T12734] syz.2.1741: attempt to access beyond end of device [ 186.047540][T12734] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 186.094233][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.114501][T12742] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 186.117193][T12609] veth0_vlan: entered promiscuous mode [ 186.122183][T12742] bridge_slave_1: entered allmulticast mode [ 186.124840][T12742] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 186.129034][T12742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1742'. [ 186.131875][T12609] veth1_vlan: entered promiscuous mode [ 186.221828][T12751] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 186.228450][T12751] netlink: 'syz.3.1743': attribute type 4 has an invalid length. [ 186.231397][T12751] netlink: 3654 bytes leftover after parsing attributes in process `syz.3.1743'. [ 186.252908][T12742] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 186.255908][T12742] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 186.264174][T12742] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 186.268797][T12742] bridge_slave_1: left allmulticast mode [ 186.272008][T12742] bond0 (unregistering): Released all slaves [ 186.316460][T12609] veth0_macvtap: entered promiscuous mode [ 186.320279][T12609] veth1_macvtap: entered promiscuous mode [ 186.336385][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.355745][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.362126][T12609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.366931][T12609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.369864][T12609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.372913][T12609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.432194][ T5944] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 186.434634][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.439896][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.456669][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.458770][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.470632][T12768] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 187.111845][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1752'. [ 187.115824][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1752'. [ 187.121448][T12786] Invalid/unusable pipe [ 187.128404][T12786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 187.726024][T12799] No such timeout policy "syz1" [ 187.733502][T12799] 9pnet_fd: Insufficient options for proto=fd [ 187.736112][T12799] overlayfs: missing 'workdir' [ 187.739875][ T40] audit: type=1326 audit(1750002672.819:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.2.1756" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f492818e929 code=0x0 [ 188.530563][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.338972][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.342704][T12809] Cannot find set identified by id 3 to match [ 190.347004][ T40] audit: type=1400 audit(1750002675.429:919): avc: denied { read } for pid=12808 comm="syz.1.1759" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 190.390474][T12815] netlink: 'syz.2.1760': attribute type 10 has an invalid length. [ 190.448969][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.455594][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.459925][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.472057][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.472603][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.480279][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.481604][T12823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1764'. [ 190.506765][T12819] vxcan1 speed is unknown, defaulting to 1000 [ 190.510886][T12825] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1765'. [ 190.589761][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.597835][T12819] lo speed is unknown, defaulting to 1000 [ 190.719385][T12840] block nbd2: not configured, cannot reconfigure [ 190.778447][T12819] chnl_net:caif_netlink_parms(): no params data found [ 190.798533][ T81] bridge_slave_1: left allmulticast mode [ 190.800741][ T81] bridge_slave_1: left promiscuous mode [ 190.803102][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.806630][ T81] bridge_slave_0: left allmulticast mode [ 190.808392][ T81] bridge_slave_0: left promiscuous mode [ 190.810476][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.889167][T12847] input: syz1 as /devices/virtual/input/input25 [ 190.912921][ T9219] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 191.074576][ T9219] usb 6-1: not running at top speed; connect to a high speed hub [ 191.079003][ T9219] usb 6-1: config 10 has an invalid interface number: 136 but max is 2 [ 191.082089][ T9219] usb 6-1: config 10 has an invalid interface number: 114 but max is 2 [ 191.085840][ T9219] usb 6-1: config 10 has an invalid interface association descriptor of length 3, skipping [ 191.089817][ T9219] usb 6-1: config 10 has