last executing test programs: 41.110414574s ago: executing program 0 (id=681): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = getpid() r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x4}], 0x1, 0x0) semop(r1, 0x0, 0x0) semop(r1, &(0x7f00000001c0)=[{0x4, 0x1}, {0x4, 0x0, 0x2800}, {0x0, 0x3ff, 0x1800}, {0x2, 0x4, 0x400}, {0x5, 0x7fc, 0x1800}], 0x5) semctl$GETZCNT(r1, 0x2, 0xf, 0x0) r2 = semget$private(0x0, 0x4, 0x2) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000180)=0x2) syz_pidfd_open(r0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_open_procfs$pagemap(r0, &(0x7f0000000fc0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) getpgid(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000040)=r5) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 40.970783086s ago: executing program 0 (id=682): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 40.969373456s ago: executing program 0 (id=683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) (async) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 40.918724533s ago: executing program 0 (id=684): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000202982, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) r6 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) (async) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x1, 0x80) fchdir(r8) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0x8}}, 0x244c0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r11 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1c, "9c1e025fd3a71c1c4e9a178c5cb3c73dd4d1d875f9d1c936ec832d2b"}, &(0x7f0000000040)=0x24) 40.918427598s ago: executing program 0 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000dd616348524dbe2ade55000000160a05000000000000000000020000091c00038008000240000000000800014000000000080002400000000d0900020073797a30000000000900020073797a3100000000080007400000000108000740000000020900810073797a3000000000140000001100"/140], 0x8c}}, 0x4000800) (async, rerun: 64) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) (rerun: 64) fchdir(r1) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x10005c9, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r2, 0x6, 0x0) (async) unshare(0x2a020480) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) ioctl(0xffffffffffffffff, 0x8b2d, &(0x7f0000000040)) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB="2c67726fec10abc98202", @ANYRESDEC=0x0]) (async) open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x10000, 0x199) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef06", 0x10}, {&(0x7f0000000300)="572bfc4b76210ca51d87f30c6ce0d9528fb04d8cc590a7ce369743d46561fb020f17e8a20959819055c6926d081e3f7a8ce0d16e43c608721b59646aedaf02f0b5f7c164f97d17090b2473c0ca0aa669349484265e2493bb23de01", 0x5b}, {&(0x7f0000000440)="338a56a9c7c9c7f7dd16ed0047a34d999f2800de9bba7824ef8731a33c778b53f22bf3d48f58e93aa9c13d53bead246fc6950c10ae74dc28b2a0330643e24ea672211531095fb0efe9a3eca9473b3e795606c966", 0x54}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/190, 0xbe}], 0x1}, 0xb}], 0x1, 0x50, 0x0) (rerun: 64) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 40.850631104s ago: executing program 0 (id=686): r0 = socket(0x10, 0x80002, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x84}, 0xc) 40.801291989s ago: executing program 32 (id=686): r0 = socket(0x10, 0x80002, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x84}, 0xc) 31.98453481s ago: executing program 1 (id=784): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x16, 0x4, 0xb}, 0x1) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000780)={0x30, r3, 0x0, 0x0, 0x0, 0x2, 0xec8, 0x0}) 31.899809888s ago: executing program 1 (id=785): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8) ioctl$KDSKBLED(r0, 0x4b65, 0x200) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) sendfile(r0, r0, 0x0, 0x7428) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4}) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x1c}}, 0x4000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000380)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x34000000) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setns(r9, 0x80) ioctl$TCXONC(r1, 0x540a, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000580)=0x9, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4044041) 31.847494554s ago: executing program 1 (id=788): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0x4f}) 30.286781021s ago: executing