last executing test programs: 35.411875803s ago: executing program 2 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x4, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6602}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) (async) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f0000000480)) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x5) (async) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1c4, 0x0, 0x3}]}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r8}, 0x18) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r9}, 0x18) (async) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000000079102800003406001800005e50"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r4}, 0x94) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) ppoll(&(0x7f0000000240)=[{r11}, {r1, 0x2100}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x2]}, 0x8) sendmsg$kcm(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write(r5, &(0x7f0000000380)="c36d25be7f80c7100e9016612b8e9d38d216adfffc428e4093f80cb7311e85f02fbfd5375d68246d5e168ba619656841464a5c10592c7b1473302d4c4221286260dad7dd2971dd439de06b017f8d349d10cf69a974d153e183fd41246ca5f06eec26145eea88391cb0376622f66909eaab3c41b9329afc2a55e1693ea255a212f50f0a984c7bdf1467340b4efb9d095d5a5b7c0e2c136ea3befc63d4efcd7ad7483573ff63118d203fa61c6795de1cbbfac022e889f0cf97ed13a389394f79f3647aa5b32c5fdc2feb9aaaa211c7286e69ffaf", 0xd3) 35.123887129s ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000100)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 35.041143806s ago: executing program 2 (id=107): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x7, 0x10, 0x5}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x80000001, 0x10}, &(0x7f00000000c0)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r1, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={r1, 0xbb, "6816ee1ab73406735115259400c33e1461ad8a6568c8e17106fde247e8f69a2d0b9d4c4aaa99c0527eaa39738ac74a7f8231414566643c2149e1ec2b2001c72a4ff7ad1362f7d02ba9c223df0572e54d91aff69501f3a561127524772e17d822c9ae6d0c34169a078e20b814cd9488482aae21b2ba46124da973a991a18af0271e1b86fc747b2b714a9b473bd8786f18d817157d2c03e9be6ef59d840af853641575161850b48ead79d11f60c46f59e4c02cc0a35561816e7a0a14"}, &(0x7f0000000280)=0xc3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x7}, &(0x7f0000000300)=0x8) io_setup(0x7f, &(0x7f0000000340)=0x0) r5 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) io_cancel(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x469, r5, &(0x7f00000003c0)="8e12446d9a22b739d9396e9998e9c350b4ba9b8cb3b2e07660fa88abcb1da57b1e417b74e49f9d23a668a41d4f8f833d2ab7d7441dd6e290eb1603cdf31067aea5a8184e5c214e9372cd4b46c05873c58010a191c5b00dfc0710ba7a789bdde28b557f063dd9d432eee8a2d56eb8bedb6dea1ab3491ec02756e485210b52b71f7106e17da38c5e0d3f6ef107cba67e4e85ff381f7262fd9df75d6cefab25f41ccd87135530a60aeb4ffff54efcd24005558efe54923a6a6af7ac183b9c5e", 0xbe, 0x7}, &(0x7f00000004c0)) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002680)={0xa5c, 0x1, {0x0}, {0xee01}, 0x10001, 0x6}) statx(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x6000, 0x40, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002b40)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000002c40)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0}, &(0x7f0000002d80)=0xc) getresgid(&(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)=0x0) getresuid(&(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)=0x0) getresgid(&(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)=0x0) fstat(r5, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000003100)=[0x0, 0xee01, 0xee01, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003140)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000003240)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000003400)='./file0\x00', 0x4000, 0x400, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003540)={0x0, 0x0}, &(0x7f0000003580)=0xc) fstat(r2, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000000500)="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", 0x2000, &(0x7f0000006480)={&(0x7f0000002500)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x42a0300, 0x1000, 0x8, 0x5, 0x8, 0x0, 0x0, 0x40, 0xff}}, &(0x7f0000002580)={0x18, 0x0, 0x8001, {0x7fffffff}}, &(0x7f00000025c0)={0x18, 0x0, 0x6, {0xd30}}, &(0x7f0000002600)={0x18, 0x0, 0x2, {0xa}}, &(0x7f0000002640)={0x18, 0x0, 0x10, {0x17}}, &(0x7f00000026c0)={0x28, 0x0, 0x4, {{0x8000000000000000, 0x5e4, 0x2, r7}}}, &(0x7f0000002700)={0x60, 0x0, 0x1267, {{0xfffffffffffffffd, 0x6, 0x54c6, 0xfff, 0x0, 0x9, 0xfffeffff, 0xe41}}}, &(0x7f0000002780)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffc, {0x2}}, &(0x7f00000027c0)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000002800)={0x20, 0x0, 0x8, {0x0, 0x2}}, &(0x7f0000002980)={0x78, 0x0, 0x400, {0x5, 0x347, 0x0, {0x6, 0x0, 0xa8b1, 0x8, 0xfffffffffffffffb, 0x5, 0x721, 0x9, 0xef, 0x4000, 0x0, r8, 0x0, 0x8000, 0x44e}}}, &(0x7f0000002a00)={0x90, 0xffffffffffffffda, 0x2, {0x4, 0x1, 0x1000, 0x60, 0x2, 0x1, {0x5, 0x1, 0x9, 0x7, 0x7fffffff, 0x100000000, 0x4, 0x7963, 0x8, 0xa000, 0x4, r9, 0xee01, 0x5}}}, &(0x7f0000002ac0)={0x78, 0x0, 0x32, [{0x1, 0x8c, 0xe, 0x1ff, '/dev/swradio#\x00'}, {0x0, 0x6, 0x4, 0xd, '\x1c\':,'}, {0x6, 0x6, 0x1, 0x6, '^'}]}, &(0x7f0000005880)={0x678, 0x0, 0x0, [{{0x6, 0x3, 0x100000001, 0x6, 0xb, 0x3, {0x0, 0x3, 0x5, 0x9, 0x100000001, 0x2, 0x6, 0x2, 0x3, 0x8000, 0x9, r10, r11, 0x7, 0xba6}}, {0x1, 0x7, 0xe, 0xe3, '/dev/swradio#\x00'}}, {{0x1, 0x5, 0xffffffffffffff44, 0x0, 0x2, 0x4, {0x6, 0xd, 0xe, 0x2482, 0x3, 0x1, 0x5, 0xc, 0x133, 0x8000, 0x800, r12, r13, 0x0, 0x2}}, {0x3, 0x8, 0xe, 0x1, '/dev/swradio#\x00'}}, {{0x5, 0x1, 0x200, 0x0, 0x8, 0x6, {0x4, 0xb, 0x0, 0x9, 0xb53, 0xfffffffffffffff9, 0x6, 0x10, 0x2, 0x1000, 0x1, r14, r15, 0x1, 0xfffffffe}}, {0x0, 0x5, 0x0, 0x10001}}, {{0x5, 0x0, 0x1, 0x79, 0x0, 0x3, {0x6, 0x1, 0x3, 0x80, 0x3, 0x6, 0x6, 0x0, 0x2, 0xc000, 0x0, 0xffffffffffffffff, r16, 0x30, 0x5}}, {0x1, 0x81, 0xe, 0x10001, '/dev/swradio#\x00'}}, {{0x5, 0x0, 0x3, 0xb, 0x4, 0x8ec7, {0x4, 0x3ff, 0x9, 0xfff, 0x5, 0x6, 0xf, 0x7, 0x3, 0x1000, 0x8, r17, r18, 0x10000, 0x7fffffff}}, {0x5, 0x7, 0x4, 0xd394, '+^\'-'}}, {{0x3, 0x0, 0x9, 0xd6f, 0x9, 0x5, {0x1, 0x8000000000000000, 0x101, 0x3, 0x74f0000000, 0x4, 0x0, 0xb9c8, 0x8, 0xc000, 0x7, r19, r20, 0x6, 0x8}}, {0x5, 0xe9, 0xe, 0x8, '/dev/swradio#\x00'}}, {{0x0, 0x3, 0x825e, 0x1, 0x5d7, 0x3, {0x6, 0xc, 0x6, 0xfffffffffffffffd, 0xfff, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x8000, 0xfffffffe, r21, r22, 0x4, 0x5}}, {0x6, 0xfffffffffffffffb, 0x1, 0x7fffffff, '&'}}, {{0x5, 0x0, 0x0, 0x4, 0x7, 0x3, {0x0, 0x3, 0x4, 0xfffffffffffffff9, 0xb0, 0xffff, 0x2, 0x6, 0x800, 0x2000, 0x100, r23, r24, 0x101}}, {0x2, 0xfff, 0xe, 0x9, '/dev/swradio#\x00'}}, {{0x6, 0x3, 0x7, 0x3, 0x3, 0x4, {0x1, 0x7, 0xfffffffffffffbef, 0x3, 0x10001, 0xfffffffffffffff9, 0x0, 0x81, 0xfffffff9, 0x2000, 0x7, 0x0, 0x0, 0x2, 0xffffffff}}, {0x3, 0xead, 0xe, 0x2, '/dev/swradio#\x00'}}, {{0x5, 0x2, 0x0, 0x2361, 0x2, 0x8, {0x2, 0x400, 0x4, 0x5, 0x7, 0x7, 0x6, 0x2, 0x6, 0x6000, 0x7ff, 0x0, 0x0, 0xfff}}, {0x0, 0x7, 0x1, 0x800, ','}}]}, &(0x7f0000006040)={0xa0, 0xfffffffffffffff5, 0x7, {{0x0, 0x2, 0xffffffffffffffff, 0x40, 0x585, 0x5, {0x6, 0x5, 0x7, 0x5, 0x2, 0x840, 0xae, 0x2, 0xff, 0x1000, 0x15bb, 0x0, 0x0, 0x2, 0x708}}, {0x0, 0x4}}}, &(0x7f0000006100)={0x20, 0x0, 0x2, {0x8001, 0x4, 0x85, 0x8}}, &(0x7f0000006340)={0x130, 0x0, 0x401, {0x800, 0x9, 0x0, '\x00', {0x10000, 0x2, 0x4, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x8, 0xffffffffffffffff, 0x7, 0x9, {0x5, 0x6}, {0x5, 0x4c1}, {0x6, 0x10000}, {0x0, 0x4}, 0x0, 0x6, 0xe, 0x5}}}}) 34.911703497s ago: executing program 2 (id=111): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x0, 0x5, 0x29, 0x9, "0adb3f09"}, 0x5, 0x1, {}, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000680)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x2, 0x5, {}, {0x5, 0x0, 0x7, 0x1, 0x6, 0xa, "23a7bcee"}, 0x0, 0x1, {0x0}, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x1d) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) tkill(r5, 0x13) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr=0xffffffff, @rand_addr=0x64010100, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) 34.709428893s ago: executing program 2 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 34.381506636s ago: executing program 2 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x9, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080) 34.343496054s ago: executing program 32 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x228, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x9, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080) 1.92182795s ago: executing program 0 (id=644): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x54a9, 0x430400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f0007080d0b038da1880b25", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES16=r0, @ANYBLOB="01000000000000001c20120000626f6e64d10f7931586e476cb400000000000000009faa64b2ec000000485031296c8d8cbc7aea8b88b79bd43305f2c3172d6dbc30bdb108066ed733b9e5ac13605e3574dc1434c714a9690fd1"], 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x4800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) io_uring_setup(0x40b0, &(0x7f0000000200)={0x0, 0xcb46, 0x10, 0x1, 0x14c}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r6, &(0x7f0000000180)='L', 0x1, 0x7ffffffe) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 1.831803615s ago: executing program 0 (id=645): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0xc000}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x400}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd67, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4850) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r17, 0x80, 0x7e, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)={0x1e8, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40800}, 0x40004000) 1.688346616s ago: executing program 0 (id=649): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0xe1bd4000) fcntl$setstatus(r0, 0x4, 0x42000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8080) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000e600002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000"], 0x80}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wlan1\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000002480)={0x2, 'ipvlan0\x00', 0x3}, 0x18) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.630121525s ago: executing program 0 (id=652): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r1 = io_uring_setup(0x7cb0, &(0x7f0000000480)={0x0, 0xcecf, 0x8000, 0x2, 0x2e6}) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x20000, 0x0, 0x396, 0x0, r1}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r3 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x110, r3, 0x44238000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1.221938864s ago: executing program 0 (id=660): syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f00000002c0)=""/130, 0x82, 0x0, 0x0}, 0x58) (async) syz_emit_ethernet(0xfc6, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0xf90, 0x2b, 0x1, @empty, @local, {[@hopopts={0x2b, 0x1ee, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xf68, "266e647e8d1cd32b7449e0f46f413ae621cfc231d896b9c2ada2afb0b10f210465860b4e3480fa095c1711a97db6c6a0e58b9eb9527875e1d903a8595af6245adcd317434b009b85d1d2e4ebc9d2979fbc83a553214f3ef7afbb764d1cde6c00efac33cb2dac0a1a09bad09dcda09ac9eb6ca277b4d23fd98bf22e74537f40d0cd473d3a7c563e3f8f64b52312f56cb649df125223f9fac25808c2c7fc15c0c4ea3b9fa7b39ed17f32dfbaf31ad264507cc01f597fe320260549212b56a9733967fcc0249fd4228d6d2491625f7b880d94d3e739d67abe3b391507c34f2e05758cde773997729060577dde46bc4582422717a3641433719f89946c2e93f3c63a1618f74b9385fa61bfccd46df7ed2ce6924261f497b8a16b87fec2f9fe52fc15e0214489422001958d80f15e062606e68e2ffdcc471dc9f474cac626efe77ed64982fd449b62bb01a5f997b3387ddccae63b0becddf9a6be421ca1f401cb950643203137f9ba84b6bd22887c1ed0582ba614882bd2432de614e0841441e70d5608ffd9d795eefcddb20a2d1e528c3a11a31a32084ebe6a110478ebbbd6fb7d4cb21dcfdcb253cc3ca3dd2e46e41c8dcb9995e66ebd0af424e0da363791aec406a9f19f3fca79289d8c842916f8b74bfc8c3f04ea8f5f1e001ccf4c76291980ea46d381672909e1fd2edfd3ba6800156f591941a5d1420c953b0111c78aa8327613d3496020dae341bacdd0ad4ee2f674ad837799b7615ad77f1fbdd913c5e3113eec4941b83030090aaea31a7dd82c21b9004f9c4f65a1df23ac9847070fe76f3084e5696d078a25e8377fa780e0d786b6b126a17ecceeaf11325639b5b39303394ab99909b1241b08221010363cb2b7d506510aceb27d32586dd2398c3fd4beb1b162bdaccd4d8afd268901cb0788f2e2a7b92c500acfd6e05a63871577e616e5ba5e7e09e9433ce3e864b58e6e9b3acf5871f12cf14b7cf7192a4a25511d7c77cd60141ac824fedeb07703d82b78af724b6953110952b38fbaf97d9538881844ca798141ce9fad64d1f35f6b96cfc9ca5926a56124cb3906f0a6d0cf28c4ffaaf9c1f543a2c23f74f6f42b9aeef9ae37322cc9444000e88bdbf92757c21b5d706ea8166dd9eec8fc10811d559bd278e5252620bc766b6a1f1171f249834db900303ae60edfc6f95d02f2548d89510e86d4e9f99cdfa613b95465139b471bee9eadfcba26792ead7ce5a04d27e19925469a3f5152aa1cac19cb1c0f63325192d81a8f942acf480ab24acbd85f922563eeaf7da9db76c2c155c44c79e949ddd175e0ec548e0b0b75cf770e9c05f142cc52f1a73c78afa7855984dc65802374df5b01906aabb0a7089e8096491b7d7cc39000f9335747ae39de63c5b8ebe58281af4c23ff410ee605bebcd94c09d04a2c3377d2c73fabe0a326508dc95be9e282e79936d9f92d606e1634378bed5cf35e9591687eff38c6a21aab2e86da5ef4a2a0d771f6426cde8d6db4f2f1dea2bfa79c755837768cda0a984887ab36d686194c678c50299e749a49f3cbd9f25ef3a7d241d50c291b7402fa6eca7cfdbf0064e1d03509d37f2160e18a02b4f591bcc8721547b41b8151adcc3abfb3120af3d71290dcf88182b4265abce59ae78f540a9327b6def9ccae6bb64a91d2e8470255e8d318ebb1659baaf8d46ccc5ac1cf93839c816a217cbb1da725b1c44f99f57b170b8bb0ed9ccaafa8699513a132da4ae6ad0b5e1d29e2007571b92288f03c2e74f3bda501a4d2ac5f686590c073d864286878730911e4c7602244eec3f0e730e691f5dcb183e8c38b8a051b38f624b2db588a62ca44aa5888417f5cdd0ad96b2cf6a582462436a55291af06b1530e67ed0a2a830095206e486631872a67bb037216f6990615393edc8ba8f242069f5172720ced74f5d77a8bf0c49b02b75d9ea1943718aeeb5ae9f8ef9a646af66e37960e9a794ad468ac3cdbb1597710ef2d361a2cb58e0a4a4dbe4e57154fe583d9fd38b0996eedecd438cbae2f1d3548543bce0ec4bdbfc60c6ea99f1f5c3955892ad1ccb4ca587955ff5ee8071475af6e417f56a8e34f2937024873d9a6e9be3b16575ddd5b0948e47ac479f945f2c5b3657541362e6533954a414a19b5ad532addf29d981bc3662771abe14ed99e454d4514bd067f1586b33f6ebe4ae006bc39228ecd6d8b5908414868f0863fadd67fb36bc23613724c48d81f8a9ada59cd6a6c252afccaf55d1409184a9aec34d4beb410096c91e79ade2b21b23b577593ee7a44de3645e6b9608f695503dc248986eba84c051bd564eeaec27cb1f8f616f32f09133650758d7595277575c35f980e0f0805dce62962d5602ecc90fc36b88ba28e52a3416815e29645f98eebd6fecf408a89d937e38736c704a5a18d10dd1b9610da38e032c2c17b38269cde5c9e36595fdba033ecb95ae00213dd99d03d21848933712a35fdf671c1fc86e499c1d1cbf34fdf5f0f2fa3a1605f60899afd59db1c543a03ddd1eae0dc143260b8033cfef5dd4efeb76e5efbde783b10a931c8e9c77fdf823a322ed9f0320ee3d681d445ad3fba0a5608b1abde7b91b91af7bc2cbfcadf5ff672c2b99241138b1788425d29ca2ba19ca2bd7c6ea80b0ec599fc262c84137e75aefa006f10762b3ea67a7f6f208fb92daa44ea95848df901d764de760b1749c52eec302e1f59bbd16142e9d48b5a5b871be007442e27c8d1c78518398c05710797aa3c92b6f7f8b7392aa2982858b97ba7f16e3e383b948a2771414d77fdce0f5d12268c9fa759ebae7eb0cd2989243a1cbab0159d91924c943544f3d926759b98f535925b8aee88fd733bb03ec27b7482bb45c9d64c6c6773be0a7b8cbecd4ce3676e508f7c96d2ee3927eae112fac9e93f937ffb706bb5412d0ecaa9a8a7770c6ebde3e58db0bf187348406f632fac7234774dc9d8f7a111982ca28b9ac3533a837624d8c1847ecd5d326df5f844938bbc0304acf7c1de426534fac2e5ee07c314695ebd82a95312de11e43303280429ed69bfbaf17ce878c8084dddace8c26ff3addb1bc33ad0818ad0a1ac1f89960e070bbbc8fab3893bce6714d0564fb89b24f851de1a5b9c8f7b9622a61dec0ce5c2cbeecd0d6d8ba5b36f80ce6d3e72db365ac34214601e1112198e5393d332fd0cd5a33d979e6fdedd87c3047affb2b0b1e2268b60f02b5ba33d4ad0c04fd771f924022358c0a6149f028d547f2a915619003f57c2226a36b4489355c3a15583ab6b14f11d8d73ee84490222c145bc8b6478ba1bd9cc0aec9b8de96bdd9460d1ed70d0c17f5deee09cfc7cb299982ca3e4f673d3ad72b873dd8b7b82eba9f3f6dce4d585615b82d7a97987a8f8d5167d6b9817360cb0c41b405b1149c09c5d66bff2e29acd2cdb1cfca590c3b63e5a3302de9ccd9dc7febdbd764707e803f1731ad2296dd4de328cae499a810c15fc58c89a4dce54113bcb99f7313f72f2f2761893a15ceddff499b6a71b3524939a07e632dc65f84c13052523900f889be8b7c6cbdf513c163783f08925a59c59021f2e3af4fcf96900b1c8b2131d5f011b92b7f5104d5331b8b174ddc94f42c7e681ad8cdafa1b0ffad1b6382ae60dfbd182c458387aec4c4adb7802c09124d3ff67aa370bbc4b083cf29e52738b46fc61773c7a154bae26613f318e6610e0792d55077fcc5baf075a611c4d3b3e2e0e1be8e8adcdc04014e6767d59173a4f378d5a652c74521b344abbff935a99a3c2be5511ea9488a2c2f1f2290b05baf037a9cb23a3d86f4b8c444e653d15f3f362b18faa4fa775c43fd996e95f01e2cb3b3e75e93eaaebf253ab8fbf1c3f93c6a0a1b85bcc46458f3353a0ff93ba172e79b606df7650230641f2d3aa9bdb1f5d29bd8870a5eccee2e1c4dc0e72013cf74a0adb65a1e7a38c0c97c2549136442e33680a2ae903efaf82a5ce19dc826a6d189d408b08d42ba9f0c133489683e73c4eada94d9c59e868a7b4ae403607972480d608dd889a4ddb0a5d5df50655546557d10b3d4d75a25abae61a7a6156ee8bf8ac135a6205753cd981047d7b5f265fb7eb267a0aa3241c561bfa63aaa2ba69bf6434e827048fe2aa4b9abf10afdbdba4ba38c6791d91e08f22ce0501b51bde604d23cdcb066d55acae8c7f1376e24e5009973bf46557cc396de14be1efaf8c1f0695861e2355e87cb2b72165e1ec8cbe321a59bfc30c46742b540946c43868dc1e0d51730252f5544e93fb11dd7ab48bdf76f8c1101d50e15def783a5f915eb85cbf660d728a96e09e8252567ae93fe9bd24ad8e0ebc81bf98450cee13425a2a8b30a578b85700ea4e3ec54a1bf55c5f8fb5d32d65c10b9d8977db63cba77bd65593dc290252357bacdad1d0468f320d379cd3bddad664138e4ee61babf2ad6776ff4532496e0c5a6cafcc8e7fb6f0a68b63096ab058a7f48af5e247cba1ed463898b25404be331627d2338e90afb53a41298d21a2f1dc2d86c39c7fa1d3aeda0c656fd135689a1c82c021798dfc1740d8899de316b594b6ebe01be624565c7ba611160750145e279b8a2f86201dbda707ef4253de636acef32f10399f312319199746ce11df4091302ae763df68fa27312ff8e5fba415e747789e00cbceb25d56031ad0305baa942fc32c8e2e52f40f48070f0e8237c96f7687e1533845257d5ea7635879000f2d4e58614b82d9e3fbe3e7fcebbd488a548b4dd280624a6e13656e2c23516b02fe713313b68329d0385fc639c9f7e433fa57bb4cd30d3ed93de89d3ebb6066e2fbd5e2e01c60da251572a1e84921f9f1b128858b4ff8eccf8de7176cdd9559486827d28c652e07f09af086340c3c6c65e8c567093a25b4308c421eb2276f7efc3a8b7cc9f2d3062b7fe649b2e4748f238136fc22776818f5c35432eca258538e15bb695b7a0c830e47a2201bba2c6c6b7a22ff34d14189dc22dcf01647e3c10eb569b340c0157ad5de51df116460f16f625f362b9d7fbec9484bfffbfe535051c373c78c15e31a1ebcf492f87f27fd9517767aa41b3dba72faa4ce2533646ab47c2798ecc33fc4045898b8672764c0753a81589e2683eab60109355aff3eb39dd9e8875faffb16d54e8a5e303c41a14c60edea6e7247e1e22df8c5d3ac538ec4d27caa11c7bd4d279761962b4d77e2257b41e2d1f35fba04b046171aa1a022e43fefeed0a744554c5e43ba44d29fa1f7d1e00236580daadd462ecdaf365f71e812c397384fca58c2682916dc8cfdd3918a88729774e4816ea27f2b7cfb5380ea8f30038ba22e58bf81275d9c9cfaff47190b9db0261cfaca47e0557520785f83924c558dc481f7c41d4c6912b938bfef95780632e193c455e143c1b147cdfa0ef12380afb89a97ffa1d2e8e212b3e7063da48eadb06c4096c5ce0b994894862430a1a501c539fb627ae9e7220497ce38a8ac38d18cf463de1eefde867806a551a56569bb7e8f7e12e731011b55a4539ae45187882b7dae732c51a52f6098eb367c231a789dc43bf02a3407d356e31cfe3b595efd4a0ce3cb853fc5efa54d870f74d3a22d53cc43b6e8974202"}]}, @dstopts={0x5c, 