an invalid interface number: 99 but max is 2 [ 191.093429][ T9219] usb 6-1: config 10 has an invalid interface number: 71 but max is 2 [ 191.096790][ T9219] usb 6-1: config 10 has 4 interfaces, different from the descriptor's value: 3 [ 191.100539][ T9219] usb 6-1: config 10 has no interface number 0 [ 191.103560][ T9219] usb 6-1: config 10 has no interface number 1 [ 191.106151][ T9219] usb 6-1: config 10 has no interface number 2 [ 191.108635][ T9219] usb 6-1: config 10 has no interface number 3 [ 191.115383][ T9219] usb 6-1: config 10 interface 136 altsetting 128 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 191.120500][ T9219] usb 6-1: config 10 interface 136 altsetting 128 endpoint 0x1 has an invalid bInterval 55, changing to 4 [ 191.125023][ T9219] usb 6-1: config 10 interface 136 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 191.129403][ T9219] usb 6-1: config 10 interface 136 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 191.134057][ T9219] usb 6-1: config 10 interface 114 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 191.138788][ T9219] usb 6-1: config 10 interface 114 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 191.143273][ T9219] usb 6-1: too many endpoints for config 10 interface 99 altsetting 195: 147, using maximum allowed: 30 [ 191.147720][ T9219] usb 6-1: config 10 interface 99 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 147 [ 191.153334][ T9219] usb 6-1: config 10 interface 71 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 191.154037][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.157618][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 191.166095][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 191.170438][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 191.173093][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.175290][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 191.182829][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 191.184768][ T81] bond0 (unregistering): Released all slaves [ 191.186720][ T9219] usb 6-1: config 10 interface 71 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 191.186738][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 191.186749][ T9219] usb 6-1: config 10 interface 71 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 191.186761][ T9219] usb 6-1: config 10 interface 71 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 191.204309][ T9219] usb 6-1: config 10 interface 136 has no altsetting 0 [ 191.206956][ T9219] usb 6-1: config 10 interface 114 has no altsetting 0 [ 191.209692][ T9219] usb 6-1: config 10 interface 99 has no altsetting 0 [ 191.212581][ T9219] usb 6-1: config 10 interface 71 has no altsetting 0 [ 191.217559][ T9219] usb 6-1: Dual-Role OTG device on HNP port [ 191.220478][ T9219] usb 6-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice=33.46 [ 191.224293][ T9219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.227533][ T9219] usb 6-1: Product: syz [ 191.229333][ T9219] usb 6-1: Manufacturer: 繯雩섓ſ懶桸購䂱ࡻ椡ᩰ㥸깔둯枉읨씣췾縮⥦鞕❦囷⚑ὴ풫뻧㪥㋓㤄뤉ᅨ꿉ٗ㧎㬀鮾胻轵 [ 191.236122][ T9219] usb 6-1: SerialNumber: syz [ 191.253139][T12836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.255506][T12836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.307918][T12819] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.310271][T12819] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.313050][T12819] bridge_slave_0: entered allmulticast mode [ 191.316120][T12819] bridge_slave_0: entered promiscuous mode [ 191.319181][T12819] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.321434][T12819] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.324318][T12819] bridge_slave_1: entered allmulticast mode [ 191.326934][T12819] bridge_slave_1: entered promiscuous mode [ 191.413155][T12819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.418843][T12819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.460142][T12836] overlayfs: missing 'lowerdir' [ 191.463671][T12866] overlayfs: missing 'lowerdir' [ 191.464777][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.476548][T12819] team0: Port device team_slave_0 added [ 191.480910][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.491970][T12819] team0: Port device team_slave_1 added [ 191.525116][ T9219] usb 6-1: USB disconnect, device number 18 [ 191.588470][T12819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.590655][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.602460][T12819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.611382][T12819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.615382][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.625840][T12819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.636657][ T29] hid (null): unknown global tag 0xc [ 191.638903][ T29] hid (null): report_id 0 is invalid [ 191.640587][ T29] hid (null): unknown global tag 0xd [ 191.647717][ T29] hid (null): invalid report_count 57527 [ 191.665896][ T29] hid-generic 