program 1 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0xb4, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x7e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "a78ce54006598080a8030037004023493b87aafaffd05829466a4effffffffffff23732472eefa99ad96489269748e254c1e4a8a8b3f0bb0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 30.225082629s ago: executing program 1 (id=822): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec4657955c77854, 0x1a8) r2 = fanotify_init(0x1, 0x101801) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x3c}}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x7}, 0x90) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x4, 0x5) openat(r1, &(0x7f0000000000)='./file0\x00', 0x288040, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000004000000200000008000300", @ANYRES32=r9, @ANYBLOB="0800270003000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000e003b00000008000300", @ANYRES32=r14, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r12], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xaf7c745c954f8a49}, 0xc, &(0x7f0000000300)={&(0x7f0000002b40)={0xa20, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x1e}, {0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0xd}, {}, {0x0, 0xa}, {0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0xa}, {0x4, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {}, {0x5, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x4}, {0x7, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {0x4, 0x4}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x8}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0xa}, {0x5}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {}, {0x4, 0x4}, {}, {0x2, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0xa}, {0x7, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0xa, 0x101, 0x5, 0x0, 0x2, 0x3, 0x637]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0x1, 0x9, 0x8, 0x7, 0x3ad4, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x103, 0x9, 0x2, 0x1, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x5e, 0x30, 0xc, 0xc, 0x1, 0x6c, 0xb, 0x0, 0x3, 0x0, 0x6c, 0x16, 0x9, 0x30, 0x30, 0x60, 0x60, 0x5, 0x5, 0x31, 0x1b, 0x18, 0x1b, 0x16, 0x30, 0xc, 0x3d, 0x3, 0x9, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0xffff, 0x7, 0x55, 0x7f, 0xb, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x703, 0x7ff, 0x2, 0x5, 0x0, 0x2, 0x120]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa0, 0x1, 0x76f, 0x1, 0x39b2, 0x42, 0xb, 0x665f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ce, 0x2, 0x3, 0x7, 0xa, 0x0, 0x4, 0x10]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x5}, {0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x4, 0x48, 0x30, 0x36, 0x1, 0x16, 0x9, 0x48, 0x18, 0x60, 0x3, 0x16, 0x16, 0xc, 0x16, 0x78, 0x48, 0x0, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x16, 0x30, 0x0, 0x2, 0xb, 0x6c, 0x6, 0x5, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x9, 0x2, 0x0, 0x6, 0x2, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfbe1, 0xd, 0x4, 0x2, 0x1, 0x8, 0xa7b, 0x7]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0x7fff, 0x8, 0x6, 0x7f, 0x8000, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x16, 0x48, 0x24, 0x60, 0x6c, 0x9, 0x2, 0x4, 0xc, 0x16, 0x6c, 0x9, 0x18, 0x18, 0x1, 0x18]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3, 0xff7a, 0x5, 0x5, 0x7fff, 0x9, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x2, 0x4, 0x3, 0x19, 0x1, 0x24, 0x5, 0x9, 0xc, 0x18, 0x5, 0x6c, 0x0, 0x2, 0x12, 0x48, 0x12, 0x18, 0x48, 0x1b, 0x12, 0x2, 0x2, 0x30, 0x5, 0x12, 0x3, 0x18, 0x4, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x1ffb, 0x9, 0xfeee, 0x7f, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x16, 0x18, 0x4, 0x2, 0x36, 0x60, 0x1, 0xc, 0x12, 0x30, 0x24, 0x1b, 0x30, 0x1b, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x8, 0xbbbd, 0x49e, 0x6, 0xff12, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x0, 0x8001, 0x40, 0x6, 0x9]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x9, 0x1b, 0x12, 0x3, 0xb, 0x18, 0x16, 0x16, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x16, 0x60, 0x24, 0x4, 0x36, 0x5, 0x3]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xfff, 0x7ff, 0x3, 0x5, 0x4, 0xffff]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x4}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x60, 0x18, 0x5, 0x60, 0xc, 0x0, 0x12, 0x18, 0x36, 0xc, 0x9, 0xc, 0x18, 0x24, 0x6c, 0x5, 0x5, 0xb, 0x12, 0x1b, 0x4, 0x49, 