last executing test programs: 1m6.935747967s ago: executing program 0 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0xf, 0x40, 0x7}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000), 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@code={0xa, 0x65, {"663e0f38f1355a3b0000460f01c90f2081b805000000b9002000000f01c1450f01cf410f005812420f216fb9800000c00f3235000800000f3048b87abccaf1000000000f23c00f21f83500000e000f23f8430f09"}}], 0x65}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 1m6.826951281s ago: executing program 0 (id=997): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) socket$netlink(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0xa) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 1m6.822519309s ago: executing program 0 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0x4}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$FE_READ_SNR(0xffffffffffffffff, 0x80026f48, &(0x7f00000001c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r9) syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r12 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x80, 0x83}, {0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_ep_write(r12, 0x81, 0x0, 0x0) syz_usb_control_io(r12, 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6(0xa, 0x2, 0x0) 1m4.846339019s ago: executing program 0 (id=1036): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r4, r2, 0x2) setns(r0, 0x24020000) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 1m3.957104655s ago: executing program 0 (id=1047): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) (async) close(0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) 1m3.547081358s ago: executing program 0 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 1m3.518669214s ago: executing program 32 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x48968}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}]}]}]}, 0x50}}, 0x80000) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) 32.988423748s ago: executing program 4 (id=1575): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) (rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={r2, 0x7, &(0x7f0000000040)=[0x1, 0x101, 0x5, 0x8, 0x400, 0xc000, 0x4], &(0x7f0000000080)=[0x8, 0xbfa8, 0x9, 0x4], &(0x7f00000000c0)=[0x6, 0x8, 0x4, 0x101]}) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e01283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000000000000000004209595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056252c6855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"], 0x0) 32.988171503s ago: executing program 4 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x381}, 0x9c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f0000000200)=[&(0x7f0000000000)='\x00', &(0x7f0000000040)='{-\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='!{\x00']}}, 0x30) 32.86928541s ago: executing program 4 (id=1580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x55}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0xf9, 0x2, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x1, 0x8, 0x3, 0x100}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0xb01}, 0x14}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0xffffffffffffff1e, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x8804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r10, @ANYBLOB="80007f0a08000f00070000000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x38}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0xfffff1e4, 0x7}}) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r15, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r13], 0x7c}}, 0x24000004) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x6edb07f53e2de647}, 0x20000000) 32.808832922s ago: executing program 4 (id=1583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x1, 0x2, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 32.729377771s ago: executing program 4 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r4 = socket(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 32.609277857s ago: executing program 4 (id=1587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x2002, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffac}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x800) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 17.601849312s ago: executing program 33 (id=1587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x2002, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffac}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x800) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.180108148s ago: executing program 5 (id=2110): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x0, 0xf9, 0x12, 0x0, 0x31, @empty, @remote, 0x1, 0x8, 0x3, 0x85}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x50c4, 0x30, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{0x820, 0x1, [@m_simple={0x1c4, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x91, 0x5, 0x6}}, @TCA_DEF_DATA={0x9, 0x3, ')%#\xb3\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1207, 0x40, 0x6, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb, 0x100, 0x1, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x20000000, 0x401, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4f39, 0x20000000, 0x0, 0x6}}, @TCA_DEF_DATA={0x13, 0x3, 'batadv_slave_0\x00'}, @TCA_DEF_DATA={0x13, 0x3, 'batadv_slave_0\x00'}]}, {0xd8, 0x6, "122af88ad49b030fec0848864c536097338aaae38b946d00c378f7862dd7601fe615dac2b09a4c4d63e419c63efe5590a77d63478c0bc02bac8040d24c70b3d0df63cc61a352e3b3898c3b091ba63d53e8b6586013f2ed610b1185866fd5d9b3ef43cd1de5877f08d21cccca5bf1a2519b0bcae64366d81ee120d213de188b43df5096bfb7d94e78df2d706cdd4b63620210432e6a13ef03f58d965d00a891d9d2cc9e68b28e7b8096e7ab2ef76965d599a53ef1e910b5ac9fac64e8fcfbd75ae848f385fcefbbf1876d2ebcb1ce0f506ddfaf10"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x150, 0x1c, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x79, 0x10000000, 0x7, 0xfffffffd}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x2, 0x3, 0x3, 0xffffff81}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x841, 0x41, 0x6, 0xa, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8c5}]}, {0xc8, 0x6, "87dec3202ccdb35c9ad5cfaef1bb7ade2d8c62481d5ba2ddf4a7d3ac2658a47abdd0232dddfc5164cc7f40d10d1cb2ff78e431512ef049f6d279c8f3f556edc9e60ed2a4b9ffafb70a585eec1c77ec70dd5b380f8e41bd14f2aa9fc6d74094ec9c20b94f7d9bf929f0ff4a8cd031b92b136c9f2fb45b669838db8465f2d84ec17df02c29b308974f66ee95a75fd2fc7429cd295ca1797462353cbaf52ab2ba7163e68c8e289d04d227821242c193155e164c8eb915379e9cc0462bad0e0a24e707153f75"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x468, 0xd, 0x0, 0x0, {{0x7}, {0x394, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9a, 0x6, {0x3ff, 'filter\x00', 0x9, 0x8, "cddd613fc1d8d52527cf6acee15779339c6c214061c29addab8f2fb52cd1e42f18fec379e979405ad31de4161b3e0762ea53ee16aac10cf5cc95cab8d036c266c29dd5ba9646f2f994cc52397cd7e1cf891e3776785f573d069c12125d0620eb855f88eb2a3943a530ca8bcc3f809186"}}, @TCA_IPT_TARG={0x129, 0x6, {0x2, 'raw\x00', 0xa, 0x6c89, "6eda3cdf60a744b44feb907ebabb4468afca19179301e291f1ee89047a1f9a2173f021248d1d72c1b318aa98ee8d3f6c7c7e9a37fdccc9225b6a13050d44c6c8422b1bb0cc7e505747027d6a8bd9ace9b6a058b21b084006ee926d22c7584a2ee80ce336c38619cceb5190be8fd73a056967e6e62ac31f7291c3d0f1f8fda66a9836a8a764c14d8b3833026af58624b7de50e42229505da1a13ae568188649eb288e96da9ae9062a7bd3b8702b0b0481173f5a2115a0849b568b553fe1d9ee9e5759c22e5debda8803081de83e0a7ad757ec7f062f347ca559cc2932f23e85c969e5306d00e31592580bae43ceb4017553f768c990e55d05001f0d0fd0a97c"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x106, 0x6, {0x3ff, 'mangle\x00', 0x9, 0x400, "5119a1ac0cac33f69d9604a5a7c15cec54cec1b7f46cdf24471be43fecee615067000379121342d2267e3d7cc1e4bd20dd38bc31bb7734803a96ad9cdf2d1324d4eeee8793227d1d85c784669e3fd2db15df04bca90e72c26f66e105e6487ad060653410697a37cfc882c7045993957ea3f94282cd40900deb1149ae723208459af846ab35f0cfd0f087fa87039924db4f2dcc92f87c680808ceb8b7ea42c9f6be6432494226ced78063d1e9c6992decccd0e914f91f11025130fb1355d2f5288428881f596a12a6d0f2d0b0f416cacf1cc6761235b39d84e15bec61"}}, @TCA_IPT_TARG={0x60, 0x6, {0x4f8, 'filter\x00', 0x3, 0x7fff, "b3b21c5e7bc02d53151be2ff0d3e968645a702ee4da4775b72ff5d94e0d8e31dcb3a5767e8ecda6b78958b235e48ce3091314b3fcc8b"}}]}, {0xb0, 0x6, "68b2442b2ad5d3090f2f6b4ae83740775a3021dc9bc19dad5761b589c602b2135a6b062e597aea4feae0d0b244df1fdca847e7c5be3f40c0be280764b306aa0c4eebb0c22d52d80888b697c6b65cd7ee282a8fb076539405de340003f0971cd5fdb0131bd6f9940ffa8b4bd38a1cd9f59764c9a123ccca5559f1eaedacbf7ce21b109a2649f727dd047223ac02467215bb11a390f9aceb585b77e70d42213388aa9f5fb38b2747548e273b49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xa0, 0x11, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="2e3e5c43deea"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4f, 0x6, "a142256dd9577e29e2703285d746a54c09709d86007dc79640e73014829efc3134f48f98b978ab1f63a19e65171b53c066173924f710eef491a12c9e99aee1949cb3c7e9065b25ffaa1769"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x2748, 0x1, [@m_pedit={0x1ec8, 0x6, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x5, 0x2, 0x0, 0x1}, 0x10, 0x0, [{0x0, 0x6, 0x3, 0x7, 0x6, 0x2}, {0xffff, 0x7, 0x4, 0x7, 0x774b}, {0x811d, 0x6, 0x1, 0x40, 0x5, 0x2}, {0x0, 0x9775182f, 0x7, 0x40, 0x8, 0x5}, {0x8, 0xff, 0x8, 0x1, 0x5, 0x5}]}, [{0x8001, 0x8, 0x7, 0x7ff, 0x2, 0x2}, {0x7, 0x16c0, 0x7, 0x0, 0x7f, 0xfca}, {0x483, 0xffffffff, 0x8, 0x1, 0x0, 0x2}, {0x3, 0x4, 0x400, 0x7ff, 0xf5, 0x6}, {0x3, 0x6, 0x2, 0x9d4, 0x9, 0x4}, {0x39, 0x80000000, 0x101, 0xe2, 0xe337, 0x5}, {0x7f, 0x3ff, 0x4, 0x3, 0x6, 0x3}, {0x3, 0x80, 0x4, 0x0, 0x5, 0x1}, {0x6, 0x3, 0x5, 0x81, 0x2, 0x80000000}, {0x6, 0x53, 0x59eb, 0x4, 0x0, 0x5}, {0x8001, 0x54, 0x22, 0xcd70, 0x8b, 0x6}, {0x7ff, 0x3, 0xe, 0x101, 0x4000, 0xf46}, {0x3, 0xf, 0x9, 0x3, 0x1b250eeb, 0x9}, {0x5, 0x5, 0x3, 0x5, 0x49af0aed, 0x3}, {0x5, 0x9b, 0x90a, 0xa, 0x401, 0x80000001}, {0x4, 0x9, 0x4, 0x1, 0x6, 0x8}, {0x3, 0x939, 0x6, 0x1ff, 0x6, 0xe8000000}, {0xae, 0x2, 0x401, 0x80, 0x2, 0x3ff}, {0xff, 0xffffffff, 0x101, 0x1, 0x9, 0x1400}, {0x1, 0x8, 0xfffff800, 0xfffffffa, 0x16000, 0x3}, {0x1, 0xfff, 0x0, 0x7, 0xe028959, 0x8}, {0x1, 0x6, 0xfffffff7, 0x0, 0xc7a, 0x8}, {0x3, 0x6, 0x9, 0x9, 0x3ff, 0x1ff}, {0x5cd, 0x0, 0x4, 0x1, 0x2a2, 0xd6}, {0xd21, 0x8, 0xf66, 0xffffffff, 0x2, 0x400}, {0x9, 0x200, 0x7, 0x1, 0xfffffffb, 0x2}, {0xfffffff7, 0x80000000, 0x8, 0x6, 0x401, 0x80000000}, {0xffffffff, 0x0, 0x7, 0x2, 0x4}, {0x9, 0x0, 0x6, 0x9, 0xffffff80, 0x7}, {0x100, 0x1, 0x9, 0x2, 0x4f20, 0xbd1}, {0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x3}, {0x1, 0x1, 0x0, 0xfffff64d, 0xffffffff, 0xfff}, {0x1, 0xcbee, 0x0, 0x7, 0x8001, 0x5}, {0x439, 0x1, 0xecec, 0x7f, 0xffff9581, 0x1000}, {0x9, 0x1, 0x3, 0x6, 0x7ee, 0xeb72}, {0x57, 0x6, 0x7, 0x8a2, 0x9, 0x1}, {0xe1, 0x0, 0x8, 0x1, 0x7b6, 0x7}, {0x8, 0x9, 0x1, 0x80, 0xb, 0xec2f}, {0x5, 0x5, 0x9, 0x0, 0x2, 0x101}, {0x8, 0x0, 0x377, 0xd5e4, 0x7, 0xffffffff}, {0xed, 0x6, 0x9ac, 0xffffffff, 0xff, 0x4}, {0x1, 0x7, 0x5c, 0x0, 0x6, 0x80000000}, {0x5fc4, 0x2, 0x5, 0x9, 0x8, 0xcc9}, {0x81, 0x2, 0x8d00, 0x7, 0x6, 0x6c9}, {0x85, 0x4, 0xc, 0x2, 0x8, 0x1}, {0x8, 0x6, 0x3, 0x6, 0x14000, 0x800}, {0x4, 0xe, 0x8, 0x4, 0x80000000, 0x7}, {0x6, 0x0, 0x1, 0xffffffc0, 0x9, 0x42d1}, {0xf, 0x7ff, 0x3, 0x10, 0x4064, 0x6ca8e299}, {0xaf97, 0x5, 0x8, 0x9, 0x0, 0xfffff363}, {0xa, 0x9, 0x1, 0x0, 0x8, 0x10}, {0x1, 0x4, 0x5, 0x7, 0x3, 0xdd84}, {0x7, 0x81, 0x793, 0x1, 0x7, 0x401}, {0x4, 0x5d0, 0x5, 0x1, 0x6, 0x40}, {0x8, 0x7, 0x2, 0x90c, 0x520000, 0x4}, {0x4, 0x9, 0xfffffffb, 0x73a, 0x9, 0x1}, {0x7, 0xfffffff5, 0x9, 0x6a76, 0x8, 0x1}, {0x3, 0xc, 0x2, 0xfff, 0x9, 0x1606a7af}, {0x5, 0x0, 0x2, 0x0, 0x9, 0xa31}, {0x6, 0x2, 0x9, 0x1800, 0x8, 0xe9}, {0x80000000, 0x769, 0x29e, 0x7, 0x7, 0x2}, {0x4, 0xfffffc00, 0x3, 0x7, 0x1, 0x4}, {0xc2, 0x1, 0x9, 0x81, 0x5, 0x1}, {0x3, 0x10001, 0x7, 0xa7a, 0x4, 0x2}, {0x2, 0xfff, 0x2, 0x10001, 0x8, 0xffffff00}, {0x8, 0x8b2a, 0x9, 0x4, 0x49, 0x2}, {0x1c3, 0x3, 0xffffffc0, 0x788, 0x6, 0x3}, {0x4, 0x9, 0xa, 0xfffffffd, 0x3, 0xc7a3}, {0x1db4e000, 0x2000, 0xffff34a5, 0x6, 0x5, 0x2}, {0x3ff, 0x7fff, 0x8, 0x5, 0x4, 0xffff4ebd}, {0x5, 0x5, 0xe2c0, 0x6, 0x45c, 0x3e}, {0x7ff, 0x4, 0x6, 0x439a, 0x7ff, 0x5}, {0x7, 0x0, 0x40, 0x6, 0x80000000, 0xb}, {0x7, 0x203c, 0x0, 0xe71f, 0x1, 0x3}, {0x2, 0x0, 0x4, 0x6, 0xfff, 0x7fff}, {0x401, 0x5, 0x1, 0x7, 0x127, 0x5}, {0x7ff, 0x2, 0x7fffffff, 0x7fffffff, 0x7, 0x69}, {0x100, 0x80000001, 0x100, 0x0, 0xc0000000, 0x1}, {0x7, 0x0, 0x2, 0x9a25, 0x1, 0x3}, {0xffffffdb, 0x1, 0x6, 0x4, 0x2}, {0x3, 0x80, 0x3, 0x80000001, 0x101, 0x7}, {0x1, 0x101, 0x0, 0xe, 0x8, 0x4}, {0x3, 0x2, 0x5, 0x8, 0x5, 0x36cd}, {0xff, 0x845, 0x8, 0x159, 0x7, 0xffff8000}, {0x6, 0x3, 0x8000, 0xb4, 0xffff, 0x6}, {0x6, 0x8000, 0x3, 0x6}, {0xc, 0x0, 0x4, 0xc, 0x1000, 0xb}, {0x0, 0x1, 0x9, 0xed4, 0x5, 0xd8e4}, {0x0, 0x6, 0xffffffff, 0xfff, 0x5, 0x80000000}, {0x0, 0x80, 0x80, 0x6, 0x2, 0x2}, {0x7, 0x4, 0x18f6, 0x3, 0xffff, 0x1}, {0x3, 0x8, 0x8, 0x1, 0x6, 0x8}, {0x7, 0x3, 0x19a9c0, 0x0, 0x1, 0x10001}, {0xdcd, 0x6, 0x10001, 0x4, 0x4, 0xffffffff}, {0x8, 0x9, 0x3, 0x4, 0x401, 0xfff}, {0x5, 0x76f5, 0x1, 0x6}, {0x4, 0x6, 0x9, 0x7, 0x8, 0x7}, {0x9, 0x43a2, 0x3, 0xc, 0x6}, {0x7, 0x6, 0x5, 0x8000, 0x1000, 0x3ff}, {0x10000, 0x1ff, 0x5, 0x6, 0x6, 0x8}, {0x3, 0xbf0, 0xf42, 0x6195, 0x7, 0x2}, {0x9, 0x4, 0x6, 0x0, 0x9, 0x88df}, {0xffffffff, 0x9, 0x80000000, 0x6, 0x9, 0x8000}, {0x4, 0x1000, 0x4, 0xd550, 0x6}, {0x6, 0x5, 0x6, 0x3, 0x1d, 0x5}, {0x7, 0x569f, 0x2, 0x7f, 0x42, 0xe61}, {0x8001, 0xfffffff8, 0x6, 0x101, 0x3, 0xffffff6a}, {0x2, 0x2, 0xe, 0x8001, 0x3}, {0x240, 0xffff, 0x8001, 0xe, 0x4, 0x6}, {0x1000, 0xa, 0x0, 0x5, 0x7fffffff, 0x1}, {0x5, 0x8, 0x27bc00, 0x8, 0x8, 0x8ec0}, {0x1, 0x6, 0x4d6, 0x3, 0x5f8}, {0x60000000, 0x0, 0x4, 0x7fffffff, 0x4, 0x1}, {0x5cfc, 0x2, 0x3, 0x401, 0x6, 0x2}, {0x8000, 0x24f, 0xd, 0x0, 0xfffffffa, 0xfffffff9}, {0x3, 0x6, 0x9, 0x4, 0x5, 0xffffffa2}, {0x0, 0x3, 0x5, 0xcbf, 0x54, 0x6}, {0x1, 0x1, 0x1, 0x4, 0x51, 0x7}, {0x0, 0x9, 0x5, 0x3, 0xfffffffa, 0xffff}, {0x9, 0x5b3, 0x7f, 0xfff, 0x7, 0x9}, {0x0, 0x8, 0x2, 0x9ff1, 0x6, 0x5}, {0x9, 0x4, 0x9, 0x81, 0x80000000, 0xfff}, {0x8, 0x0, 0x9, 0x1, 0x5, 0x7fffffff}, {0x98, 0x5, 0x0, 0x4, 0x3ff, 0x9}, {0x6, 0x7, 0x7fff, 0x7, 0xfffffff9, 0x8000}, {0x7fffffff, 0x9, 0xfffffffe, 0x7, 0x5d3c, 0x400}, {0x40, 0x1, 0x2, 0xfffffff8, 0x2, 0x2}, {0x4, 0x5, 0x9, 0x7, 0x7, 0x3ff}], [{0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {}, {0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x8}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1f06125a76e0f3bd}, {0x6, 0x1}, {0x0, 0x1}, {0x5}, {0xede0e616b12854e5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0xee99cec24f447e45}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x1004, 0x6, "732004bf9eb8b40fb03d18db0ea4c275047656977a78364e23f3597e8503a83057b549b5dbcd2ccb6ddb5f8ee2f8d110673628e603d7dc6687c7eac9a765ccdf6eb936af4006a9a503923664f7ee697f1a5dcdc277b593bc64fb23951ea0385bf5ae31e7899725813ceec13ac2269040728548db3f0eb26c58407b29f7f84c0e0021f26125b7edbfbe51e9e1c5ede5fd461f5909a42c75bbb16deddb6300e4fd66758a07e24121bb8ce970dc8df8161ae06c78e2779f6ae900107732e0d0528e990463b587e47cfb70515d0b80b95375f84e68fe3bb03de4c18cc0e243f67f6de8f9c4f2f43988f0e864b060f9549eb1bb88da58e645108fff4aa2c5c7cce094ac8d01468ed63ac526dffb64a12dbcac843b7a4ee221784ad1e43cd7a23f5d539f2a2014582348b11b194743bba0eadef47946ddc100b9d59f049e8ae2c4fe81405820a8b90be3c3f8d16a415a59c459c12ce4215938840d89f736017827d1fbeedfd433b494f7505a724af6d98f063e6d035af985fed4df71ee008f128b8df69332dc316846bfec9ef5694411f859d11635e3e7631acf255c1e1b174c454e875e1c1f6bcacd2d035b0f407233f20d2b54dcee94745693e5a011909047a554b92a08b8d2bcc647d09280e007e47264b21a750d832927667f3632dad61b86da1a3b3086b71636b9fe9097cbc4964861466c62a01c589e6d1d541404a0428c24913180cf19a78f78d98ea9910af963acf371b51a46fc52c7b0bd2a5b86020abb1f1f14876f801eeaa90415fe0e7e3c40fd00f414cdaff6298fafb7e3f09f0ebb7326ead8074a37fb83929c08aa83033d3781b40ea47a8e9803a142e0a2ffbf913779c6ec83da0e47354ba1d345a53b9dd57245774eacebe21a43b4f0d0fa81bf5ef3b7b935c7b1c941bbd17ce387e49cf52dbb18e00945ad47b489bf10aaded8c88a4de424ed0dbfd2b793831306b5c569e52cdf96215e8a92fe7fa45f126b4e02d985c4772b9ad7cfd3614b52b7d7e5c73e73e3f8e06f33a0110eaad700308164d30cd7333b17e724d02013a0c40083213a943a2ae38cf16a6b7e722fc57b45c7bcf769835d795afa06c5f1929959a704fdaa6246b8117879ea06db72db4cf246f8d56ba12b784d38021b35dc40567fb46e8813c21fbd03ac35c5f74204fea928f7c5e7080738e611f35f17dd443dc077fc0142be4c5ac7fbcd3461d0766398eac582fb9c7ab454bee39da681cfbc6c1672f415cea55258191a88787584038f3cff9259cf72f49dfe348bf7ac70e560b3d83a957a35808769465a5b5fa78566dd4d4d64d2ebec09a6181fca196a6e379af56f6e3d5c721b48caee94fc3ad8b1b349ba5f942b19afe40449757dee19aabb06337e4975ff7a48bed4f15ede45ce78f91ba54c3fa05cd1967a52bcd05901979ab7f33b4e0a3c4443ec375fe61288e23d590005f811904d7aacf0a522d3a799a4ab8bded9f15ffb0b96553837ed12d20cb67c1f0d00e20bf9ca0ebfe53ffe0cbc055994c992f8846adcf151631a71bbe5f53f2af8d8bc934300898e8a6645168b98e140a774563b26f8005a6969cff1f8cb1aea4dc53355a45f3f5b332357099fdfc9f7ef426512e93f24a98c8bdc8c2bfa6395ec90fb5d2f1996f7b1c5018f31146009c59b834cb5177c97ba2c58869eb041dfb2310319054f04de63e5bde7915bf2de6183f0abe9f9c1cad8fca5b161e1f2484ba4a866e99d333a37d7ad23f9c0090c7f0d34f398f51a70ffad779d73bf6946fa3f4135193ab878437a3afc3412fbae91ece8105b558bfc9aa9218be47edbe1480dddf4d7c7003e15ab7c6d0e1df0226382a48ecc1e0b031170d6801e6822b678b1c0335d56e90c101db55146f0af5d8e40a1f319a3a20eef67a4d218933994acb1b6c9a47e7db651e73cab4f1f2023b6ea432811b6304f0ad02e010df41b3eb9016f5c00188a99b3116dcd9c5a12d3fcc63e1d5c80d21ba725694fde0b81f5703c7a672d1f1b64ff0c3f4a143ebc8353ef3c3122265b9bf55bedf854181c6742acad77accdf4c1d57aa45588e16e8e39792cd14e671f7a41fbcf826a8df76d92b642d4488f7b9186451318a576af979ba4bec2ef6213b83ec614adb553907b011d0c687e90a18a555f6150d8083a9fc682a9888f759a60fea957874a99e4e79b9b930130256ef56ad14316fa53bc38536356a7e36cc33a16c65fc5276eb11c3b1267a9d8429cf91cbc2cddb49db298b6f3f97f084eb5c751df96ae6ceb3ceefeea12376d6b607267f1ff3e890cce879fe9f5fab5dcde63c8d9c97a05502418344638bdd4025c5223b169d2ac98d3f52f19fd7af35551c287c6e37a8418791fd4ded138e86a3fb75aa532255537a04b8768c1e5441e707f7f70c7253f5368b55b0f837f31acb5e6023a7278903558c3dc98e7d36fac285e2aa56c9c21a3ccbc536dcfd1318ec3539d99056f623384e6b0f8c82b136d39071d62d13e12080c9c289701eddb8559c57d3f5645c1155c5616856ac180fa285cb7aee600001ae7edd0ca9cafd79454fd45bb91e9e23c77456b8c467cfaf2f047f21082a4f8ed9c08ddfbca404516a6fa12c4e95885307a31297005009ef2b29ba7945aa09d1ee4add8f72813bac0c7f8418bdbcbc0689acedbe6fb6d8cf867fa1c897de4bd65ed17957cddccc1b51bf30f4446d797f673889bd9d505dcdf056ec2f932883bcf4f4ba6f04c5ad1dc6261e03c17296a3376085f75d2ebdc8a782f1fff784ab98ecc4cfc3e316663c1d5c166bc1b174460771f9f9f37953661fbc0b6303b7f6dac7412c54bf5e7ebfa45dc6f977208f63376c883928b2b5103a96a7907e8e37be329f5232a5ff54a2fd238135dade57dce8c5f8c64c8231437214f216a38aa5dde7c9f02c3fc168f75bbfdd75b046fe16fa82166fd9cea16f70e96f9153dfc76daaa0afbad608e0c7583768c0528271ba78537ac9bbeb9a259cee4c126729eac15ab7c4e36d98490407d08fb08e432a8d7bdaa2f8180b8885420c5a298132564a54f35696ee72b93fbeed2cb5fa07837799e407aeb24c03985f031b96e096d454812ae9b0282ae4778d9212aefd7e726ed68053fa07055a986a4b44076eb8414a62274f371ac40563cfde0211e3d025687166b35f138e74341249d9a2f3621676978ac65d85c0c9893b41f711f03e81840a1a42bc3c5e83d3cbdcca25212f72170524ba755ca739591bb0410ab2c3d1b1b2fb05de50fa314baae51a9da82ed39e584e86f10e4facfca1d238993e3c9e0b6a25837ea976cc2b7d4e5a244f72512ad2bfc8e36cfcd79d94bac2ffe859f30fac15a02c4d973fc457da1d95d433b302844adcfae899a3ffc1e4b24176b33b4086cc201b9f8597fb89d34b6e209e44d90c58e75cb30574cdd5166803482f562dbeabbc1afebe21d8343e0e24e049865d3827b3c452b6ad7df8003f5a2c78f9ec07a3c1fa10321a0fa1480b6858f74060a9a40fc67b32a15707fe5401c41acecae75fe5befdf3939be36196a9e02fa68439eabe813befa9d5e3434e2e106ce17dbf214853bdd39eb9d017618a4a83eb8678c4894781d97c4a09e9d09ba7b7c2b9778b2c07940a7fe0ec0da0388f6e5cce7672bee8f4c7364e97b140ec5f2c74db0042387a6a51a5bcb8ad354c513517554c968a42cd183670793437d154dee588876af8f196120d02344c5b317e2008359f0e58461b923a3ce7e90fe8743c10abc88d01297d29dd1604c40b65dc2c91231a86e86fecf87cf3ab6748fbb51eb53f5b12b8b11b6474f5b734b7bbd30f8d00ce6e668223ef758a1facfe60b752040eb0b2e17fafecec4a6c44129684173a5493cc872f82593611e0210899ab8384cc3b5cac27d203c7e3635227e5342a6513ce4de6c431a7235279001790a163974068419960dd4f77f8e90eda3ec4f4c1629898d1708e925b1c5bf2c66f08cce2b206ccbe805cec71d6854df14f43e90234d0c6b246db996e3fceee1f8418b4c6de2539d1d26768fb48987164344e65930c65c6afce3b23dad0feafcf357ae2b9217f8f52b69150fbf25d43696900c6e5fabd41d045a8df7b28b275470e055fd1cb2094dcb9405cdde5120276b81747da68ea5f7e0f691a268ee84d5d39a26a280b489df581d6a913fa32059b887e063997ff240625bdf2f219a08a249015d61f39166e9aa41963a3cd543d42d2a46a6488498dadda1943ecae2f2e959959bf57c110c3d816a51a44cfe52b9f3927f05c911522a95f3d46d19d09cb6570049a4823bf7a68e582538f67808734f7ea37c0df682c05fc278abd7009186906a7ced0d9065a92e1a298a1fc64675b1f56492d9c66169339b2fe3379d4e95fb56a02b3f994b675b03a7f25519165880fa3cf3900c8d3cb0dc2114eee8bd6af74a12fd3423dae2a6d91c9edbaf8603a09b9566931e5f8d6e4900d9b05ec2ddf0120d3806d75d949644018c0573662bdd67c521e583def7dc170869b75a652eec5d48c22dabb12c9d8611ed6df2c2d89be6ec9cf6491d2e0c2aa0d299d2e79e6e057638ec0f2f825ac47cb053655fbcb92b02e0bae377eb4a63653909ba66415b71eb5063d055aa71af3f659e1722a9461b5fae262580923c51f221df0273e274447ed2fa7a3dde3c4c3a23c98c1b187387f91ab0682260c9cc4f7ddaf148ee7ec59ee46718259abb5d903c529c42bbeed1de21374a59d7a154ae8ba822d7cf0f692eb0568e9024e654d8ad1a6dc0cde93dfcf1682477b8ab7576dc1ae61b8f639634b1fa1526244984d3a1a27fd6605647972927beb0f1ea90fece649adbedf32d6ac186ffea48923c101e42043dd7d22ea331851243820250dbe488f4555e6d68b433043921fb1e53a7bcf33e70a872d2b779888a16ae1050c4bffd58eeb52f49127eb4ef3f4898213a60f76d087d2e7b74d5e4c02c33dce7bb2e3b7abad09c0f291e92c43142805031438a29e2d2c3cfee92de08c736a10351a75423ecf6446dbedf63b005d9b0a7e231c4005c2c6a55a81752edbb9f391b7c5cbed22e651ad1e9ecac1751cca25f078c531ec57519c56ce669fff3023b4f9b5b1e44859b508ac75b334387db42f3f9fb8afbdcca628e6ef7c2a8b92617bbc2f17db62317cd32e27e2d5fca0510d1ae6d5522596b0d071241a87cd585e6c130aba1330667cbd334a4ba8c68df0c141b1e95aa108de358bf4387e8691ee4c12048bc919a392d725ae2cad17a9e85aa4231fe9e4cd559a95c443f9275d1d7406796a5b1a868f385d0ec9c626dbc872def9f6e835c8f51c5b0a59d137dad9299fbeabfba4bf9903cb37aad4155c378de74c1a1a1a6983762300fa270bb0e5988bae89ef057ce2f0b911c3d903565bdb2f0bf9916fc88dd3009b52980df110351797b03ac9fca32e08d952681701563b5cbcfc21d8ee8911cb1a3d023039c3008991047b96020e60415cfb7bfaa64b27ab53a7241eeccb7af38ee80b3d5c32c3414d8fefdde500fe0616972ff86f67352de8b7e99cf979fc74c93e74fc094d2604e895e9d11d831aceb7a5acd1791e277fe8248e4eef438aaf46bee14640933ba9fc3406d7a20f7110915d2180c4f72bc6f3ab67d5e83772a64c207418a2614fc875c17192eaf6c8e5b565965b6be56abe10a157c11ffaf8aaef7ab4c54584d86fc533a4a7050bcbb8637a5885c0feaa2b73eeffc911d28336d398df1c3581354c2fcb5f7001301eb953548c36cda610145ad270e99caa1e7841aa6543e45b68171ed1788cc2bd2efafbda468c877333eb171e90c2ace45a6b671"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x1ac, 