0x0, '\x00', [@padn]}]}}}}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0xf2, "7c7206741ffc3d2f391a29c54bdb3b1f99ce3bc43d33e0a605629225ed6d8d061f889d9dfbae1a11c2f684c7f11536b3631b35a16a1804f3bef6ed472c4ec1452dcb1be57ae9429e47a7d017e9099e084c8b911a3ad26fd94e4638e4a86888833b07825b7ccdb689fb7f0bf15557b39569d4a044a7c6c302419b511ced4b2a27018c398dda4b4af5d46dc8a933750f25d70f29d9d68dd6dc1235d39611ec4e103090ee123b3ce938a5f37f88e342af7a3f59de7a28da8f6f00ed4f287fb41fdd196d689e8c1f6f503cc924a043c8a826c23123aba6f2913058e70114d048a87d9d3eda1a028f6b4f7479b6444178762354d1"}, &(0x7f0000000000)=0x116) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x1, 0xe9d, 0x22, 0x20000007, 0x3, 0x44233, 0x200000000000007, 0x81, 0x9bf, 0x8001, 0x1005, 0xc, 0x4db6, 0x80, 0xfffffdfffffffffd], 0x2, 0x80300}) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000005a"]) (rerun: 64) 1.220641147s ago: executing program 3 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000180)={0x2, {0x2, 0x9, 0x2, 0x7fffffff}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000040)=0x1f) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000d00000000000009020000000c0000000000000904000000002e5f2e612e002e30006d88393f0315bdbdcad303a601f94398fda8d68bf23bb8b271b386c15ffbc5feb26d5eee92991110808d1a7ef9e01e2f0e63ed3a09430000869c9e26c35912c9cded0ab81711181bc2e7fa7dc267"], &(0x7f0000000200)=""/5, 0x3a, 0x5, 0x0, 0x1a90, 0x10000}, 0x28) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x7, 0x2d, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @generic={0xf5, 0x6, 0x3, 0x2751, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @generic={0x5, 0x0, 0x2, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000001640)=""/210, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0x10, 0x5, 0x53}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)=[r3, 0x1], 0x0, 0x10, 0x186d}, 0x94) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r10, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4c, &(0x7f0000000480)="0c1f59", &(0x7f0000000500)=""/76, 0x10, 0x30, 0x0, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_ext={0x1c, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe950, 0x0, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x16}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x40, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000001400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x5, 0x2, 0x0, 0x6}, 0x10, 0x2ba3f, r9, 0x1, &(0x7f00000018c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001900)=[{0x3, 0x1, 0xb, 0x3}], 0x10, 0x8}, 0x94) 1.118131623s ago: executing program 3 (id=664): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000000000)={0x9, 0x67, 0xff, 0xf2}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r4], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) (async) r5 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000003c0)) (async) r6 = socket(0x2b, 0x80801, 0x1) gettid() (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) shutdown(r6, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x807, 0x7ffffff9, 0x34424752, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) (async, rerun: 64) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x6c402e0b19c12c87, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x3c3, 0xe, 0x1, {0x22, 0x155}}, {{{0x9, 0x5, 0x81, 0x3, 0x38f, 0x87, 0x80, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xec, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0xa3, 0x3, 0x8, 0x6}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "b0ee625c09b16ad7dae8b931173faf7c"}]}, 0x5, [{0x15, &(0x7f0000000280)=@string={0x15, 0x3, "b2abe1e674b134f796a3be48c233a7b9a7bf2f"}}, {0xe9, &(0x7f0000000600)=@string={0xe9, 0x3, "16736756d4670fd37927e28e2eb2acb0bd0c9ee9052836152aabf9fd3d86a211b6167c339a1d0c48d2ac2b1e31c0dad6597d917aabebf1c43c69223f064b24bb96626aa3d52e01860e3d6548081ba15c0142a7af98d569f93083ecc4a940a5e8158e56fe3da7758938695ffd2330b529f0db49c806be6c6bc1da84fdb570a8f3d61c9627040f3db5382900b1a702f99d44fb0144393bdb17d30ecbd76cbec8eceb8bcc105b6d33615d0c8375fa71abc0fb729f12328126d9d2c6dc9119c9f2bc7b3649ee69b79fb2b55b0b174a70a47dd0f1901ba0d694b4e34850ec66fabd1ab7e177e7415d5c"}}, {0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "3e10fd6cdf80d3c2c904e34c3bc06af995d08a2d00f9fd031295cb55d9139986b7454b3b5839a3fb0e0ecbee5a28c8c07ff2ccd1d901f753656ae2d62e0f2ce60edea360d90517190eada7cb3b57434b8a19bd36467c2b47fcfbc454671af3834ed5acc165df2bf3293abf146878226d94ee97e57cc627de34898eae19f472cd3943b14b8eff2bb24c6b39f205e4846bb5fa9b268d00bdb615d6c1a58598cb0d9b4cdd3cff64e9bfa7825848dbe233ac4d7513"}}, {0x98, &(0x7f0000000700)=@string={0x98, 0x3, "b46d707de259309544325501a7fa2ad9dc5811d15bc6a7a392c8e58eaf5250193d6e04e786ddb1c3b5e227beeab178ec97341e1034e89266626ca0aa963c07b7ace41cca775ebd8373f434fb4ee341430db1e7d63b67f5d90dc58b01530759019830b9edfd483f324cb5379c8c47f5b07766ed0fe4d91adc4ef28da186aad313a1b2dd38abcabcb58e80af36d9d9b88b9a0354cc3edf"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42f}}]}) (rerun: 64) syz_usb_control_io$hid(r7, &(0x7f00000008c0)={0x24, &(0x7f00000007c0)={0x0, 0xa, 0x7, {0x7, 0x23, "cbf12ddd1f"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000000840)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x1, "c791"}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0xc, "d8c4ee6f"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x40, 0x1, {0x22, 0xb1b}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x40, 0x7, 0x78, "14e77098d262ce8c95d684de5619477cb469166f59e42c7c4d42d97713dc1c59ed73fbeabd8881d81900875a933007a1b5f89ab79f2e99e2442c705347b835c06b53d0b2c0cd0e149c435cc56c119318096e9a48da3708fbe620f8e14a6c885ae0b2fce8396e0e53691e1a379974784e083636c14f79f914"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x53, "3e9fe11d8dc29a3425f49863311f569c642f428871ec8f120ca2f47a6d5190bb3073dc61b0e34a5221b814bf6377554bda7e986fad82db6fe798f5bd2ccbeb2be0327f5c15087fa8959168da029be97bd45591"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x40}}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 1.029799727s ago: executing program 1 (id=665): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x158, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.027543103s ago: executing program 4 (id=666): r0 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r0, &(0x7f0000002000)=""/4096, 0x1000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/36, 0x24, 0x5) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf00cc00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setuid(0xee00) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}, 0x30004084) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async) fanotify_init(0x200, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 1.027167153s ago: executing program 3 (id=667): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x488, 0x0, 0x200}]}) 1.020872286s ago: executing program 1 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) 962.018553ms ago: executing program 3 (id=669): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x80796c) (async) write$binfmt_misc(r2, &(0x7f00000003c0)="9da3c139abdc611410c9a9a7d574ece6ddcf28d34b2da37ae8f05803733cb8c532caddb3351af47dcce325e86b90bf83b805414569315f0d1319f93e3b6b6d55296f46941c65057c671310f1e2370475b96103ee6690ac90b8c7a9897ff7f1", 0x5f) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xb}, {0xfff3, 0xa}, {0xe, 0xfffe}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) 843.229546ms ago: executing program 4 (id=670): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)={0x67, 0x17, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @generic={0x4, 0xab, "1dced89a2808db4cecd18f6b8b67bbc71b28e3b380d18c36c9b430ef32fb67a852a16f746f33f7842271b839ea2e6cd7a183ce5cdfdd88a9cc0a5bfd3d9efe5e875b254f4ad36a7cb411bcd983169694ba9823aaac80cba6d206fa58bf6e016562f37d402799735e6e2d105ab27c810f9106d98e31088ab70b4f75517357cdf106125fc993fb53f97d58198d04530e80fd363b17537bb5d9c4a6b2b4bfd3bc26233383e0954303870692a4"}]}, 0xc8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x68, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040880}, 0x4040000) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000000000000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900016d00001b000400028000000000d84dadaaf23389b3cc04c51db19d4b60fcc3f3a40c35617a4ab716e5fbf2219f08ddb2d298af2b400398dc0b87fa3b0cfe3783193ecdeb755f461b5bb135e5da87fb798e1f1b4a6246a38b4ae18b5eefb174391b62ec9f0e1f0085cc03e279af29835a172155948b88ee72f8cada788bb19a36979b5bed776be09c515fdf36a4722719e12c78cca95ec30bda2cb0d4760cf1"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x2000810) (async) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x2000810) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0x9, 0x0, &(0x7f0000000100)) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0xfffffffe, 0x800}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0xfffffffe, 0x800}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000340)={0x9f, 0x2, {0x2, 0x3, 0x475, 0x2, 0x1}, 0xfffffb05}) 842.114765ms ago: executing program 1 (id=671): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x1, "a2"}, 0x2) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) (async) brk(0x200000ffc000) 837.498221ms ago: executing program 3 (id=672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x6a4, 0x0, 0x200}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x8000, 0x1000, 0x3, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x65, 0x0, 0x86, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x27, 0x5f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010102, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}]}, @ra={0x94, 0x4}, @end]}}}}}) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f0000003b40), 0xa8c, 0x2080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) open_by_handle_at(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800f800030000000000fb150705e837282efe0860000000a705ec978547bf0cc4cc8c5d8e2d81df736ba36b681fb93b430adf988902000000b1dfce9fd3baaa91e44599b19cc50e05279402939d88ffef797f4b0512ef6126ce03e6daf7d6351620227129458c1c8cab84ca3a080000"], 0x830600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r14 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r15) execveat(r14, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 833.375903ms ago: executing program 1 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket(0x1a, 0x800, 0x78265ad7) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x711880, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'vxcan1\x00', 0x20}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x810) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$poke(0x5, r10, &(0x7f0000000080), 0xffffffffffffffd) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x800}) 709.177142ms ago: executing program 0 (id=674): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x2, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b2f, 0x77) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 708.68013ms ago: executing program 4 (id=675): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r8, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r10 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1, 0x90000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dlm_plock\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dlm_plock\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, '/dev/dlm_plock\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008040}, 0x28044000) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x111082, 0x0) r13 = eventfd2(0x6d0, 0xc0000) ioctl$VHOST_SET_LOG_FD(r12, 0x4004af07, &(0x7f00000000c0)=r13) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) set_mempolicy(0x3, &(0x7f0000000000)=0x100, 0x100000001) 707.380496ms ago: executing program 4 (id=676): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 700.41708ms ago: executing program 4 (id=677): syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd61000000000000002a00000000000000ef00000000000000000180009078fffa0002b6086dfd021d51704d2394dba7a965ab30fbad1888b7ccfeb297280430171a89c7a6cc862c1df2090f072f788cef6be21dbe76b1c858fa6f8215ba950e51d695bdd4eee36cd0c67b3d7ab883909719f49fe89eb25a811a252bbf80ef41a9c334c76275b0d5ca009a44ad"], 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x80840, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000003c0)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0x1e0, 0xf0, 0xffffffff, 0x0, 0xf0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv6=@remote, @gre_key=0xc, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e22, @gre_key=0x4}}}, {{@ipv6={@mcast1, @local, [0xff, 0xff, 0xffffff00, 0xff], [0x0, 0xff0000ff, 0xff000000, 0xff], 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6c, 0x2, 0x1, 0x4d}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x7, @ipv6=@empty, @ipv4=@multicast2, @port=0x4e20, @icmp_id=0x66}}}, {{@ipv6={@loopback, @loopback, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff000000], 'bond_slave_1\x00', 'hsr0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x7, 0x11}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'sit0\x00', 'rose0\x00', 0x4, 0x0, 0x7, 0x1, 0x2, 0x8, {0x2}, {0x5}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x19, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)={0x98, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x98}}, 0x20000001) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x1, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000002c0)={0x4, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000000)={0x4, r10}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x1, @val=@netkit={@void, @value=r2, @void, @void, r7}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 601.317631ms ago: executing program 3 (id=678): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007680)=[{{&(0x7f0000000100)=@qipcrtr, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/123}, {&(0x7f0000000200)=""/121}, {&(0x7f0000000280)=""/192}, {&(0x7f0000000340)=""/88}, {&(0x7f00000003c0)=""/12}, {&(0x7f0000000400)=""/31}, {&(0x7f0000000440)=""/109}, {&(0x7f00000004c0)=""/136}], 0x0, &(0x7f0000000600)=""/94}, 0x3}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/32}, {&(0x7f00000006c0)=""/126}, {&(0x7f0000000740)=""/112}, {&(0x7f00000007c0)=""/236}], 0x0, &(0x7f0000000900)=""/72}, 0x1}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)=""/163}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/182}], 0x0, &(0x7f0000001b80)=""/237}, 0x8}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001c80)=""/197}, {&(0x7f0000001d80)=""/13}, {&(0x7f0000001dc0)=""/4096}, {&(0x7f0000002dc0)=""/131}, {&(0x7f0000002e80)=""/69}, {&(0x7f0000002f00)=""/154}, {&(0x7f0000002fc0)=""/15}], 0x0, &(0x7f0000003080)=""/35}, 0x7}, {{&(0x7f00000030c0)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000003480)=[{&(0x7f0000003140)=""/66}, {&(0x7f00000031c0)=""/202}, {&(0x7f00000032c0)=""/208}, {&(0x7f00000033c0)=""/74}, {&(0x7f0000003440)=""/61}], 0x0, &(0x7f0000003500)=""/194}, 0x41f}, {{&(0x7f0000003600), 0x0, &(0x7f0000003800)=[{&(0x7f0000003680)=""/49}, {&(0x7f00000036c0)=""/127}, {&(0x7f0000003740)=""/158}], 0x0, &(0x7f0000003840)=""/148}, 0x5}, {{&(0x7f0000003900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @local}}, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003980)=""/166}, {&(0x7f0000003a40)=""/36}, {&(0x7f0000003a80)=""/127}, {&(0x7f0000003b00)=""/4096}], 0x0, &(0x7f0000004b40)=""/1}, 0x4}, {{&(0x7f0000004b80)=@xdp, 0x0, &(0x7f0000000980)=[{&(0x7f0000004c00)=""/4096}]}, 0x1}, {{&(0x7f0000005c40)=@phonet, 0x0, &(0x7f0000006040)=[{&(0x7f0000005cc0)=""/79}, {&(0x7f0000005d40)=""/33}, {&(0x7f0000005d80)=""/239}, {&(0x7f0000005e80)=""/110}, {&(0x7f0000005f00)=""/34}, {&(0x7f0000005f40)=""/244}]}, 0x4}, {{&(0x7f00000060c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0, &(0x7f00000074c0)=[{&(0x7f0000006140)=""/96}, {&(0x7f00000061c0)=""/107}, {&(0x7f0000006240)=""/13}, {&(0x7f0000006280)=""/120}, {&(0x7f0000007900)=""/207}, {&(0x7f0000006400)}, {&(0x7f0000006440)=""/57}, {&(0x7f0000006480)=""/60}, {&(0x7f00000064c0)=""/4096}], 0x0, &(0x7f0000007580)=""/206}, 0x401}], 0x1, 0x0, 0x0) sendmsg$802154_dgram(r3, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000200)=""/214, 0xd6}], 0x1, 0xc1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000006300)={0x7, 0x3, 0xf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x4, 0x8000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x40040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0xabf4, 0x8}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r10, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200", @ANYRES32, @ANYBLOB="ce3e90a3307ea97b730afa"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000005c00)={0x7fff, 0x8, 0x1a}) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f0000000280)=[{0x7ffb, 0x10, &(0x7f0000000080)="5d5d6712b00e830bfd2b9ad20c97e578", 0x1, 0x1}, {0x40, 0x92, &(0x7f00000001c0)="253ba246e3973614f37865fcdd01b57594522fd4d85141f2633e7698450224e5e96b01ea1143780bc1aab292f39f8ec884cfdaf4322cdd68613c020169d8a9eb46aec89e8abfeea0bdca7158e065b27adb87ede6b79da1e3d4510e7186e5910b01839fd1324a8cad8fce9a5a1ed94a8bcea5e0d85484812156d6f95e2cc264fce42b05f1ca103cc01cbe6132a851277ebbf3", 0x1}, {0x0, 0x23, &(0x7f0000000140)="b8c86774beb32d38da5730eea9fc3db66511120ee781d4c9c664aedc8bb4bc7311e6de", 0x1, 0x1}]}) close_range(r0, 0xffffffffffffffff, 0x0) 511.899782ms ago: executing program 4 (id=679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r2, 0x0, 0x0, 0x5) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f00000000c0)=0x4, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r4, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f0000000700)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)=""/85, 0x55}, {0x0}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x6, &(0x7f0000000540)=""/194, 0xc2}, 0x2000005}], 0x1, 0x2050022, &(0x7f0000003700)) fcntl$lock(r4, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x8, 0xf05}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1c7}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r7, r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.717004ms ago: executing program 1 (id=680): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() r2 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x1, 0x0, "732283ef1acb5aa7abe500003e9fe5b7f9c5eaffffff00", 0x4745504a}) rt_tgsigqueueinfo(r0, r1, 0x14, &(0x7f0000000100)={0x2e, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@delqdisc={0xfc, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0x6, 0x9}, {0xfff2, 0xa}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xe5, 0x2, 0x9, 0x1, 0x8, 0x6, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0x4, 0x81, 0xc1b, 0x7fff, 0x0, 0x6, 0x24, 0x2}}, {0x8, 0x2, [0x0, 0xf00a]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x4, 0x8, 0x0, 0x8, 