0x0, 0x24, 0x18, 0x60, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0xa}, {0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x2}, {0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x6}, {0x0, 0x5}, {}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x3, 0x6}, {0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0xa}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7b5, 0x65fb, 0xc, 0x2, 0x7, 0x0, 0xff76]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x3}, {0x2, 0x9}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x5, 0x6}, {}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0xa}, {0x3, 0x2}, {}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x48, 0x6c, 0x1b, 0x0, 0x6c, 0x36, 0x6c, 0x4, 0xc, 0x16, 0x5, 0xaad633c796fb6d04, 0x2, 0x18, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0x5, 0x7ff, 0x0, 0x8, 0x6]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff18, 0xbc, 0x9, 0x4, 0x4, 0xfffc, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x8, 0x9, 0x93ef, 0x3, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x9, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0xe, 0x239, 0x860e, 0x6f2d, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x6}, {0x3}, {}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x1}, {0x3}, {0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x2}, {0x7, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7fff, 0x80, 0x8, 0x100, 0x400, 0x6, 0x9b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0xcf, 0x7, 0x3, 0x3, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x36, 0x4, 0xc, 0x48, 0x1, 0x16, 0x30, 0x16, 0x1b, 0xb, 0x1b, 0x1, 0x2, 0x12, 0x18, 0x16, 0x0, 0xb, 0x3, 0x3, 0xb, 0x18, 0x9, 0xb, 0x3]}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x30, 0x6c, 0x14, 0x2, 0x3, 0x6, 0x30, 0x0, 0xb, 0x60, 0x24, 0x16, 0x4, 0x1b, 0x12, 0x2, 0x9, 0x9, 0x12, 0x6, 0x12, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x7}, {0x2, 0xa}, {0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {0x4, 0x6}, {0x1, 0xa}, {}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x6}, {0x5}, {0x3, 0xa}, {0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x3}, {0x4, 0xa}, {0x2}, {0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x6}, {0x1}, {0x3, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x4, 0x30, 0x71, 0x5, 0x36, 0x1b, 0x6, 0x24, 0x16, 0x16, 0x2, 0x18, 0x16]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x1, 0x3, 0x1, 0x1, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x18]}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1f, 0xc54, 0x200, 0x0, 0x101, 0x200, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0x9, 0x9, 0xfffb, 0xb, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3}, {0x2, 0x5}, {0x7}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x6}, {0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {}, {0x7, 0x2}, {0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x2}, {0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x4}, {0x4, 0x5}, {0x2, 0x8}, {0x5}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x1}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x8}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0x3}, {0x4}, {0x2, 0x4}, {0x5, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x5}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x9}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x5, 0xde, 0x6, 0x516, 0x200, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x35, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x323, 0x4, 0x0, 0xcc, 0x5, 0x4, 0x8, 0xfff7]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x5}, {0x3, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x6}, {0x4, 0x3}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a, 0x9, 0x8, 0x5, 0x7, 0x97, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x12, 0x16, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x7, 0xff7f, 0x1, 0x0, 0xa05, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x30, 0x24, 0x16, 0x60, 0x6, 0x30, 0x16, 0x24, 0x6, 0x2, 0x4, 0x6c, 0x60, 0xc, 0x3, 0x1b]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0x8}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x2}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffa, 0xfff, 0x4a, 0x200, 0xbe94, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x401, 0x5, 0x4, 0xd, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe324, 0x101, 0x6, 0x5, 0x6b, 0x3, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x4}, {0x3, 