007F:0006:8001.000B: unknown global tag 0xc [ 191.668217][ T29] hid-generic 007F:0006:8001.000B: item 0 2 1 12 parsing failed [ 191.672140][ T29] hid-generic 007F:0006:8001.000B: probe with driver hid-generic failed with error -22 [ 191.783664][T12819] hsr_slave_0: entered promiscuous mode [ 191.784913][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 191.785958][T12819] hsr_slave_1: entered promiscuous mode [ 191.791214][T12819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.794030][T12819] Cannot create hsr debugfs directory [ 191.816782][T12884] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.829504][ T81] hsr_slave_0: left promiscuous mode [ 191.831646][ T81] hsr_slave_1: left promiscuous mode [ 191.845016][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.848351][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.852762][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.855076][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.892040][ T81] veth1_macvtap: left promiscuous mode [ 191.898313][ T81] veth0_macvtap: left promiscuous mode [ 191.900855][ T81] veth1_vlan: left promiscuous mode [ 191.903291][ T81] veth0_vlan: left promiscuous mode [ 191.925853][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 192.238470][T12895] SELinux: ebitmap: truncated map [ 192.245418][T12895] SELinux: failed to load policy [ 192.513035][ T5944] Bluetooth: hci3: command tx timeout [ 192.620470][ T81] team0 (unregistering): Port device team_slave_1 removed [ 192.697988][ T81] team0 (unregistering): Port device team_slave_0 removed [ 192.932878][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 193.206865][T12900] slcan: can't register candev [ 193.209684][T12900] Falling back ldisc for ptm0. [ 193.262850][T12908] 8021q: VLANs not supported on sit0 [ 193.839462][T12819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.845197][T12819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.849667][T12819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.853646][T12819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.893582][T12819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.914523][T12819] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.919677][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.922521][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.932872][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.935177][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.954613][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.996742][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.019984][T12819] veth0_vlan: entered promiscuous mode [ 194.026576][T12819] veth1_vlan: entered promiscuous mode [ 194.040329][T12819] veth0_macvtap: entered promiscuous mode [ 194.045663][T12819] veth1_macvtap: entered promiscuous mode [ 194.056219][T12819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.061973][T12819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.068035][T12819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.070863][T12819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.073812][T12819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.076557][T12819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.110764][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.117996][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.137767][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.140886][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.193496][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 194.279771][T12984] ipvlan2: entered promiscuous mode [ 195.272029][T12999] pim6reg1: entered promiscuous mode [ 195.273912][T12999] pim6reg1: entered allmulticast mode [ 195.913328][T13016] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 195.919644][T13016] pmem0: [POWERTEC] [ 196.016681][T13018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 196.019425][T13018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 196.022199][T13018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 196.026335][T13018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 196.039119][ T40] audit: type=1400 audit(1750002681.119:920): avc: denied { mount } for pid=13017 comm="syz.3.1812" name="/" dev="rpc_pipefs" ino=60603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 196.057071][ T40] audit: type=1400 audit(1750002681.139:921): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 196.272548][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 196.482113][T13028] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1816'. [ 196.487867][T13028] netlink: zone id is out of range [ 196.489956][T13028] netlink: zone id is out of range [ 196.491961][T13028] netlink: zone id is out of range [ 196.491970][T13028] netlink: zone id is out of range [ 196.491977][T13028] netlink: zone id is out of range [ 196.497983][T13028] netlink: zone id is out of range [ 196.500015][T13028] netlink: zone id is out of range [ 