0x13, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x7, 0xb4, 0x2}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0x8, 0x81, 0x81}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0xffffffffffffffff, 0x9, 0x3ff}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x4a37dd3, 0x38}, 0x426}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x0, 0x1, 0x8}, 0xc6ca}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x10000000, 0x3, 0xa01}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x5, 0x10000000, 0x6, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10200, 0xffffff61, 0x3, 0x7, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xe, 0x6, 0x1, 0x7ff}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0xfffffffc, 0x2}}}]}, {0x62, 0x6, "b59a37efb8ee87db843a1cdb1005b4279d6d47bd11cf7acb4581b275e9c12d86c17133f303ec90e1e26619fa464dc87a904ab5e8a2f92ad0eac0cd157e0a9f672d111c88c74f1e7de81c601b0c2ce5ff786bcf65b191d1262b5e19fc4044"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x10c, 0x3, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x800, 0x3, 0x5, 0x9}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0xfffffffffffffff8, 0x5}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0x20000000, 0x771, 0xff}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0xb, 0x4, 0x81}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf277, 0x8000, 0x8, 0x2, 0x9}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x40, 0xffffffffffffffff, 0x6, 0x1000}, 0x3, r3}}]}, {0x1d, 0x6, "3a583cb2417039ab0b77d318ac3989c640554fb74e5d0a763d"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xf0, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1000, 0x4, 0xb410, 0xfffffe01}, 0x9}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5fa}]}, {0x73, 0x6, "7f122c05e84895df17c5530fd7b3f7edba4fc6f423674a56da2a6cb578e0c35915ed0bb1e2ec717af2317c7de7e83eda66d6685a65e5d6b0f94de6f2d6016f12d29b1ee3a9ab05a8956a44508a2e6dae5265d7f52328d1e78a078e32a588d24982ecda27cb33a44c2157150d06a323"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xf0, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x7, 0x5, 0x9}, 0x1, r1}}]}, {0xa1, 0x6, "9db0efecf145e5042d92d5576882e924ff5ef2547bb09b7861fa6798017829266355b042068d140746a9f9d91dd1906fdccdda9e9a22328c75b6ac147293af6f827fc8f12c91b39b73b9e9da2eb238a2c776f7c28ced6590b0cd1154a9636d7e40686802245b8dae1c3e19184f55d0ab6b83645758fb5366c9861f1cded738c42e07099b3307115511e315718605b5c87159f85d5c13e9000df2b7f565"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x20000000, 0xfffffff9, 0x9}, 0x3}}]}, {0x8, 0x6, "fb796d88"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x114, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xcd, 0x6, "c65d7ec9cd9ded1c7d2216e5197f1b3b234c53bd5f22dad28cb14097aa2d97a593f469dc292d0dbc86b1b855444612d65def07b58f7922dacbddd1f419a57a6746b7d75a0df2e3c9e6291a64f3ed257ef36f18374e1bc5a769c32b79a72fd5280dfdc5bdec87e320004af2c612867e5eaa544719fdfef8393bd36ad8509d38a16a4f6a9f67651fd6c746da6b94b13a145d5e1fb650829fa4720899e6644864fe7b292b99b4eaf5e14314f4e44d627092bea1fd676fb320531d9350a3c3f5a70a84809e5d7b21f2edbe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_skbmod={0x1d4, 0x13, 0x0, 0x0, {{0xb}, {0xcc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80, 0x1, 0x10000000, 0x8, 0x3e3}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0x80000000, 0x7, 0x1, 0x1}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x5, 0x3, 0xc5a4}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x3000, 0x3, 0xffffff52, 0x2}, 0xf}}]}, {0xde, 0x6, "f44d24d905035ad04d41a35de50efce27d7bd759b3a1442d6a324aa8e9b03b4e2d61b95f1e29b3570b90c03eb6883c14f70fab7c83b7cc6bd47007d96e0b057fe586e306f62939d6f9e9fafdb2a6af3a417315305565e1a0faffb0d0648c4aa224e386bb2adb1d567b0d175301b9a1b08c62748c4c115f638e89f5f239874d57caf076e0002d63f262d06580d44103d58d56ff875592053d395501b97b3ffb835a5dc3a974784531d4ac94dc77b03b6a65f72736102a8e5bcece69228672cd53f138383e11cb67259331c52a71f9742f7096bc283df364661e63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0xac, 0x9, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3, 0x1, 0x8, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x87d6}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff0000, 0x5, 0x4, 0x34, 0x80000000}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x879}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x2d, 0x6, "319cd87ccc6fee8a78b38bfb62ec16781ccd193ab25cc97a9e72ab219f4e33bd6395c247c4210c76ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1d88, 0x1, [@m_xt={0x130, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xc3, 0x6, "ab802864de702a84fc51cbb8df062d2150e114262ebe650c6fa9ee917d9f5c56b5254d92aadd80ff020a475a48410e9a8e627ec61442d1e48f3e921064f8be87989d8b41ebc3484bca1067ff25f29b6c448dd3cf6bf9f8dd3af9ff5a3968bcb7b97ae0a524bddc6da5614d0416b548e35aace9705e3812fed8ace96844503d77c7f883b80be1e8cf1c6f4507ef349b57c62c4422e56212646313c9766342c4d2ddda39b80aa0600b1be7c37210052e1b9df83c29d06c4984b31030e08ed847"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xd0, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x9, 0x5, 0x2, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0xff, 0xffffffffffffffff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x59, 0x6, "7386cdf7ff5901bf0eb4d2bf1516a4567bde767e888ad113b363f1200777610afb4af428d7e9b95030192ba262a11cb88d46bf10e4c3e04c529710e8d179cb11f10952b333d1f333c1c3ea61b81b431c9ab5c09eea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x1a00, 0x9, 0x0, 0x0, {{0xb}, {0x196c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xa, 0x4, 0x0, {0x4, 0x1, 0x7, 0x8, 0x9, 0x1}, {0x4, 0x0, 0x8, 0xfff, 0x6, 0x3}, 0x2e00e800, 0x95, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0xc4000000, 0x8001, 0x49fd, {0xc, 0x3, 0x7, 0x1, 0x4, 0x1}, {0x36, 0x0, 0x8, 0x1ff, 0x400, 0x5}, 0x461, 0x9, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x100, 0x800, 0x80000001, 0x537, 0x7, 0x5, 0x3, 0x3, 0x0, 0x0, 0x7, 0x3, 0x7fff, 0x8000, 0x80, 0x9, 0xfffffff9, 0x1, 0x0, 0x0, 0x0, 0x7d9, 0x9, 0x8, 0xff, 0x5, 0xffff2121, 0xffffff80, 0x5, 0x7, 0xee, 0x31, 0x1, 0x8db05a00, 0x800, 0x3, 0x6, 0x3, 0x8, 0x10, 0x2, 0x5, 0x0, 0x9399, 0xb2ab, 0x5, 0x1, 0x1, 0xffffffff, 0x6, 0xabe, 0x8, 0x0, 0x2, 0x4, 0xfffffffc, 0x15, 0x4, 0x8, 0xe, 0x0, 0x8000, 0x8000, 0x2, 0x0, 0x10000, 0x4, 0x3, 0x4e2, 0xffff0000, 0x7, 0x9, 0x6, 0x8, 0x3, 0x52fe, 0xc0b, 0x46, 0x2, 0x6, 0x7, 0x28ae, 0x8, 0x7, 0x2, 0x2, 0xccf, 0xb, 0x9, 0x8, 0x1ff, 0x3, 0x10000, 0x10000, 0x4800000, 0x2c36, 0x1, 0xf51c, 0x7, 0x74, 0x100, 0x40, 0x81, 0x6f4, 0x1ff, 0x7, 0x2, 0x3ff, 0xfffffff7, 0x3, 0x81, 0x8, 0xffff, 0x136, 0x4, 0x3a5c, 0xfffff472, 0x0, 0x8, 0x8, 0x3, 0x200, 0xfff80000, 0x100, 0x4, 0x4724, 0xa6d1ce, 0x8, 0xffffffff, 0xfffffffe, 0x7f, 0x1, 0x2c49, 0x1, 0x9, 0xf, 0x10, 0x9, 0x7ff, 0x8001, 0x1, 0x8, 0x4bb0, 0x4, 0x7, 0x6, 0x1, 0x7ff, 0xfffffffe, 0x2, 0x1, 0x101, 0x8, 0xffff, 0x8001, 0x1, 0x0, 0x7, 0xfffffffe, 0xab95, 0x6, 0x33, 0x400, 0x5b, 0x2, 0x7, 0x9, 0x9, 0xfe, 0x1000000, 0x200, 0x2, 0x7ff, 0x4, 0x4, 0x2, 0xc, 0x3, 0x4, 0x7, 0x7, 0x83, 0x9, 0x9, 0x8, 0x3368, 0x3, 0x0, 0x800, 0x7, 0x1ff, 0x4, 0xb6f, 0x1, 0x5e, 0x7, 0x4, 0x2, 0x285d, 0x40, 0x81, 0x0, 0x1233310a, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, 0x0, 0xb96, 0x1, 0x5f8, 0x3, 0xffffff01, 0x0, 0x0, 0x8, 0x3, 0x6c, 0x3, 0x0, 0x2, 0x2, 0x6, 0x4, 0x9, 0x5, 0x1, 0x0, 0x2, 0xffffffe7, 0x91, 0x4, 0xdf, 0x62, 0x4, 0x551, 0x7f, 0x3, 0x0, 0x228, 0x3, 0xfffffff9, 0x2, 0x3ff, 0x0, 0x0, 0x3, 0xc24, 0x5c7b, 0x7, 0x3, 0x67cb, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x6, 0xfffffff9, 0x7, 0xc, 0x3, 0x100, 0x7, 0x5, 0x9, 0xfffffffe, 0x0, 0x7, 0x800, 0x1, 0x80, 0x6, 0x8, 0x401, 0x9fa, 0x45, 0x7fff, 0x4, 0x7, 0x4, 0xfff, 0x602, 0xfffff000, 0x2, 0x6, 0x7, 0x7, 0xb91, 0x4, 0x8, 0x2, 0x6, 0x2, 0x3, 0xfff, 0x10000, 0x7, 0x3, 0x8, 0x7, 0xa71, 0x0, 0x3, 0xfffffff9, 0x7, 0x5, 0x3, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1, 0x2, 0x5, 0xeb, 0xe3, 0x78e, 0x1, 0x3, 0x76, 0x7, 0x81, 0x3, 0x5, 0x3, 0x0, 0x237b63c4, 0x1cd, 0x400, 0x9, 0x9, 0x37c, 0x3ff, 0x5c1, 0x5b9a, 0x4, 0x9f, 0x10, 0xce, 0x8, 0x1, 0x200, 0xa4f, 0xa, 0x8, 0xff, 0x1, 0x0, 0x7, 0xfffffff8, 0x7, 0x5, 0xd8b, 0x2, 0x3, 0x6, 0x5, 0x3, 0x40, 0x3, 0x5, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0x6, 0x0, 0xf, 0x800, 0x1, 0xd700fb74, 0x7ff, 0xfffffff7, 0x7, 0x7, 0x9, 0x0, 0x6, 0x7fffffff, 0x81, 0x8, 0x1c0, 0x81, 0x4, 0x3, 0xfffffd68, 0x55ab4d38, 0x100, 0x4, 0x0, 0x33f4, 0x200, 0xa, 0x0, 0x7, 0x7, 0xf1c, 0xffffff6d, 0x70000000, 0x101, 0x2, 0x939, 0x4, 0xe, 0xffffffff, 0x81, 0x4, 0xd, 0x4, 0x91, 0x1, 0x5, 0x8, 0x8, 0xa, 0x0, 0x5, 0x509, 0x80000001, 0x4, 0x5, 0x7, 0x6, 0xa25, 0x38, 0xa30, 0x3, 0xee5, 0x100, 0x8, 0x7, 0x1, 0x5, 0x2, 0x0, 0x401, 0x3, 0x3, 0x7ff, 0x3, 0x6, 0x4c, 0x9, 0x5, 0x8000, 0x2ea011e4, 0x7, 0x8, 0xd, 0x3, 0x96b2, 0x2, 0x7, 0x4, 0x4, 0x9, 0xb3a, 0xffffffff, 0xa1, 0x5, 0x4, 0xf1, 0x80000001, 0xa3, 0x2, 0xfffff801, 0x7, 0x5, 0x9, 0x0, 0x1000, 0x2876, 0x7, 0x4, 0x3ff, 0xffffff8b, 0x3, 0x1, 0x5, 0x9, 0x4, 0x0, 0x8, 0x1, 0x1, 0x10, 0x10, 0x80000000, 0x6d5, 0x2, 0x9, 0x7f, 0x2, 0x3800000, 0x10001, 0xfff, 0xacb0, 0x65e, 0x9, 0x6, 0x6, 0x7, 0xb, 0x10, 0xe, 0x9, 0x1ff, 0xfff, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x3, 0x9, 0x0, 0x101, 0x2, 0xbbbf, 0x0, 0xd, 0x1, 0x10001, 0xfff, 0x0, 0x6, 0x40000, 0xf0c, 0x1ff, 0x5, 0x7fff, 0x5, 0x7, 0x8, 0x118a, 0x3f1, 0x3c000, 0x7fffffff, 0x80, 0x4, 0x9, 0x8, 0x101, 0x9, 0x6, 0x6, 0x7f, 0x5, 0xc704, 0x9, 0x10001, 0x5, 0x10, 0x5cf, 0x0, 0x100, 0x9, 0x4, 0x5, 0x4, 0x6, 0xcb6, 0x1000, 0xf, 0x13ff, 0x10001, 0xfffffffa, 0x0, 0x9, 0x1, 0x800, 0x5, 0x81, 0xffff0000, 0x95, 0xffffff1e, 0xa8, 0x10, 0xffffffff, 0x6, 0x400000, 0x9, 0x1, 0xfffffff4, 0x594, 0x3, 0x4, 0x5, 0xfffffffc, 0xad4f, 0x4, 0x943a, 0xba29, 0x5, 0x8, 0x3, 0xffffffff, 0x5c63826e, 0xa, 0x1, 0x9, 0x2, 0x9, 0x8, 0x3d1cfe77, 0xd3, 0x6, 0x1, 0x7, 0x2, 0x7, 0x7, 0xb8000, 0xe8d, 0x1, 0xdfb, 0xe6ba, 0x3, 0x10, 0x642f, 0xffffffff, 0x2, 0x4, 0x1, 0x30, 0x6, 0x1231, 0x81, 0x6, 0x9, 0x6, 0x5, 0x3, 0x0, 0xa, 0x6, 0xffffffff, 0xffffffff, 0x5, 0x4, 0x10, 0x2, 0x80, 0x8, 0xfff, 0x4, 0x0, 0x5, 0x1000, 0x7, 0x5, 0x80, 0x0, 0x4, 0x5ec, 0x0, 0x3, 0x6, 0x5, 0x9, 0x9, 0x8, 0x8001, 0x40, 0x92, 0x10000, 0x443, 0x0, 0x0, 0x1, 0x3, 0xff, 0x6, 0x400, 0xfffffff8, 0x1, 0x9, 0x4, 0x80000001, 0x101, 0x7, 0xfffffff6, 0x0, 0x1, 0x2, 0x7, 0x8, 0xe, 0xa, 0x9, 0x9, 0x4, 0x1, 0x28c, 0x100, 0x1be9, 0x10000, 0x4, 0x5, 0x6, 0x1, 0xb, 0x8, 0x6, 0x7, 0x7, 0x4, 0x0, 0xc, 0x8, 0x0, 0x8000, 0x400, 0xc, 0xfffff33a, 0x3, 0x7, 0x1, 0x2, 0x4, 0x2ea, 0x8, 0x9, 0x10, 0x9, 0x8, 0xb0, 0x6, 0x0, 0x4, 0x2, 0x7, 0xfff, 0x6, 0x2, 0x7fb582c6, 0x5, 0x10000, 0x6, 0x8f, 0x1, 0xd0a, 0xb75, 0x0, 0x10001, 0x1, 0xfffffffc, 0x200, 0x4, 0x2, 0x5f, 0x1000, 0x3, 0x100, 0x7ff, 0x1000, 0x4, 0x40, 0x0, 0xbbf5, 0x100, 0xe2, 0x3, 0x4, 0x5, 0x8, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x0, 0x5, 0x5, 0x4, 0x92000000, 0x8f5, 0x80000001, 0x10, 0x5, 0x6, 0x29, 0x20d, 0x3, 0x40, 0x3ff, 0x4, 0x2, 0x7ff, 0x401, 0x7, 0x10, 0x8, 0x8000, 0x80008000, 0x2, 0x0, 0x8, 0x7b8feae8, 0x5, 0x4, 0x5, 0x7, 0x3, 0x800, 0x7, 0x2, 0xfffffff9, 0x1, 0x9, 0x8, 0x7, 0x2, 0x6, 0x81, 0xffffffff, 0x4, 0x800, 0xfff, 0x9, 0xfffffffd, 0x6, 0x6, 0x5, 0x5, 0x3b, 0x1, 0x8, 0x1, 0x2, 0x0, 0x0, 0x8, 0xe, 0x9, 0x32, 0x22e, 0x100, 0x6, 0x3, 0xffff, 0x4, 0x8, 0x10, 0x3, 0x2000, 0xe, 0x5, 0x1ff, 0x4d, 0x4, 0x2, 0x200, 0x3, 0x3, 0x10000, 0x7, 0x4d, 0x1, 0xfffffffc, 0x5, 0x9, 0x400, 0x0, 0x6, 0x0, 0x7a, 0xb, 0x10000, 0x7, 0x9, 0x8e1, 0x0, 0x5, 0x1, 0x9, 0xffff, 0x6, 0x8000000, 0x6, 0x40, 0x980, 0x0, 0x9, 0x291, 0x2, 0x8, 0xb, 0x6, 0xf74, 0x7fff, 0x5, 0x10, 0x2, 0x1d68, 0x401, 0x0, 0xffff, 0xf9, 0x9, 0x1, 0x8, 0x0, 0x0, 0x2, 0xa, 0x7, 0xba, 0x389, 0x401, 0x2, 0x6, 0x1, 0xbd1, 0x80000001, 0x1ff, 0x3, 0x1, 0x80, 0x1, 0x800, 0x8, 0x7e2, 0x9, 0x1, 0x80000001, 0x0, 0x3, 0x400, 0x3, 0x10000, 0x1ff, 0xdc, 0x4, 0x7, 0x8603, 0x5, 0x4, 0x2102, 0x8, 0x7, 0xa, 0x7fff, 0x5, 0x6e, 0x9, 0x2, 0x9, 0x5, 0x1, 0x9, 0x8, 0xffff0001, 0x0, 0x7f, 0xc, 0x4, 0xffff, 0x4022, 0x1c1c, 0x2, 0xffff6ef6, 0x101, 0x6ea3, 0x6, 0x7, 0x1, 0xc67, 0x8, 0x1, 0x0, 0xfffffffa, 0xffffffff, 0x0, 0x1, 0xe72, 0x8000, 0x5, 0x89, 0xf0bb, 0x7b, 0x0, 0xe, 0x0, 0x101, 0x1, 0x7a6652d2, 0xfff, 0x4, 0xfffffff9, 0x0, 0x10000, 0x6, 0x2, 0x9, 0xec, 0x4, 0xffffffff, 0xffff8000, 0x5, 0x7, 0x7, 0x5, 0x8, 0x6, 0x1, 0x22d3, 0x800, 0xffffffff, 0x7, 0x4, 0x80000000, 0xe1, 0xfffffff3, 0x4, 0x80, 0x6, 0x40, 0x2, 0x3, 0x7, 0xb, 0x1, 0x101, 0x7, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xd4, 0x1, 0x2, 0x4b, 0x9, 0x7, 0x1, 0x6, 0x221f, 0x4, 0x2698, 0x974, 0x8000, 0xe, 0x1, 0x2, 0x1ff, 0x9, 0xf, 0x2, 0x3, 0xa49, 0x7f, 0x5, 0xff, 0x4, 0x2, 0x10001, 0xff800000, 0x9, 0x4, 0x5, 0x1, 0x0, 0xe68, 0x7fffffff, 0x7, 0x8d, 0x8, 0x80, 0x10, 0x3, 0x3, 0x7fffffff, 0xfff, 0x4, 0x100, 0x6, 0x7, 0x4, 0x5, 0x1, 0x8, 0x9, 0x9, 0x8, 0xe588, 0x1c, 0xfff, 0x7, 0x7, 0x4054, 0x1, 0x3, 0x0, 0x3788, 0xac1, 0x6, 0x8001, 0x81c1, 0x3, 0x7ff, 0x8, 0x80000000, 0x7fffffff, 0x7fff, 0x134d, 0x80000000, 0x2, 0x335, 0x1, 0x8, 0x101, 0x5, 0x6, 0x8109, 0x4, 0x8001, 0x600, 0x8, 0x8, 0xa, 0xfffffff8, 0x1, 0x4, 0x6, 0x6, 0x10000, 0x86, 0x5, 0xfffffffc, 0xff, 0x1, 0xec9, 0x54a, 0x401, 0x8, 0x6, 0xffff0000, 0xdc, 0x4, 0x4, 0xffff0000, 0x401, 0x0, 0x101, 0x25a4, 0x0, 0x40, 0x3, 0x0, 0x10000, 0xffff26c2, 0x5, 0x6, 0x100, 0x8000, 0x4, 0x6, 0x6, 0x5, 0x4, 0x7, 0x0, 0x4, 0x1, 0x9, 0x3, 0x710e, 0x3, 0xffffffff, 0x6, 0xffff, 0x60400, 0x9, 0x0, 0x4, 0x7, 0xbb, 0x0, 0x984, 0x2, 0x144c7af9, 0x22ec, 0x0, 0xb, 0xfffffff7, 0xbab9, 0x1, 0x7, 0x400, 0x401, 0x5, 0x8, 0x5, 0x3, 0x4, 0x401, 0x6, 0x4, 0x881, 0x7, 0x8, 0x35, 0x6, 0x1, 0x6, 0x1, 0x3, 0x3, 0x7fff, 0x400, 0x9, 0x7, 0x4, 0x3, 0x9, 0x5, 0x7, 0x1ff, 0x8, 0x2, 0x3b4, 0x1, 0x747, 0x0, 0x5, 0xa5, 0x10, 0x3, 0x3, 0xd618, 0xffff, 0x0, 0xe7, 0x4, 0x5b0, 0x7, 0x1, 0x7f, 0x0, 0x800, 0x7fffffff, 0x3, 0xe, 0x8, 0xd, 0x7, 0x6, 0x3, 0x6, 0x0, 0x7, 0x7, 0x0, 0xffffffff, 0x984c, 0xfda, 0x7, 0x30000000, 0x5, 0x6, 0x3, 0x545, 0xfffffffb, 0x2, 0x9, 0xee, 0x5, 0x42e, 0x80, 0x2, 0x2, 0x1ff, 0x4, 0x1000000, 0xb, 0xff, 0x5, 0x6, 0x9, 0x2, 0x7fffffff, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xa, 0x2, 0xa, {0x7e, 0x1, 0x9, 0x6, 0xfff3, 0xd}, {0x2, 0x2, 0x5, 0x3800, 0x6, 0xa}, 0xc, 0x80000000, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1a7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x3, 0x8001, 0xd01c, {0x4, 0x2, 0x0, 0x9, 0x6, 0x68de}, {0xb, 0x2, 0x87, 0x8, 0x2, 0x2c}, 0x401, 0x5a5, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x280000, 0x5, 0xff, 0x6, 0xffffffff, 0x4, 0xff, 0x2, 0x10000, 0x75a6, 0x9, 0xc25, 0xffff8000, 0x3, 0x401, 0xffffffc0, 0x3, 0x21, 0x7, 0x0, 0xe8ed, 0x9, 0x2, 0x8, 0x1, 0x5, 0x9b, 0x2, 0x2, 0x7, 0x4, 0x7, 0x2, 0xa, 0xf8, 0xfa, 0x78f326dd, 0x4, 0x0, 0x1, 0x1, 0x48b6, 0x0, 0x6, 0x1, 0xff, 0x0, 0x0, 0x9, 0xffff0001, 0x2, 0x7a9, 0x3, 0x7, 0x2, 0x3, 0x2, 0x9, 0x0, 0x1, 0x10001, 0x6, 0x10001, 0x4, 0x80000000, 0xa, 0x7, 0x12b20000, 0x200, 0x45bf, 0x4, 0xfffffff9, 0xa, 0x9, 0x401, 0x8, 0x7, 0x4, 0x8001, 0xb, 0x2, 0xffff, 0x0, 0x5, 0x101, 0x7bd9e789, 0x6, 0x1, 0x0, 0x4, 0x101, 0xfff, 0x5, 0x1, 0x5, 0x0, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, 0x183d, 0x6, 0x7, 0x401, 0x0, 0x8, 0x2, 0x10, 0x7, 0x5641, 0x4, 0x4, 0x2, 0x0, 0xa, 0xe8, 0x42, 0x8, 0x10b52746, 0x8, 0x3, 0xdf, 0x40, 0x3, 0x2, 0x9, 0x8b88, 0x3, 0x4, 0x2, 0x70, 0x80, 0x5, 0x4, 0x6, 0x8, 0x9, 0xa9e7, 0x0, 0x0, 0x8, 0x1, 0x8, 0x81, 0x1, 0x9, 0x12, 0xb3, 0x2, 0x5, 0x8d79, 0x4, 0x14132705, 0x5, 0xe0c6, 0x278, 0x7fffffff, 0x8, 0x1, 0x3, 0x4, 0x2, 0x0, 0x7fff, 0x8, 0xf, 0x12000, 0x9, 0xbe6c, 0x7, 0x9, 0x8, 0xd3, 0x7, 0x8, 0x10001, 0x8, 0x2, 0x1, 0x5, 0x6, 0x0, 0x81, 0x7, 0x8, 0x3, 0x5, 0x10, 0x0, 0x7, 0xfffff03b, 0x5, 0xb, 0x4, 0x49b, 0x80, 0x10, 0xfffffff9, 0x2122eaf7, 0x7, 0xffff3505, 0x3, 0x3, 0xfffffeff, 0x3, 0xffffffff, 0x6, 0x0, 0xe2, 0xf600, 0x5b4c, 0x8000, 0x0, 0x5, 0x3, 0x0, 0x1, 0x9, 0x3, 0x2, 0x6, 0x8c2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0xe4bd, 0xfffffff3, 0x3, 0x3, 0x9, 0x100, 0x0, 0x8, 0xf25b, 0xffff, 0x5, 0xffffffff, 0x9, 0x101, 0xf, 0x1, 0x44, 0xc, 0x10, 0xff, 0x3, 0x51b, 0x9, 0x1, 0x7]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}]]}, {0x6b, 0x6, "14bd82bd3e83bb16c5c065941ea139d5377d03a528a606d27fbd952ea4e4eb0232b1330150da72a18223c75b7936b28d16c5c324f702fb3e0bebe77ec4611e589a264985a41297178bcbfc9c7a056b476c0595b45bf0478d873066132307de940693b05b3880bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x184, 0x13, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @random="1001af8e8327"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0xf800}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x400}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10000}]}]}, {0xf2, 0x6, "71fd0b36b75fe9eaf9ef8b3fefc6dc1a3fb01ff1e65b32d023753ed5fb347f5fba6e5bd27e17f98e7f8bb8bcfc8ed1944e3833dcf009933bc13efe677b95d99bbe8f54bed89fec03e32264d4d10ec837012b6c11bcccdfd217cc497caa4b2d86d0ea8ec3b1e9aa95a5c94b535e65301e089162c7233134ce635e6361c67328ed99959a0c08107bbc80478a8ba2f9ce4e335afe991f67b6b00e8cb088f986fc084603e30d2fa6e316a335c2883b7286eb638b3d78d74fd904b2d00539238c603f22aa3c82d88d35b2a4476d927a5e9b11384735e2ef300c524183d75dc28423517678fe8d12548ac09cdd259ff8a8"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x70, 0x1, [@m_skbedit={0x6c, 0x5, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x7}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3a0}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xe968, 0x4, 0x3, 0x8000}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x7, 0x6, "2fcc12"}, {0xc, 0x7, {0x7cab90489797e725, 0x1}}, {0xc, 0x8, {0x3, 0x95851c9ae74f085}}}}]}, {0x350, 0x1, [@m_ct={0x158, 0x1f, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "bf641c0afe2964f15892f54c48babed9"}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "dc4d924a0dde35637fb7892f1e23ab74"}, @TCA_CT_ZONE={0x6, 0x4, 0x7}]}, {0xed, 0x6, "36a0ed274e862baf4548a9a6b34061655ad35ba5152aed15ee155feb80ca2b9eff50fe56befb181828c1413a6a7a90cd46f7d0eb934547473efbfb091480ca626b705d0f7b797feca2a8a749314f7282f7fa3686aecb50a616988b546be63abe3d60e056b7c9100da925b2dce24ca684dec2d4452d02c6c01ad917d923bec3a2e228b28ba2f40c01daed8e502380a1868ee8880f5ec9054a81dcb07e08d5635ebb39d06fad96517a44c987d44c1c14d23227e8c9f38c5bba58c5713dca7acc407161b62c792d45350798c1da4d9bed37be989b18230af93d5b57271e300ff745bd4a7b72c38bf1b03f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xb4, 0x1f, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff0, 0x4, 0x8, 0x5, 0x8}, 0xb8b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x8, 0x595, 0x5d}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x82a, 0xffffffc3, 0x2, 0x8, 0x6}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x7, 0x4, 0x2}}}]}, {0x12, 0x6, "e144c39c5e828fa8b15e591fa4ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}]}, {0xc, 0x6, "86c73e7beba2c079"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xf0, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0xc1, 0x6, "8c09e98dc15315ecf77c1beb303ce53eb5efbc668445598877072db75ddce2b2af00c392c3e22d1142bbc04bdf229a64f7cf828834a4d8be2916c6fbaebb52aa1d2b1152c514b2341ad54e23e195cc80f6e774c067588797a679e91f1d12537cdaffba9c1734b890d83ff9230d4ee04ec7f7e5730f914b0a7c377d53942aa257eb92aa462f37385cea0c3ccdbb103b3510eff725b1bbf4eccadfd08b721fe5c173c57f29c8ca8fdb2d058ce0c75d8e6ad480c267603faa2b466c7f210f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x50c4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.110388153s ago: executing program 5 (id=2112): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000000)) 2.108254333s ago: executing program 5 (id=2113): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000c40000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000c40000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r3, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0xe, 0x80, 0x11, @MIDI_NOTEON=@special, 0x5, 0x80}) 2.06013886s ago: executing program 5 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000f000000000000000100000000000000000d0ddf653d55fccb73f3c086a4e5d4e6e0d223be0ceb4e170ebac9d59943a86afaf3fc8e0623f9c0787d72449f1b3a53cd91401c14c"], 0x0, 0x1200) 2.000908468s ago: executing program 5 (id=2116): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200291b"], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.920289844s ago: executing program 5 (id=2117): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x3ff, 0x0, 0x48}, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0x5e0a, 0x5, 0x0, 0x5}) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xdb7d}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4048885) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x4, r0, 0x1}) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x2) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001340)={0x7, 0x4, 0x4, 0xfffffffa, r2}, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000013c0)={0x9, 0x0, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000001400)={r3}) (async) r4 = openat$cgroup(r1, &(0x7f0000001440)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000001480)='memory.pressure\x00', 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x78, r6, 0x3e, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}]}, 0x78}}, 0x10) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000001640), &(0x7f0000001680)=0x4) r7 = dup(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001740)={r7, &(0x7f00000016c0), &(0x7f0000001700)=@tcp6=r1, 0x2}, 0x20) (async) write$cgroup_pressure(r5, &(0x7f0000001780)={'full', 0x20, 0x10000, 0x20, 0x8001}, 0x2f) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x18}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x9) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000001900)=0x3, 0x4) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000001940)=0x3800000000000) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001980)='/sys/power/pm_trace', 0x2, 0x130) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001a40)={'gre0\x00', &(0x7f00000019c0)={'sit0\x00', 0x0, 0x7, 0x10, 0x5, 0x526, {{0xd, 0x4, 0x3, 0xe, 0x34, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @loopback, {[@ssrr={0x89, 0x1f, 0x34, [@remote, @broadcast, @broadcast, @loopback, @broadcast, @empty, @broadcast]}]}}}}}) setsockopt$inet_mreqn(r8, 0x0, 0x0, &(0x7f0000001a80)={@broadcast, @multicast2, r9}, 0xc) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001ac0)={'batadv0\x00'}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004) (async) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000001c00)={0x320, 0xf0, 0xee0, 0x360, 0xb11, 0x7, 0x1, 0x1, {0x7fff, 0x1, 0x1}, {0x7be}, {0x401, 0x8001}, {0x4, 0x3}, 0x1, 0x2, 0x7fff, 0x2, 0x1, 0xd2, 0x7, 0x4, 0x4, 0x8, 0x7f, 0x8, 0x15, 0x100, 0x0, 0x6}) (async) r10 = syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000001cc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x5, 0xa0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6453c8bb"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffff457, 0x10, 0xa, 0x7}, {0x6, 0x24, 0x1a, 0xff, 0x1}, [@obex={0x5, 0x24, 