0x3, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0xa4a, 0x0, 0x10, 0x7, 0x9]}}, {{0x1c, 0x1, {0x5, 0xd2, 0x8, 0xde, 0x2, 0x8001, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x68, 0x7, 0x3, 0x1, 0x5, 0xd, 0x6}}, {0x10, 0x2, [0x9, 0x9, 0x7fff, 0x9, 0x4, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x41}}, @TCA_RATE={0x6, 0x5, {0xb7, 0x76}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e24, @loopback}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) prctl$PR_SET_NAME(0x53564d41, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x4, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2005}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x58}}, 0x0) 0s ago: executing program 1 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x28c}, {&(0x7f0000001b00)="179161", 0x3}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f000d01002700000027001000401d00000064001208069078e0000001e00000018600000000020700db3d9c1858d872bbd8264cd1a31b98020006007af4eef6f69d0000004e244e24", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0xfd6c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0)=r7, 0x4) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r9, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c}}, 0x10) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) listen(r10, 0x7) accept$ax25(r10, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000640)=r7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x618, 0x1c0, 0x0, 0x3a8, 0x1c0, 0x1c0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, &(0x7f0000000740), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'nr0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x2, 0x4}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4e, 0xffffffff, @remote, 0x4e21}}}, {{@ip={@local, @multicast1, 0xffffff00, 0xf39695c5727e7472, 'team_slave_1\x00', 'veth1\x00', {0xff}, {0xff}, 0x11, 0x1, 0x49}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x9, 0x3, 0x10, 0x1, 'syz0\x00', 0xf3, [0xffffff00, 0xff, 0xff]}}, @common=@set={{0x40}, {{0x3, [0x2, 0x5, 0x5, 0x3, 0x5, 0x7], 0x2, 0x1}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x80, @multicast2, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x101, 0x40, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x200, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x678) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2, 0xfffffff8, 0x9}, &(0x7f0000000280)=0x10) kernel console output (not intermixed with test programs): 1] bridge_slave_1: entered promiscuous mode [ 53.976518][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.988711][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.009920][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.013078][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.016145][ T5945] bridge_slave_0: entered allmulticast mode [ 54.020147][ T5945] bridge_slave_0: entered promiscuous mode [ 54.059196][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.063276][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.066794][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.069584][ T5945] bridge_slave_1: entered allmulticast mode [ 54.072494][ T5945] bridge_slave_1: entered promiscuous mode [ 54.074889][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.077263][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.079934][ T5958] bridge_slave_0: entered allmulticast mode [ 54.082705][ T5958] bridge_slave_0: entered promiscuous mode [ 54.087012][ T5944] team0: Port device team_slave_0 added [ 54.092292][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.105027][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.107518][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.110283][ T5958] bridge_slave_1: entered allmulticast mode [ 54.113243][ T5958] bridge_slave_1: entered promiscuous mode [ 54.117121][ T5944] team0: Port device team_slave_1 added [ 54.148157][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.160294][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.185806][ T5951] team0: Port device team_slave_0 added [ 54.199986][ T5951] team0: Port device team_slave_1 added [ 54.234109][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.238857][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.242149][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.253601][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.269107][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.271568][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.279869][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.285179][ T5945] team0: Port device team_slave_0 added [ 54.290490][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.295118][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.298155][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.309528][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.318884][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.322126][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.333449][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.339451][ T5945] team0: Port device team_slave_1 added [ 54.380257][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.383277][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.394435][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.408329][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.411088][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.421872][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.442180][ T5958] team0: Port device team_slave_0 added [ 54.456769][ T5958] team0: Port device team_slave_1 added [ 54.484556][ T5944] hsr_slave_0: entered promiscuous mode [ 54.487177][ T5944] hsr_slave_1: entered promiscuous mode [ 54.494602][ T5951] hsr_slave_0: entered promiscuous mode [ 54.498043][ T5951] hsr_slave_1: entered promiscuous mode [ 54.501173][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 54.503740][ T5951] Cannot create hsr debugfs directory [ 54.507607][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.510115][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.518892][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.523833][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.526357][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.535516][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.615411][ T5945] hsr_slave_0: entered promiscuous mode [ 54.618842][ T5945] hsr_slave_1: entered promiscuous mode [ 54.622253][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 54.624697][ T5945] Cannot create hsr debugfs directory [ 54.728177][ T5958] hsr_slave_0: entered promiscuous mode [ 54.731721][ T5958] hsr_slave_1: entered promiscuous mode [ 54.734841][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 54.737380][ T5958] Cannot create hsr debugfs directory [ 54.975785][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.996711][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.008070][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.017898][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.064052][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.071629][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.077420][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.083952][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.132120][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.140147][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.145087][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.152082][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.217167][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.220170][ T5959] Bluetooth: hci3: command tx timeout [ 55.220455][ T5956] Bluetooth: hci1: command tx timeout [ 55.235974][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.241160][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.246494][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.288212][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.299843][ T5959] Bluetooth: hci0: command tx timeout [ 55.302525][ T5956] Bluetooth: hci2: command tx timeout [ 55.332571][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.350691][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.354113][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.367040][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.371952][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.375124][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.403600][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.418331][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.420752][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.427904][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.430327][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.436951][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.451691][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.481283][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.489795][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.497976][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.501364][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.514531][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.517729][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.522892][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.525920][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.550229][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.553563][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.639033][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.725157][ T5951] veth0_vlan: entered promiscuous mode [ 55.751283][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.761439][ T5951] veth1_vlan: entered promiscuous mode [ 55.807429][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.817805][ T5951] veth0_macvtap: entered promiscuous mode [ 55.824870][ T5951] veth1_macvtap: entered promiscuous mode [ 55.830688][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.846148][ T5944] veth0_vlan: entered promiscuous mode [ 55.857738][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.871430][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.880748][ T5944] veth1_vlan: entered promiscuous mode [ 55.895560][ T1194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.901942][ T1194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.908940][ T1194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.913796][ T1194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.944889][ T5945] veth0_vlan: entered promiscuous mode [ 55.956863][ T5958] veth0_vlan: entered promiscuous mode [ 55.973781][ T5945] veth1_vlan: entered promiscuous mode [ 55.976508][ T5958] veth1_vlan: entered promiscuous mode [ 55.979698][ T5944] veth0_macvtap: entered promiscuous mode [ 55.992518][ T5944] veth1_macvtap: entered promiscuous mode [ 56.020141][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.023496][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.024291][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.042217][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.069072][ T5945] veth0_macvtap: entered promiscuous mode [ 56.072979][ T3767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.076167][ T1194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.076490][ T3767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.080683][ T1194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.086119][ T1194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.089183][ T1194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.094205][ T5958] veth0_macvtap: entered promiscuous mode [ 56.102422][ T5945] veth1_macvtap: entered promiscuous mode [ 56.108960][ T5958] veth1_macvtap: entered promiscuous mode [ 56.130381][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.143268][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.148830][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.151716][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.168801][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.172259][ T226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.175220][ T226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.199981][ T226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.202935][ T226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.216316][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.219071][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.225968][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.230842][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.243187][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.256930][ T1194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.270027][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.274508][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.302417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.305018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.324191][ T6039] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 56.327419][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 56.332078][ T842] IPVS: starting estimator thread 0... [ 56.333371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.339066][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.347626][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.352576][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.382785][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.385383][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.411579][ T6045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.414640][ T6045] overlayfs: missing 'lowerdir' [ 56.433680][ T6040] IPVS: using max 45 ests per chain, 108000 per kthread [ 56.468632][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 56.471914][ T6059] netlink: 'syz.1.8': attribute type 7 has an invalid length. [ 56.474577][ T6059] netlink: 'syz.1.8': attribute type 8 has an invalid length. [ 56.483614][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 56.490809][ T6059] erspan0: entered promiscuous mode [ 56.494145][ T6059] erspan0: left promiscuous mode [ 56.536216][ T6068] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11'. [ 56.593101][ T6054] futex_wake_op: syz.0.1 tries to shift op by -1; fix this program [ 56.736609][ T6102] netlink: 'syz.3.20': attribute type 21 has an invalid length. [ 56.740793][ T6102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20'. [ 56.743791][ T6102] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 56.746305][ T6102] netlink: 'syz.3.20': attribute type 5 has an invalid length. [ 56.748712][ T6102] netlink: 3 bytes leftover after parsing attributes in process `syz.3.20'. [ 56.905172][ T6109] netlink: 'syz.2.23': attribute type 32 has an invalid length. [ 56.912740][ T6109] kvm: user requested TSC rate below hardware speed [ 57.075836][ T6125] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 57.077849][ T6127] binder: 6124:6127 ioctl c0306201 200000000300 returned -22 [ 57.120181][ T6131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6131 comm=syz.1.27 [ 57.258803][ T6140] Zero length message leads to an empty skb [ 57.304708][ T5959] Bluetooth: hci3: command tx timeout [ 57.306869][ T5956] Bluetooth: hci1: command tx timeout [ 57.380600][ T5956] Bluetooth: hci2: command tx timeout [ 57.644088][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6172 comm=syz.1.38 [ 57.648826][ T6172] ======================================================= [ 57.648826][ T6172] WARNING: The mand mount option has been deprecated and [ 57.648826][ T6172] and is ignored by this kernel. Remove the mand [ 57.648826][ T6172] option from the mount to silence this warning. [ 57.648826][ T6172] ======================================================= [ 57.744059][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.774327][ T6177] program syz.3.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.823132][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 57.823142][ T40] audit: type=1400 audit(1764764448.071:202): avc: denied { create } for pid=6181 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.839095][ T40] audit: type=1400 audit(1764764448.091:203): avc: denied { getopt } for pid=6181 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.846840][ T40] audit: type=1400 audit(1764764448.101:204): avc: denied { write } for pid=6181 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.854639][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 57.857704][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 57.861846][ T6183] netlink: 72 bytes leftover after parsing attributes in process `syz.3.43'. [ 57.864960][ T6183] netlink: 72 bytes leftover after parsing attributes in process `syz.3.43'. [ 57.868064][ T6183] netlink: 72 bytes leftover after parsing attributes in process `syz.3.43'. [ 57.877922][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.883107][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.887265][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.893798][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.897851][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.902835][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.903001][ T40] audit: type=1400 audit(1764764448.151:205): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.911078][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.920133][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.925894][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.948533][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.959505][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.963057][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.967183][ T40] audit: type=1400 audit(1764764448.211:206): avc: denied { mounton } for pid=6192 comm="syz.1.41" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.968468][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.977964][ T40] audit: type=1400 audit(1764764448.221:207): avc: denied { bind } for pid=6195 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.980778][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 57.989675][ T40] audit: type=1400 audit(1764764448.241:208): avc: denied { create } for pid=6195 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.998387][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.002744][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.005894][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.009554][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.012788][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.016482][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.023896][ T40] audit: type=1400 audit(1764764448.271:209): avc: denied { write } for pid=6200 comm="syz.1.48" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.027972][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.033767][ T40] audit: type=1400 audit(1764764448.271:210): avc: denied { ioctl } for pid=6200 