196.502056][T13028] netlink: zone id is out of range [ 196.504319][T13028] netlink: zone id is out of range [ 196.506470][T13028] netlink: zone id is out of range [ 196.577722][T13034] netpci0: tun_chr_ioctl cmd 1074025672 [ 196.579534][T13034] netpci0: ignored: set checksum disabled [ 196.723867][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.256983][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.322539][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.395407][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.513588][ T81] bridge_slave_1: left allmulticast mode [ 198.515507][ T81] bridge_slave_1: left promiscuous mode [ 198.517408][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.522834][ T81] bridge_slave_0: left allmulticast mode [ 198.524744][ T81] bridge_slave_0: left promiscuous mode [ 198.526704][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.762139][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.765885][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.768899][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.782914][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.794506][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.825109][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.829991][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.835158][ T81] bond0 (unregistering): Released all slaves [ 198.875011][T13053] vxcan1 speed is unknown, defaulting to 1000 [ 198.974008][T13053] lo speed is unknown, defaulting to 1000 [ 199.102648][T13065] vxcan1 speed is unknown, defaulting to 1000 [ 199.216262][T13053] chnl_net:caif_netlink_parms(): no params data found [ 199.216898][T13065] lo speed is unknown, defaulting to 1000 [ 199.304413][T13053] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.306653][T13053] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.308953][T13053] bridge_slave_0: entered allmulticast mode [ 199.311580][T13053] bridge_slave_0: entered promiscuous mode [ 199.314882][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.317079][T13053] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.319319][T13053] bridge_slave_1: entered allmulticast mode [ 199.321854][T13053] bridge_slave_1: entered promiscuous mode [ 199.440739][T13053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.456048][T13053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.489332][ T81] hsr_slave_0: left promiscuous mode [ 199.493028][ T81] hsr_slave_1: left promiscuous mode [ 199.495847][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.498902][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.503014][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.506080][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.545350][ T81] veth1_macvtap: left promiscuous mode [ 199.547429][ T81] veth0_macvtap: left promiscuous mode [ 199.549819][ T81] veth1_vlan: left promiscuous mode [ 199.552037][ T81] veth0_vlan: left promiscuous mode [ 200.099737][T13081] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.287879][ T81] team0 (unregistering): Port device team_slave_1 removed [ 200.371889][ T81] team0 (unregistering): Port device team_slave_0 removed [ 200.832602][ T5944] Bluetooth: hci3: command tx timeout [ 200.966563][T13053] team0: Port device team_slave_0 added [ 200.991564][T13053] team0: Port device team_slave_1 added [ 201.037842][T13053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.040098][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.048604][T13053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.053053][T13053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.055227][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.064298][T13053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.106022][T13097] binder: 13096:13097 ioctl c0306201 200000000100 returned -22 [ 201.106325][T13053] hsr_slave_0: entered promiscuous mode [ 201.111513][T13053] hsr_slave_1: entered promiscuous mode [ 201.112008][T13053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.116686][T13053] Cannot create hsr debugfs directory [ 201.522484][ T5989] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 201.641465][T13053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.646721][T13053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.652133][T13053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.657206][T13053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.674433][ T5989] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.678772][ T5989] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.683031][ T5989] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.686864][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.695644][T13103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.726647][ T5989] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.734694][T13053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.750810][T13053] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.761219][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.763583][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.777196][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.779610][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.897232][T13053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.902261][ T2220] usb 6-1: USB disconnect, device number 19 [ 201.928936][T13053] veth0_vlan: entered promiscuous mode [ 201.936149][T13053] veth1_vlan: entered promiscuous mode [ 201.950812][T13053] veth0_macvtap: entered promiscuous mode [ 201.957463][T13053] veth1_macvtap: entered promiscuous mode [ 201.967096][T13053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.976691][T13053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.981101][T13053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.984411][T13053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.987949][T13053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.991602][T13053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.032009][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.034833][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.057330][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.059820][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.268337][ T40] audit: type=1400 audit(1750002687.349:922): avc: denied { ioctl } for pid=13118 comm="syz.2.1833" path="socket:[58138]" dev="sockfs" ino=58138 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 202.326433][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.330285][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.367028][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 202.551238][T13131] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 202.726208][T13134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13134 comm=syz.1.1838 [ 202.952088][ T40] audit: type=1400 audit(1750002688.029:923): avc: denied { ioctl } for pid=13138 comm="syz.2.1839" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x7fff scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.316597][T10897] hid (null): bogus close delimiter [ 203.319747][T10897] hid-generic 0000:0006:0000.000C: bogus close delimiter [ 203.321958][T10897] hid-generic 0000:0006:0000.000C: item 0 0 2 10 parsing failed [ 203.324838][T10897] hid-generic 0000:0006:0000.000C: probe with driver hid-generic failed with error -22 [ 203.368509][ T40] audit: type=1400 audit(1750002688.449:924): avc: denied { map } for pid=13149 comm="syz.2.1843" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 203.553998][ T40] audit: type=1400 audit(1750002688.639:925): avc: denied { lock } for pid=13158 comm="syz.1.1846" path="socket:[61072]" dev="sockfs" ino=61072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.586882][T13163] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1847'. [ 203.594372][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 203.661641][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 203.703966][T13176] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 203.877499][ T40] audit: type=1400 audit(1750002688.959:926): avc: denied { write } for pid=13183 comm="syz.1.1852" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 204.061193][T13196] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 204.135385][T13198] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1856' resets device [ 204.180500][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1858'. [ 204.199595][T13206] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 204.204972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 204.248374][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1858'. [ 204.321017][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 204.344814][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.966401][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.067560][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.147472][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.290887][ T81] bridge_slave_1: left allmulticast mode [ 206.293824][ T81] bridge_slave_1: left promiscuous mode [ 206.295716][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.299769][ T81] bridge_slave_0: left allmulticast mode [ 206.302193][ T81] bridge_slave_0: left promiscuous mode [ 206.304844][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.345165][T13225] nilfs2: Unknown parameter 'barrier' [ 206.353390][T13226] net_ratelimit: 5 callbacks suppressed [ 206.353407][T13226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.497241][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.508014][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.520071][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.525553][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.528161][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.589669][T13236] kvm: pic: non byte write [ 206.593341][T13236] kvm: pic: non byte write [ 206.595710][T13236] kvm: pic: non byte write [ 206.598423][T13236] kvm: pic: non byte write [ 206.600964][T13236] kvm: pic: non byte write [ 206.604029][T13236] kvm: pic: non byte write [ 206.607114][T13236] kvm: pic: non byte write [ 206.610108][T13236] kvm: pic: non byte write [ 206.613566][T13236] kvm: pic: non byte write [ 206.624420][T13236] kvm: pic: non byte write [ 206.687614][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.692940][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.698401][ T81] bond0 (unregistering): Released all slaves [ 206.736227][T13233] vxcan1 speed is unknown, defaulting to 1000 [ 206.780466][ T40] audit: type=1400 audit(1750002691.859:927): avc: denied { listen } for pid=13243 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.842819][T13233] lo speed is unknown, defaulting to 1000 [ 207.012927][T13233] chnl_net:caif_netlink_parms(): no params data found [ 207.162054][ T81] hsr_slave_0: left promiscuous mode [ 207.174064][ T81] hsr_slave_1: left promiscuous mode [ 207.176232][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.178642][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.181529][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.185426][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.210072][ T81] veth1_macvtap: left promiscuous mode [ 207.212463][ T81] veth0_macvtap: left promiscuous mode [ 207.214337][ T81] veth1_vlan: left promiscuous mode [ 207.216243][ T81] veth0_vlan: left promiscuous mode [ 207.261876][ T40] audit: type=1400 audit(1750002692.339:928): avc: denied { write } for pid=13269 comm="syz.3.1874" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.263843][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 207.338330][T13275] ================================================================== [ 207.340923][T13275] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 207.343283][T13275] Read of size 1 at addr ffff8880593747e0 by task syz.1.1875/13275 [ 207.344661][ T40] audit: type=1400 audit(1750002692.419:929): avc: denied { write } for pid=5850 comm="syz-executor" path="pipe:[4095]" dev="pipefs" ino=4095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 207.347167][T13275] [ 207.347177][T13275] CPU: 3 UID: 0 PID: 13275 Comm: syz.1.1875 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 207.347191][T13275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.347199][T13275] Call Trace: [ 207.347203][T13275] [ 207.347208][T13275] dump_stack_lvl+0x116/0x1f0 [ 207.347509][T13275] print_report+0xcd/0x680 [ 207.347525][T13275] ? __virt_addr_valid+0x81/0x610 [ 207.347538][T13275] ? __phys_addr+0xe8/0x180 [ 207.347550][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.347563][T13275] kasan_report+0xe0/0x110 [ 207.347578][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.347591][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.347604][T13275] __kasan_check_byte+0x36/0x50 [ 207.347619][T13275] lock_acquire+0xfc/0x350 [ 207.347636][T13275] ? __pfx___mutex_lock+0x10/0x10 [ 207.347654][T13275] _raw_spin_lock+0x2e/0x40 [ 207.347666][T13275] ? __futex_pivot_hash+0x1dd/0x540 [ 207.347681][T13275] __futex_pivot_hash+0x1dd/0x540 [ 207.347696][T13275] futex_hash_allocate+0xad1/0xf00 [ 207.347711][T13275] ? __pfx_futex_hash_allocate+0x10/0x10 [ 207.347726][T13275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.347741][T13275] ? cap_task_prctl+0x2af/0xa80 [ 207.347760][T13275] ? static_key_count+0x5a/0x70 [ 207.347773][T13275] futex_hash_prctl+0x1f4/0x650 [ 207.347789][T13275] __do_sys_prctl+0x171f/0x24c0 [ 207.347800][T13275] ? __pfx___do_sys_prctl+0x10/0x10 [ 207.347813][T13275] do_syscall_64+0xcd/0x4c0 [ 207.347830][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.347841][T13275] RIP: 0033:0x7f43d6f8e929 [ 207.347850][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.347862][T13275] RSP: 002b:00007f43d4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 207.347872][T13275] RAX: ffffffffffffffda RBX: 00007f43d71b5fa0 RCX: 00007f43d6f8e929 [ 207.347879][T13275] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 207.347885][T13275] RBP: 00007f43d7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 207.347892][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.347898][T13275] R13: 0000000000000000 R14: 00007f43d71b5fa0 R15: 00007ffe05d8d748 [ 207.347908][T13275] [ 207.347912][T13275] [ 207.425281][T13275] Allocated by task 13276: [ 207.426635][T13275] kasan_save_stack+0x33/0x60 [ 207.428109][T13275] kasan_save_track+0x14/0x30 [ 207.429620][T13275] __kasan_kmalloc+0xaa/0xb0 [ 207.431088][T13275] __kvmalloc_node_noprof+0x27b/0x620 [ 207.432794][T13275] futex_hash_allocate+0x49d/0xf00 [ 207.434427][T13275] futex_hash_prctl+0x1f4/0x650 [ 207.435973][T13275] __do_sys_prctl+0x171f/0x24c0 [ 207.437521][T13275] do_syscall_64+0xcd/0x4c0 [ 207.438977][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.440850][T13275] [ 207.441626][T13275] The buggy address belongs to the object at ffff888059374780 [ 207.441626][T13275] which