0x15, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0xfffd}, @acm={0x4, 0x24, 0x2, 0xb}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc, 0x2, 0xfc}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x201, 0x81, 0xa, 0xdf, 0x8, 0x4}, 0x1f, &(0x7f0000001dc0)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x6, 0xd, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0x880, 0x10c5, [0xff30]}]}, 0x5, [{0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x140a}}, {0x9a, &(0x7f0000001e40)=@string={0x9a, 0x3, "f454faf03e338219c312ad3e6759d1f1f804c6d3d1b8e39d12d230bb8f31414ca979c73ad51c4ab975f5d223098a3850ee2c3e2d4c265e1452baf2635142ba841bee0ec13e5b0308cfa993b557ad0a0a02395e1db8610c39079230b3c3b7320a9c4bd38cc79a8851fdb6617da662238ef3b79a21875546ce664ec730814e24ef7079918f2c2dc7d79d6efdd44fc931a8596150e2219e064c"}}, {0x72, &(0x7f0000001f00)=@string={0x72, 0x3, "ea8793cb6e4bfb9ba812b743b48f6213169d771c90b2c4f55151b6eac75736aa972a81beae5407e13e612ea72a69831f8f17a4fbf4dcdeef426fededb7b3b2ed5eb0531c89e438a159824f9272e1bb26000ad4a38638f39dda329bc46e3e672cb72476b73c81776440a7b4a957ec2b5b"}}, {0xa0, &(0x7f0000001f80)=@string={0xa0, 0x3, "ffa95830d81ad4f6890b1a2371158c01c087e4ab3b25beb547baf5a2e5ba8e86024fde1b03908e83eb10a4a452eec9d5a42d3d99081602156c6d427d669b69cf3092f4ff73e351d78bd43ea5946a647cc81de991858fcda9d8d82b3fb51bb459b86244b1b8653c9ab44d3dd65a62906c2cbc2bf179f81b3425ddf07b286ee85fc371210cc655b461e766241f15d0d5adf30272605384add648f917af5469"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ncm(r10, &(0x7f00000021c0)={0x14, &(0x7f0000002100)={0x40, 0x7, 0x42, {0x42, 0x17, "9322c6e3cddd91692d08a04b41dbe370a50929890c6a95265b53ab596392ecd9395a7dcc907df700acc3fbd98bf8c61d45472950bf70db61876a6eed9dd05ee8"}}, &(0x7f0000002180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002480)={0x44, &(0x7f0000002200)={0x40, 0x5, 0x91, "6be26d3a03766fd5901a359323154cc18382d334a254c866358be048faa17d8db1baff39e8e31953beea73d79f4d8e50d180f87833f35d242b823232f6fc14ea3812a5ff665c5c818ef0ba49682de07b0893bb70f7685ed37f9d19cd031fb28f8670476193b37f986bea7817d70d6dee174141bee2f3034ed2325f67ca5d830b7b1c7ccd1fdad7e6521f2bc25fbdb56979"}, &(0x7f00000022c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000002340)={0x20, 0x80, 0x1c, {0x100, 0xfff7, 0x7, 0x6, 0x7, 0x6, 0x9, 0x0, 0xd7e, 0x101, 0x69e, 0x2}}, &(0x7f0000002380)={0x20, 0x85, 0x4, 0xfffffe3f}, &(0x7f00000023c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002400)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000002440)={0x20, 0x89, 0x2}}) (async) read$usbmon(r8, &(0x7f0000002500)=""/171, 0xab) 1.614535303s ago: executing program 1 (id=2120): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000001010100000000000000000a00fffd2c000e800400198008000740000000068000000500fc00000000000000000000000300000000000380000001004e200000000001004e240000000001004e220000000002004e220000000001004e220000000000"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="500000000102010100000600000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002800500010000000000"], 0x50}}, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x1) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000001}]}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0x6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') fstat(r6, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=@delchain={0x64, 0x65, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {0xbdb6fbaa74f7876c, 0x9}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x5) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xffffeff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "05418107009188b7e3d85b1b6f6ff88c6b00", 0x7, 0x140220}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002440)=0x11) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000006d0063"], 0x1c}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private1, 0x100}, 0x1c) 1.539400397s ago: executing program 1 (id=2121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x8c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x38, 0x2, "384c135577d39d330f392d1b0358072c2b1681eba522642bf6a5fa82ecd72d4808c3c409beee48962d4c07cbf35f1667e7dfcb74"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x3, 0x3, 0x8, 0x2, 0x2}}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r8, &(0x7f0000000d40), 0x0}, 0x20) socketpair(0x5, 0x3, 0x5, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'ip6erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 619.603708ms ago: executing program 2 (id=2122): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x1f, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xeeeeeeee}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000340)={0x4}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000001c0)=0x2) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x401, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000280)=[0xea6c], &(0x7f0000000240)=[r7], &(0x7f00000001c0), 0x0, 0x2}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x0, 0xa0, 0x18, @generic=0x7, 0x6}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, r12, 0x803, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff2}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x8804) 618.088016ms ago: executing program 3 (id=2124): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x517d}}, './file0\x00'}) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000140)={0x6, 0x0, r0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x942, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000340)={@empty, @private1}) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20) sendfile(r3, r3, 0x0, 0xe3aa6ea) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4f24, 0xd, @local, 0x81}, 0x17) 483.289588ms ago: executing program 1 (id=2125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x8, 0x1, 0x3}, {0x3ff, 0x5, 0xf, 0x8}, {0x4, 0x5, 0x7, 0x7ff}, {0x7f, 0x9, 0x3, 0x2}, {0x1, 0xcd, 0x7, 0x2}, {0x3, 0x2, 0x6, 0x101}, {0xfffc, 0x0, 0x3, 0xffffff94}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0xfffffffffffffffd, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) 481.642325ms ago: executing program 3 (id=2126): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6}, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x40, 0x0, 0xffff, 0x2, 0xe000, '\x00', 0x654}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 480.579907ms ago: executing program 2 (id=2127): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readahead(r1, 0x0, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7ff, 0xfffffa40, "999540b44119"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1}}], 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, r7, r8, 0x0, 0x2}}}, 0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000007fc0)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f00000080c0)=0xe8) statx(r1, &(0x7f0000008100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x6000, 0x40, &(0x7f0000008180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000008840)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) statx(r2, &(0x7f00000089c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0x200, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000001080)="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", 0x2000, &(0x7f0000008c80)={&(0x7f0000003080)={0x50, 0x0, 0xfffffffffffffffa, {0x7, 0x2d, 0x8, 0x1080100, 0x3, 0x3, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000003100)={0x18, 0x0, 0x2, {0x4e1}}, &(0x7f0000003140)={0x18, 0x0, 0x7, {0x9ce}}, &(0x7f0000003180)={0x18, 0x0, 0x7f, {0x6}}, &(0x7f00000031c0)={0x18, 0x0, 0x0, {0x3}}, &(0x7f0000003200)={0x28, 0x0, 0x1, {{0x6, 0x7fff, 0x2}}}, &(0x7f0000003240)={0x60, 0x0, 0x70, {{0x6, 0x2, 0x6, 0xf, 0x7ad, 0xb, 0x8, 0x9}}}, &(0x7f00000032c0)={0x18, 0x0, 0x0, {0x7fffffff}}, &(0x7f0000003300)={0x18, 0x0, 0x8, {'nl80211\x00'}}, &(0x7f0000003340)={0x20, 0xfffffffffffffff5, 0xd, {0x0, 0x8}}, &(0x7f0000003480)={0x78, 0x0, 0xbdc, {0x0, 0x7, 0x0, {0x0, 0x57d, 0x5, 0x5c8, 0x3, 0x1, 0x9, 0x3b, 0x7, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0x8}}}, &(0x7f0000005540)={0x90, 0x0, 0x1, {0x4, 0x2, 0x5, 0x9, 0x3, 0xe, {0x2, 0x2a5, 0x7fffffff, 0xfffffffffffffffa, 0x0, 0x2, 0xfffffff9, 0x8, 0x2, 0x6000, 0x6, 0x0, 0x0, 0x401, 0xffffffcd}}}, &(0x7f0000000440)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000000000d00800000000000000000006e30000000d301635d630e8c87f5f07b410bf8f3d961c7abbd115a381d6fcf5089ceb90870d2819f8dd7fa67061ae08f46103a46fc04e9e13125dc4a25b7fce7751cd62f396e8524a8"], &(0x7f0000008280)={0x5b0, 0xfffffffffffffff5, 0x7, [{{0x0, 0x1, 0x4, 0x8, 0x5, 0x1, {0x1, 0x26, 0xfffffffffffff123, 0x2, 0x3, 0x8000000000000000, 0x2, 0x5, 0x8, 0xa000, 0x9, 0x0, 0x0, 0x9, 0x2}}, {0x4, 0xfcd, 0x6, 0x1, 'wlan0\x00'}}, {{0x5, 0x0, 0x9, 0x800, 0x0, 0x6, {0x2, 0x5, 0x5, 0x8, 0x7, 0x80000001, 0x1, 0x68, 0xf, 0xc000, 0x3, 0x0, 0x0, 0x3, 0x3}}, {0x1, 0x8, 0x8, 0xe, 'nl80211\x00'}}, {{0x6, 0x0, 0x3, 0x3, 0x2d1, 0x9, {0x1, 0x7f, 0xd5, 0x0, 0x4, 0xffffffffffff6a12, 0x7, 0x8d, 0x9, 0x0, 0x10000, 0x0, 0x0, 0xf6d0, 0xb68d}}, {0x6, 0x10, 0x4, 0x0, '\'\xe0.&'}}, {{0x0, 0x0, 0x6, 0x5, 0x3, 0x0, {0x6, 0x80000001, 0x74, 0x2, 0x8, 0x28f, 0x1ff, 0x8, 0x6, 0x1000, 0x9, 0x0, 0x0, 0x4e, 0x3}}, {0x5, 0x8, 0x8, 0x3, 'nl80211\x00'}}, {{0x2, 0x2, 0x8, 0xfffffffffffffff8, 0x9, 0x0, {0x6, 0x6, 0x5, 0xfffffffffffffffc, 0x4, 0x70, 0x6, 0x1400, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x400}}, {0x2, 0x24000000, 0x6, 0xfffffff6, 'tunl0\x00'}}, {{0x2a8f, 0x2, 0x1, 0x4, 0xa, 0x1, {0x4, 0xc5, 0x3, 0x0, 0xfffffffffffffff7, 0x6ee3, 0x5, 0x64d, 0xedb4, 0xa000, 0x1, 0x0, 0x0, 0x9, 0x1c000}}, {0x6, 0x10000, 0x6, 0xe, 'wlan0\x00'}}, {{0x4, 0x1, 0x5, 0xffffffff, 0x3ff, 0x81, {0x6, 0x9, 0xbe, 0x4, 0x4, 0x6, 0x4, 0xd, 0x9, 0x8000, 0x9, 0x0, 0x0, 0x7ff, 0x4}}, {0x1, 0x5, 0x8, 0x6, ':$\xe5/I\\{!'}}, {{0x2, 0x1, 0x3, 0x5, 0xf4e8, 0x8, {0x6, 0x1, 0xc, 0xd, 0x5, 0x3, 0x7c, 0x7, 0x9, 0x4000, 0x401, 0x0, r8, 0x7fffffff, 0x4}}, {0x3, 0x3, 0x2, 0x7fffffff, '-#'}}, {{0x3, 0x2, 0x6, 0x0, 0x3, 0x8000, {0x1, 0x7f1, 0x2, 0xff, 0x100, 0x0, 0x3, 0x3, 0x0, 0x1000, 0xd01b, r9, r10, 0x8, 0xff}}, {0x3, 0x80, 0x3, 0x40, '%&]'}}]}, &(0x7f00000088c0)={0xa0, 0x0, 0x6, {{0x3, 0x2, 0x8, 0x6, 0x7fffffff, 0x5, {0x6, 0x176b, 0x3, 0x5, 0x80000000, 0x5, 0x9, 0x6, 0x3, 0x4000, 0xfffffffc, r11, 0xee01, 0x81, 0x1ff}}, {0x0, 0x2}}}, &(0x7f0000008980)={0x20, 0x0, 0xf, {0x9, 0x4, 0x3, 0xffffff81}}, &(0x7f0000008b40)={0x130, 0x0, 0x2, {0x2, 0x3, 0x0, '\x00', {0x4, 0x1, 0x7, 0x0, 0xee00, r12, 0x4000, '\x00', 0x3, 0x9, 0x3, 0x5f4e, {0x0, 0xd}, {0x101, 0x5}, {0xe6f2, 0x4}, {0x2, 0x400}, 0x100, 0xfff, 0xc, 0x920}}}}) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r15, 0xb97534d5fe970ccf, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) splice(r0, 0x0, r13, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r2, 0x0, 0x110, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) 250.95724ms ago: executing program 2 (id=2128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x47}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r1, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @local, 0x4e24, 0x5, 'rr\x00', 0x20, 0x10001, 0x1045}, 0x2c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 199.668054ms ago: executing program 2 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000120000000000000000000000000000000000000073180025b40fbca055b3ebfff3e43e191d46213c6f3ae77c47359f7009eb976eb9c6498377e8d0854497b8ea988e9d50b4824b9020f0090f4197533d6f5ed947ef7d06f5829644ad0034893a3e00733d3a7d7e42b53275ef26ef2805003687f49fa5a373222d79c343fce64fbf8dd350e49036954fc03bab41235308e766e8679375c85a01e0b98f620d2f14695dd3aa3753eb5c73de848877eaa2daa386402103cd9b1ccd1c0130a65a6058d19719f0fbef529a"], 0x48) read(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0xff) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x43, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040054) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) 199.380707ms ago: executing program 3 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x63}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40850}, 0x24000810) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x7122c}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 198.357515ms ago: executing program 1 (id=2131): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a39eb0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c02cd1079dc0ea5aa6aa56c8d8145ac176bdf75ac020eb4192d9c23a694ba3c7d8725433cb80a2b67c941b3fe8e7142d049a921f5d916797734eff2a237e7cd92997004ebbf1e828e6f364c7f37e01683b398ca554e7358aa2dd482cf70ceddb6a9c4b7febd3ad70a4dd9b612058a9aee9e909271746c5b4183ed4bca2997959cba47a19324a3b8795edc5ede0c7788c37a"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) socket(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xb1f, 0x6, 0x8, 0x0, 0xe5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r7, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x4082}, 0x8000) 176.630034ms ago: executing program 2 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xb5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4880) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x4, 0x3}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 67.345799ms ago: executing program 3 (id=2133): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[], 0x168}}, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xffffffff}, 0x1b) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x1}}, 0x10) bind$tipc(r6, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r7, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1000007}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x44000000) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x408000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x418, 0x220, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="18b177f45cd4", @empty, @local, @rand_addr=0x64010101, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, 0xff, 0xffffff00, 0x8, 0xa, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x24, 0x8, 0x62, 0x5, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) fchdir(r1) (async) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r10 = openat(r9, &(0x7f0000000080)='./bus\x00', 0x3d1840, 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) 66.997029ms ago: executing program 2 (id=2134): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r4], 0x44}}, 0x2000040) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@deltaction={0xf0, 0x31, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x384}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9df9}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x4004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0003400000000000340012800e0001006970366772657461700000002000028014000600ff02000000f7ffffffffffffff0000010500160002000000"], 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 65.448366ms ago: executing program 3 (id=2135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2, 0x6, 0x6, 0x3}, {0xd, 0xc, 0x40, 0x1}, {0x802, 0x6, 0x6, 0x31}, {0x6, 0x47, 0x9d, 0x5}, {0xe42, 0x0, 0x4, 0xd8}, {0x3, 0xdf, 0x85}]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}}, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x100}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x2, 0x6, 0x6, 0x3}, {0xd, 0xc, 0x40, 0x1}, {0x802, 0x6, 0x6, 0x31}, {0x6, 0x47, 0x9d, 0x5}, {0xe42, 0x0, 0x4, 0xd8}, {0x3, 0xdf, 0x85}]}) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}}, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x100}}}, 0x108) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) shutdown(r0, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) (async) 904.66µs ago: executing program 1 (id=2136): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'ni_daq_700\x00', [0x1000100, 0x2, 0x80000003, 0x6, 0x28, 0x0, 0xf7, 0x8, 0x80ffe, 0x2, 0x0, 0x6, 0x1003, 0xd2, 0xf, 0x5, 0x63, 0x7ffffffd, 0xdf, 0x200009ea, 0x20000010, 0x40000, 0xc, 0x3fd, 0x10, 0x4, 0x5, 0x7, 0xfffff801, 0x200002, 0xfffffffe]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000000)=""/212, 0xd4}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/153, 0x99}, {&(0x7f0000002b00)=""/7, 0x7}, {&(0x7f0000002b40)=""/44, 0x2c}, {&(0x7f0000002b80)=""/112, 0x70}, {&(0x7f0000002c00)=""/58, 0x3a}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x9, &(0x7f0000000140)=""/176, 0xb0}, 0x2e}, {{&(0x7f0000003dc0)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f0000003e40)=""/146, 0x92}, {&(0x7f0000003f00)=""/237, 0xed}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/69, 0x45}], 0x4, &(0x7f00000050c0)=""/28, 0x1c}, 0x5}], 0x2, 0x20, &(0x7f0000005180)={0x0, 0x3938700}) 613.809µs ago: executing program 3 (id=2137): syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd60"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0xa}, {0x8, 0x2, 0x8000, 0xe8}}}}, 0x17) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) 0s ago: executing program 1 (id=2139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000003000000cffd3f00f00a000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000b00000000bbd822fa0a57593fe5ab08fb75b600"/33], 0x50) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = syz_io_uring_setup(0x5f6, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000000280)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x1, 0x6, 0x0, 0x0, 0x8, 0x1, {0x0, r10}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x2, 0xcbf, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff}}}, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_GET_PARAMS(r11, 0x80207509, &(0x7f00000003c0)={0x0, 0xffff, 0x70, &(0x7f00000002c0)={0x70}}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.074638][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.079184][ T5815] usb 7-1: config 0 descriptor?? [ 123.081688][T10246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.489527][ T5815] hid_parser_main: 5 callbacks suppressed [ 123.489541][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.498340][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.500759][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.503001][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.505313][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.508326][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.511335][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.513630][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.516791][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.519054][ T5815] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 123.526700][ T5815] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 123.715814][ T3391] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 123.748297][ T7026] usb 7-1: USB disconnect, device number 11 [ 123.865782][ T3391] usb 8-1: Using ep0 maxpacket: 32 [ 123.869345][ T3391] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.872041][ T3391] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.874683][ T3391] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.877738][ T3391] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.881046][ T3391] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.884250][ T3391] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.888624][ T3391] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.891409][ T3391] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.895545][ T3391] usb 8-1: config 0 descriptor?? [ 123.999821][T10303] kvm: apic: phys broadcast and lowest prio [ 124.009356][T10303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10303 comm=syz.4.1258 [ 124.029954][ T5745] Bluetooth: hci3: command tx timeout [ 124.102865][ T3391] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.115827][ T3391] usb 8-1: USB disconnect, device number 6 [ 124.122712][ T3391] usblp0: removed [ 124.275335][T10307] Bluetooth: MGMT ver 1.23 [ 124.340045][ T40] audit: type=1400 audit(1780917749.561:53164): avc: denied { mounton } for pid=10314 comm="syz.4.1262" path="/42/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 124.352703][ T40] audit: type=1400 audit(1780917749.571:53165): avc: denied { watch_mount watch_reads } for pid=10314 comm="syz.4.1262" path="/42/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 124.362149][T10312] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1261'. [ 124.364716][ T40] audit: type=1400 audit(1780917749.581:53166): avc: denied { bind } for pid=10311 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.384475][ T40] audit: type=1400 audit(1780917749.601:53167): avc: denied { write } for pid=10317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.406297][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1263'. [ 124.545733][ T3391] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 124.598040][T10340] CIFS mount error: No usable UNC path provided in device string! [ 124.598040][T10340] [ 124.601215][T10340] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.695672][ T3391] usb 8-1: Using ep0 maxpacket: 32 [ 124.699349][ T3391] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.703303][ T3391] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.706533][ T3391] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.709588][ T3391] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.712849][ T3391] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.716075][ T3391] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.720609][ T3391] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.723698][ T3391] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.730395][ T3391] usb 8-1: config 0 descriptor?? [ 124.941709][ T3391] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.944265][T10347] Process accounting resumed [ 125.003101][T10354] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.007697][T10354] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 125.162469][ T3391] usb 8-1: USB disconnect, device number 7 [ 125.172356][ T3391] usblp0: removed [ 125.392920][T10379] overlayfs: overlapping lowerdir path [ 125.455986][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.652346][T10401] syzkaller0: entered promiscuous mode [ 125.654342][T10401] syzkaller0: entered allmulticast mode [ 125.761839][T10409] netlink: 'syz.4.1285': attribute type 20 has an invalid length. [ 125.764582][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 125.775775][T10409] netlink: 'syz.4.1285': attribute type 20 has an invalid length. [ 125.775890][ T54] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.778243][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 125.784045][ T54] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.787128][ T54] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.790303][ T54] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.825331][T10427] netlink: 'syz.4.1288': attribute type 13 has an invalid length. [ 125.825398][T10428] netlink: 'syz.4.1288': attribute type 13 has an invalid length. [ 125.834956][T10427] gretap0: refused to change device tx_queue_len [ 125.837523][T10427] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.843545][T10428] gretap0: refused to change device tx_queue_len [ 125.846275][T10428] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.105760][ T5745] Bluetooth: hci3: command tx timeout [ 126.180838][T10439] program syz.3.