comm="syz.1.48" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.048893][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.054053][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.057250][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.061042][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.064197][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.067319][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.070990][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.075259][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.078483][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.082391][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.085670][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.088827][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.093275][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.097897][ T6208] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 58.101477][ T6208] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 58.104373][ T6208] NCSI netlink: No device for ifindex 813332851 [ 58.107146][ T6206] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 58.111289][ T6206] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 58.114218][ T6206] NCSI netlink: No device for ifindex 813332851 [ 58.116879][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.120527][ T6205] tipc: Started in network mode [ 58.122335][ T6205] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 58.124996][ T6205] tipc: Enabled bearer , priority 0 [ 58.127807][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6206 comm=syz.1.50 [ 58.128064][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.132596][ T6205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6205 comm=syz.1.50 [ 58.143425][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.147407][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.150935][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.153933][ T6203] tipc: Started in network mode [ 58.155872][ T6203] tipc: Node identity , cluster identity 4711 [ 58.158158][ T6203] tipc: Failed to set node id, please configure manually [ 58.160937][ T6203] tipc: Enabling of bearer rejected, failed to enable media [ 58.163736][ T40] audit: type=1400 audit(1764764448.411:211): avc: denied { read write } for pid=6209 comm="syz.1.51" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.171625][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.175891][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.181198][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.185074][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.189243][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.193938][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.196904][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.203829][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.208246][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.212820][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.217013][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.223721][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.228003][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.232200][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.235550][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.238985][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.243469][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.247320][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.251223][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.254439][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.257712][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.262903][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.267650][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.272726][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.276854][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.281774][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 58.420288][ T5956] Bluetooth: hci0: command tx timeout [ 58.458141][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 58.461766][ T6225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.657617][ T6254] bond1: (slave gretap1): making interface the new active one [ 58.661623][ T6254] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 59.093376][ T6268] bond1 (unregistering): (slave gretap1): Releasing active interface [ 59.101992][ T6268] bond1 (unregistering): Released all slaves [ 59.240554][ T54] tipc: Node number set to 11578026 [ 59.290729][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.380042][ T5959] Bluetooth: hci3: command tx timeout [ 59.382510][ T5956] Bluetooth: hci1: command tx timeout [ 59.450760][ T6303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.457189][ T6303] veth1_macvtap: left promiscuous mode [ 59.459128][ T6303] macsec0: entered promiscuous mode [ 59.459391][ T5956] Bluetooth: hci2: command tx timeout [ 59.462530][ T6303] macsec0: entered allmulticast mode [ 59.468081][ T6303] veth1_macvtap: entered promiscuous mode [ 59.470927][ T6303] veth1_macvtap: entered allmulticast mode [ 59.474542][ T6303] macsec0: left promiscuous mode [ 59.477164][ T6303] macsec0: left allmulticast mode [ 59.479859][ T6303] veth1_macvtap: left allmulticast mode [ 59.655850][ T6304] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.759512][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.912210][ T54] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.917216][ T54] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 59.922233][ T54] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 59.926601][ T54] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 59.930475][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.938358][ T6306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.947186][ T54] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 59.953268][ T6314] No such timeout policy "syz1" [ 60.248523][ T54] usb 8-1: USB disconnect, device number 2 [ 60.370512][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.374524][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.409849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.499809][ T5956] Bluetooth: hci0: command tx timeout [ 60.619442][ T5948] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.796152][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.800119][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.803492][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.807889][ T5948] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.812692][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.818491][ T5948] usb 6-1: config 0 descriptor?? [ 60.890049][ T6355] input: syz0 as /devices/virtual/input/input5 [ 60.899460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.009566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 61.009788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.029151][ T6362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6362 comm=syz.0.93 [ 61.037022][ T5948] usbhid 6-1:0.0: can't add hid device: -71 [ 61.040548][ T5948] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.067460][ T5948] usb 6-1: USB disconnect, device number 2 [ 61.261517][ T6378] mkiss: ax0: crc mode is auto. [ 61.460330][ T5956] Bluetooth: hci1: command tx timeout [ 61.460608][ T5959] Bluetooth: hci3: command tx timeout [ 61.486916][ T6403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=6403 comm=syz.0.104 [ 61.492879][ T6400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.498414][ T6405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=6405 comm=syz.0.104 [ 61.539706][ T5959] Bluetooth: hci2: command tx timeout [ 61.563152][ T6409] process 'syz.0.106' launched './file1' with NULL argv: empty string added [ 61.576179][ T6411] overlayfs: failed to resolve './file1': -2 [ 61.683177][ T6415] __nla_validate_parse: 103 callbacks suppressed [ 61.683189][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 61.755126][ T6426] syzkaller0: entered promiscuous mode [ 61.757679][ T6426] syzkaller0: entered allmulticast mode [ 61.775704][ T6417] mmap: syz.2.111 (6417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.952496][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 62.064968][ T6442] openvswitch: netlink: Key type 51 is out of range max 32 [ 62.152429][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.167113][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.212105][ T226] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.342345][ T226] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.359515][ T5948] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.407494][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.412074][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.416349][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.426292][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.426995][ T226] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.430731][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.461445][ T6456] 9pnet_fd: Insufficient options for proto=fd [ 62.503096][ T226] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.509429][ T5948] usb 6-1: Using ep0 maxpacket: 8 [ 62.514669][ T5948] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 62.517885][ T5948] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.521683][ T5948] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.525030][ T5948] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 62.528771][ T5948] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 62.532969][ T5948] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.537311][ T5948] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.541180][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.575965][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 62.664060][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.667532][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.670951][ T6453] bridge_slave_0: entered allmulticast mode [ 62.675128][ T6453] bridge_slave_0: entered promiscuous mode [ 62.680626][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.683798][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.686872][ T6453] bridge_slave_1: entered allmulticast mode [ 62.689879][ T6453] bridge_slave_1: entered promiscuous mode [ 62.731330][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.735785][ T226] bridge_slave_1: left allmulticast mode [ 62.737913][ T226] bridge_slave_1: left promiscuous mode [ 62.741051][ T226] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.746866][ T226] bridge_slave_0: left allmulticast mode [ 62.746872][ T5948] usb 6-1: usb_control_msg returned -32 [ 62.748886][ T226] bridge_slave_0: left promiscuous mode [ 62.749002][ T226] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.751323][ T5948] usbtmc 6-1:16.0: can't read capabilities syzkaller syzkaller login: [ 62.993783][ T226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.000572][ T226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.005525][ T226] bond0 (unregistering): Released all slaves [ 63.013549][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.036649][ T6453] team0: Port device team_slave_0 added [ 63.047283][ T6453] team0: Port device team_slave_1 added [ 63.095299][ T6467] syzkaller0: entered promiscuous mode [ 63.097201][ T6467] syzkaller0: entered allmulticast mode [ 63.100058][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 63.100071][ T40] audit: type=1400 audit(1764764453.351:293): avc: denied { ioctl } for pid=6443 comm="syz.1.122" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.118692][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.121624][ T40] audit: type=1400 audit(1764764453.371:294): avc: denied { write } for pid=6464 comm="syz.0.128" path="socket:[11050]" dev="sockfs" ino=11050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.122000][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.130872][ T6465] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.144364][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.348811][ T40] audit: type=1400 audit(1764764453.601:295): avc: denied { read } for pid=6471 comm="syz.3.129" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.359530][ T40] audit: type=1400 audit(1764764453.601:296): avc: denied { open } for pid=6471 comm="syz.3.129" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.464630][ T40] audit: type=1400 audit(1764764453.711:297): avc: denied { execmod } for pid=6471 comm="syz.3.129" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.473288][ T40] audit: type=1400 audit(1764764453.711:298): avc: denied { execute } for pid=6471 comm="syz.3.129" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 63.545809][ T40] audit: type=1400 audit(1764764453.791:299): avc: denied { wake_alarm } for pid=6479 comm="syz.3.130" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.563882][ T40] audit: type=1400 audit(1764764453.811:300): avc: denied { setopt } for pid=6443 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.985179][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.987612][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.996537][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.087380][ T40] audit: type=1400 audit(1764764454.331:301): avc: denied { read open } for pid=6495 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.104703][ T6453] hsr_slave_0: entered promiscuous mode [ 64.107771][ T40] audit: type=1400 audit(1764764454.341:302): avc: denied { getattr } for pid=6495 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.107855][ T6453] hsr_slave_1: entered promiscuous mode [ 64.130672][ T6453] debugfs: 'hsr0' already exists in 'hsr' [ 64.133265][ T6453] Cannot create hsr debugfs directory [ 64.143135][ T6498] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 64.147898][ T6498] Error validating options; rc = [-22] [ 64.476194][ T226] hsr_slave_0: left promiscuous mode [ 64.479040][ T226] hsr_slave_1: left promiscuous mode [ 64.481474][ T226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.484430][ T226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.489101][ T226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.491824][ T226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.499500][ T5959] Bluetooth: hci0: command tx timeout [ 64.550296][ T226] veth1_macvtap: left promiscuous mode [ 64.553017][ T226] veth0_macvtap: left promiscuous mode [ 64.555906][ T226] veth1_vlan: left promiscuous mode [ 64.557892][ T226] veth0_vlan: left promiscuous mode [ 64.667307][ T6515] netlink: 56 bytes leftover after parsing attributes in process `syz.0.139'. [ 64.897840][ T226] team0 (unregistering): Port device team_slave_1 removed [ 64.921881][ T226] team0 (unregistering): Port device team_slave_0 removed [ 65.249166][ T6453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.255607][ T6537] netlink: 68 bytes leftover after parsing attributes in process `syz.3.143'. [ 65.262307][ T6453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.272960][ T6453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.284130][ T6453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.350949][ T6540] syzkaller1: entered promiscuous mode [ 65.352919][ T6540] syzkaller1: entered allmulticast mode [ 65.370156][ T6540] Bluetooth: MGMT ver 1.23 [ 65.428748][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.456696][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.461954][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.481339][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.484560][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.567936][ T6569] tmpfs: Unknown parameter 'metacopy' [ 65.624820][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.782806][ T6453] veth0_vlan: entered promiscuous mode [ 65.789236][ T6453] veth1_vlan: entered promiscuous mode [ 65.804326][ T6453] veth0_macvtap: entered promiscuous mode [ 65.808139][ T6453] veth1_macvtap: entered promiscuous mode [ 65.818236][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.827857][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.836808][ T3767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.843562][ T3767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.852731][ T3767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.855666][ T3767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.891983][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.900677][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.918750][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.921573][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.080097][ T6034] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.229333][ T6034] usb 5-1: Using ep0 maxpacket: 16 [ 66.232847][ T6034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.237289][ T6034] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.245682][ T6034] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 66.251066][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.254563][ T6034] usb 5-1: Product: syz [ 66.256405][ T6034] usb 5-1: Manufacturer: syz [ 66.258461][ T6034] usb 5-1: SerialNumber: syz [ 66.262863][ T6034] usb 5-1: config 0 descriptor?? [ 66.579629][ T5959] Bluetooth: hci0: command tx timeout [ 66.899820][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.959179][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.014585][ T6671] validate_nla: 1 callbacks suppressed [ 67.014596][ T6671] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 67.014961][ T6668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.025753][ T6671] syz_tun: entered promiscuous mode [ 67.033050][ T6671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.076274][ T6675] nbd: socks must be embedded in a SOCK_ITEM attr [ 67.083513][ T6675] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 67.099888][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.103203][ T6675] team0: Port device bond1 added [ 67.115468][ T6675] team0: Port device gretap1 added [ 67.120387][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 67.186637][ T6681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2324 sclass=netlink_tcpdiag_socket pid=6681 comm=syz.4.164 [ 67.223921][ T6683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6683 comm=syz.4.165 [ 67.224140][ T6684] netlink: 'syz.4.165': attribute type 9 has an invalid length. [ 67.288346][ T6688] netlink: 11064 bytes leftover after parsing attributes in process `syz.4.167'. [ 67.291679][ T6688] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 67.345775][ T6690] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 67.519238][ T6693] binder: 6692:6693 unknown command 0 [ 67.521687][ T6693] binder: 6692:6693 ioctl c0306201 200000000080 returned -22 [ 67.657415][ C3] sr 2:0:0:0: [sr0] tag#30 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 67.657449][ C3] sr 2:0:0:0: [sr0] tag#30 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 67.658567][ T6712] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.847170][ T6723] bond0: (slave syz_tun): Releasing