0x5}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {}, {0x7, 0x7}, {0x4}, {0x1}, {0x3, 0x8}, {0x3, 0x7}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x1}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x3e952ca9a367602f, 0x6, 0x1b, 0x2, 0x30, 0x9, 0x1b, 0xc, 0x18, 0x12, 0x9, 0xb, 0x9, 0x4, 0xb, 0x48, 0x1, 0x24, 0x1, 0x47d7fd3afd239e18, 0x4, 0x6c, 0x3, 0x6, 0x6c, 0x18, 0x4, 0x1, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x12, 0x60, 0x9, 0x48, 0xa, 0x1b, 0x9, 0x3, 0x53, 0x1b, 0x60, 0x24, 0x36, 0x6, 0x3, 0x4ef1dd012363ec65, 0xb, 0x3, 0x6, 0x30, 0x6, 0x1b, 0xb, 0x2, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0xa20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) 29.838861052s ago: executing program 1 (id=833): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 29.784208786s ago: executing program 33 (id=833): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 28.866857741s ago: executing program 2 (id=848): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa3004}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3f4, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x80, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x72, {{0x0, 0x1, 0x1}, 0xf0, 0xc7, 0x7, @device_b, 0x3, @void, 0x140e, 0x0, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}}, {{0x1}, @device_b, 0xf23}, {{}, @device_b, 0xb9c4}, {{}, @broadcast, 0x4}, {{}, @device_a, 0x6}, {{}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_b}]}}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x88, {0x40, 0x4, 0xe, 0x9}}}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0xc2, 0xfa, "72fd393a28636935f1061c018f904accea4af50752a7e83ff9058a73722fd4b7f678260100295792e1b5a754c472f98e669fbe54a622fa596af6fb92e7be62d98e3acd37d9086669308c0e0bfee04f8498e4cc581fba6e19a7176d75c09d394dc958b30ede6ce2b2af674a3fde24f0077016068c0c111e15569a921fd133aed6adaf062f1c58712de07ba65a553e03f9f32e5c0963a2a6eed3d87cc65bc6aa4e4acd3e9348d8c5e5b423f9711f5fc70381cc1191d9e297ccbd31dad6277f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "51e76deb10"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xb}, @NL80211_ATTR_FILS_ERP_REALM={0xf1, 0xfa, "906103f1eee24af3a61b133347e26b5b12acd7c9f4e2f362f512616aed82d1ad8ffb749029fead30f2d456c79926c9eac94ef7bce02de7735d47d4584aec1cedf2cd133a88f38a46b58306fc2b31bc5d0459696278d8c6b1d1b7257a3b742c3f9a46d2bf766075f711efb625ba03d64e9301359ad607f1d0b9fbbc7dbc748fffc6712ccd05c871bfe0e2bc89194e4c396c64c91ee2f54f52f7d5a48d1e3483fcd76aa17fcf44e1cecdf2de0b04a1fde62bc9b9a8f4e5643f6e6d00db5c8a57a594ad00dd6b211d78436619f3645b5f9861fe41ab348f8edad324e6a2eca8122b5e14f9201c3b6d8aa5036791d5"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x3a, 0xfa, "72d600aa773716678284c8648fee6d45ba8ddaf2f3fed815e869a5735946969efb6f64a6c3d9c55ca2e350774f9587b00553959fdee0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}], @NL80211_ATTR_PBSS={0x4}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 28.71859935s ago: executing program 2 (id=850): syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x8001, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[@hopopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffe}]}], {{0x0, 0x4001, 0x41424344, r0, 0x0, 0x0, 0x5, 0x1, 0x4}}}}}}}, 0x0) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000380)=0x9, 0x4) (async) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) (async) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$cgroup_type(r5, &(0x7f0000000040), 0x9) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x0, 0x0, r6}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x11}, 0x0, 0x6e6bbb, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x521be6ad4a8be5e0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x90}, 0x0) 28.716452311s ago: executing program 2 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0x8813}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000002700)={'dummy0\x00', @ifru_ivalue}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00060000000005000000000093f313a2ce55a0aac545c514ff665487dd40114bfaee4f12a02268147c2ed3e70db6455629cbe0c1ffd3805a6da1831c5bc4baf0c3913db257c76184b0fc61226edd974ce72b96893757fd2919b9177bcf4113b0e1"], 0x24}}, 0x0) 28.7145418s ago: executing program 2 (id=852): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xce0, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x8, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) 28.590170005s ago: executing program 