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.185946][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 126.185956][ T40] audit: type=1400 audit(1780917751.411:53171): avc: denied { write } for pid=10437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.246495][ T40] audit: type=1400 audit(1780917751.471:53172): avc: denied { write } for pid=10445 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.466698][ T40] audit: type=1400 audit(1780917751.691:53173): avc: denied { connect } for pid=10456 comm="syz.3.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.472704][ T40] audit: type=1400 audit(1780917751.691:53174): avc: denied { write } for pid=10456 comm="syz.3.1297" path="socket:[38174]" dev="sockfs" ino=38174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.503091][ T40] audit: type=1400 audit(1780917751.721:53175): avc: denied { bind } for pid=10459 comm="syz.3.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.509367][ T40] audit: type=1400 audit(1780917751.731:53176): avc: denied { getopt } for pid=10459 comm="syz.3.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.803646][T10467] lo speed is unknown, defaulting to 1000 [ 126.840048][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 126.890560][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 127.068282][T10485] macsec1: entered promiscuous mode [ 127.069936][T10485] macsec1: entered allmulticast mode [ 127.072266][T10483] syzkaller1: entered promiscuous mode [ 127.074089][T10483] syzkaller1: entered allmulticast mode [ 127.080151][ T40] audit: type=1400 audit(1780917752.301:53177): avc: denied { setattr } for pid=10482 comm="syz.2.1307" path="/dev/net/tun" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 127.260931][ T40] audit: type=1400 audit(1780917752.481:53178): avc: denied { bind } for pid=10490 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.300477][T10494] tmpfs: Too few inodes for current use [ 128.067073][T10469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1301'. [ 128.093463][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 128.102169][T10469] macvlan2: entered allmulticast mode [ 128.103811][T10469] dummy0: entered allmulticast mode [ 128.105728][T10469] dummy0: entered promiscuous mode [ 128.181721][ T40] audit: type=1400 audit(1780917753.401:53179): avc: denied { ioctl } for pid=10518 comm="syz.2.1317" path="socket:[38320]" dev="sockfs" ino=38320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.248131][T10525] netlink: 'syz.4.1318': attribute type 12 has an invalid length. [ 128.250563][T10525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1318'. [ 128.277468][T10527] netem: change failed [ 128.286903][T10528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.394897][T10541] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 128.496711][T10535] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 128.523605][T10546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 128.560449][ T40] audit: type=1400 audit(1780917753.781:53180): avc: denied { write } for pid=10547 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.861520][ T3391] libceph: connect (1)[c::]:6789 error -101 [ 128.864722][ T3391] libceph: mon0 (1)[c::]:6789 connect error [ 128.958233][T10563] ceph: No mds server is up or the cluster is laggy [ 129.026945][T10572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.097807][T10572] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 129.477394][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 129.480237][T10590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 129.482467][T10590] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.482849][T10588] bond0: entered promiscuous mode [ 129.487465][T10590] vhci_hcd vhci_hcd.0: Device attached [ 129.487532][T10588] gretap0: entered promiscuous mode [ 129.491765][T10588] hsr1: entered promiscuous mode [ 129.492695][T10591] usbip_core: unknown command [ 129.495188][T10591] vhci_hcd: unknown pdu 67108864 [ 129.496918][T10591] usbip_core: unknown command [ 129.496960][T10590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 129.499694][ T7720] vhci_hcd vhci_hcd.2: stop threads [ 129.500367][T10590] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.503591][ T7720] vhci_hcd vhci_hcd.2: release socket [ 129.505082][T10590] vhci_hcd vhci_hcd.0: Device attached [ 129.508285][ T7720] vhci_hcd vhci_hcd.2: disconnect device [ 129.509489][T10593] vhci_hcd: connection closed [ 129.510208][ T7720] vhci_hcd vhci_hcd.2: stop threads [ 129.514570][ T7720] vhci_hcd vhci_hcd.2: release socket [ 129.516951][ T7720] vhci_hcd vhci_hcd.2: disconnect device [ 129.542420][T10597] overlayfs: failed to resolve './file0/file1': -2 [ 129.573492][T10599] syzkaller1: entered promiscuous mode [ 129.576167][T10599] syzkaller1: entered allmulticast mode [ 129.767549][T10605] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 129.805212][ T7028] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 129.824864][T10614] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.854381][T10618] tipc: Failed to obtain node identity [ 129.858848][T10618] tipc: Enabling of bearer rejected, failed to enable media [ 129.861988][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 129.896450][T10620] loop2: detected capacity change from 0 to 7 [ 129.899049][T10620] Dev loop2: unable to read RDB block 7 [ 129.900757][T10620] loop2: unable to read partition table [ 129.902556][T10620] loop2: partition table beyond EOD, truncated [ 129.904476][T10620] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 129.915646][T10620] IPv6: addrconf: prefix option has invalid lifetime [ 129.965091][ T7028] usb 8-1: Using ep0 maxpacket: 8 [ 129.968286][ T7028] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.971903][ T7028] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.974946][ T7028] usb 8-1: config 0 interface 0 has no altsetting 0 [ 129.978228][ T7028] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.981060][ T7028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.989827][ T7028] usb 8-1: config 0 descriptor?? [ 130.143969][T10632] input: syz1 as /devices/virtual/input/input19 [ 130.146831][T10632] input: failed to attach handler leds to device input19, error: -6 [ 130.193049][T10634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 130.195117][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.198377][T10634] vhci_hcd vhci_hcd.0: Device attached [ 130.212429][T10635] vhci_hcd: connection closed [ 130.212625][ T13] vhci_hcd vhci_hcd.1: stop threads [ 130.217849][ T13] vhci_hcd vhci_hcd.1: release socket [ 130.219593][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 130.285057][ T5823] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 130.402977][ T7028] hid_parser_main: 5 callbacks suppressed [ 130.402990][ T7028] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 130.407817][ T7028] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 130.410085][ T7028] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 130.412267][ T7028] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 130.414482][ T7028] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 130.419307][ T7028] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 130.425018][ T5745] Bluetooth: hci0: command 0x080f tx timeout [ 130.458533][ T5823] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 130.461955][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.465802][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.469122][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.472893][ T5823] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.478153][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.484812][ T5823] usb 7-1: config 0 descriptor?? [ 130.604425][ T7028] usb 8-1: USB disconnect, device number 8 [ 130.696359][ T5823] usbhid 7-1:0.0: can't add hid device: -32 [ 130.698276][ T5823] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 130.712119][ T1491] usb 7-1: USB disconnect, device number 12 [ 130.842619][T10647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1353'. [ 131.014950][ T7026] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 131.195439][ T7026] usb 6-1: Using ep0 maxpacket: 8 [ 131.200697][ T7026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.207088][ T7026] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.210258][ T7026] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.212321][ T7026] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.216481][ T7026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.222966][ T7026] usb 6-1: config 0 descriptor?? [ 131.454717][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 131.630776][ T7026] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 131.635186][ T7026] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 131.637996][ T7026] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 131.640189][ T7026] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 131.642352][ T7026] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 131.644958][ T7026] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 131.717946][T10679] bridge_slave_0: left allmulticast mode [ 131.719680][T10679] bridge_slave_0: left promiscuous mode [ 131.721531][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.725809][T10679] bridge_slave_1: left allmulticast mode [ 131.727556][T10679] bridge_slave_1: left promiscuous mode [ 131.729298][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.738301][T10679] bond0: (slave bond_slave_0): Releasing backup interface [ 131.742407][T10679] bond0: (slave bond_slave_1): Releasing backup interface [ 131.747261][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.749604][T10679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.753059][T10679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.755462][T10679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.758490][T10679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.801023][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1363'. [ 131.829949][ T7026] usb 6-1: USB disconnect, device number 11 [ 131.838320][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 131.838331][ T40] audit: type=1400 audit(1780917757.062:53186): avc: denied { bind } for pid=10682 comm="syz.4.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 132.017294][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'. [ 132.069854][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 132.103801][T10697] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 132.118192][T10697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.189983][T10704] vxfs: WRONG superblock magic 00000000 at 1 [ 132.193085][T10704] vxfs: WRONG superblock magic 00000000 at 8 [ 132.195637][T10704] vxfs: can't find superblock. [ 132.247627][T10708] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 132.376171][T10724] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.413996][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 132.419145][T10724] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 132.423071][T10724] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 132.545381][T10742] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 133.345812][T10753] netem: change failed [ 133.749444][T10778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.760645][ T40] audit: type=1400 audit(1780917758.982:53187): avc: denied { getopt } for pid=10777 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.793792][ T40] audit: type=1400 audit(1780917759.012:53188): avc: denied { write } for pid=10779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.836935][ T40] audit: type=1400 audit(1780917759.062:53189): avc: denied { write } for pid=10784 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.942952][ T40] audit: type=1400 audit(1780917759.162:53190): avc: denied { write } for pid=10793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.984911][ T40] audit: type=1400 audit(1780917759.192:53191): avc: denied { write } for pid=10798 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.183724][T10808] overlayfs: failed lookup in lower (newroot/383, name='bus', err=-40): overlapping layers [ 134.194673][T10809] evm: overlay not supported [ 134.322546][T10823] openvswitch: netlink: Key type 11796 is out of range max 32 [ 134.329988][T10825] xt_socket: unknown flags 0x58 [ 134.363725][ T40] audit: type=1400 audit(1780917759.582:53192): avc: denied { getopt } for pid=10826 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.379559][T10828] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 134.390797][T10828] netlink: 'syz.3.1412': attribute type 2 has an invalid length. [ 134.418668][T10834] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1414'. [ 134.439012][ T40] audit: type=1400 audit(1780917759.662:53193): avc: denied { write } for pid=10833 comm="syz.4.1414" name="/" dev="9p" ino=73412013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.452263][ T40] audit: type=1400 audit(1780917759.672:53194): avc: denied { link } for pid=10833 comm="syz.4.1414" name="file1" dev="9p" ino=73412079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.489933][ T40] audit: type=1400 audit(1780917759.712:53195): avc: denied { mounton } for pid=10833 comm="syz.4.1414" path="/79/file0/file0" dev="9p" ino=73412109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.499928][T10834] overlay: ./file0 is not a directory [ 134.820399][T10858] JFS: discard option not supported on device [ 134.825911][T10858] Mount JFS Failure: -5 [ 134.944324][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 134.951202][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 134.954806][T10868] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1427'. [ 134.985473][T10871] /dev/sg0: Can't lookup blockdev [ 134.987845][T10870] 9p: Unknown Cache mode or invalid value f [ 135.015107][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 135.017846][T10875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 135.020495][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 135.023314][T10875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1429'. [ 135.026237][T10875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1429'. [ 135.030756][T10875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.068552][T10877] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1430'. [ 135.071646][T10877] program syz.2.1430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.224844][T10889] GUP no longer grows the stack in syz.1.1434 (10889): 200000007000-20000000a000 (200000004000) [ 135.224884][T10888] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1434'. [ 135.231504][T10889] CPU: 2 UID: 0 PID: 10889 Comm: syz.1.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.231522][T10889] Tainted: [L]=SOFTLOCKUP [ 135.231526][T10889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.231532][T10889] Call Trace: [ 135.231536][T10889] [ 135.231541][T10889] dump_stack_lvl+0x100/0x190 [ 135.231565][T10889] gup_vma_lookup.cold+0x83/0x96 [ 135.231582][T10889] __get_user_pages+0x241/0x32a0 [ 135.231599][T10889] ? down_read_killable+0x307/0x4b0 [ 135.231627][T10889] ? __pfx___get_user_pages+0x10/0x10 [ 135.231643][T10889] __gup_longterm_locked+0x87d/0x16f0 [ 135.231657][T10889] ? __page_table_check_zero+0x2f1/0x410 [ 135.231672][T10889] ? __pfx___gup_longterm_locked+0x10/0x10 [ 135.231687][T10889] ? lock_acquire+0x1b1/0x370 [ 135.231705][T10889] gup_fast_fallback+0x16dc/0x2790 [ 135.231728][T10889] ? __pfx_gup_fast_fallback+0x10/0x10 [ 135.231743][T10889] ? __lock_acquire+0x4a5/0x2630 [ 135.231757][T10889] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 135.231775][T10889] ? lockdep_hardirqs_on+0x78/0x100 [ 135.231792][T10889] get_user_pages_fast+0xa7/0xf0 [ 135.231805][T10889] ? __pfx_get_user_pages_fast+0x10/0x10 [ 135.231822][T10889] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 135.231843][T10889] ? __mutex_lock+0x26d/0x1b10 [ 135.231858][T10889] ? pipe_lock+0x69/0x80 [ 135.231873][T10889] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 135.231888][T10889] ? __pfx___mutex_lock+0x10/0x10 [ 135.231903][T10889] ? import_ubuf+0x1b6/0x220 [ 135.231919][T10889] iov_iter_get_pages2+0xa3/0x100 [ 135.231932][T10889] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 135.231946][T10889] ? wait_for_space+0x2ca/0x3b0 [ 135.231963][T10889] __do_sys_vmsplice+0x7dd/0x13c0 [ 135.231984][T10889] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 135.232004][T10889] ? __pfx_futex_wait+0x10/0x10 [ 135.232018][T10889] ? errseq_sample+0x51/0x70 [ 135.232031][T10889] ? file_init_path+0x48e/0x670 [ 135.232064][T10889] ? do_syscall_64+0x115/0x870 [ 135.232082][T10889] do_syscall_64+0x115/0x870 [ 135.232096][T10889] ? clear_bhb_loop+0x40/0x90 [ 135.232109][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.232120][T10889] RIP: 0033:0x7fb32739ce59 [ 135.232130][T10889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.232140][T10889] RSP: 002b:00007fb3255f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 135.232151][T10889] RAX: ffffffffffffffda RBX: 00007fb327616090 RCX: 00007fb32739ce59 [ 135.232158][T10889] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000004 [ 135.232164][T10889] RBP: 00007fb327432d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.232171][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.232177][T10889] R13: 00007fb327616128 R14: 00007fb327616090 R15: 00007ffdb628f958 [ 135.232191][T10889] [ 135.366521][T10899] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 135.405116][T10899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.428430][T10899] bond4: (slave veth3): Enslaving as an active interface with a down link [ 135.440307][T10899] bond4: (slave dummy0): making interface the new active one [ 135.444264][T10902] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 135.449889][T10899] dummy0: entered promiscuous mode [ 135.452218][T10899] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 135.482208][T10912] netlink: 'syz.2.1440': attribute type 21 has an invalid length. [ 135.590879][T10928] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 135.837740][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.842877][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.846298][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.848633][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.850879][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.853162][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.856143][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.858400][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.864907][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.869879][ T7028] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.881472][ T7028] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [sy] on syz0 [ 135.920001][T10963] fido_id[10963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.958012][T10966] Illegal XDP return value 814246068 on prog (id 193) dev N/A, expect packet loss! [ 136.223906][T10971] lo speed is unknown, defaulting to 1000 [ 136.674935][T10990] omfs: Invalid superblock (0) [ 136.684390][ T5851] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 136.814291][ T5851] usb 6-1: device descriptor read/64, error -71 [ 136.842871][ T5745] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 136.866297][T11002] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 136.927644][T11004] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.054177][ T5851] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 137.194234][ T5851] usb 6-1: device descriptor read/64, error -71 [ 137.304481][ T5851] usb usb6-port1: attempt power cycle [ 137.615294][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.664247][ T5851] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 137.694640][ T5851] usb 6-1: device descriptor read/8, error -71 [ 137.944894][ T5851] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 137.974816][ T5851] usb 6-1: device descriptor read/8, error -71 [ 138.047913][T11026] input: syz0 as /devices/virtual/input/input21 [ 138.085886][ T5851] usb usb6-port1: unable to enumerate USB device [ 138.362834][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.368432][T11043] netlink: 'syz.2.1477': attribute type 21 has an invalid length. [ 138.372574][T11043] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 138.463483][T11054] loop9: detected capacity change from 0 to 7 [ 138.472399][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.475813][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.478558][ C0] buffer_io_error: 356 callbacks suppressed [ 138.478565][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.485831][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.489261][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.494622][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.498592][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.502087][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.504921][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.507416][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.510255][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.512836][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.516426][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.520230][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.523718][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.526929][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.529965][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.532905][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.535691][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.539494][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.542691][T11054] ldm_validate_partition_table(): Disk read failed. [ 138.547427][T11054] Dev loop9: unable to read RDB block 0 [ 138.550173][T11054] loop9: unable to read partition table [ 138.551991][T11054] loop9: partition table beyond EOD, truncated [ 138.556281][T11054] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 138.671776][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 138.671786][ T40] audit: type=1800 audit(1780917763.893:53206): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.1484" name="/newroot/407/file0" dev="tmpfs" ino=2193 res=0 errno=0 [ 138.728000][T11072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11072 comm=syz.3.1486 [ 139.123468][ T5752] Bluetooth: hci4: sending frame failed (-49) [ 139.125920][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 139.435095][ T40] audit: type=1400 audit(1780917764.653:53207): avc: denied { mount } for pid=11104 comm="syz.3.1497" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 139.467978][ T40] audit: type=1400 audit(1780917764.693:53208): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 139.522637][ T40] audit: type=1400 audit(1780917764.743:53209): avc: denied { getopt } for pid=11111 comm="syz.3.