backup interface [ 67.855151][ T6723] bridge_slave_0: left allmulticast mode [ 67.855169][ T6723] bridge_slave_0: left promiscuous mode [ 67.855322][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.861395][ T6723] bridge_slave_1: left allmulticast mode [ 67.861410][ T6723] bridge_slave_1: left promiscuous mode [ 67.861557][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.865066][ T6723] bond0: (slave bond_slave_0): Releasing backup interface [ 67.887922][ T6723] bond0: (slave bond_slave_1): Releasing backup interface [ 67.892973][ T6723] team0: Port device team_slave_0 removed [ 67.896417][ T6723] team0: Port device team_slave_1 removed [ 67.897023][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.897035][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.899094][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.899106][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.902179][ T6723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.930965][ T6724] team0: No ports can be present during mode change [ 67.936394][ T6723] vlan0: entered promiscuous mode [ 67.936493][ T6723] vlan0: entered allmulticast mode [ 67.936501][ T6723] veth0_vlan: entered allmulticast mode [ 67.942042][ T6723] team0: Port device vlan0 added [ 67.944539][ T6723] tipc: Started in network mode [ 67.952006][ T6723] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 67.952080][ T6723] tipc: Enabled bearer , priority 0 [ 68.052687][ T6731] random: crng reseeded on system resumption [ 68.118588][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.180'. [ 68.276414][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 68.276426][ T40] audit: type=1400 audit(1764764714.523:348): avc: denied { shutdown } for pid=6727 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.281046][ T6728] mkiss: ax0: crc mode is auto. [ 68.500734][ T6477] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 68.514802][ T6041] usb 6-1: USB disconnect, device number 3 [ 68.554355][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 68.554371][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 68.561757][ T6736] netlink: 68 bytes leftover after parsing attributes in process `syz.1.181'. [ 68.566656][ T40] audit: type=1400 audit(1764764714.813:349): avc: denied { ioctl } for pid=6735 comm="syz.1.181" path="socket:[13034]" dev="sockfs" ino=13034 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.660030][ T5959] Bluetooth: hci0: command tx timeout [ 68.704558][ T6753] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 68.707688][ T6755] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 68.711326][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 68.714803][ T6753] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 68.717196][ C3] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 68.753112][ T54] usb 5-1: USB disconnect, device number 2 [ 68.793051][ T40] audit: type=1400 audit(1764764715.043:350): avc: denied { create } for pid=6757 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.802663][ T40] audit: type=1400 audit(1764764715.043:351): avc: denied { accept } for pid=6757 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.849831][ T6761] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.853751][ T6760] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.945086][ T6769] netlink: 'syz.3.188': attribute type 9 has an invalid length. [ 68.945332][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 68.948567][ T6769] netlink: 'syz.3.188': attribute type 11 has an invalid length. [ 68.955529][ T6772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.956393][ T6769] netlink: 'syz.3.188': attribute type 12 has an invalid length. [ 68.964166][ T6769] netlink: 210060 bytes leftover after parsing attributes in process `syz.3.188'. [ 68.968673][ T6769] openvswitch: netlink: Message has 4 unknown bytes. [ 69.099612][ T55] tipc: Node number set to 11578026 [ 69.131908][ T40] audit: type=1400 audit(1764764715.383:352): avc: denied { listen } for pid=6768 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 69.143953][ T40] audit: type=1400 audit(1764764715.393:353): avc: denied { read } for pid=6780 comm="syz.0.191" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.198922][ T40] audit: type=1400 audit(1764764715.443:354): avc: denied { ioctl } for pid=6783 comm="syz.0.192" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.243761][ T40] audit: type=1400 audit(1764764715.493:355): avc: denied { mount } for pid=6787 comm="syz.3.190" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 69.275362][ T6793] : entered promiscuous mode [ 69.378057][ T40] audit: type=1400 audit(1764764715.623:356): avc: denied { create } for pid=6804 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.385178][ T40] audit: type=1400 audit(1764764715.623:357): avc: denied { setopt } for pid=6804 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.388307][ T6805] sctp: [Deprecated]: syz.0.198 (pid 6805) Use of int in max_burst socket option. [ 69.388307][ T6805] Use struct sctp_assoc_value instead [ 69.899644][ T69] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.049433][ T69] usb 5-1: Using ep0 maxpacket: 16 [ 70.052664][ T69] usb 5-1: config 0 has no interfaces? [ 70.055393][ T69] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.058555][ T69] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.062439][ T69] usb 5-1: SerialNumber: syz [ 70.065468][ T69] usb 5-1: config 0 descriptor?? [ 70.277482][ T54] usb 5-1: USB disconnect, device number 3 [ 70.739586][ T5959] Bluetooth: hci0: command tx timeout [ 70.852385][ T6827] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.854896][ T6827] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.861593][ T6827] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.868945][ T6827] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.871925][ T6827] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.875711][ T6827] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.878399][ T6827] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.880908][ T6827] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.885963][ T6827] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.894765][ T6827] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.897928][ T6827] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.902946][ T6827] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.050186][ T6849] netlink: 'syz.1.212': attribute type 2 has an invalid length. [ 71.050937][ T6850] netlink: 'syz.1.212': attribute type 2 has an invalid length. [ 71.052893][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 71.056230][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 71.056538][ T6850] netlink: 'syz.1.212': attribute type 2 has an invalid length. [ 71.496419][ T5959] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 71.502238][ T6863] EXT4-fs: Conflicting test_dummy_encryption options [ 71.693510][ T6871] capability: warning: `syz.0.221' uses 32-bit capabilities (legacy support in use) [ 71.843078][ T6885] raw_sendmsg: syz.4.227 forgot to set AF_INET. Fix it! [ 71.900366][ T6892] tmpfs: Cannot change global quota limit on remount [ 71.964575][ T6898] binder: BINDER_SET_CONTEXT_MGR already set [ 71.968071][ T6898] binder: 6897:6898 ioctl 4018620d 200000000100 returned -16 [ 72.041797][ T6895] netlink: 'syz.4.229': attribute type 14 has an invalid length. [ 72.062526][ T6895] bond2: Removing last arp target with arp_interval on [ 72.100290][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.161738][ T6909] __nla_validate_parse: 3 callbacks suppressed [ 72.161748][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 72.212273][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 72.266567][ T6911] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 72.273414][ T6911] syzkaller0: entered promiscuous mode [ 72.275301][ T6911] syzkaller0: entered allmulticast mode [ 72.309507][ T6041] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.379393][ T55] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.479462][ T6041] usb 6-1: Using ep0 maxpacket: 8 [ 72.484003][ T6041] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 72.487736][ T6041] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.492729][ T6041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.496497][ T6041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.500564][ T6041] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.505114][ T6041] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.508795][ T6041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.531242][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.537851][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.544997][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.548613][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.551019][ T55] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.551131][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.554423][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.556274][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.558872][ T55] usb 5-1: Product: syz [ 72.561733][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.562882][ T55] usb 5-1: Manufacturer: syz [ 72.564544][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.566087][ T55] usb 5-1: SerialNumber: syz [ 72.568011][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.572539][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.575017][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.577449][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.580283][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.583309][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.586029][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.588159][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.591714][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.594069][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.596249][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.598283][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.600627][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.602691][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.604723][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.606668][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.608601][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.610751][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.612890][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.614973][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.617083][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.619121][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.621889][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.623955][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.625992][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.627974][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.630078][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.632065][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.634074][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.636067][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.638499][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.640794][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.642783][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.644912][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.646904][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.648890][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.651041][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.653055][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.655098][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.657145][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.659180][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.661529][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.663602][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.665630][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.667579][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.669620][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.671726][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.673810][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.675821][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.677772][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.679862][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.681934][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.684222][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.686151][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.687921][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.690090][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.692066][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.694102][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.696090][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.698101][ T6926] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 72.715339][ T6041] usb 6-1: usb_control_msg returned -32 [ 72.716384][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.719333][ T6041] usbtmc 6-1:16.0: can't read capabilities [ 72.720373][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.774672][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.779848][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.783624][ T6907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6907 comm=syz.0.233 [ 72.798456][ T55] usb 5-1: 0:2 : does not exist [ 72.817141][ T55] usb 5-1: USB disconnect, device number 4 [ 72.840933][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.884127][ T6939] team0: Device gtp0 is up. Set it down before adding it as a team port [ 72.899473][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.899513][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.900594][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.008296][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 73.023388][ T6941] bridge4: port 1(gretap0) entered blocking state [ 73.025661][ T6941] bridge4: port 1(gretap0) entered disabled state [ 73.027821][ T6941] gretap0: entered allmulticast mode [ 73.030427][ T6941] gretap0: entered promiscuous mode [ 73.034420][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 73.042796][ T6941] bridge4: port 2(veth0_to_bond) entered blocking state [ 73.045213][ T6941] bridge4: port 2(veth0_to_bond) entered disabled state [ 73.047938][ T6941] veth0_to_bond: entered allmulticast mode [ 73.051600][ T6941] veth0_to_bond: entered promiscuous mode [ 73.092176][ T6944] XFS (nbd4): SB validate failed with error -5. [ 73.151873][ T6954] netlink: 'syz.1.232': attribute type 5 has an invalid length. [ 73.161640][ T6957] netlink: 'syz.4.246': attribute type 3 has an invalid length. [ 73.164456][ T6957] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 73.167962][ T6957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.246'. [ 73.171077][ T6957] NCSI netlink: No device for ifindex 0 [ 73.298331][ T6969] can0: slcan on ttyS3. [ 73.338212][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 73.338222][ T40] audit: type=1400 audit(1764764719.583:381): avc: denied { map } for pid=6970 comm="syz.0.251" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.349932][ T40] audit: type=1400 audit(1764764719.583:382): avc: denied { execute } for pid=6970 comm="syz.0.251" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.353423][ T6973] dlm: no locking on control device [ 73.360113][ T40] audit: type=1400 audit(1764764719.593:383): avc: denied { write } for pid=6970 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.369382][ T40] audit: type=1400 audit(1764764719.603:384): avc: denied { read } for pid=6968 comm="syz.4.249" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.390160][ T6969] can0 (unregistered): slcan off ttyS3. [ 73.591558][ T40] audit: type=1400 audit(1764764719.843:385): avc: denied { view } for pid=6992 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.696663][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 73.702419][ T7001] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 73.757493][ T7004] team0: Port device vlan0 removed [ 73.856532][ T40] audit: type=1400 audit(1764764720.103:386): avc: denied { append } for pid=7008 comm="syz.4.260" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.866046][ T40] audit: type=1400 audit(1764764720.103:387): avc: denied { write } for pid=7008 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.878278][ T5952] udevd[5952]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 74.098159][ T40] audit: type=1400 audit(1764764720.343:388): avc: denied { write } for pid=7017 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.189422][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.229722][ T40] audit: type=1400 audit(1764764720.483:389): avc: denied { ioctl } for pid=7024 comm="syz.4.266" path="socket:[14620]" dev="sockfs" ino=14620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.392695][ T40] audit: type=1400 audit(1764764720.643:390): avc: denied { read write } for pid=7028 comm="syz.4.268" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.468116][ T7038] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 74.474883][ T7038] overlayfs: missing 'lowerdir' [ 74.534421][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 74.551611][ T7049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.275'. [ 74.563109][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 74.769412][ T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.919375][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 74.922487][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.926073][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.929417][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.933587][ T55] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 74.936449][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.940675][ T55] usb 5-1: config 0 descriptor?? [ 74.979488][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.989385][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.989401][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.067891][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 75.079960][ T54] usb 6-1: USB disconnect, device number 4 [ 75.141274][ T7063] program syz.1.