2 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r4, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4000003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f089066000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES8=0x0], 0x50) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socket$kcm(0x2, 0x3, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 28.510313957s ago: executing program 2 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c, 0x9, 0x1, 0x40, 0x5, 0xffff8000, 0x9b, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c, 0x9, 0x1, 0x40, 0x5, 0xffff8000, 0x9b, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'team_slave_1\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 13.505880022s ago: executing program 34 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c, 0x9, 0x1, 0x40, 0x5, 0xffff8000, 0x9b, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c, 0x9, 0x1, 0x40, 0x5, 0xffff8000, 0x9b, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'team_slave_1\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8.193667345s ago: executing program 3 (id=1080): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 5.149118572s ago: executing program 3 (id=1119): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r0, 0x7e423000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) r7 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) pread64(r7, 0x0, 0x0, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610fac6f39d87f0000020800450000240000e0000011"], 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/230, 0xe6}], 0x1}, 0x40010082) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x1, 0x8001) 4.259658601s ago: executing program 3 (id=1131): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0x4f}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) 2.688983053s ago: executing program 4 (id=1147): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0x4f}) (fail_nth: 2) 1.290517812s ago: executing program 5 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x5, 0x2, 0x0, 0x400, 0x6, "32eb61d9522e8c9bd01c0f24e639d0d601cf95", 0x401, 0x4}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0]) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) (async, rerun: 32) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000280)={0xe, "c1ca282d119a391237270243b908934d6b0641e9512f3c21123bd6961c7dde0c5951adc8bea8f376d963b8027fa0da985baa8cc11c9d4911dd21fb6e3b4151813732e83ba5a9bc793441963e561202080f42638b3f1a7ca4c23956cd4d0e8757a0e02e21a211997aa5235c71052abf0b62095287a882e038aeb63944d9594fb6c96537896e6e775a9c01d8b60a5d462c659d4747313275e86457e272b11a2b2e4ee2ec72167833c77d740041772989bc2fdecfe046944ea1f6b419cc558c7e20c870b37e6fadd12a8017a5c36ae06658ba420592b56cc0faf345603a07367e9a2b1e5f789b3d24379654442547df2e1752026aff2b8f6f0e5fb72711f93d94f30da3563dfdeef43731e46a54e560dc2d1e15ac65995c12e27852eca0a1850ecb0b3f0c1d5606e3566310eb05876b225a9e1b79b0368e3e54455be4079dc9a8d39f8f475f789f56de0b90a5fd2624ee88142244e4b49ca267418140fbbc70b3e1752ebf89f9ac992f16bea85dfecf9473865808031f30fe57b54e06ba59f3e807cf1a58fc3ac22b93e6a5d5d4704aa151a39c0bbd507a24ecac8316f8b7de89b111af63ba123d47cd314de942f678a5543d907de4c5a059cb6b93122601c638e4fc75c85e820211394ec2b411c7babeccf35507784afa31d722d3720b706b452939eb44c372cee80988e1b2b649c94ec320b58e52322031c8e97493a4a79ccb7d"}) 1.219969491s ago: executing program 3 (id=1161): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401"], 0x18}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.120192315s ago: executing program 5 (id=1162): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x101fa, 0x2, 0xeeee0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@remote, @multicast1, 0xffffffffffffffff, "d3a3a335e9916771d8b15a36750be8a337a51e5633d94c5ce74afb425279a5c4", 0x7, 0x4800000, 0x9fe, 0x6}, 0x3c) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) r2 = accept4$llc(r1, 0x0, &(0x7f0000002100), 0x80400) writev(r2, &(0x7f0000002180)=[{&(0x7f0000002140)="2163f270c5cd31716806e66584a31f4d4a", 0x11}], 0x1) r3 = accept4$llc(r2, &(0x7f00000021c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002200)=0x10, 0x800) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000002240)={0xc0, 0x0, 0x11000}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000026c0)={0x0, 0x1, 0xa, 0x1b, 0x134, &(0x7f00000022c0)="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"}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000002700)={0x8f, 