belongs to the cache kmalloc-cg-64 of size 64 [ 207.445989][T13275] The buggy address is located 32 bytes to the right of [ 207.445989][T13275] allocated 64-byte region [ffff888059374780, ffff8880593747c0) [ 207.450415][T13275] [ 207.451170][T13275] The buggy address belongs to the physical page: [ 207.453179][T13275] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59374 [ 207.455898][T13275] memcg:ffff88803b73f201 [ 207.457243][T13275] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 207.459451][T13275] page_type: f5(slab) [ 207.460733][T13275] raw: 00fff00000000000 ffff88801b849a40 ffffea0000f295c0 dead000000000004 [ 207.463394][T13275] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88803b73f201 [ 207.466091][T13275] page dumped because: kasan: bad access detected [ 207.468087][T13275] page_owner tracks the page as allocated [ 207.469878][T13275] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7328, tgid 7327 (syz.1.387), ts 66948715546, free_ts 66882845506 [ 207.475696][T13275] post_alloc_hook+0x1c0/0x230 [ 207.477217][T13275] get_page_from_freelist+0x1321/0x3890 [ 207.478964][T13275] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 207.480837][T13275] alloc_pages_mpol+0x1fb/0x550 [ 207.482400][T13275] new_slab+0x23b/0x330 [ 207.483724][T13275] ___slab_alloc+0xd9c/0x1940 [ 207.485221][T13275] __slab_alloc.constprop.0+0x56/0xb0 [ 207.486906][T13275] __kmalloc_cache_noprof+0xfb/0x3e0 [ 207.488561][T13275] copy_cgroup_ns+0x207/0x700 [ 207.490046][T13275] create_new_namespaces+0x34a/0xa90 [ 207.491680][T13275] copy_namespaces+0x468/0x560 [ 207.493202][T13275] copy_process+0x2822/0x76a0 [ 207.494667][T13275] kernel_clone+0xfc/0x960 [ 207.496044][T13275] __do_sys_clone+0xce/0x120 [ 207.497512][T13275] do_syscall_64+0xcd/0x4c0 [ 207.498956][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.500767][T13275] page last free pid 0 tgid 0 stack trace: [ 207.502585][T13275] __free_frozen_pages+0x7fe/0x1180 [ 207.504215][T13275] tlb_remove_table_rcu+0x116/0x1a0 [ 207.505878][T13275] rcu_core+0x799/0x14e0 [ 207.507222][T13275] handle_softirqs+0x216/0x8e0 [ 207.508756][T13275] __irq_exit_rcu+0x109/0x170 [ 207.510234][T13275] irq_exit_rcu+0x9/0x30 [ 207.511537][T13275] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 207.513287][T13275] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.515169][T13275] [ 207.515958][T13275] Memory state around the buggy address: [ 207.517718][T13275] ffff888059374680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 207.520206][T13275] ffff888059374700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 207.522714][T13275] >ffff888059374780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 207.525201][T13275] ^ [ 207.527442][T13275] ffff888059374800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 207.529952][T13275] ffff888059374880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 207.532448][T13275] ================================================================== [ 207.535208][T13275] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.537494][T13275] CPU: 3 UID: 0 PID: 13275 Comm: syz.1.1875 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 207.541215][T13275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.544679][T13275] Call Trace: [ 207.545757][T13275] [ 207.546699][T13275] dump_stack_lvl+0x3d/0x1f0 [ 207.548163][T13275] panic+0x71c/0x800 [ 207.549436][T13275] ? __pfx_panic+0x10/0x10 [ 207.550853][T13275] ? irqentry_exit+0x3b/0x90 [ 207.552338][T13275] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.553988][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.555467][T13275] ? check_panic_on_warn+0x1f/0xb0 [ 207.557094][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.558622][T13275] check_panic_on_warn+0xab/0xb0 [ 207.560184][T13275] end_report+0x107/0x170 [ 207.561574][T13275] kasan_report+0xee/0x110 [ 207.562999][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.564499][T13275] ? _raw_spin_lock+0x2e/0x40 [ 207.566010][T13275] __kasan_check_byte+0x36/0x50 [ 207.567547][T13275] lock_acquire+0xfc/0x350 [ 207.568981][T13275] ? __pfx___mutex_lock+0x10/0x10 [ 207.570573][T13275] _raw_spin_lock+0x2e/0x40 [ 207.572009][T13275] ? __futex_pivot_hash+0x1dd/0x540 [ 207.573651][T13275] __futex_pivot_hash+0x1dd/0x540 [ 207.575223][T13275] futex_hash_allocate+0xad1/0xf00 [ 207.576848][T13275] ? __pfx_futex_hash_allocate+0x10/0x10 [ 207.578620][T13275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.580458][T13275] ? cap_task_prctl+0x2af/0xa80 [ 207.581974][T13275] ? static_key_count+0x5a/0x70 [ 207.583517][T13275] futex_hash_prctl+0x1f4/0x650 [ 207.585058][T13275] __do_sys_prctl+0x171f/0x24c0 [ 207.586624][T13275] ? __pfx___do_sys_prctl+0x10/0x10 [ 207.588236][T13275] do_syscall_64+0xcd/0x4c0 [ 207.589697][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.591513][T13275] RIP: 0033:0x7f43d6f8e929 [ 207.592987][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.598904][T13275] RSP: 