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.275636][ T5956] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 75.278309][ T5956] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28 [ 75.355435][ T55] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.357937][ T55] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.361181][ T55] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.363610][ T55] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.366059][ T55] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 75.374524][ T55] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 75.405488][ T55] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 75.408782][ T55] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 75.686846][ T6041] usb 5-1: USB disconnect, device number 5 [ 75.689735][ T6927] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.693771][ T6927] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 75.697522][ T6927] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 75.704638][ T924] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.707732][ T6927] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 75.783928][ T7097] random: crng reseeded on system resumption [ 75.859813][ T924] usb 6-1: Using ep0 maxpacket: 8 [ 75.864494][ T924] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.868110][ T924] usb 6-1: config 179 has no interface number 0 [ 75.871765][ T924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.876886][ T924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.886961][ T924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.891088][ T924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.894964][ T924] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.899625][ T924] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.902742][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.907870][ T7082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.914166][ T7109] program syz.4.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.981577][ T7115] EXT4-fs (nbd3): unable to read superblock [ 76.138893][ T924] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input8 [ 76.163178][ T7139] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 76.181359][ T7140] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 76.259450][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.264844][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 76.332595][ T924] usb 6-1: USB disconnect, device number 5 [ 76.335039][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 76.335062][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.342798][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.485556][ T7165] netlink: 'syz.4.311': attribute type 13 has an invalid length. [ 76.491599][ T7165] netlink: 'syz.4.311': attribute type 13 has an invalid length. [ 76.641355][ T7175] bond1: invalid ARP target 0.0.0.0 specified for addition [ 76.644291][ T7175] bond1: option arp_ip_target: invalid value (0) [ 76.648697][ T7175] bond1 (unregistering): Released all slaves [ 76.689489][ T7178] IPVS: persistence engine module ip_vs_pe_s not found [ 76.932136][ T7200] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.941803][ T5956] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 76.989037][ T7202] loop9: detected capacity change from 0 to 7 [ 76.994834][ T5952] Dev loop9: unable to read RDB block 7 [ 76.996877][ T5952] loop9: unable to read partition table [ 77.001575][ T5952] loop9: partition table beyond EOD, truncated [ 77.013558][ T7202] Dev loop9: unable to read RDB block 7 [ 77.015436][ T7202] loop9: unable to read partition table [ 77.017490][ T7202] loop9: partition table beyond EOD, truncated [ 77.027775][ T7202] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.059394][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.059903][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.069473][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.147072][ T7217] xt_nat: multiple ranges no longer supported [ 77.149799][ T924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.198819][ T7222] __nla_validate_parse: 17 callbacks suppressed [ 77.198830][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.326'. [ 77.205775][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.326'. [ 77.275236][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 77.279741][ T7225] binder: BC_ACQUIRE_RESULT not supported [ 77.282226][ T7225] binder: 7224:7225 ioctl c0306201 200000000300 returned -22 [ 77.309373][ T924] usb 6-1: Using ep0 maxpacket: 32 [ 77.312491][ T924] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 77.315458][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.321737][ T924] usb 6-1: config 0 descriptor?? [ 77.331084][ T924] as10x_usb: device has been detected [ 77.333354][ T924] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 77.369996][ T924] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 77.395858][ T924] as10x_usb: error during firmware upload part1 [ 77.398197][ T924] Registered device nBox DVB-T Dongle [ 77.520994][ T7267] ip6t_srh: unknown srh invflags 51E8 [ 77.526798][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.531215][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.536201][ T924] usb 6-1: USB disconnect, device number 6 [ 77.542869][ T7269] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 77.550115][ T924] Unregistered device nBox DVB-T Dongle [ 77.553959][ T924] as10x_usb: device has been disconnected [ 77.572489][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.585810][ T7269] bond1: (slave ip6gretap1): making interface the new active one [ 77.593605][ T7269] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 77.639737][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 77.694748][ T7291] bond1 (unregistering): Released all slaves [ 77.708818][ T7290] ref_ctr increment failed for inode: 0x20a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803546a4c0 [ 77.717733][ T7295] syz_tun: entered allmulticast mode [ 77.724891][ T7295] dvmrp8: entered allmulticast mode [ 77.781849][ T7300] netlink: 'syz.3.345': attribute type 21 has an invalid length. [ 77.784517][ T7300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.345'. [ 77.828044][ T7300] SELinux: failed to load policy [ 77.933669][ T7308] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.347'. [ 77.962512][ T7297] syz_tun: left allmulticast mode [ 78.015829][ T7313] netlink: 44 bytes leftover after parsing attributes in process `syz.4.348'. [ 78.269863][ T6035] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 78.293311][ T7339] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 78.298120][ T7339] overlayfs: overlapping lowerdir path [ 78.331501][ T7343] befs: (nullb0): No write support. Marking filesystem read-only [ 78.334873][ T7343] befs: (nullb0): invalid magic header [ 78.380615][ T7346] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.440610][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 78.440625][ T40] audit: type=1400 audit(1764764724.693:446): avc: denied { execmem } for pid=7342 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.480750][ T7341] netlink: 228 bytes leftover after parsing attributes in process `syz.3.355'. [ 78.665841][ T40] audit: type=1400 audit(1764764724.913:447): avc: denied { create } for pid=7356 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.677551][ T7357] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.358'. [ 78.682770][ T40] audit: type=1400 audit(1764764724.913:448): avc: denied { connect } for pid=7356 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 79.262517][ T7365] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 79.262541][ T7366] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 79.269961][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 79.275885][ T7366] 9pnet_virtio: no channels available for device syz [ 79.328999][ T7373] affs: No valid root block on device nullb0 [ 79.373636][ T7377] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:21 [ 79.407605][ T7382] bond0: entered allmulticast mode [ 79.442092][ C2] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 79.445620][ C2] sr 2:0:0:0: [sr0] tag#15 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 79.451531][ T7384] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.457082][ T7384] bond2: (slave lo): speed changed to 0 on port 1 [ 79.460867][ T7384] bond2: (slave lo): Enslaving as a backup interface with an up link [ 79.463303][ T7389] input: syz0 as /devices/virtual/input/input9 [ 79.469540][ T7384] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 79.482749][ T7393] tmpfs: Bad value for 'mpol' [ 79.601782][ T7407] macvlan2: entered promiscuous mode [ 79.603592][ T7407] macvlan2: entered allmulticast mode [ 79.606298][ T7407] bond3: entered promiscuous mode [ 79.608662][ T7407] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.622768][ T7407] bond3: left promiscuous mode [ 79.640098][ T7409] vxcan1: entered promiscuous mode [ 79.674722][ T7404] syz.0.372: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 79.679847][ T7404] CPU: 2 UID: 0 PID: 7404 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) [ 79.679862][ T7404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.679869][ T7404] Call Trace: [ 79.679873][ T7404] [ 79.679890][ T7404] dump_stack_lvl+0x16c/0x1f0 [ 79.679922][ T7404] warn_alloc+0x248/0x3a0 [ 79.679941][ T7404] ? __pfx_warn_alloc+0x10/0x10 [ 79.679957][ T7404] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.679992][ T7404] ? kasan_save_stack+0x42/0x60 [ 79.680003][ T7404] ? kasan_save_stack+0x33/0x60 [ 79.680013][ T7404] ? kasan_save_track+0x14/0x30 [ 79.680024][ T7404] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 79.680041][ T7404] ? __vb2_queue_alloc+0x8c9/0x1280 [ 79.680056][ T7404] ? vb2_core_create_bufs+0x559/0xab0 [ 79.680074][ T7404] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 79.680091][ T7404] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 79.680112][ T7404] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 79.680150][ T7404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 79.680168][ T7404] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 79.680185][ T7404] vmalloc_user_noprof+0x9e/0xe0 [ 79.680199][ T7404] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 79.680218][ T7404] vb2_vmalloc_alloc+0x135/0x3f0 [ 79.680235][ T7404] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 79.680253][ T7404] __vb2_queue_alloc+0x8c9/0x1280 [ 79.680277][ T7404] vb2_core_create_bufs+0x559/0xab0 [ 79.680296][ T7404] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 79.680316][ T7404] ? lock_acquire+0x179/0x330 [ 79.680334][ T7404] vb2_create_bufs+0x5e8/0x840 [ 79.680350][ T7404] ? __pfx_vb2_create_bufs+0x10/0x10 [ 79.680364][ T7404] ? v4l_sanitize_colorspace+0x213/0x400 [ 79.680385][ T7404] vb2_ioctl_create_bufs+0x244/0x3e0 [ 79.680400][ T7404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.680415][ T7404] vidioc_create_bufs+0x7d/0xf0 [ 79.680431][ T7404] v4l_create_bufs+0x151/0x260 [ 79.680450][ T7404] __video_do_ioctl+0xb77/0xf00 [ 79.680465][ T7404] ? __might_fault+0xe3/0x190 [ 79.680481][ T7404] ? __pfx___video_do_ioctl+0x10/0x10 [ 79.680498][ T7404] video_usercopy+0x4d0/0x16c0 [ 79.680511][ T7404] ? __pfx___video_do_ioctl+0x10/0x10 [ 79.680522][ T7404] ? selinux_kernel_read_file+0x60/0x130 [ 79.680545][ T7404] ? __pfx_video_usercopy+0x10/0x10 [ 79.680567][ T7404] v4l2_ioctl+0x1bd/0x250 [ 79.680577][ T7404] ? __pfx_v4l2_ioctl+0x10/0x10 [ 79.680589][ T7404] __x64_sys_ioctl+0x18e/0x210 [ 79.680602][ T7404] do_syscall_64+0xcd/0xf80 [ 79.680615][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.680627][ T7404] RIP: 0033:0x7fbda178f7c9 [ 79.680636][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.680646][ T7404] RSP: 002b:00007fbda269b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.680657][ T7404] RAX: ffffffffffffffda RBX: 00007fbda19e5fa0 RCX: 00007fbda178f7c9 [ 79.680663][ T7404] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 79.680670][ T7404] RBP: 00007fbda1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 79.680676][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.680681][ T7404] R13: 00007fbda19e6038 R14: 00007fbda19e5fa0 R15: 00007ffd837b23b8 [ 79.680695][ T7404] [ 79.709318][ T7404] Mem-Info: [ 79.806200][ T7404] active_anon:11434 inactive_anon:0 isolated_anon:0 [ 79.806200][ T7404] active_file:12965 inactive_file:40668 isolated_file:0 [ 79.806200][ T7404] unevictable:2450 dirty:669 writeback:0 [ 79.806200][ T7404] slab_reclaimable:12256 slab_unreclaimable:68230 [ 79.806200][ T7404] mapped:24740 shmem:2396 pagetables:1478 [ 79.806200][ T7404] sec_pagetables:309 bounce:0 [ 79.806200][ T7404] kernel_misc_reclaimable:0 [ 79.806200][ T7404] free:445824 free_pcp:27586 free_cma:0 [ 79.821958][ T7404] Node 0 active_anon:45736kB inactive_anon:0kB active_file:51860kB inactive_file:162468kB unevictable:3784kB isolated(anon):2480kB isolated(file):0kB mapped:98960kB dirty:2664kB writeback:0kB shmem:6048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13776kB pagetables:5816kB sec_pagetables:1236kB all_unreclaimable? no Balloon:0kB [ 79.833913][ T7404] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 79.844583][ T7404] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.854501][ T7404] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 79.856591][ T7404] Node 0 DMA32 free:155168kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45860kB inactive_anon:0kB active_file:51860kB inactive_file:162468kB unevictable:5768kB writepending:2664kB zspages:28kB present:2080628kB managed:1266680kB mlocked:2232kB bounce:0kB free_pcp:98548kB local_pcp:9360kB free_cma:0kB [ 79.868064][ T7404] lowmem_reserve[]: 0 0 0 0 0 [ 79.869825][ T7404] Node 1 Normal free:1609308kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:12616kB local_pcp:3904kB free_cma:0kB [ 79.880533][ T7404] lowmem_reserve[]: 0 0 0 0 0 [ 79.882168][ T7404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 79.886416][ T7404] Node 0 DMA32: 85*4kB (UM) 79*8kB (ME) 401*16kB (UM) 383*32kB (UM) 76*64kB (UME) 79*128kB (UME) 16*256kB (UM) 20*512kB (UM) 9*1024kB (UME) 5*2048kB (UME) 21*4096kB (M) = 154428kB [ 79.892762][ T7404] Node 1 Normal: 3*4kB (UE) 10*8kB (UME) 20*16kB (UME) 30*32kB (UME) 28*64kB (UME) 14*128kB (UME) 3*256kB (UE) 4*512kB (ME) 0*1024kB 2*2048kB (UM) 390*4096kB (M) = 1609308kB [ 79.898631][ T7404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.902011][ T7404] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 79.905071][ T7404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.908675][ T7404] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 79.912228][ T7404] 56024 total pagecache pages [ 79.913799][ T7404] 0 pages in swap cache [ 79.915199][ T7404] Free swap = 120900kB [ 79.916682][ T7404] Total swap = 124996kB [ 79.918060][ T7404] 1048443 pages RAM [ 79.919780][ T7404] 0 pages HighMem/MovableOnly [ 79.921431][ T7404] 282460 pages reserved [ 79.922816][ T7404] 0 pages cma reserved [ 79.934541][ T40] audit: type=1400 audit(1764764726.183:449): avc: denied { execute } for pid=7435 comm="syz.3.377" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=16563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 80.211229][ T7463] program syz.0.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.226510][ T7474] bridge4: port 1(gretap0) entered blocking state [ 80.228972][ T7474] bridge4: port 1(gretap0) entered forwarding state [ 80.235724][ T7474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.286631][ T40] audit: type=1400 audit(1764764726.523:450): avc: denied { setattr } for pid=7468 comm="syz.4.385" name="HIDP" dev="sockfs" ino=16582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.298773][ T40] audit: type=1400 audit(1764764726.533:451): avc: denied { write } for pid=7477 comm="syz.0.386" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.710215][ T40] audit: type=1400 audit(1764764726.963:452): avc: denied { setattr } for pid=7519 comm="syz.1.399" name="NETLINK" dev="sockfs" ino=17689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.716250][ T7521] vcan1: entered allmulticast mode [ 80.757976][ T40] audit: type=1400 audit(1764764727.003:453): avc: denied { ioctl } for pid=7522 comm="syz.1.400" path="socket:[16628]" dev="sockfs" ino=16628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.770230][ T7523] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 80.959349][ T5998] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.019392][ T7532] syz.1.401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.087525][ T7534] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 81.129360][ T5998] usb 5-1: Using ep0 maxpacket: 8 [ 81.134161][ T5998] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 81.138154][ T5998] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 81.142394][ T5998] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.145756][ T5998] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.150313][ T5998] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.153347][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.174550][ T40] audit: type=1400 audit(1764764727.423:454): avc: denied { getopt } for pid=7537 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.183126][ T40] audit: type=1400 audit(1764764727.423:455): avc: denied { create } for pid=7537 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 81.360008][ T5998] usb 5-1: usb_control_msg returned -32 [ 81.363254][ T5998] usbtmc 5-1:16.0: can't read capabilities [ 81.545475][ T7555] random: crng reseeded on system resumption [ 81.674734][ T7562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.701671][ T6041] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 81.704453][ T6041] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 81.705827][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.763688][ T7569] Can't find a SQUASHFS superblock on nullb0 [ 81.893626][ T7578] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.171237][ T7594] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 82.351863][ T7604] x_tables: duplicate underflow at hook 2 [ 82.794158][ T7640] QAT: failed to copy from user. [ 83.138836][ T7666] 8021q: VLANs not supported on caif0 [ 83.141032][ T7666] netlink: 'syz.1.440': attribute type 10 has an invalid length. [ 83.146453][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.150522][ T7666] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 83.156473][ T7666] trusted_key: syz.1.440 sent an empty control message without MSG_MORE. [ 83.356247][ T7674] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 83.479115][ T7688] ip6tnl1: entered promiscuous mode [ 83.511954][ T7691] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 83.514451][ T7691] __nla_validate_parse: 8 callbacks suppressed [ 83.514458][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 83.520907][ T7693] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 83.523379][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 83.570403][ T5959] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 83.667813][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 83.677458][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 83.677469][ T40] audit: type=1400 audit(1764764729.923:481): avc: denied { ioctl } for pid=7709 comm="syz.4.456" path="socket:[19742]" dev="sockfs" ino=19742 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.742515][ T24] usb 5-1: USB disconnect, device number 6 [ 83.763904][ T7717] syz.3.458 uses obsolete (PF_INET,SOCK_PACKET) [ 83.775796][ T40] audit: type=1400 audit(1764764730.023:482): avc: denied { create } for