0x0, 0x5}) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000002780)=0x7) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002840)=[@text32={0x20, &(0x7f00000027c0)="3e0f01cb660f38309466020000009a6037b0bda90066baf80cb8fc318786ef66bafc0cb800000000efb8010000000f01c1b949020000b861434e48bae6982d670f300f011dd37800000f01ca66b809010f00d0b9600a0000b808000000ba000000000f30", 0x64}], 0x1, 0x2c, &(0x7f0000002880)=[@dstype0={0x6, 0x3}], 0x1) read$snapshot(r1, &(0x7f00000028c0)=""/245, 0xf5) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000029c0)={{0x88, @remote, 0x4e24, 0x1, 'sh\x00', 0x20, 0x7, 0x37}, {@multicast2, 0x4e21, 0x2000, 0x2, 0x0, 0x6}}, 0x44) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000002a40)={@rand_addr, 0x0}, &(0x7f0000002a80)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=@bloom_filter={0x1e, 0x9, 0x8, 0x7, 0x200, r1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xd}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002b80)={0x1, &(0x7f0000002b40)=[{0x5, 0x70, 0x80, 0x8}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000002bc0)={0x0, @aes128, 0x0, @desc3}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e80)={0x6, 0x19, &(0x7f0000002c40)=@raw=[@call={0x85, 0x0, 0x0, 0x16}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @generic={0x6, 0x8, 0x5, 0x8, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x1, 0x4, 0x9, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f0000002d40)='GPL\x00', 0x9, 0x1000, &(0x7f0000002d80)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003d80)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003dc0)=[r1, r1, r1, r5, 0x1, r5, r6, r1, r1, r6], &(0x7f0000003e00)=[{0x4, 0x1, 0x0, 0x4}, {0x5, 0x4, 0xd}, {0x2, 0x4, 0x5, 0xb}, {0x2, 0x5, 0xb, 0xb}, {0x3, 0xa, 0xe, 0xc}], 0x10, 0x5}, 0x94) ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000003f40)={0x8, 0x0, r7}) write$selinux_user(r6, &(0x7f0000003f80)={'system_u:object_r:removable_device_t:s0', 0x20, 'root\x00'}, 0x2d) ioctl$SNDCTL_DSP_GETBLKSIZE(r6, 0xc0045004, &(0x7f0000003fc0)) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000004000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000040c0)={{}, r9, 0x0, @inherit={0x50, &(0x7f0000004040)={0x1, 0x1, 0x946e, 0x4, {0x19, 0xd27, 0x7f, 0x8, 0x2}, [0x2]}}, @name="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"}) connect$x25(r8, &(0x7f00000050c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000005100)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000005140)) 1.119913466s ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0402011920375d43574f7640a093e55c1048aa3bafb19400824cd3a8d24cb88d3e8ddab2b8edfd20d389682f490f755a4baca7e21dba4d2ecd0c7f7b0146ca2d1ecf79c4296aae5443709572a2fb6f9d5dfd95c9d2a4dd1b1851eb0acf73e59b87151991353b7cb72788a4125e83ba1da5722c3a2ff344a91e7893cd0197319015faa1414f5583cc50e54d4171295751ab1ea1d0b6"], 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="acbd", 0x2}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x100) tee(r2, r3, 0x3, 0x0) statfs(&(0x7f0000000300)='./file2\x00', &(0x7f0000000380)=""/171) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$netlink(0x10, 0x3, 0x9) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.119464983s ago: executing program 5 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\x00\x00\b\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800080014002101000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\x00\x00\b\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800080014002101000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) 1.11900013s ago: executing program 3 (id=1165): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x40084) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0500030001"], 0x28}}, 0x80) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r11, &(0x7f0000000100)=[{&(0x7f00000001c0)="ec", 0x1}, {&(0x7f0000000040)="ece82cb8eac5b667ca4d25e4c64ac2dd23b33fc87031599ea6d7fa8c24675374dd799790e2ada01b6ae07790ab0b0df3d32a9a3946cc6d2c4b4de2fa889dac594bea3dd8b25194404f4b9f16060c6eb78bb816021745e982ae1f4a365df175a206947b5eaf2aed9c709a499f4a6b609a94c0111b285104720b0ee6ecd78b655bb64a3350988ee309b0329aa23369fda076fa1637799b1326231ef48c99f29094ad027b", 0xa3}], 0x2) 1.114992911s ago: executing program 5 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.049359043s ago: executing program 5 (id=1167): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x2, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r3, 