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.523994][T11112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.532932][T11112] netlink: 'syz.3.1499': attribute type 4 has an invalid length. [ 140.065254][T11116] __nla_validate_parse: 9 callbacks suppressed [ 140.065265][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 140.294199][T11110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.298006][T11110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.310356][T11110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.312674][T11110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.319572][T11110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.322175][T11110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.336384][T11110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.344011][T11110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.346119][T11110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.348965][T11110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.551343][T11148] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1511'. [ 140.670760][T11158] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 140.759849][ T40] audit: type=1400 audit(1780917765.983:53210): avc: denied { create } for pid=11159 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 140.893148][ T40] audit: type=1400 audit(1780917766.113:53211): avc: denied { accept } for pid=11168 comm="syz.4.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.139603][ T40] audit: type=1326 audit(1780917766.363:53212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.1524" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b6d9ce59 code=0x0 [ 141.244798][T11207] netlink: 'syz.4.1524': attribute type 21 has an invalid length. [ 141.260801][ T40] audit: type=1400 audit(1780917766.483:53213): avc: denied { ioctl } for pid=11196 comm="syz.4.1524" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 141.270164][ T40] audit: type=1400 audit(1780917766.493:53214): avc: denied { connect } for pid=11196 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.279826][ T40] audit: type=1400 audit(1780917766.503:53215): avc: denied { read } for pid=11196 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.280010][T11207] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 141.381317][T11217] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 141.543769][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 141.676237][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.681575][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.754007][ T5816] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 141.914478][ T3391] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 141.923637][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 141.929365][ T5816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 141.936285][ T5816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.940702][ T5816] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 141.943369][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.945732][ T5816] usb 6-1: Product: syz [ 141.946930][ T5816] usb 6-1: Manufacturer: syz [ 141.948300][ T5816] usb 6-1: SerialNumber: syz [ 142.074937][ T3391] usb 7-1: Using ep0 maxpacket: 16 [ 142.079320][ T3391] usb 7-1: config 1 has an invalid interface number: 30 but max is 1 [ 142.082161][ T3391] usb 7-1: config 1 has an invalid interface number: 61 but max is 1 [ 142.085694][ T3391] usb 7-1: config 1 has no interface number 0 [ 142.087798][ T3391] usb 7-1: config 1 has no interface number 1 [ 142.090139][ T3391] usb 7-1: config 1 interface 30 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 142.095362][ T3391] usb 7-1: config 1 interface 30 altsetting 44 has a duplicate endpoint with address 0x8, skipping [ 142.099805][ T3391] usb 7-1: config 1 interface 30 altsetting 44 has a duplicate endpoint with address 0x8, skipping [ 142.105594][ T3391] usb 7-1: config 1 interface 30 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 142.109382][ T3391] usb 7-1: config 1 interface 30 altsetting 44 bulk endpoint 0x1 has invalid maxpacket 16 [ 142.113144][ T3391] usb 7-1: config 1 interface 30 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 142.117316][ T3391] usb 7-1: config 1 interface 30 altsetting 44 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 142.121001][ T3391] usb 7-1: config 1 interface 61 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 142.125438][ T3391] usb 7-1: config 1 interface 61 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 142.129131][ T3391] usb 7-1: config 1 interface 61 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 142.132198][ T3391] usb 7-1: config 1 interface 30 has no altsetting 0 [ 142.134537][ T3391] usb 7-1: config 1 interface 61 has no altsetting 0 [ 142.140076][ T3391] usb 7-1: New USB device found, idVendor=1410, idProduct=a004, bcdDevice=f6.6d [ 142.144581][ T3391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.146947][ T3391] usb 7-1: Product: syz [ 142.148570][ T3391] usb 7-1: Manufacturer: syz [ 142.150152][ T3391] usb 7-1: SerialNumber: syz [ 142.157850][T11225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.163038][T11225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.333646][ T5752] Bluetooth: hci0: command 0x080f tx timeout [ 142.333676][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.384672][ T3391] usb 7-1: USB disconnect, device number 13 [ 142.413955][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.673091][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 142.680676][ T7733] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 142.680762][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 142.683376][ T7733] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 142.689404][ T7733] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 142.692064][ T7733] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 142.928148][T11299] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1553'. [ 142.931855][T11299] CIFS mount error: No usable UNC path provided in device string! [ 142.931855][T11299] [ 142.935227][T11299] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 143.024358][T11302] usb usb8: usbfs: process 11302 (syz.3.1551) did not claim interface 0 before use [ 143.091513][T11315] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 143.113278][T11315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.187300][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 143.377876][T11345] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 143.378739][T11344] overlayfs: upper fs does not support file handles, falling back to index=off. [ 143.408476][T11347] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 143.411126][T11347] overlayfs: overlapping lowerdir path [ 143.450199][T11351] fuse: fd is not a fuse device [ 143.613471][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 143.647836][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 143.668742][T11382] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 143.682411][T11382] netlink: 'syz.4.1580': attribute type 21 has an invalid length. [ 143.690133][T11382] bridge_slave_0: invalid flags given to default FDB implementation [ 143.708664][T11387] program syz.2.1581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.744406][T11392] tipc: Started in network mode [ 143.746170][T11392] tipc: Node identity ac14140f, cluster identity 4711 [ 143.748845][T11392] tipc: New replicast peer: 172.30.0.5 [ 143.752659][T11392] tipc: Enabled bearer , priority 10 [ 143.755287][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 143.757953][T11392] tipc: Disabling bearer [ 144.381224][T11425] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1594'. [ 144.413389][ T5745] Bluetooth: hci0: command 0x080f tx timeout [ 144.441673][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 144.441782][ T40] audit: type=1400 audit(1780917769.663:53224): avc: denied { getopt } for pid=11429 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.467051][ T5816] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.480633][T11430] lo speed is unknown, defaulting to 1000 [ 144.487445][ T5816] usb 6-1: MIDIStreaming interface descriptor not found [ 144.493363][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.532752][ T40] audit: type=1400 audit(1780917769.753:53225): avc: denied { write } for pid=11433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.562697][ T5816] usb 6-1: USB disconnect, device number 16 [ 144.639238][ T40] audit: type=1400 audit(1780917769.863:53226): avc: denied { write } for pid=11440 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.680763][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.155159][T11456] binder_alloc: binder_alloc_mmap_handler: 11455 200000389000-20000038b000 already mapped failed -16 [ 145.361733][T11471] 9pnet: Found fid 0 not clunked [ 145.450127][T11482] exFAT-fs (nbd1): unable to read boot sector [ 145.466834][T11482] exFAT-fs (nbd1): failed to read boot sector [ 145.480342][T11482] exFAT-fs (nbd1): failed to recognize exfat type [ 145.646125][T11485] kvm: emulating exchange as write [ 145.691452][T11489] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 145.757972][T11491] loop6: detected capacity change from 0 to 8 [ 145.862975][T11491] Dev loop6: unable to read RDB block 8 [ 145.864993][T11491] loop6: unable to read partition table [ 145.867971][T11491] loop6: partition table beyond EOD, truncated [ 145.869903][T11491] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 146.002155][T11504] vlan3: entered allmulticast mode [ 146.003924][T11504] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 146.010791][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 146.014441][T11504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11504 comm=syz.2.1612 [ 146.020374][ T5816] Process accounting resumed [ 146.076424][T11511] kvm: MONITOR instruction emulated as NOP! [ 146.146574][T11519] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.149833][T11519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11519 comm=syz.2.1617 [ 146.154407][T11519] netem: change failed [ 146.191091][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'. [ 146.222197][ T40] audit: type=1326 audit(1780917771.443:53227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.229527][ T40] audit: type=1326 audit(1780917771.443:53228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.237212][ T40] audit: type=1326 audit(1780917771.453:53229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.244359][ T40] audit: type=1326 audit(1780917771.453:53230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.251253][ T40] audit: type=1326 audit(1780917771.453:53231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.270002][ T40] audit: type=1326 audit(1780917771.493:53232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.277026][ T40] audit: type=1326 audit(1780917771.493:53233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.2.1619" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x7ffc0000 [ 146.340108][T11533] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 146.356655][T11533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.374206][T11533] vlan5: entered allmulticast mode [ 146.375852][T11533] veth0_to_bond: entered allmulticast mode [ 146.378124][T11533] bond4: (slave vlan5): Opening slave failed [ 146.493156][ T5745] Bluetooth: hci0: command 0x080f tx timeout [ 146.573680][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.683035][ T7026] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 146.693483][ T7724] dummy0: left promiscuous mode [ 146.863496][ T7026] usb 8-1: no configurations [ 146.864931][ T7026] usb 8-1: can't read configurations, error -22 [ 146.894122][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 146.983529][T11552] overlayfs: regular lower layers cannot follow data lower layers [ 146.993038][ T7026] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 147.143411][ T7026] usb 8-1: no configurations [ 147.144958][ T7026] usb 8-1: can't read configurations, error -22 [ 147.147100][ T7026] usb usb8-port1: attempt power cycle [ 147.481865][T11556] zonefs (loop2) ERROR: Not a zoned block device [ 147.483446][ T7026] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 147.505507][ T7026] usb 8-1: no configurations [ 147.506890][ T7026] usb 8-1: can't read configurations, error -22 [ 147.652890][ T7026] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 147.678934][T11572] Can't find a SQUASHFS superblock on nullb0 [ 147.684939][ T7026] usb 8-1: no configurations [ 147.686393][ T7026] usb 8-1: can't read configurations, error -22 [ 147.688654][ T7026] usb usb8-port1: unable to enumerate USB device [ 147.733131][T11578] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 147.735992][T11578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.898035][T11592] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.028914][T11605] sctp: [Deprecated]: syz.1.1646 (pid 11605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.028914][T11605] Use struct sctp_sack_info instead [ 148.239339][T11614] gretap0: entered promiscuous mode [ 148.242974][T11614] loop9: detected capacity change from 0 to 255852544 [ 148.334421][T11614] loop9: detected capacity change from 255852544 to 524287871 [ 148.404753][T11619] netlink: 'syz.1.1651': attribute type 39 has an invalid length. [ 148.745225][ T7026] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 148.750054][T11638] overlayfs: missing 'lowerdir' [ 148.903884][ T7026] usb 8-1: no configurations [ 148.905860][ T7026] usb 8-1: can't read configurations, error -22 [ 149.032750][ T7026] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 149.194432][ T7026] usb 8-1: no configurations [ 149.195932][ T7026] usb 8-1: can't read configurations, error -22 [ 149.198128][ T7026] usb usb8-port1: attempt power cycle [ 149.571733][T11653] Context (ID=0x0) not attached to queue pair (handle=0x1:0x9) [ 149.672004][T11655] syzkaller0: entered promiscuous mode [ 149.673803][T11655] syzkaller0: entered allmulticast mode [ 149.826049][T11671] could not allocate digest TFM handle cryptd(blake2b-160) [ 149.863465][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 149.863476][ T40] audit: type=1400 audit(1780917775.094:53242): avc: denied { write } for pid=11678 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.871275][ T40] audit: type=1400 audit(1780917775.094:53243): avc: denied { call } for pid=11678 comm="syz.3.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.901157][T11681] JFS: discard option not supported on device [ 149.904218][T11681] Mount JFS Failure: -5 [ 149.985356][T11679] syz.3.1667 (11679): drop_caches: 2 [ 149.994505][ T40] audit: type=1400 audit(1780917775.224:53244): avc: denied { map } for pid=11686 comm="syz.1.1670" path="socket:[46202]" dev="sockfs" ino=46202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 150.037733][T11691] xt_SECMARK: invalid mode: 2 [ 150.131494][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 150.189404][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 150.220890][ T40] audit: type=1326 audit(1780917775.444:53245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.2.1678" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39799ce59 code=0x0 [ 150.357932][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 150.431266][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'. [ 150.537034][T11744] vivid-000: kernel_thread() failed [ 150.571100][T11750] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.884570][T11757] IPVS: length: 120 != 163395403800 [ 150.886737][T11757] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 150.889694][T11757] SELinux: failed to load policy [ 151.082318][T11767] veth0: entered promiscuous mode [ 151.085752][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 151.113106][T11771] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 151.116315][T11771] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 151.224973][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 151.287324][T11794] can: request_module (can-proto-0) failed. [ 151.294211][ T40] audit: type=1400 audit(1780917776.524:53246): avc: denied { setopt } for pid=11796 comm="syz.1.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.334606][ T40] audit: type=1326 audit(1780917776.564:53247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.3.1702" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f53d9ce59 code=0x0 [ 151.359123][T11813] binfmt_misc: register: failed to install interpreter file ./file0 [ 151.366225][ T40] audit: type=1400 audit(1780917776.594:53248): avc: denied { ioctl } for pid=11798 comm="syz.2.1699" path="socket:[47334]" dev="sockfs" ino=47334 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.420818][T11818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1704'. [ 151.425985][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 151.602076][ T40] audit: type=1400 audit(1780917776.824:53249): avc: denied { validate_trans } for pid=11825 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.604134][T11826] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1706'. [ 151.648928][T11836] netlink: 'syz.2.1709': attribute type 5 has an invalid length. [ 151.874473][T11853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 152.011836][T11859] kvm: kvm [11858]: vcpu1, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 152.195647][T11867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1716'. [ 152.308012][ T40] audit: type=1400 audit(1780917777.534:53250): avc: denied { remount } for pid=11875 comm="syz.3.1719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 152.316588][ T40] audit: type=1400 audit(1780917777.534:53251): avc: denied { accept } for pid=11875 comm="syz.3.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.387241][T11882] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 152.403146][T11882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.414512][T11882] bond5: entered promiscuous mode [ 152.502097][ T5752] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 152.502309][T11890] tmpfs: Bad value for 'mpol' [ 152.591822][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1728'. [ 152.666103][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 152.668976][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 153.022295][ T5857] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.172223][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 153.175160][ T5857] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 153.177785][ T5857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.180830][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.183994][ T5857] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.187100][ T5857] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.191135][ T5857] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.194016][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.345612][T11928] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 153.348050][T11928] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 153.350491][T11928] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1736'. [ 153.353667][T11929] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 153.355974][T11929] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 153.400202][ T5857] usb 6-1: GET_CAPABILITIES returned 0 [ 153.402014][ T5857] usbtmc 6-1:16.0: can't read capabilities [ 153.597516][T11956] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 153.600478][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.603441][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.606161][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.608843][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.611084][T11956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.611596][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.611616][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.619052][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.623524][T11956] openvswitch: netlink: nsh attr 10 is out of range max 3 [ 153.625158][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.625800][T11956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.628464][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.633821][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.636481][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.639215][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.641587][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.644247][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.646958][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.652188][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 153.653456][T11962] Cannot find map_set index 3 as target [ 153.657522][T11964] Cannot find map_set index 3 as target [ 153.657940][ T10] usb 6-1: USB disconnect, device number 18 [ 153.668515][T11962] [U]  [ 154.162102][ T7028] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 154.315728][ T7028] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 154.320387][ T7028] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 154.325882][ T7028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.328389][ T7028] usb 8-1: Product: syz [ 154.329757][ T7028] usb 8-1: Manufacturer: syz [ 154.331454][ T7028] usb 8-1: SerialNumber: syz [ 154.341452][T11990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.405987][T12001] atomic_op ffff888056ccc198 conn xmit_atomic 0000000000000000 [ 154.558319][ T7028] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 154.561825][T12014] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 154.563889][ T7028] usb 8-1: USB disconnect, device number 16 [ 154.565067][T12014] overlayfs: failed to set xattr on upper [ 154.567872][T12014] overlayfs: ...falling back to redirect_dir=nofollow. [ 154.569933][T12014] overlayfs: ...falling back to index=off. [ 154.571737][T12014] overlayfs: ...falling back to uuid=null. [ 154.572833][ T7028] usblp0: removed [ 154.573791][T12014] overlayfs: ...falling back to xino=off. [ 154.578405][T12014] overlayfs: maximum fs stacking depth exceeded [ 154.686128][T12022] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.711185][T12025] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 154.864306][T12030] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 154.864792][T12031] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 154.870727][T12030] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 154.998487][T12045] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 155.130267][T12058] PM: Enabling pm_trace changes system date and time during resume. [ 