002b:00007f43d4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 207.601509][T13275] RAX: ffffffffffffffda RBX: 00007f43d71b5fa0 RCX: 00007f43d6f8e929 [ 207.603990][T13275] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 207.606470][T13275] RBP: 00007f43d7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 207.608911][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.611366][T13275] R13: 0000000000000000 R14: 00007f43d71b5fa0 R15: 00007ffe05d8d748 [ 207.613889][T13275] [ 207.615491][T13275] Kernel Offset: disabled [ 207.616882][T13275] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:51:32 Registers: info registers vcpu 0 CPU#0 RAX=000000000000001a RBX=0000000000000003 RCX=ffffffff95d3e520 RDX=0000000000000000 RSI=ffff888027cbd3e8 RDI=ffff888027cbc880 RBP=ffff888027cbc880 RSP=ffffc9000353f600 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000078 R11=0000000000000001 R12=ffff888027cbd370 R13=ffff888027cbd3e8 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff81985bc6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd4320e7d60 CR3=0000000028c83000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd4315846a3 00007fd4315846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5d1d9e10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555701e2b17 00005555701e2720 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555701f8639 00005555701f8100 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88030008000a8003 0fffffffffffff04 09f0030fffffffff ffff0409e0030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101981000098004 141000060102a400 08000a9003000800 0a88030008000a80 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 0409f0030fffffff ffffff0409e00300 080009d803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09d00300080009c8 0300080009c0030c 800409b003000000 00050000b810080b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030b800409a003 7008000998032008 000990031fcac092 c008000988030100 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff8b80e161 RDX=fffffbfff215028b RSI=0000000000000008 RDI=ffffffff90a81450 RBP=ffffc90003e9f798 RSP=ffffc90003e9f5e0 R8 =0000000000000000 R9 =fffffbfff215028a R10=ffffffff90a81457 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8b813f57 R14=0000000000000001 R15=0000009209719671 RIP=ffffffff81a15cd0 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd5cfb46300 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f700a3b7bac CR3=000000003ba5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0372800b0a05a7e5 1bdde9bbb1f133de 0372800b0a05a7e5 1bdde9bbb1f133de 0372800b0a05a7e5 1bdde9bbb1f133de 0372800b0a05a7e5 1bdde9bbb1f133de ZMM18=211706ae0eff9063 b2450a6218a661d9 211706ae0eff9063 b2450a6218a661d9 211706ae0eff9063 b2450a6218a661d9 211706ae0eff9063 b2450a6218a661d9 ZMM19=6c0b000000000000 0000000000000005 6c0b000000000000 0000000000000004 6c0b000000000000 0000000000000003 6c0b000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600050000 0000000000a30000 0008000800020000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0012020003020296 081f80031f800400 03000401a0030008 0001900306100001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003040800061000 1e100006026fe820 908010001ffe1000 0004060074ae0023 ZMM24=18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 18a661d918a661d9 ZMM25=b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 b2450a62b2450a62 ZMM26=0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 0eff90630eff9063 ZMM27=211706ae211706ae 211706ae211706ae 211706ae211706ae 211706ae211706ae 211706ae211706ae 211706ae211706ae 211706ae211706ae 211706ae211706ae ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 6a0b00006a0b0000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000ee RCX=ffffffff819b8272 RDX=ffff88801cbb0000 RSI=ffffffff819b8260 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff88802945a440 R15=ffffc9000078fc60 RIP=ffffffff819b8262 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43d4dd4f98 CR3=000000004ff59000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd33219a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4928211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000067c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 000000000000067c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff92000801dbe RBX=ffffc9000400f1fd RCX=ffffffffffff1060 RDX=00000000000001f0 RSI=ffffc9008400f1f5 RDI=ffffc9000400f1fd RBP=dffffc0000000000 RSP=ffffc9000400ed98 R8 =0000000000000005 R9 =000000000000002f R10=0000000000000018 R11=0000000000005e30 R12=0000000000000801 R13=00000000000001f0 R14=ffffc9008400f1f5 R15=0000000000000025 RIP=ffffffff8b7c48ed RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f43d4df66c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e75ffff CR3=000000002903d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeadbc300 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f700a211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000