0x80000000) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def286", 0x9}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41f", 0xbc}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x3, 0x2090) close(0x3) sendfile(r0, r0, 0x0, 0x68) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}]}}}}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffd, 0x14b, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="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", 0x0, 0x38, 0x5, 0x1, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c087afd}, 0xc000) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) 949.981446ms ago: executing program 5 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x7, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$FUSE_ENTRY(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000280)={r7, 0x2, 0x0, 0x2, 0x4, 0x5, 0xfffffffb}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0x4f}) r10 = socket(0x2, 0x1, 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc000) ioctl$NBD_SET_SOCK(r11, 0xab00, r10) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r12, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r13], &(0x7f0000000040)=[0x81], 0x2000000000ea25, 0x1, 0x3}) ioctl$NBD_DO_IT(r11, 0xab03) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r14, 0x0, 0x483, &(0x7f0000000100)={0x6c, @multicast2, 0x4e23, 0x1, 'rr\x00', 0x1a, 0x400, 0x78}, 0x2c) 935.975266ms ago: executing program 4 (id=1170): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) close(r2) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x3, 0x4, 0x4, 0xedc5, 0xfffffffc, 0x2, 0x7, 0x1, 0x6, 0x60, 0x1, 0x8, 0x2, 0x6, 0xa, 0x1, 0x5, 0x43, 0x547, 0x89, 0x10c, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x6, 0x8, 0xbf, 0xffffffb4]}) 848.009893ms ago: executing program 4 (id=1172): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x157080, 0x84) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x1b4, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1, 0x100}, 0x8, 0x1d, 0x3, 0x0, 0x4bf, 0x408, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="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", 0xf3b}], 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1c0}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r8, 0xffffffff) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f0000000280)=0xff, 0x4) socket$nl_route(0x10, 0x3, 0x0) 773.661962ms ago: executing program 4 (id=1174): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000de0855ec17496bface1ddf91c0000000000790007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 720.488832ms ago: executing program 4 (id=1176): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x4c4280) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350e0500230000002400128009000100626f6e64000000001400028008000200", @ANYRES32=r1, @ANYBLOB="0500010005"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 479.286716ms ago: executing program 4 (id=1179): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0x4f}) (fail_nth: 3) 348.470349ms ago: executing program 6 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f00000007c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31]}}]}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) 270.246929ms ago: executing program 6 (id=1181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES8=r2]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) (async, rerun: 32) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$FUSE_ATTR(r5, &(0x7f0000000400)={0x78, 0xfffffffffffffff5, 0x0, {0x9, 0x7175, 0x0, {0x6, 0x6, 0x7f, 0x9, 0x7, 0x0, 0x2, 0x8000, 0x7, 0x4000, 0x4f2b44c9, 0x0, 0x0, 0x5, 0xb0277700}}}, 0x78) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000700000000000a0001004af29c3ff0490000140035006d6163766c616e300000000000000000eb9c6977deb97a"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5412, &(0x7f00000001c0)=0x11) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) mmap(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x100000e, 0x100010, r0, 0xec774000) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 269.811175ms ago: executing program 6 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000004c0)=0x5, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000140)="24000000010006", 0x7) (async) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000500)) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000540)=""/102, &(0x7f00000005c0)=0x66) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) (async) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000003c0)={0x5, 