155.130267][T12058] PM: Correct system time has to be restored manually after resume. [ 155.170707][T12064] openvswitch: netlink: IP tunnel dst address not specified [ 155.222039][T12066] binder: 12065:12066 ioctl c0306201 200000000080 returned -14 [ 155.225608][T12066] binder: 12065:12066 ioctl 531d 200000000040 returned -22 [ 155.354593][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 155.354606][ T40] audit: type=1400 audit(1780917780.580:53257): avc: denied { mounton } for pid=12077 comm="syz.3.1782" path="/syzcgroup/unified/syz3" dev="9p" ino=73412013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.355450][T12078] efs: cannot read volume header [ 155.422111][ T5815] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 155.582074][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 155.584284][ T5815] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 155.587445][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.589919][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.592665][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.595214][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.597798][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.600343][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.603106][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.605649][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.608293][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.610856][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.613743][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.615310][T12082] can0: slcan on ttyS3. [ 155.616189][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.620968][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.623890][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.627095][ T5815] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.630215][ T5815] usb 6-1: config 0 has no interface number 0 [ 155.633723][ T5815] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 155.636582][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.639045][ T5815] usb 6-1: Product: syz [ 155.640340][ T5815] usb 6-1: Manufacturer: syz [ 155.641746][ T5815] usb 6-1: SerialNumber: syz [ 155.645375][ T5815] usb 6-1: config 0 descriptor?? [ 155.648172][ T5815] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 155.672983][ T40] audit: type=1400 audit(1780917780.900:53258): avc: denied { setopt } for pid=12077 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.680865][ T40] audit: type=1400 audit(1780917780.900:53259): avc: denied { write } for pid=12084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.723718][ T40] audit: type=1400 audit(1780917780.950:53260): avc: denied { write } for pid=12088 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.765014][T12086] can0 (unregistered): slcan off ttyS3. [ 155.790027][ T40] audit: type=1400 audit(1780917781.010:53261): avc: denied { write } for pid=12092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.835233][ T40] audit: type=1400 audit(1780917781.060:53262): avc: denied { write } for pid=12095 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.916942][T12098] xt_hashlimit: size too large, truncated to 1048576 [ 156.482401][ T5815] etas_es58x 6-1:0.2: could not retrieve the product info string [ 156.519750][ T5815] usb 6-1: USB disconnect, device number 19 [ 156.523695][ T5815] etas_es58x 6-1:0.2: Disconnecting syz syz [ 156.673931][ T40] audit: type=1400 audit(1780917781.900:53263): avc: denied { write } for pid=12139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.688918][T12138] loop4: detected capacity change from 0 to 7 [ 156.701681][T12138] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 156.703407][T12138] loop4: partition table partially beyond EOD, truncated [ 156.705959][T12138] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 156.716945][ T40] audit: type=1400 audit(1780917781.940:53264): avc: denied { write } for pid=12148 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.794274][ T40] audit: type=1400 audit(1780917782.020:53265): avc: denied { write } for pid=12153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.853363][ T40] audit: type=1400 audit(1780917782.080:53266): avc: denied { write } for pid=12165 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.857583][T12168] __nla_validate_parse: 8 callbacks suppressed [ 156.857593][T12168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 157.082230][T12182] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.323361][T12206] SELinux: syz.3.1810 (12206) wrote to checkreqprot. This is no longer supported. [ 157.578583][T12226] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1817'. [ 157.581352][T12226] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 157.635940][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1816'. [ 157.664064][T12234] 9pnet_fd: p9_fd_create_unix (12234): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 157.721330][T12241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=12241 comm=syz.3.1822 [ 157.777284][T12244] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 157.778210][T12243] overlayfs: conflicting lowerdir path [ 158.009539][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.011803][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.016938][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.019116][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.021177][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.023348][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.025512][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.027615][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.029783][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.031961][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.034300][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.036656][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.038741][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.040933][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.043187][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.046826][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.048933][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.051036][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.054435][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.056607][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.058772][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.060896][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.063168][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.064635][T12274] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 158.065184][ T5745] Bluetooth: hci3: unexpected event for opcode 0x200b [ 158.065377][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.065767][T12272] syzkaller1: entered promiscuous mode [ 158.065780][T12272] syzkaller1: entered allmulticast mode [ 158.069547][T12274] UDF-fs: Scanning with blocksize 2048 failed [ 158.070490][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.074987][T12274] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 158.076109][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.078303][T12274] UDF-fs: Scanning with blocksize 4096 failed [ 158.080067][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.089469][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.092964][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.095078][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.097143][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.099351][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.101455][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.103713][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.106399][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.108926][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.111031][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.113346][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.115533][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.117611][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.119752][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.121781][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.124043][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.126188][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.128263][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.130328][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.132441][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.134501][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.135695][T12276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 158.136565][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.138525][T12276] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.139789][T12276] vhci_hcd vhci_hcd.0: Device attached [ 158.142009][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.146706][T12277] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 158.146719][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.149549][T12276] netlink: 'syz.3.1833': attribute type 16 has an invalid length. [ 158.151192][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.155551][ T7733] vhci_hcd vhci_hcd.3: stop threads [ 158.155807][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.157344][T12276] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1833'. [ 158.159420][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.163009][ T7733] vhci_hcd vhci_hcd.3: release socket [ 158.164772][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.166277][ T7733] vhci_hcd vhci_hcd.3: disconnect device [ 158.168104][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.172355][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.174725][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.176803][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.178876][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.180924][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.183110][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.185196][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.187280][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.189343][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 158.686468][T12313] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1840'. [ 158.700150][T12315] fuse: Bad value for 'user_id' [ 158.702092][T12315] fuse: Bad value for 'user_id' [ 158.742015][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.742105][ T5857] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 158.757410][T12316] fuse: Bad value for 'fd' [ 158.760393][T12316] fuse: Bad value for 'user_id' [ 158.762086][T12316] fuse: Bad value for 'user_id' [ 158.904292][ T5857] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 158.913286][ T5857] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 158.919130][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.921938][ T5857] usb 7-1: Product: syz [ 158.923328][ T5857] usb 7-1: Manufacturer: syz [ 158.925079][ T5857] usb 7-1: SerialNumber: syz [ 158.929148][T12302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.002314][ T50] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 159.014503][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.022678][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.025978][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.028650][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.033168][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.135180][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.138401][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.151936][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 159.157239][ T5857] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 159.161828][ T50] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 159.164392][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.164957][ T5857] usb 7-1: USB disconnect, device number 14 [ 159.167209][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.167224][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.167236][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.182138][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.184841][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.186918][ T5857] usblp0: removed [ 159.201726][T12363] tmpfs: Bad value for 'mpol' [ 159.208171][T12339] lo speed is unknown, defaulting to 1000 [ 159.398380][ T50] usb 6-1: usb_control_msg returned -32 [ 159.400103][ T50] usbtmc 6-1:16.0: can't read capabilities [ 159.449458][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.451966][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.454281][T12339] bridge_slave_0: entered allmulticast mode [ 159.457026][T12339] bridge_slave_0: entered promiscuous mode [ 159.460120][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.462417][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.464698][T12339] bridge_slave_1: entered allmulticast mode [ 159.467378][T12339] bridge_slave_1: entered promiscuous mode [ 159.481976][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.486494][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.509895][T12339] team0: Port device team_slave_0 added [ 159.512936][T12339] team0: Port device team_slave_1 added [ 159.534642][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.536762][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.547331][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.551389][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.553588][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.561466][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.583471][T12339] hsr_slave_0: entered promiscuous mode [ 159.586254][T12339] hsr_slave_1: entered promiscuous mode [ 159.588734][T12339] debugfs: 'hsr0' already exists in 'hsr' [ 159.590489][T12339] Cannot create hsr debugfs directory [ 159.687560][T12390] 9pnet_virtio: no channels available for device syz [ 159.718649][T12339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.723544][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.726144][T12339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.730046][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.732638][T12339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.736423][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.738979][T12339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.742885][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.757243][T12398] 9pnet_virtio: no channels available for device syz [ 159.761084][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.763290][T12339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.765127][T12398] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 159.793479][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.804119][T12390] bond6: (slave bond_slave_1): Device is not bonding slave [ 159.806435][T12390] bond6: option active_slave: invalid value (bond_slave_1) [ 159.809584][T12390] bond6 (unregistering): Released all slaves [ 159.823815][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.830561][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.836539][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.838675][ T7733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.843664][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.845840][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.980944][T12407] : entered promiscuous mode [ 159.992791][T12407] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 160.038071][T12413] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.062385][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.153862][T12424] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.207948][T12427] can0: slcan on ttyS3. [ 160.208049][T12339] veth0_vlan: entered promiscuous mode [ 160.224069][T12339] veth1_vlan: entered promiscuous mode [ 160.226630][T12427] PID 12427 killed due to inadequate hugepage pool [ 160.245069][T12339] veth0_macvtap: entered promiscuous mode [ 160.249836][T12339] veth1_macvtap: entered promiscuous mode [ 160.259340][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.269125][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.277139][ T7724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.283452][ T7721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.287228][ T7721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.296276][ T7721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.376783][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.379533][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.398604][ T7733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.401127][ T7733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.470976][ T5890] usb 6-1: USB disconnect, device number 20 [ 160.471696][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1870'. [ 160.507631][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1870'. [ 160.518674][T12453] netlink: 'syz.2.1872': attribute type 11 has an invalid length. [ 160.521103][T12453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1872'. [ 160.638497][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'. [ 160.842995][T12466] bridge1: port 1(veth5) entered blocking state [ 160.845046][T12466] bridge1: port 1(veth5) entered disabled state [ 160.847026][T12466] veth5: entered allmulticast mode [ 160.849501][T12466] veth5: entered promiscuous mode [ 160.890500][T12468] bridge1: port 2(veth7) entered blocking state [ 160.893228][T12468] bridge1: port 2(veth7) entered disabled state [ 160.895325][T12468] veth7: entered allmulticast mode [ 160.897809][T12468] veth7: entered promiscuous mode [ 160.951459][T12475] bond0: entered allmulticast mode [ 160.953150][T12475] bond_slave_0: entered allmulticast mode [ 160.955012][T12475] bond_slave_1: entered allmulticast mode [ 160.959560][T12475] misc userio: Can't change port type on an already running userio instance [ 161.062207][ T5745] Bluetooth: hci4: command tx timeout [ 161.202631][T12481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.208050][T12481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.210029][T12481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.212694][T12481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.215491][T12481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.217433][T12481] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.235031][T12481] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.313884][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 161.334017][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 161.334026][ T40] audit: type=1400 audit(1780917795.558:53279): avc: denied { read } for pid=12506 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.371847][ T40] audit: type=1400 audit(1780917795.588:53280): avc: denied { write } for pid=12511 comm="syz.5.1890" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 161.599732][T12537] IPv6: Can't replace route, no match found [ 161.624533][ T40] audit: type=1326 audit(1780917795.848:53281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.3.1893" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f53d9ce59 code=0x0 [ 161.826257][ T40] audit: type=1400 audit(1780917796.048:53282): avc: denied { create } for pid=12564 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.845666][T12565] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 161.868039][ T5752] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 162.122183][T12589] __nla_validate_parse: 1 callbacks suppressed [ 162.122195][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 162.126951][T12589] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.176944][T12589] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 162.178989][T12589] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.181328][T12589] vhci_hcd vhci_hcd.0: Device attached [ 162.184440][T12595] vhci_hcd: connection closed [ 162.184612][ T7724] vhci_hcd vhci_hcd.3: stop threads [ 162.192959][ T7724] vhci_hcd vhci_hcd.3: release socket [ 162.194828][ T7724] vhci_hcd vhci_hcd.3: disconnect device [ 162.210683][T12601] xt_cgroup: invalid path, errno=-2 [ 162.235235][T12604] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 162.237413][T12604] /dev/nullb0: Can't open blockdev [ 162.467866][T12622] program syz.2.1919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.562095][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 162.722019][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 162.725050][ T29] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 162.727869][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.728449][T12632] syz.2.1923 (12632) used obsolete PPPIOCDETACH ioctl [ 162.730792][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.730809][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.730822][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.730844][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.730855][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.956619][ T29] usb 10-1: usb_control_msg returned -32 [ 162.958389][ T29] usbtmc 10-1:16.0: can't read capabilities [ 162.982966][ T29] usb 10-1: USB disconnect, device number 2 [ 163.026081][T12658] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 163.042363][T12657] rdma_rxe: rxe_newlink: failed to add lo [ 163.127177][ T40] audit: type=1400 audit(1780917797.348:53283): avc: denied { setattr } for pid=12661 comm="syz.1.1932" name="SCTPv6" dev="sockfs" ino=50854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.192795][T12664] sctp: [Deprecated]: syz.1.1932 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.192795][T12664] Use struct sctp_sack_info instead [ 163.201967][T12664] sctp: [Deprecated]: syz.1.1932 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.201967][T12664] Use struct sctp_sack_info instead [ 163.215302][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.215376][ T5752] Bluetooth: hci0: command 0x080f tx timeout [ 163.251062][T12674] trusted_key: syz.5.1934 sent an empty control message without MSG_MORE. [ 163.253914][T12676] binder_alloc: 12675: binder_alloc_buf, no vma [ 163.256438][ T40] audit: type=1400 audit(1780917797.478:53284): avc: denied { transfer } for pid=12675 comm="syz.1.