pid=7715 comm="syz.3.458" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.779375][ T6041] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 83.780436][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.782722][ T40] audit: type=1400 audit(1764764730.023:483): avc: denied { unlink } for pid=7715 comm="syz.3.458" name="file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.785165][ T6041] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 83.787283][ T40] audit: type=1400 audit(1764764730.033:484): avc: denied { read } for pid=7714 comm="syz.1.457" lport=39692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.801590][ T7716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.457'. [ 83.870685][ T7722] tipc: Enabled bearer , priority 0 [ 83.874167][ T7723] tipc: Enabling of bearer rejected, already enabled [ 83.878511][ T7722] syzkaller0: entered promiscuous mode [ 83.883486][ T7722] syzkaller0: entered allmulticast mode [ 83.898290][ T7723] tipc: Resetting bearer [ 83.910049][ T7721] tipc: Resetting bearer [ 83.923745][ T7721] tipc: Disabling bearer [ 83.937465][ T7726] syzkaller1: entered promiscuous mode [ 83.939710][ T7726] syzkaller1: entered allmulticast mode [ 84.025940][ T40] audit: type=1400 audit(1764764730.273:485): avc: denied { mount } for pid=7728 comm="syz.1.462" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.071877][ T40] audit: type=1400 audit(1764764730.323:486): avc: denied { ioctl } for pid=7731 comm="syz.3.463" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.089479][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.138243][ T40] audit: type=1400 audit(1764764730.383:487): avc: denied { nlmsg_read } for pid=7736 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 84.251290][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 84.253994][ T24] usb 5-1: can't read configurations, error -22 [ 84.379378][ T6148] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 84.379405][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.509688][ T6148] usb 8-1: device descriptor read/64, error -71 [ 84.552775][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 84.556122][ T24] usb 5-1: can't read configurations, error -22 [ 84.560572][ T24] usb usb5-port1: attempt power cycle [ 84.567123][ T40] audit: type=1400 audit(1764764730.813:488): avc: denied { write } for pid=7740 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.620658][ T40] audit: type=1400 audit(1764764730.873:489): avc: denied { checkpoint_restore } for pid=7740 comm="syz.1.467" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.629091][ T40] audit: type=1400 audit(1764764730.873:490): avc: denied { lock } for pid=7740 comm="syz.1.467" path="socket:[16818]" dev="sockfs" ino=16818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 84.666442][ T7743] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 84.742286][ T7745] netlink: 'syz.1.469': attribute type 5 has an invalid length. [ 84.749435][ T6148] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 84.879399][ T6148] usb 8-1: device descriptor read/64, error -71 [ 84.919417][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.942683][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 84.945490][ T24] usb 5-1: can't read configurations, error -22 [ 84.989838][ T6148] usb usb8-port1: attempt power cycle [ 85.079876][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.102063][ T24] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 85.105661][ T24] usb 5-1: can't read configurations, error -22 [ 85.108798][ T24] usb usb5-port1: unable to enumerate USB device [ 85.290738][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 85.293931][ T7765] macvtap0: Device is already in use. [ 85.349463][ T6148] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 85.379391][ T5948] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.379810][ T6148] usb 8-1: device descriptor read/8, error -71 [ 85.549480][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 85.552907][ T5948] usb 6-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 85.556310][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 85.560678][ T5948] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 85.563687][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.568647][ T5948] usb 6-1: config 0 descriptor?? [ 85.572492][ T5948] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 85.639531][ T6148] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 85.671092][ T6148] usb 8-1: device descriptor read/8, error -71 [ 85.774068][ T7771] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 85.789780][ T6148] usb usb8-port1: unable to enumerate USB device [ 85.800143][ T7771] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 85.807515][ T3910] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.808657][ T7771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.859998][ T5959] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.862763][ T6041] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 85.865354][ T6041] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 85.929954][ T3767] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.961987][ T7778] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 86.162077][ T7790] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 86.423531][ T7800] trusted_key: encrypted_key: insufficient parameters specified [ 86.583543][ T29] cfg80211: failed to load regulatory.db [ 87.212295][ T7810] dns_resolver: Unsupported server list version (0) [ 87.279962][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 87.283456][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 87.286853][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 87.317366][ T7829] ALSA: seq fatal error: cannot create timer (-16) [ 87.346348][ T7832] capability: warning: `syz.4.494' uses deprecated v2 capabilities in a way that may be insecure [ 87.364190][ T7832] nvme_fabrics: unknown parameter or missing value 'ELF9û' in ctrl creation request [ 87.391424][ T7834] openvswitch: netlink: Flow actions attr not present in new flow. [ 87.476718][ T7836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.484661][ T7836] block device autoloading is deprecated and will be removed. [ 87.549820][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 87.611739][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 87.702861][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.706469][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.709944][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.714341][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.717377][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.723626][ T29] usb 8-1: config 0 descriptor?? [ 87.837535][ T7859] netlink: 'syz.0.503': attribute type 21 has an invalid length. [ 87.841055][ T7860] netlink: 'syz.0.503': attribute type 21 has an invalid length. [ 87.844376][ T7860] netlink: 156 bytes leftover after parsing attributes in process `syz.0.503'. [ 87.851083][ T7859] BIDI support in bsg has been removed. [ 87.900849][ T7865] erofs (device nbd0): cannot find valid erofs superblock [ 88.019566][ T6041] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.020602][ T6041] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 88.021587][ T5956] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.129132][ T6148] usb 6-1: USB disconnect, device number 7 [ 88.174351][ T29] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.337837][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.338116][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.402849][ T29] usb 8-1: USB disconnect, device number 7 [ 88.451357][ T7896] pimreg3: entered allmulticast mode [ 88.520250][ T7904] xt_hashlimit: size too large, truncated to 1048576 [ 88.572219][ T7908] __nla_validate_parse: 5 callbacks suppressed [ 88.572235][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 88.577650][ T7910] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 88.687890][ T7921] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 88.693821][ T7921] overlayfs: overlapping lowerdir path [ 88.733795][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 88.733805][ T40] audit: type=1400 audit(1764764734.983:513): avc: denied { connect } for pid=7923 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.781177][ T40] audit: type=1400 audit(1764764735.033:514): avc: denied { getopt } for pid=7923 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.821161][ T7926] fuse: Unknown parameter 'default_peGmissionw' [ 88.932750][ T40] audit: type=1400 audit(1764764735.183:515): avc: denied { read } for pid=7929 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.110551][ T40] audit: type=1400 audit(1764764735.363:516): avc: denied { setopt } for pid=7946 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.158177][ T7960] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 89.205226][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 89.227352][ T7965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.245329][ T7962] team0 (unregistering): Port device team_slave_0 removed [ 89.254034][ T7962] team0 (unregistering): Port device team_slave_1 removed [ 89.337553][ T7971] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 89.405366][ T7976] netlink: 276 bytes leftover after parsing attributes in process `syz.0.539'. [ 89.465594][ T7978] tmpfs: Bad value for 'mpol' [ 89.558511][ T40] audit: type=1400 audit(1764764991.804:517): avc: denied { setattr } for pid=7983 comm="syz.4.543" name="audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 89.598854][ T40] audit: type=1400 audit(1764764991.844:518): avc: denied { append } for pid=7989 comm="syz.4.544" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.628278][ T40] audit: type=1400 audit(1764764991.874:519): avc: denied { getopt } for pid=7989 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.697632][ T40] audit: type=1400 audit(1764764991.944:520): avc: denied { read } for pid=8000 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.752421][ T8008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.547'. [ 90.387471][ T8038] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 1, id = 0 [ 90.459770][ T8041] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.510423][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 90.558033][ T8045] overlayfs: missing 'lowerdir' [ 90.599588][ T40] audit: type=1400 audit(1764764992.854:521): avc: denied { setopt } for pid=8050 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.601998][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 90.644361][ T40] audit: type=1400 audit(1764764992.894:522): avc: denied { setopt } for pid=8052 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.686247][ T8055] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 90.702482][ T8055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.707453][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 90.710742][ T8055] bond4: entered promiscuous mode [ 90.712393][ T8055] bond4: entered allmulticast mode [ 90.721303][ T8055] bond4: (slave dummy0): making interface the new active one [ 90.723755][ T8055] dummy0: entered promiscuous mode [ 90.725621][ T8055] dummy0: entered allmulticast mode [ 90.728698][ T8055] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 90.806967][ T8055] bond4 (unregistering): (slave dummy0): Releasing active interface [ 90.810135][ T8055] dummy0: left promiscuous mode [ 90.812366][ T8055] dummy0: left allmulticast mode [ 90.815885][ T8055] bond4 (unregistering): Released all slaves [ 90.939750][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.945533][ T8069] bond0: (slave rose0): Enslaving as an active interface with an up link [ 90.951525][ T8069] program syz.3.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.059780][ T8088] input: syz1 as /devices/virtual/input/input11 [ 91.225626][ C2] ata1: illegal qc_active transition (00000000->00000040) [ 91.227799][ T8107] loop6: detected capacity change from 0 to 2640 [ 91.232180][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.235258][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.237809][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.244299][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.246823][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.258911][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.262229][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.264826][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.267468][ T5952] ldm_validate_partition_table(): Disk read failed. [ 91.270833][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.273500][ T5952] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.276170][ T5952] Dev loop6: unable to read RDB block 0 [ 91.278193][ T5952] loop6: unable to read partition table [ 91.281428][ T8110] hfs: can't find a HFS filesystem on dev sr0 [ 91.292076][ T8107] ldm_validate_partition_table(): Disk read failed. [ 91.295072][ T8107] Dev loop6: unable to read RDB block 0 [ 91.297736][ T8107] loop6: unable to read partition table [ 91.301415][ T8107] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 91.307839][ T8112] ldm_validate_partition_table(): Disk read failed. [ 91.311052][ T8112] Dev loop6: unable to read RDB block 0 [ 91.313673][ T8112] loop6: unable to read partition table [ 91.554825][ T1118] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 91.562807][ T1118] ata1.00: configured for UDMA/100 [ 91.618616][ T8143] ipvlan2: entered allmulticast mode [ 91.629462][ T8143] team0: entered allmulticast mode [ 91.631488][ T8143] team_slave_0: entered allmulticast mode [ 91.633682][ T8143] team_slave_1: entered allmulticast mode [ 91.636589][ T8143] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.057617][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 92.138185][ T8183] pim6reg: entered allmulticast mode [ 92.143024][ T8183] pim6reg: left allmulticast mode [ 92.209376][ T6927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 92.370545][ T6927] usb 6-1: Using ep0 maxpacket: 16 [ 92.375485][ T6927] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.378452][ T6927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.382552][ T6927] usb 6-1: Product: syz [ 92.384265][ T6927] usb 6-1: Manufacturer: syz [ 92.386305][ T6927] usb 6-1: SerialNumber: syz [ 92.391423][ T6927] r8152-cfgselector 6-1: Unknown version 0x0000 [ 92.393698][ T6927] r8152-cfgselector 6-1: config 0 descriptor?? [ 92.569617][ T6041] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 92.618496][ T8200] tmpfs: Bad value for 'mpol' [ 92.625620][ T8200] netlink: 'syz.4.597': attribute type 2 has an invalid length. [ 92.651214][ T8200] IPv6: sit1: Disabled Multicast RS [ 92.653553][ T8200] sit1: entered allmulticast mode [ 92.679805][ T6927] r8152-cfgselector 6-1: Unknown version 0x0000 [ 92.687304][ T6927] r8152-cfgselector 6-1: bad CDC descriptors [ 92.693597][ T6927] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 92.721718][ T6041] usb 8-1: No LPM exit latency info found, disabling LPM. [ 92.734171][ T6041] usb 8-1: config 1 has an invalid interface number: 142 but max is 3 [ 92.737059][ T6041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.741081][ T6041] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 92.744025][ T6041] usb 8-1: config 1 has no interface number 0 [ 92.746094][ T6041] usb 8-1: config 1 interface 142 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 92.750555][ T6041] usb 8-1: config 1 interface 142 has no altsetting 0 [ 93.056856][ T8217] bridge1: entered allmulticast mode [ 93.066666][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 93.074847][ T8220] fuse: Bad value for 'fd' [ 93.128504][ T8223] ./bus: Can't lookup blockdev [ 93.255565][ T8234] netlink: 68 bytes leftover after parsing attributes in process `syz.1.609'. [ 93.634755][ T8273] overlay: filesystem on ./bus is read-only [ 93.770277][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 93.770288][ T40] audit: type=1400 audit(1764764996.024:537): avc: denied { getopt } for pid=8289 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.782274][ T40] audit: type=1400 audit(1764764996.034:538): avc: denied { override_creds } for pid=8278 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.791112][ T8294] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 93.792269][ T8296] __nla_validate_parse: 2 callbacks suppressed [ 93.792278][ T8296] netlink: 596 bytes leftover after parsing attributes in process `syz.0.624'. [ 93.794552][ T8295] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 93.802727][ T8294] netlink: 'syz.0.624': attribute type 5 has an invalid length. [ 93.825911][ T40] audit: type=1400 audit(1764764996.074:539): avc: denied { read } for pid=8297 comm="syz.4.625" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.836171][ T40] audit: type=1400 audit(1764764996.074:540): avc: denied { open } for pid=8297 comm="syz.4.625" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.846683][ T40] audit: type=1400 audit(1764764996.094:541): avc: denied { ioctl } for pid=8297 comm="syz.4.625" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.922268][ T3910] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 93.948509][ T8313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8313 comm=syz.0.628 [ 94.204509][ T40] audit: type=1400 audit(1764764996.454:542): avc: denied { associate } for pid=8323 comm="syz.0.631" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 94.303176][ T8332] bond1 (unregistering): Released all slaves [ 94.484985][ T8341] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 94.563332][ T40] audit: type=1400 audit(1764764996.814:543): avc: denied { append } for pid=8350 comm="syz.4.640" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.572571][ T40] audit: type=1400 audit(1764764996.824:544): avc: denied { getopt } for pid=8350 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.623358][ T40] audit: type=1400 audit(1764764996.874:545): avc: denied { setopt } for pid=8352 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.631182][ T40] audit: type=1400 audit(1764764996.884:546): avc: denied { ioctl } for pid=8354 comm="syz.0.642" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.646680][ T8359] binder: BINDER_SET_CONTEXT_MGR already set [ 94.648723][ T8359] binder: 8357:8359 ioctl 4018620d 2000000002c0 returned -16 [ 94.664843][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 95.002347][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.024547][ T8388] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 95.045810][ T8388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.082260][ T8388] bond1: (slave veth5): Enslaving as an active interface with a down link [ 95.092485][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.096558][ T8388] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 95.270588][ T6041] usb 8-1: New USB device found, idVendor=12d1, idProduct=1441, bcdDevice=67.6a [ 95.275026][ T6041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.289454][ T6041] usb 8-1: can't set config #1, error -71 [ 95.292277][ T6041] usb 8-1: USB disconnect, device number 8 [ 95.411000][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.414668][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.418109][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.421958][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.425599][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.427960][ T8402] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 95.431665][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.435729][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.439651][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.447104][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.451224][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.457207][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.467395][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.471692][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.475585][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.480081][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.484867][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.489765][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.494236][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.498801][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.504353][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.509615][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.514307][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.518095][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.521726][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.525230][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.539567][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.543845][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.550189][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.559471][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.568597][ T8426] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 95.569635][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.571535][ T8426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.665'. [ 95.578449][ T8426] netlink: 1 bytes leftover after parsing attributes in process `syz.1.665'. [ 95.581476][ T8426] netlink: 658 bytes leftover after parsing attributes in process `syz.1.665'. [ 95.585880][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.591212][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.596189][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.600818][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.605057][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.619539][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.622709][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.625810][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.629508][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.632731][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.635830][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.639064][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.642282][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.645320][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.648651][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.652717][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.655778][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.658900][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.662245][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.665371][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.668571][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.679347][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.682653][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.685675][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.688739][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.692141][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.692497][ T8448] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 95.695193][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.699838][ T8448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.672'. [ 95.702132][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.708426][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.713598][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.716204][ T8451] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 95.717001][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.723696][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.726955][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.731025][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.734443][ T8413] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.741320][ T8451] bond1: entered promiscuous mode [ 95.744246][ T8451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.774504][ T8456] vim2m vim2m.0: vidioc_s_fmt queue busy [ 96.030576][ T5948] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.200233][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 96.214062][ T5948] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.217767][ T5948] usb 5-1: config 0 has no interface number 0 [ 96.220938][ T5948] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.232681][ T29] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.237096][ T5948] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.245990][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.251821][ T29] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 96.256073][ T5948] usb 5-1: Product: syz [ 96.257921][ T5948] usb 5-1: SerialNumber: syz [ 96.269495][ T5948] usb 5-1: config 0 descriptor?? [ 96.291093][ T5948] cm109 5-1:0.8: invalid payload size 760, expected 4 [ 96.297558][ T5948] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input12 [ 96.579418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.648369][ T8480] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64862 [ 96.684410][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 96.684552][ T6041] usb 5-1: USB disconnect, device number 11 [ 96.686809][ C1] ------------[ cut here ]------------ [ 96.691997][ C1] URB ffff888103f3e900 submitted while active [ 96.694688][ C1] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#1: syz.4.679/8472 [ 96.698185][ C1] Modules linked in: [ 96.700251][ C1] CPU: 1 UID: 0 PID: 8472 Comm: syz.4.679 Not tainted syzkaller #0 PREEMPT(full) [ 96.704307][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.704545][ T8481] x_tables: duplicate underflow at hook 1 [ 96.708844][ C1] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 96.713333][ C1] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 37 e7 b6 fa 48 8d 3d 90 51 8a 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 19 e7 b6 fa 0f 1f [ 96.721852][ C1] RSP: 0018:ffffc900006a0a90 EFLAGS: 00010087 [ 96.724612][ C1] RAX: 000000000000096f RBX: ffff888103f3e900 RCX: ffffc900019e2000 [ 96.728182][ C1] RDX: 0000000000040000 RSI: ffff888103f3e900 RDI: ffffffff90913850 [ 96.731315][ C1] RBP: ffff888056dee058 R08: 0000000000000001 R09: 0000000000000000 [ 96.734346][ C1] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 96.737099][ C1] R13: ffff888056dee057 R14: ffff888033a31280 R15: 000000000000000f [ 96.739856][ C1] FS: 00007f65a814d6c0(0000) GS:ffff8880d6a9e000(0000) knlGS:0000000000000000 [ 96.742843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.745230][ C1] CR2: 000000110c41179a CR3: 0000000012a51000 CR4: 0000000000352ef0 [ 96.748322][ C1] Call Trace: [ 96.749617][ C1] [ 96.750753][ C1] ? find_held_lock+0x2b/0x80 [ 96.752614][ C1] ? __pfx____ratelimit+0x10/0x10 [ 96.754446][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 96.756230][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 96.758159][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 96.759873][ C1] dummy_timer+0x1809/0x3a00 [ 96.761442][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 96.763124][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 96.764962][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.766844][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 96.768686][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 96.770723][ C1] ? __lock_acquire+0x433/0x22f0 [ 96.772383][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 96.774034][ C1] ? rcu_is_watching+0x12/0xc0 [ 96.775729][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.777849][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 96.779558][ C1] __hrtimer_run_queues+0x202/0xc40 [ 96.781359][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 96.783258][ C1] ? read_tsc+0x9/0x20 [ 96.784654][ C1] hrtimer_run_softirq+0x17d/0x350 [ 96.786366][ C1] handle_softirqs+0x219/0x8b0 [ 96.787986][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.789762][ C1] __irq_exit_rcu+0x109/0x170 [ 96.791393][ C1] irq_exit_rcu+0x9/0x30 [ 96.792831][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 96.794706][ C1] [ 96.795711][ C1] [ 96.796718][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.798709][ C1] RIP: 0010:finish_task_switch.isra.0+0x210/0xbc0 [ 96.800894][ C1] Code: a4 08 00 00 44 8b 05 c3 69 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 ae f6 ff ff e8 49 4c 3b 00 fb 65 48 8b 1d 68 9f 1d 12 <48> 8d bb 48 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 96.807207][ C1] RSP: 0018:ffffc9000348f510 EFLAGS: 00000206 [ 96.809243][ C1] RAX: 0000000000006e4b RBX: ffff88803a724980 RCX: ffffffff81c5cbff [ 96.811871][ C1] RDX: 0000000000000000 RSI: ffffffff8daa2b04 RDI: ffffffff8bf1cd20 [ 96.814489][ C1] RBP: ffffc9000348f558 R08: 0000000000000001 R09: 0000000000000001 [ 96.817103][ C1] R10: ffffffff9085b9d7 R11: 00000000ffffffff R12: ffff88806a53aa40 [ 96.819706][ C1] R13: ffff88801deb24c0 R14: ffff88801deb24c0 R15: ffff88806a53b870 [ 96.822361][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 96.824379][ C1] ? __switch_to+0x7af/0x10d0 [ 96.825955][ C1] ? __schedule+0x10b9/0x6150 [ 96.827536][ C1] __schedule+0x1141/0x6150 [ 96.829121][ C1] ? __pfx___schedule+0x10/0x10 [ 96.830765][ C1] ? find_held_lock+0x2b/0x80 [ 96.832351][ C1] ? schedule+0x2d7/0x3a0 [ 96.833793][ C1] schedule+0xe7/0x3a0 [ 96.835169][ C1] schedule_timeout+0x257/0x290 [ 96.836805][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 96.838591][ C1] ? unix_wait_for_peer+0x246/0x280 [ 96.840336][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 96.842259][ C1] unix_wait_for_peer+0x24e/0x280 [ 96.843936][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 96.845790][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 96.847816][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.849617][ C1] ? unix_dgram_sendmsg+0x145f/0x17f0 [ 96.851438][ C1] unix_dgram_sendmsg+0x1419/0x17f0 [ 96.853188][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 96.855035][ C1] ____sys_sendmsg+0xa5d/0xc30 [ 96.856646][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 96.858459][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.860245][ C1] ___sys_sendmsg+0x134/0x1d0 [ 96.861844][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.863580][ C1] ? __pfx___up_read+0x10/0x10 [ 96.865154][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.866889][ C1] ? __pfx___might_resched+0x10/0x10 [ 96.868763][ C1] __sys_sendmmsg+0x200/0x420 [ 96.870352][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.872239][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 96.874087][ C1] ? __pfx_do_futex+0x10/0x10 [ 96.875756][ C1] ? fput+0x70/0xf0 [ 96.877081][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 96.878841][ C1] ? fput+0x70/0xf0 [ 96.880163][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 96.881854][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.883612][ C1] do_syscall_64+0xcd/0xf80 [ 96.885173][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.887162][ C1] RIP: 0033:0x7f65a738f7c9 [ 96.888675][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.895042][ C1] RSP: 002b:00007f65a814d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.897832][ C1] RAX: ffffffffffffffda RBX: 00007f65a75e5fa0 RCX: 00007f65a738f7c9 [ 96.900474][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 96.903113][ C1] RBP: 00007f65a7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.905726][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.908336][ C1] R13: 00007f65a75e6038 R14: 00007f65a75e5fa0 R15: 00007ffcd2138fd8 [ 96.910988][ C1] [ 96.912055][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.914454][ C1] CPU: 1 UID: 0 PID: 8472 Comm: syz.4.679 Not tainted syzkaller #0 PREEMPT(full) [ 96.917737][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.921295][ C1] Call Trace: [ 96.922427][ C1] [ 96.923393][ C1] dump_stack_lvl+0x3d/0x1f0 [ 96.924941][ C1] vpanic+0x640/0x6f0 [ 96.926283][ C1] panic+0xca/0xd0 [ 96.927542][ C1] ? __pfx_panic+0x10/0x10 [ 96.929033][ C1] check_panic_on_warn+0xab/0xb0 [ 96.930727][ C1] __warn+0x108/0x3c0 [ 96.932094][ C1] __report_bug+0x2a0/0x520 [ 96.933734][ C1] ? __pfx___report_bug+0x10/0x10 [ 96.935491][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 96.937299][ C1] report_bug_entry+0xb2/0x220 [ 96.939187][ C1] ? usb_submit_urb+0x15a3/0x1920 [ 96.940954][ C1] handle_bug+0x18a/0x260 [ 96.942394][ C1] exc_invalid_op+0x17/0x50 [ 96.943897][ C1] asm_exc_invalid_op+0x1a/0x20 [ 96.945529][ C1] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 96.947375][ C1] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 37 e7 b6 fa 48 8d 3d 90 51 8a 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 19 e7 b6 fa 0f 1f [ 96.953644][ C1] RSP: 0018:ffffc900006a0a90 EFLAGS: 00010087 [ 96.955646][ C1] RAX: 000000000000096f RBX: ffff888103f3e900 RCX: ffffc900019e2000 [ 96.958242][ C1] RDX: 0000000000040000 RSI: ffff888103f3e900 RDI: ffffffff90913850 [ 96.960906][ C1] RBP: ffff888056dee058 R08: 0000000000000001 R09: 0000000000000000 [ 96.963502][ C1] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 96.966075][ C1] R13: ffff888056dee057 R14: ffff888033a31280 R15: 000000000000000f [ 96.968667][ C1] ? find_held_lock+0x2b/0x80 [ 96.970231][ C1] ? __pfx____ratelimit+0x10/0x10 [ 96.971928][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 96.973710][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 96.975487][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 96.977229][ C1] dummy_timer+0x1809/0x3a00 [ 96.978774][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 96.980474][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 96.982367][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.984298][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 96.986139][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 96.988251][ C1] ? __lock_acquire+0x433/0x22f0 [ 96.989942][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 96.991671][ C1] ? rcu_is_watching+0x12/0xc0 [ 96.993310][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.995532][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 96.997205][ C1] __hrtimer_run_queues+0x202/0xc40 [ 96.999055][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 97.001127][ C1] ? read_tsc+0x9/0x20 [ 97.002522][ C1] hrtimer_run_softirq+0x17d/0x350 [ 97.004245][ C1] handle_softirqs+0x219/0x8b0 [ 97.005844][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.007611][ C1] __irq_exit_rcu+0x109/0x170 [ 97.009202][ C1] irq_exit_rcu+0x9/0x30 [ 97.010652][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 97.012550][ C1] [ 97.013562][ C1] [ 97.014570][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.016584][ C1] RIP: 0010:finish_task_switch.isra.0+0x210/0xbc0 [ 97.018701][ C1] Code: a4 08 00 00 44 8b 05 c3 69 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 ae f6 ff ff e8 49 4c 3b 00 fb 65 48 8b 1d 68 9f 1d 12 <48> 8d bb 48 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 97.025071][ C1] RSP: 0018:ffffc9000348f510 EFLAGS: 00000206 [ 97.027075][ C1] RAX: 0000000000006e4b RBX: ffff88803a724980 RCX: ffffffff81c5cbff [ 97.029690][ C1] RDX: 0000000000000000 RSI: ffffffff8daa2b04 RDI: ffffffff8bf1cd20 [ 97.032389][ C1] RBP: ffffc9000348f558 R08: 0000000000000001 R09: 0000000000000001 [ 97.035201][ C1] R10: ffffffff9085b9d7 R11: 00000000ffffffff R12: ffff88806a53aa40 [ 97.037814][ C1] R13: ffff88801deb24c0 R14: ffff88801deb24c0 R15: ffff88806a53b870 [ 97.040447][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 97.042509][ C1] ? __switch_to+0x7af/0x10d0 [ 97.044092][ C1] ? __schedule+0x10b9/0x6150 [ 97.045671][ C1] __schedule+0x1141/0x6150 [ 97.047210][ C1] ? __pfx___schedule+0x10/0x10 [ 97.048850][ C1] ? find_held_lock+0x2b/0x80 [ 97.050410][ C1] ? schedule+0x2d7/0x3a0 [ 97.051987][ C1] schedule+0xe7/0x3a0 [ 97.053396][ C1] schedule_timeout+0x257/0x290 [ 97.055009][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 97.056988][ C1] ? unix_wait_for_peer+0x246/0x280 [ 97.058723][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 97.060880][ C1] unix_wait_for_peer+0x24e/0x280 [ 97.062700][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 97.064576][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 97.066598][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 97.068415][ C1] ? unix_dgram_sendmsg+0x145f/0x17f0 [ 97.070206][ C1] unix_dgram_sendmsg+0x1419/0x17f0 [ 97.071989][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 97.073843][ C1] ____sys_sendmsg+0xa5d/0xc30 [ 97.075465][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 97.077415][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.079294][ C1] ___sys_sendmsg+0x134/0x1d0 [ 97.081014][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.082843][ C1] ? __pfx___up_read+0x10/0x10 [ 97.084475][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.086201][ C1] ? __pfx___might_resched+0x10/0x10 [ 97.087954][ C1] __sys_sendmmsg+0x200/0x420 [ 97.089566][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.091448][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 97.093194][ C1] ? __pfx_do_futex+0x10/0x10 [ 97.094762][ C1] ? fput+0x70/0xf0 [ 97.096066][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 97.097822][ C1] ? fput+0x70/0xf0 [ 97.099117][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 97.101109][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.102927][ C1] do_syscall_64+0xcd/0xf80 [ 97.104468][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.106407][ C1] RIP: 0033:0x7f65a738f7c9 [ 97.107904][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.114146][ C1] RSP: 002b:00007f65a814d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.117008][ C1] RAX: ffffffffffffffda RBX: 00007f65a75e5fa0 RCX: 00007f65a738f7c9 [ 97.119623][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 97.122323][ C1] RBP: 00007f65a7413f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.124939][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.127550][ C1] R13: 00007f65a75e6038 R14: 00007f65a75e5fa0 R15: 00007ffcd2138fd8 [ 97.130183][ C1] [ 97.132001][ C1] Kernel Offset: disabled [ 97.133465][ C1] Rebooting in 86400 seconds..