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.278788][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 163.283115][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 163.286205][T12680] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 163.288542][T12680] UDF-fs: Scanning with blocksize 512 failed [ 163.291638][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 163.294738][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 163.297546][T12680] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 163.299882][T12680] UDF-fs: Scanning with blocksize 1024 failed [ 163.303145][ T5752] Bluetooth: hci4: command 0x040f tx timeout [ 163.303875][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 163.304199][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.309832][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 163.314023][T12680] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 163.316489][T12680] UDF-fs: Scanning with blocksize 2048 failed [ 163.319319][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 163.322448][T12680] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 163.325722][T12680] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 163.328043][T12680] UDF-fs: Scanning with blocksize 4096 failed [ 163.328246][T12681] xt_bpf: check failed: parse error [ 163.329865][T12680] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 163.378977][T12688] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 163.381037][T12688] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 163.384642][T12688] vhci_hcd vhci_hcd.0: Device attached [ 163.398973][T12689] usbip_core: unknown command [ 163.400490][T12689] vhci_hcd: unknown pdu 67121200 [ 163.402273][T12689] usbip_core: unknown command [ 163.403897][ T7721] vhci_hcd vhci_hcd.5: stop threads [ 163.405472][ T7721] vhci_hcd vhci_hcd.5: release socket [ 163.409637][ T7721] vhci_hcd vhci_hcd.5: disconnect device [ 163.446867][T12694] veth1_macvtap: left promiscuous mode [ 163.448600][T12694] macsec0: entered allmulticast mode [ 163.492718][T12697] x_tables: duplicate underflow at hook 1 [ 163.522748][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 163.530976][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 163.591978][ T50] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 163.621916][T12707] ip6gretap2: entered promiscuous mode [ 163.623572][T12707] ip6gretap2: entered allmulticast mode [ 163.656402][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 163.687107][ T40] audit: type=1400 audit(1780917797.908:53285): avc: denied { map } for pid=12713 comm="syz.2.1946" path="pipe:[49971]" dev="pipefs" ino=49971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 163.690021][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.694293][ T40] audit: type=1400 audit(1780917797.908:53286): avc: denied { execute } for pid=12713 comm="syz.2.1946" path="pipe:[49971]" dev="pipefs" ino=49971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 163.721973][ T50] usb 6-1: device descriptor read/64, error -71 [ 163.838912][T12717] IPVS: Error connecting to the multicast addr [ 163.926522][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1948'. [ 163.931712][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 163.936130][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1948'. [ 163.961961][ T50] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 164.006467][ T40] audit: type=1400 audit(1780917798.228:53287): avc: denied { ioctl } for pid=12724 comm="syz.5.1950" path="socket:[52663]" dev="sockfs" ino=52663 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.070478][T12734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 164.092048][ T50] usb 6-1: device descriptor read/64, error -71 [ 164.202359][ T50] usb usb6-port1: attempt power cycle [ 164.543706][ T50] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 164.562781][ T50] usb 6-1: device descriptor read/8, error -71 [ 164.645217][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 164.649024][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 164.803274][ T50] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 164.822522][ T50] usb 6-1: device descriptor read/8, error -71 [ 164.859456][T12754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12754 comm=syz.3.1959 [ 164.859695][T12756] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1959'. [ 164.864501][T12754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12754 comm=syz.3.1959 [ 164.932463][ T50] usb usb6-port1: unable to enumerate USB device [ 164.935645][T12761] overlayfs: missing 'lowerdir' [ 165.051020][T12768] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.156008][T12773] kvm: kvm [12771]: vcpu0, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 165.371954][ T5752] Bluetooth: hci4: command 0x040f tx timeout [ 166.256030][T12816] xt_hashlimit: max too large, truncated to 1048576 [ 166.258794][T12816] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.262859][T12815] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 166.272174][T12816] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 166.322858][T12825] 9pnet_fd: Insufficient options for proto=fd [ 166.409317][T12834] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 166.411758][T12834] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 166.419347][T12835] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 166.430720][ T40] audit: type=1400 audit(1780917800.648:53288): avc: denied { write } for pid=12832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.434928][T12835] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 166.481661][ T40] audit: type=1400 audit(1780917800.698:53289): avc: denied { write } for pid=12849 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.529287][T12850] XFS (loop1): SB validate failed with error -5. [ 166.534282][T12831] can0 (unregistered): slcan off ttyS3. [ 166.550513][ T40] audit: type=1400 audit(1780917800.768:53290): avc: denied { write } for pid=12861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.600313][T12838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.605462][T12838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.607965][T12838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.610621][T12838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.613640][T12838] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.629353][ T40] audit: type=1400 audit(1780917800.848:53291): avc: denied { write } for pid=12868 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.717382][ T40] audit: type=1400 audit(1780917800.938:53292): avc: denied { write } for pid=12880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.788792][ T40] audit: type=1400 audit(1780917801.008:53293): avc: denied { write } for pid=12890 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.837039][T12904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.885619][T12908] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.890342][T12908] tipc: Failed to remove unknown binding: 66,0,0/2886997057:205744843/205744845 [ 166.894985][T12908] tipc: Failed to remove unknown binding: 66,0,0/2886997057:205744843/205744844 [ 166.898058][T12908] tipc: Failed to remove unknown binding: 66,0,0/2886997057:205744843/205744845 [ 166.901696][T12908] tipc: Failed to remove unknown binding: 66,0,0/2886997057:205744843/205744844 [ 167.006042][T12913] bridge4: entered promiscuous mode [ 167.019863][T12922] kAFS: unable to lookup cell '(,cL' [ 167.091204][T12928] block nbd1: NBD_DISCONNECT [ 167.117344][T12926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.193071][T12934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12934 comm=syz.5.2005 [ 167.357235][T12957] cgroup: Need name or subsystem set [ 167.407270][ T7724] Bluetooth: hci5: Frame reassembly failed (-84) [ 167.409170][T12965] vxcan0: tx address claim with dest, not broadcast [ 167.736831][ T40] audit: type=1400 audit(1780917801.958:53294): avc: granted { setsecparam } for pid=12987 comm="syz.5.2023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 167.870881][T13003] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 167.946047][ T40] audit: type=1400 audit(1780917802.168:53295): avc: denied { ioctl } for pid=13000 comm="syz.3.2026" path="pid:[4026534283]" dev="nsfs" ino=4026534283 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.955280][T13001] netlink: zone id is out of range [ 167.957361][T13001] netlink: zone id is out of range [ 167.959359][T13001] netlink: zone id is out of range [ 167.961099][T13001] netlink: zone id is out of range [ 167.963459][T13001] netlink: zone id is out of range [ 167.965527][T13001] netlink: zone id is out of range [ 167.967601][T13001] netlink: zone id is out of range [ 167.969312][T13001] netlink: zone id is out of range [ 167.971169][T13001] netlink: zone id is out of range [ 167.975756][T13012] usb usb7: usbfs: process 13012 (syz.2.2029) did not claim interface 0 before use [ 168.033985][T13017] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 168.034362][T13018] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 168.036385][T13017] __nla_validate_parse: 3 callbacks suppressed [ 168.036393][T13017] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2031'. [ 168.045652][T13018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2031'. [ 168.172774][ T5098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.180170][ T5098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.185820][ T5098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.189460][ T5098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.192643][ T5098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.284447][ T40] audit: type=1400 audit(1780917802.508:53296): avc: denied { append } for pid=13032 comm="syz.2.2036" name="event2" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 168.287346][T13033] hfsplus: unable to find HFS+ superblock [ 168.306771][T13036] hfsplus: unable to find HFS+ superblock [ 168.411371][ T7724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.415189][ T7724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 168.418383][ T7724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.444832][T13021] lo speed is unknown, defaulting to 1000 [ 168.552972][ T7724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.556236][ T7724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 168.560397][ T7724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.633175][T13046] netlink: 'syz.2.2039': attribute type 3 has an invalid length. [ 168.641569][T13046] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 168.662071][ T5745] Bluetooth: hci4: command 0x040f tx timeout [ 168.662894][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.664025][ T5749] Bluetooth: hci0: command 0x080f tx timeout [ 168.664053][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.746249][ T7724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.750369][ T7724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 168.756398][ T7724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.797782][T13021] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.800146][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.803183][T13021] bridge_slave_0: entered allmulticast mode [ 168.807010][T13021] bridge_slave_0: entered promiscuous mode [ 168.813157][T13021] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.816282][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.819313][T13021] bridge_slave_1: entered allmulticast mode [ 168.825990][T13021] bridge_slave_1: entered promiscuous mode [ 168.828382][T13070] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2043'. [ 168.831207][T13070] netlink: 'syz.2.2043': attribute type 2 has an invalid length. [ 168.851410][ T7724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.855544][ T7724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 168.859235][ T7724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.866720][T13060] program syz.5.2042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.889880][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.896094][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.899232][T13075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2045'. [ 168.912866][T13021] team0: Port device team_slave_0 added [ 168.916616][T13021] team0: Port device team_slave_1 added [ 168.934863][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.937048][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.945378][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.949610][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.951792][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.959542][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.021103][ T40] audit: type=1400 audit(1780917803.238:53297): avc: denied { mount } for pid=13077 comm="syz.5.2046" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 169.021695][T13078] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 169.049570][T13021] hsr_slave_0: entered promiscuous mode [ 169.053595][T13021] hsr_slave_1: entered promiscuous mode [ 169.056269][T13021] debugfs: 'hsr0' already exists in 'hsr' [ 169.058033][T13021] Cannot create hsr debugfs directory [ 169.091826][ T7724] bridge_slave_1: left allmulticast mode [ 169.094250][ T7724] bridge_slave_1: left promiscuous mode [ 169.096821][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.102056][ T7724] bridge_slave_0: left allmulticast mode [ 169.103735][ T7724] bridge_slave_0: left promiscuous mode [ 169.105479][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.122909][ T7724] dvmrp0: left allmulticast mode [ 169.172012][ T5857] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.244699][ T7724] gretap0 (unregistering): left promiscuous mode [ 169.322164][ T5857] usb 7-1: device descriptor read/64, error -71 [ 169.455253][ T5752] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.517381][ T7724] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 169.521524][ T7724] bond1 (unregistering): Released all slaves [ 169.529670][ T7724] bond2 (unregistering): Released all slaves [ 169.539213][ T7724] bond0 (unregistering): left promiscuous mode [ 169.546168][ T7724] bond0 (unregistering): Released all slaves [ 169.554090][ T7724] bond3 (unregistering): Released all slaves [ 169.562231][ T5857] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 169.565352][ T7724] bond4 (unregistering): (slave veth3): Releasing active interface [ 169.567459][ T7724] dummy0: entered promiscuous mode [ 169.571432][ T7724] bond4 (unregistering): (slave dummy0): Releasing active interface [ 169.579971][ T7724] bond4 (unregistering): Released all slaves [ 169.588954][ T7724] bond5 (unregistering): Released all slaves [ 169.604638][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 169.612357][ T5752] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 169.707076][ T5857] usb 7-1: device descriptor read/64, error -71 [ 169.707249][ T7724] tipc: Disabling bearer [ 169.722552][ T7724] tipc: Left network mode [ 169.813454][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.823795][ T5857] usb usb7-port1: attempt power cycle [ 169.977911][T13107] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 169.980673][T13107] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 169.987570][T13107] vhci_hcd vhci_hcd.0: Device attached [ 170.042206][T13108] vhci_hcd: connection closed [ 170.042559][ T7714] vhci_hcd vhci_hcd.5: stop threads [ 170.046554][ T7714] vhci_hcd vhci_hcd.5: release socket [ 170.048787][ T7714] vhci_hcd vhci_hcd.5: disconnect device [ 170.077931][ T7724] hsr_slave_0: left promiscuous mode [ 170.080183][ T7724] hsr_slave_1: left promiscuous mode [ 170.087030][ T7724] veth1_macvtap: left promiscuous mode [ 170.089777][ T7724] veth0_macvtap: left promiscuous mode [ 170.182249][ T5857] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 170.212622][ T5857] usb 7-1: device descriptor read/8, error -71 [ 170.227649][ T7724] team0 (unregistering): Port device team_slave_1 removed [ 170.243289][ T7724] team0 (unregistering): Port device team_slave_0 removed [ 170.263076][ T5752] Bluetooth: hci6: command tx timeout [ 170.449563][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 170.456243][ T5857] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 170.477984][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 170.485196][ T5857] usb 7-1: device descriptor read/8, error -71 [ 170.613283][ T5857] usb usb7-port1: unable to enumerate USB device [ 170.617830][T13021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.621791][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.624624][T13021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.628193][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.630842][T13021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.637320][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.640020][T13021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.643858][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.651216][ T7724] IPVS: stop unused estimator thread 0... [ 170.659334][T13154] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 170.667809][T13154] UDF-fs: Scanning with blocksize 2048 failed [ 170.676198][T13154] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 170.681243][T13154] UDF-fs: Scanning with blocksize 4096 failed [ 170.699626][T13021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.708646][T13021] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.715888][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.718677][ T7733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.723411][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.726167][ T7733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.732016][ T5752] Bluetooth: hci4: command 0x040f tx timeout [ 170.733004][ T29] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 170.904098][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 170.911466][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 170.915864][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.919910][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.924822][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.929123][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 170.933954][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.938683][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.941620][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.949576][ T29] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 170.964389][T13169] syz.5.2056 (13169): drop_caches: 2 [ 171.008452][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.036216][T13021] veth0_vlan: entered promiscuous mode [ 171.042165][T13021] veth1_vlan: entered promiscuous mode [ 171.057190][T13021] veth0_macvtap: entered promiscuous mode [ 171.061101][T13021] veth1_macvtap: entered promiscuous mode [ 171.074202][T13021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.080976][T13021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.086941][T13178] block nbd5: NBD_DISCONNECT [ 171.088011][ T7724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.092662][ T7724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.094627][ T5816] hid-generic 0005:0007:0007.000A: item fetching failed at offset 0/2 [ 171.097012][ T7724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.101702][ T5816] hid-generic 0005:0007:0007.000A: probe with driver hid-generic failed with error -22 [ 171.103429][ T7724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.193996][ T7724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.198579][ T7724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.237848][ T7724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.240966][ T7724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.441348][T13188] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 171.471148][ T7019] usb 6-1: USB disconnect, device number 25 [ 171.694456][T13199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.700473][T13199] batadv_slave_1: entered promiscuous mode [ 171.703405][T13201] /dev/sr0: Can't open blockdev [ 171.820869][ T40] kauditd_printk_skb: 471 callbacks suppressed [ 171.820882][ T40] audit: type=1400 audit(1780917806.038:53769): avc: denied { remount } for pid=13209 comm="syz.3.2066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.821755][T13210] option changes via remount are deprecated (pid=13209 comm=syz.3.2066) [ 171.850199][T13210] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 171.854235][T13210] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2066'. [ 171.902675][T13212] syzkaller1: entered promiscuous mode [ 171.904429][T13212] syzkaller1: entered allmulticast mode [ 171.985644][T13222] binder: 13220:13222 ioctl 4138ae84 200000000480 returned -22 [ 171.988178][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 171.990942][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 171.994651][T13222] netlink: 'syz.2.2071': attribute type 15 has an invalid length. [ 171.997164][T13222] netlink: 'syz.2.2071': attribute type 18 has an invalid length. [ 172.087169][ T40] audit: type=1400 audit(1780917806.308:53770): avc: denied { write } for pid=13232 comm="syz.1.2074" name="/" dev="9p" ino=73412013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.097853][T13233] netfs: Duplicate cookie detected [ 172.099759][T13233] netfs: O-cookie c=00000006 [fl=4008 na=0 nA=0 s=-] [ 172.102280][T13233] netfs: O-cookie V=00000008 [9p,syz,] [ 172.104323][T13233] netfs: O-key=[8] '0b2e600400000000' [ 172.106867][T13233] netfs: N-cookie c=00000007 [fl=8 na=0 nA=0 s=-] [ 172.106963][ T40] audit: type=1400 audit(1780917806.308:53771): avc: denied { unlink } for pid=13232 comm="syz.1.2074" name="file0" dev="9p" ino=73412109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.109367][T13233] netfs: N-cookie V=00000008 [9p,syz,] [ 172.118352][T13233] netfs: N-key=[8] '0b2e600400000000' [ 172.123114][ T40] audit: type=1400 audit(1780917806.318:53772): avc: denied { write } for pid=13232 comm="syz.1.2074" name="/" dev="9p" ino=73412013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.130483][ T40] audit: type=1400 audit(1780917806.318:53773): avc: denied { associate } for pid=13232 comm="syz.1.2074" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.334613][ T5752] Bluetooth: hci6: command tx timeout [ 172.345770][T13250] cgroup2: Unknown parameter 'devices' [ 172.460576][T13271] netlink: 'syz.1.2083': attribute type 11 has an invalid length. [ 172.489753][T13276] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 172.551092][T13284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2087'. [ 172.761657][T13293] netlink: 'syz.3.2089': attribute type 30 has an invalid length. [ 172.772680][T13293] netlink: 'syz.3.2089': attribute type 30 has an invalid length. [ 172.772709][ T7714] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.779592][ T7714] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.789262][ T7714] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.793332][ T7714] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.812495][ T5752] Bluetooth: hci4: command 0x040f tx timeout [ 173.119984][T13306] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 173.481093][T13341] geneve2: entered promiscuous mode [ 173.483074][T13341] geneve2: entered allmulticast mode [ 173.485037][ T7714] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.487864][ T7714] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.490630][ T7714] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.494753][ T7714] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.497890][T13341] overlay: Unknown parameter 'uid>00000000000000000000' [ 173.616739][T13354] input: syz0 as /devices/virtual/input/input25 [ 173.699486][T13358] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.703717][T13358] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 173.782470][T13361] program syz.1.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.813740][T13365] netlink: 'syz.1.2107': attribute type 11 has an invalid length. [ 173.816329][T13365] __nla_validate_parse: 2 callbacks suppressed [ 173.816337][T13365] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2107'. [ 173.900974][ T40] audit: type=1400 audit(1780917808.118:53774): avc: denied { write } for pid=13367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.942002][ T5823] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 173.949138][ T40] audit: type=1400 audit(1780917808.168:53775): avc: denied { write } for pid=13372 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.029652][T13379] overlay: Bad value for 'workdir' [ 174.058677][ T40] audit: type=1400 audit(1780917808.278:53776): avc: denied { write } for pid=13378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.099875][ T5823] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.104667][ T5823] usb 7-1: config 0 has no interface number 0 [ 174.106592][ T5823] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.109972][ T5823] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 174.118087][ T5823] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.122102][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.124976][ T40] audit: type=1400 audit(1780917808.348:53777): avc: denied { write } for pid=13382 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.136377][ T5823] usb 7-1: config 0 descriptor?? [ 174.139414][T13358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.153565][ T5823] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.347203][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 174.356703][ T5816] usb 7-1: USB disconnect, device number 19 [ 174.412183][ T5752] Bluetooth: hci6: command tx timeout [ 174.486024][T13399] xt_hashlimit: size too large, truncated to 1048576 [ 174.571940][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 174.841963][ T5857] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 174.886691][T13419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2120'. [ 174.991322][T13425] netem: change failed [ 175.014702][ T5857] usb 10-1: Using ep0 maxpacket: 32 [ 175.018425][ T5857] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 175.029462][ T5823] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 175.034895][T13422] Invalid option length (1048180) for dns_resolver key [ 175.182003][ T5823] usb 8-1: Using ep0 maxpacket: 16 [ 175.197363][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.206210][ T5823] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.209511][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.212578][ T5823] usb 8-1: Product: syz [ 175.214720][ T5823] usb 8-1: Manufacturer: syz [ 175.216428][ T5823] usb 8-1: SerialNumber: syz [ 175.232217][ T5823] usb 8-1: config 0 descriptor?? [ 175.256556][ T5823] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.260491][ T5823] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 175.502473][ T5823] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 175.829429][ T5823] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 175.837566][ T5823] em28xx 8-1:0.0: board has no eeprom [ 175.902256][ T5823] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 175.909815][ T5823] em28xx 8-1:0.0: dvb set to bulk mode. [ 175.913165][ T50] em28xx 8-1:0.0: Binding DVB extension [ 175.924258][ T5823] usb 8-1: USB disconnect, device number 17 [ 175.941901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 175.942921][ T5823] em28xx 8-1:0.0: Disconnecting em28xx [ 175.971817][ T5857] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 175.984175][T13440] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2124'. [ 175.992950][ T50] em28xx 8-1:0.0: Registering input extension [ 176.011560][ T5823] em28xx 8-1:0.0: Closing input extension [ 176.104329][T13442] bond2: Unable to set up delay as MII monitoring is disabled [ 176.116060][T13442] bond2 (unregistering): Released all slaves [ 176.154121][ T5823] em28xx 8-1:0.0: Freeing device [ 176.194078][T13448] netlink: 'syz.3.2126': attribute type 12 has an invalid length. [ 176.196525][T13448] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 176.198879][T13448] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2126'. [ 176.201615][T13448] netlink: 'syz.3.2126': attribute type 3 has an invalid length. [ 176.204049][T13448] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2126'. [ 176.207275][T13448] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2126'. [ 176.210157][T13448] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2126'. [ 176.236072][T13449] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2127'. [ 176.242458][ T40] audit: type=1400 audit(1780917810.408:53778): avc: denied { read } for pid=13444 comm="syz.2.2127" path="socket:[55289]" dev="sockfs" ino=55289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.250806][ T5857] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.254427][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.257132][ T5857] usb 10-1: Product: 蟪쮓䭮鯻ከ䎷辴።鴖ᱷ느兑埇ꨶ⪗뺁咮愾Ꜯ椪ᾃតﮤ潂뎷끞᱓ꄸ艙鉏⚻਀ꏔ㢆鷳㋚쒛㹮ⱧⒷ띶脼摷Ꝁꦴ嬫 [ 176.262767][ T5857] usb 10-1: Manufacturer: 哴㌾ᦂዃ㺭奧Ӹ폆룑鷣툒묰㆏䱁禩㫇᳕륊⏒訉倸ⳮⴾ♌ᑞ멒揲䉑蒺섎嬾ࠃꧏ떓굗ਊ㤂ᵞ憸㤌鈇댰럃ਲ䮜賓髇冈뛽絡抦踣럳↚喇칆书デ亁祰辑⴬퟇溝퓽쥏꠱慙鸡䰆 [ 176.270018][ T5857] usb 10-1: SerialNumber: ꧿じ᫘உ⌚ᕱƌ蟀ꯤ┻떾멇ꋵ뫥蚎伂ᯞ逃莎ძ꒤헉ⶤ餽ᘈᔂ浬終魦콩鈰￴흑풋ꔾ檔籤᷈釩辅꧍㼫᮵妴抸년斸騼䶴혽扚沐밬㐛篰渨忨燃డ嗆憴曧ἤ퀕귕˳恲葓횭賂꼗楔 [ 176.279397][T13453] xt_ipcomp: unknown flags 1D [ 176.365518][T13462] syzkaller0: entered promiscuous mode [ 176.367293][T13462] syzkaller0: entered allmulticast mode [ 176.517616][T13480] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 176.584260][ T6417] [ 176.585067][ T6417] ========================= [ 176.586440][ T6417] WARNING: held lock freed! [ 176.587843][ T6417] syzkaller #0 Tainted: G L [ 176.589731][ T6417] ------------------------- [ 176.591262][ T6417] syz.2.154/6417 is freeing memory ffff8880251ff000-ffff8880251ff7ff, with a lock still held there! [ 176.594444][ T6417] ffff8880251ff260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x33a/0x920 [ 176.597787][ T6417] 3 locks held by syz.2.154/6417: [ 176.599345][ T6417] #0: ffff88803f36e400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 176.602399][ T6417] #1: ffff88805718d260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP/2){+.+.}-{0:0}, at: l2cap_sock_release+0x61/0x280 [ 176.605949][ T6417] #2: ffff8880251ff260 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0x33a/0x920 [ 176.609412][ T6417] [ 176.609412][ T6417] stack backtrace: [ 176.611221][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.611236][ T6417] Tainted: [L]=SOFTLOCKUP [ 176.611240][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.611247][ T6417] Call Trace: [ 176.611251][ T6417] [ 176.611255][ T6417] dump_stack_lvl+0x100/0x190 [ 176.611268][ T6417] debug_check_no_locks_freed+0x115/0x120 [ 176.611281][ T6417] ? __sk_destruct+0x7a0/0xab0 [ 176.611295][ T6417] ? __sk_destruct+0x88c/0xab0 [ 176.611309][ T6417] kfree+0x178/0x6c0 [ 176.611324][ T6417] __sk_destruct+0x88c/0xab0 [ 176.611338][ T6417] sk_destruct+0xc8/0xf0 [ 176.611353][ T6417] __sk_free+0xf4/0x3e0 [ 176.611368][ T6417] sk_free+0x61/0x90 [ 176.611382][ T6417] bt_accept_unlink+0x22a/0x370 [ 176.611395][ T6417] bt_accept_dequeue+0x791/0x920 [ 176.611406][ T6417] ? __rwlock_init+0x112/0x150 [ 176.611422][ T6417] l2cap_sock_cleanup_listen+0x47/0x4d0 [ 176.611438][ T6417] ? __local_bh_enable_ip+0x9e/0x120 [ 176.611454][ T6417] l2cap_sock_release+0x69/0x280 [ 176.611470][ T6417] __sock_release+0xb3/0x260 [ 176.611487][ T6417] ? __pfx_sock_close+0x10/0x10 [ 176.611503][ T6417] sock_close+0x1c/0x30 [ 176.611519][ T6417] __fput+0x3ff/0xb50 [ 176.611539][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.611552][ T6417] task_work_run+0x150/0x240 [ 176.611566][ T6417] ? __pfx_task_work_run+0x10/0x10 [ 176.611581][ T6417] do_exit+0x951/0x2af0 [ 176.611592][ T6417] ? __pfx_do_exit+0x10/0x10 [ 176.611601][ T6417] ? cgroup_update_frozen_flag+0x107/0x210 [ 176.611620][ T6417] ? find_held_lock+0x2b/0x80 [ 176.611628][ T6417] ? get_signal+0x1872/0x2210 [ 176.611644][ T6417] do_group_exit+0xd5/0x2a0 [ 176.611655][ T6417] get_signal+0x20ff/0x2210 [ 176.611673][ T6417] ? __pfx_get_signal+0x10/0x10 [ 176.611688][ T6417] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 176.611707][ T6417] arch_do_signal_or_restart+0x91/0x7e0 [ 176.611724][ T6417] ? get_timespec64+0x147/0x240 [ 176.611736][ T6417] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.611755][ T6417] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 176.611766][ T6417] ? rcu_is_watching+0x12/0xc0 [ 176.611783][ T6417] exit_to_user_mode_loop+0x98/0x670 [ 176.611797][ T6417] ? rcu_is_watching+0x12/0xc0 [ 176.611813][ T6417] do_syscall_64+0x666/0x870 [ 176.611826][ T6417] ? clear_bhb_loop+0x40/0x90 [ 176.611839][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.611850][ T6417] RIP: 0033:0x7fb39795d68e [ 176.611858][ T6417] Code: Unable to access opcode bytes at 0x7fb39795d664. [ 176.611862][ T6417] RSP: 002b:00007fb3987def58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 176.611873][ T6417] RAX: fffffffffffffdfc RBX: 00007fb3987df6c0 RCX: 00007fb39795d68e [ 176.611880][ T6417] RDX: 00007fb3987defb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.611886][ T6417] RBP: 00007fb397a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.611892][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.611899][ T6417] R13: 00007fb397c16038 R14: 00007fb397c15fa0 R15: 00007ffdb9dae9c8 [ 176.611908][ T6417] [ 176.622125][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.632034][ T6417] ================================================================== [ 176.632049][ T6417] BUG: KASAN: slab-use-after-free in bt_accept_dequeue+0x6bd/0x920 [ 176.632074][ T6417] Write of size 4 at addr ffff8880251ff080 by task syz.2.154/6417 [ 176.632088][ T6417] [ 176.632099][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.632126][ T6417] Tainted: [L]=SOFTLOCKUP [ 176.632132][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.632142][ T6417] Call Trace: [ 176.632148][ T6417] [ 176.632154][ T6417] dump_stack_lvl+0x100/0x190 [ 176.632175][ T6417] print_report+0x13d/0x4b0 [ 176.632200][ T6417] ? __virt_addr_valid+0x239/0x430 [ 176.632219][ T6417] ? bt_accept_dequeue+0x6bd/0x920 [ 176.632236][ T6417] kasan_report+0xdf/0x1d0 [ 176.632256][ T6417] ? bt_accept_dequeue+0x6bd/0x920 [ 176.632277][ T6417] kasan_check_range+0x10f/0x1e0 [ 176.632299][ T6417] bt_accept_dequeue+0x6bd/0x920 [ 176.632317][ T6417] ? __rwlock_init+0x112/0x150 [ 176.632344][ T6417] l2cap_sock_cleanup_listen+0x47/0x4d0 [ 176.632367][ T6417] ? __local_bh_enable_ip+0x9e/0x120 [ 176.632394][ T6417] l2cap_sock_release+0x69/0x280 [ 176.632417][ T6417] __sock_release+0xb3/0x260 [ 176.632443][ T6417] ? __pfx_sock_close+0x10/0x10 [ 176.632469][ T6417] sock_close+0x1c/0x30 [ 176.632497][ T6417] __fput+0x3ff/0xb50 [ 176.632520][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.632541][ T6417] task_work_run+0x150/0x240 [ 176.632561][ T6417] ? __pfx_task_work_run+0x10/0x10 [ 176.632585][ T6417] do_exit+0x951/0x2af0 [ 176.632607][ T6417] ? __pfx_do_exit+0x10/0x10 [ 176.632628][ T6417] ? cgroup_update_frozen_flag+0x107/0x210 [ 176.632655][ T6417] ? find_held_lock+0x2b/0x80 [ 176.632669][ T6417] ? get_signal+0x1872/0x2210 [ 176.632696][ T6417] do_group_exit+0xd5/0x2a0 [ 176.632714][ T6417] get_signal+0x20ff/0x2210 [ 176.632741][ T6417] ? __pfx_get_signal+0x10/0x10 [ 176.632763][ T6417] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 176.632793][ T6417] arch_do_signal_or_restart+0x91/0x7e0 [ 176.632819][ T6417] ? get_timespec64+0x147/0x240 [ 176.632841][ T6417] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.632870][ T6417] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 176.632887][ T6417] ? rcu_is_watching+0x12/0xc0 [ 176.632913][ T6417] exit_to_user_mode_loop+0x98/0x670 [ 176.632934][ T6417] ? rcu_is_watching+0x12/0xc0 [ 176.632959][ T6417] do_syscall_64+0x666/0x870 [ 176.632980][ T6417] ? clear_bhb_loop+0x40/0x90 [ 176.632999][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.633016][ T6417] RIP: 0033:0x7fb39795d68e [ 176.633029][ T6417] Code: Unable to access opcode bytes at 0x7fb39795d664. [ 176.633037][ T6417] RSP: 002b:00007fb3987def58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 176.633054][ T6417] RAX: fffffffffffffdfc RBX: 00007fb3987df6c0 RCX: 00007fb39795d68e [ 176.633065][ T6417] RDX: 00007fb3987defb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.633075][ T6417] RBP: 00007fb397a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.633085][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.633095][ T6417] R13: 00007fb397c16038 R14: 00007fb397c15fa0 R15: 00007ffdb9dae9c8 [ 176.633115][ T6417] [ 176.633121][ T6417] [ 176.633743][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.635123][ T6417] Allocated by task 5752: [ 176.635135][ T6417] kasan_save_stack+0x30/0x50 [ 176.635152][ T6417] kasan_save_track+0x14/0x30 [ 176.637018][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.638844][ T6417] __kasan_kmalloc+0xaa/0xb0 [ 176.643146][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.644361][ T6417] __kmalloc_noprof+0x301/0x850 [ 176.644381][ T6417] sk_prot_alloc+0x10b/0x2a0 [ 176.644393][ T6417] sk_alloc+0x36/0xe80 [ 176.646211][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.647405][ T6417] bt_sock_alloc+0x3b/0x3c0 [ 176.647419][ T6417] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 176.647433][ T6417] l2cap_sock_new_connection_cb+0x10f/0x260 [ 176.647448][ T6417] l2cap_connect_cfm+0x4e2/0xf80 [ 176.827902][ T6417] hci_remote_features_evt+0x4f4/0x9b0 [ 176.829552][ T6417] hci_event_packet+0x8e9/0xcd0 [ 176.831066][ T6417] hci_rx_work+0x451/0xfc0 [ 176.832424][ T6417] process_one_work+0xa0e/0x1980 [ 176.833923][ T6417] worker_thread+0x5ef/0xe50 [ 176.835350][ T6417] kthread+0x370/0x450 [ 176.836588][ T6417] ret_from_fork+0x72b/0xd50 [ 176.837994][ T6417] ret_from_fork_asm+0x1a/0x30 [ 176.839454][ T6417] [ 176.840193][ T6417] Freed by task 6417: [ 176.841441][ T6417] kasan_save_stack+0x30/0x50 [ 176.842883][ T6417] kasan_save_track+0x14/0x30 [ 176.844335][ T6417] kasan_save_free_info+0x3b/0x70 [ 176.845865][ T6417] __kasan_slab_free+0x5f/0x80 [ 176.847389][ T6417] kfree+0x223/0x6c0 [ 176.848596][ T6417] __sk_destruct+0x88c/0xab0 [ 176.850014][ T6417] sk_destruct+0xc8/0xf0 [ 176.851357][ T6417] __sk_free+0xf4/0x3e0 [ 176.852626][ T6417] sk_free+0x61/0x90 [ 176.853818][ T6417] bt_accept_unlink+0x22a/0x370 [ 176.855306][ T6417] bt_accept_dequeue+0x791/0x920 [ 176.856807][ T6417] l2cap_sock_cleanup_listen+0x47/0x4d0 [ 176.858496][ T6417] l2cap_sock_release+0x69/0x280 [ 176.860005][ T6417] __sock_release+0xb3/0x260 [ 176.861493][ T6417] sock_close+0x1c/0x30 [ 176.862777][ T6417] __fput+0x3ff/0xb50 [ 176.864020][ T6417] task_work_run+0x150/0x240 [ 176.865422][ T6417] do_exit+0x951/0x2af0 [ 176.866697][ T6417] do_group_exit+0xd5/0x2a0 [ 176.868110][ T6417] get_signal+0x20ff/0x2210 [ 176.869510][ T6417] arch_do_signal_or_restart+0x91/0x7e0 [ 176.871268][ T6417] exit_to_user_mode_loop+0x98/0x670 [ 176.872851][ T6417] do_syscall_64+0x666/0x870 [ 176.874269][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.876083][ T6417] [ 176.876806][ T6417] The buggy address belongs to the object at ffff8880251ff000 [ 176.876806][ T6417] which belongs to the cache kmalloc-2k of size 2048 [ 176.880864][ T6417] The buggy address is located 128 bytes inside of [ 176.880864][ T6417] freed 2048-byte region [ffff8880251ff000, ffff8880251ff800) [ 176.885062][ T6417] [ 176.885790][ T6417] The buggy address belongs to the physical page: [ 176.887746][ T6417] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251f8 [ 176.890306][ T6417] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 176.892877][ T6417] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 176.895315][ T6417] page_type: f5(slab) [ 176.896556][ T6417] raw: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 176.899079][ T6417] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 176.901617][ T6417] head: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 176.904177][ T6417] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 176.906722][ T6417] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 176.909366][ T6417] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 176.912020][ T6417] page dumped because: kasan: bad access detected [ 176.913987][ T6417] page_owner tracks the page as allocated [ 176.915714][ T6417] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4932037370, free_ts 0 [ 176.921547][ T6417] post_alloc_hook+0xfd/0x120 [ 176.923030][ T6417] get_page_from_freelist+0x11a6/0x3410 [ 176.924734][ T6417] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 176.926548][ T6417] new_slab+0xa6/0x6c0 [ 176.927797][ T6417] refill_objects+0x277/0x420 [ 176.929219][ T6417] __pcs_replace_empty_main+0x375/0x650 [ 176.930860][ T6417] __kmalloc_cache_noprof+0x493/0x6f0 [ 176.932498][ T6417] acpi_ds_create_walk_state+0x95/0x300 [ 176.934202][ T6417] acpi_ps_execute_method+0x2c1/0xe90 [ 176.935831][ T6417] acpi_ns_evaluate+0x640/0x1670 [ 176.937329][ T6417] acpi_ut_evaluate_object+0xf7/0x610 [ 176.938952][ T6417] acpi_rs_get_prt_method_data+0xa0/0x150 [ 176.940662][ T6417] acpi_get_irq_routing_table+0xb8/0x140 [ 176.942389][ T6417] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 176.944145][ T6417] acpi_pci_irq_lookup+0x8e/0x6b0 [ 176.945690][ T6417] acpi_pci_irq_enable+0x1f5/0x6f0 [ 176.947247][ T6417] page_owner free stack trace missing [ 176.948858][ T6417] [ 176.949607][ T6417] Memory state around the buggy address: [ 176.951336][ T6417] ffff8880251fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 176.953650][ T6417] ffff8880251ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.956047][ T6417] >ffff8880251ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.958437][ T6417] ^ [ 176.959713][ T6417] ffff8880251ff100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.962149][ T6417] ffff8880251ff180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.964564][ T6417] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.988722][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 176.988732][ T40] audit: type=1400 audit(1780917811.208:53780): avc: denied { read } for pid=5129 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 177.009655][ T40] audit: type=1400 audit(1780917811.208:53781): avc: denied { search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.017003][ T40] audit: type=1400 audit(1780917811.208:53782): avc: denied { write search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.024201][ T40] audit: type=1400 audit(1780917811.208:53783): avc: denied { add_name } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.030403][ T40] audit: type=1400 audit(1780917811.208:53784): avc: denied { create } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.036686][ T40] audit: type=1400 audit(1780917811.208:53785): avc: denied { append open } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.043647][ T40] audit: type=1400 audit(1780917811.208:53786): avc: denied { getattr } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.050506][ T6417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.052700][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.2.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.055934][ T6417] Tainted: [L]=SOFTLOCKUP [ 177.057244][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.060284][ T6417] Call Trace: [ 177.061366][ T6417] [ 177.062284][ T6417] dump_stack_lvl+0x100/0x190 [ 177.063768][ T6417] vpanic+0x552/0x970 [ 177.064998][ T6417] ? __pfx_vpanic+0x10/0x10 [ 177.066410][ T6417] ? rcu_is_watching+0x12/0xc0 [ 177.067908][ T6417] ? bt_accept_dequeue+0x6bd/0x920 [ 177.069473][ T6417] panic+0xd1/0xe0 [ 177.070638][ T6417] ? __pfx_panic+0x10/0x10 [ 177.072029][ T6417] ? bt_accept_dequeue+0x6bd/0x920 [ 177.073580][ T6417] ? preempt_schedule_common+0x42/0xc0 [ 177.075256][ T6417] ? check_panic_on_warn+0x1f/0x90 [ 177.076798][ T6417] check_panic_on_warn.cold+0x19/0x34 [ 177.078422][ T6417] end_report.part.0+0x3a/0x90 [ 177.079889][ T6417] kasan_report.cold+0xe/0x18 [ 177.081372][ T6417] ? bt_accept_dequeue+0x6bd/0x920 [ 177.082946][ T6417] kasan_check_range+0x10f/0x1e0 [ 177.084466][ T6417] bt_accept_dequeue+0x6bd/0x920 [ 177.085976][ T6417] ? __rwlock_init+0x112/0x150 [ 177.087450][ T6417] l2cap_sock_cleanup_listen+0x47/0x4d0 [ 177.089134][ T6417] ? __local_bh_enable_ip+0x9e/0x120 [ 177.090782][ T6417] l2cap_sock_release+0x69/0x280 [ 177.092334][ T6417] __sock_release+0xb3/0x260 [ 177.093752][ T6417] ? __pfx_sock_close+0x10/0x10 [ 177.095243][ T6417] sock_close+0x1c/0x30 [ 177.096516][ T6417] __fput+0x3ff/0xb50 [ 177.097737][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.099323][ T6417] task_work_run+0x150/0x240 [ 177.100740][ T6417] ? __pfx_task_work_run+0x10/0x10 [ 177.102303][ T6417] do_exit+0x951/0x2af0 [ 177.103594][ T6417] ? __pfx_do_exit+0x10/0x10 [ 177.105007][ T6417] ? cgroup_update_frozen_flag+0x107/0x210 [ 177.106763][ T6417] ? find_held_lock+0x2b/0x80 [ 177.108201][ T6417] ? get_signal+0x1872/0x2210 [ 177.109644][ T6417] do_group_exit+0xd5/0x2a0 [ 177.111048][ T6417] get_signal+0x20ff/0x2210 [ 177.112920][ T6417] ? __pfx_get_signal+0x10/0x10 [ 177.114934][ T6417] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 177.117142][ T6417] arch_do_signal_or_restart+0x91/0x7e0 [ 177.119441][ T6417] ? get_timespec64+0x147/0x240 [ 177.121167][ T6417] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.123129][ T6417] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 177.124918][ T6417] ? rcu_is_watching+0x12/0xc0 [ 177.126386][ T6417] exit_to_user_mode_loop+0x98/0x670 [ 177.127993][ T6417] ? rcu_is_watching+0x12/0xc0 [ 177.129450][ T6417] do_syscall_64+0x666/0x870 [ 177.130868][ T6417] ? clear_bhb_loop+0x40/0x90 [ 177.132357][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.134147][ T6417] RIP: 0033:0x7fb39795d68e [ 177.135489][ T6417] Code: Unable to access opcode bytes at 0x7fb39795d664. [ 177.137578][ T6417] RSP: 002b:00007fb3987def58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 177.140087][ T6417] RAX: fffffffffffffdfc RBX: 00007fb3987df6c0 RCX: 00007fb39795d68e [ 177.142515][ T6417] RDX: 00007fb3987defb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.144912][ T6417] RBP: 00007fb397a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 177.147292][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.149649][ T6417] R13: 00007fb397c16038 R14: 00007fb397c15fa0 R15: 00007ffdb9dae9c8 [ 177.152077][ T6417] [ 177.153689][ T6417] Kernel Offset: disabled [ 177.155026][ T6417] Rebooting in 86400 seconds..