0xc}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000400)={0x10003, 0x2, 0x8000000, 0x1000, &(0x7f0000004000/0x1000)=nil, 0x8000, r6}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b91b020000b800000000ba000000800f3066baf80cb81c88948aef66bafc0ced0f01cb66b8e6000f00d0670f21632e0f01c266f30f1efac4e11457ee0f08c4c2f3f55deb", 0x44}], 0x1, 0x2f, &(0x7f0000000100), 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x0, 0x0, r7}) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@expire={0x124, 0x18, 0x2, 0x70bd2b, 0x25dfdbff, {{{@in6=@private0, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0xa0, 0xa0, 0x11, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0xffffffffffffff7f, 0xfffffffffffffffe, 0x5, 0x8e, 0x80, 0x10000, 0xffffffffffffff29, 0x2}, {0x8, 0x7, 0x8000000000000000, 0xff}, {0x0, 0x8, 0x1}, 0x70bd26, 0x3504, 0xa, 0x0, 0x80, 0x10}, 0x3}, [@proto={0x5}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd28, 0x70bd28, 0x70bd27, 0x7f, [0x3, 0xf]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20048800}, 0x4048040) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x4c, r9, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 86.643712ms ago: executing program 6 (id=1183): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1300, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000580)=0x7) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="17e61243e96a9cf82b2166f47694f43a8b382a737d306006554f9afaf7d5fc2746687a87ed50902c294e040fd8990f57428446f65e32c5a48a13a85a1f6e56bf10", 0x41}, {&(0x7f00000001c0)="bf9d60dcdca80f9ee121646a621956b9198522e429e1901329d0006054d5641ef1de9b01dbbb7a8f681ec102806bccd5d5f407d1bfa15d4bf78b331061993e012eec656342903ca03f65857ab2ae088c9b307612f8956fa4149b92afbc5f6f4046539dffe50c8ed582a4944b849015d99c4cdb36a854208e744eeba234a803c329fac0fb7858ad25aa68a1c378b46d3f0007cae0824c65e65164d1d893f34f7f65af94", 0xa3}, {&(0x7f0000000280)="ede828ac9e55379fc67f03016b0c20170e0b081646383596e2d2352f90b516a573005c9abf379a44d1ee8faecff667d4a74b5a8596641cee30521cf6fbc8e471505c3acbdd9713e0d88edc66581aa4fef6aa507e42e5485982364d4d29ef9122a52bfc3a69e7ea7a3e1a151ea298e3e1208332b5337d27b1cb3b3d8398f2690336af46e6798c9d0a61c40b90649c80e2b7677237e0241ddafd22c74a", 0x9c}, {&(0x7f0000000400)="21c36f2235ebb00a21e90cab28e4b5feaafed19cfe3e1e949c2ca6314e597b843f2fd81a63dd2f182d6933659d1b73d13b165f43a095008d5b693df48820d8c468906ed50e7b431c506196aa18672306c888a3ebd1abc2cd80cc4a2d3935b64197a8891fc36be56b17323e7d38766b97f5a94c24b4afa92cedf2c91ea8de8f5a1e9b1379db5e74085e8b3e0248df1c1c24cdc0e46500c72a5eb686f45d524af393fdc3b48581a7cb71cc3b100f73171e982acdcab3414b2a5ab0b58e13c3355343fe16e30c2dbe29475087b3d4cbe1981b181f085b7b81cefcbd2885b217cdb94ad6971726f0beb5", 0xe8}, {&(0x7f0000000340)="6b9d89ed4203fe2d85430ebff517924f149cbd8eeb85f19001828f22a864d05b558ceed297917be3dd78f5fc210ec5a9aa0c04c05d0d49e0f30169a038ea55462c5433835c155259a9", 0x49}], 0x5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x24, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x7, 0x121402) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x8000006, 0x8}) write$binfmt_elf32(r1, &(0x7f0000002600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x9, 0x1, 0x80200000, 0x7, 0x40, 0x0, 0x101}]}, 0x58) close(r1) r3 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x7ff, 0x4000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 85.299397ms ago: executing program 6 (id=1184): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xc) write$tun(r2, &(0x7f0000000980)={@void, @void, @ipv4=@gre={{0x21, 0x4, 0x1, 0x0, 0x11d7, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0x0, [{@private=0xa010101, 0x1ff}, {@broadcast, 0x2}, {@local, 0x401}, {@loopback, 0xffffff01}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x4}, {@multicast2, 0x3}, {@multicast1, 0x4}, {@local, 0x3}]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xe, "95265f73b678b2bf41925bb7"}, @lsrr={0x83, 0xf, 0x20, [@rand_addr=0x64010102, @rand_addr=0x64010102, @empty]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xdc, 0x2, [0xff], "0fec329820011bb2fe411160a0099f1f339fb63942afc6ea89362fc9d6c7978335f9788bfb4a017056c9896391a7558e6380a89f9e188c682b6b378f1470c00fdb919695d38349cea483b46ffcea8b7d842ff069a8bf7d770a114da2c21895bcb02d37ae79986ddf71e221ffa09f23fa129ebe1345c83ed65cbc41330e43723fa74b5b4593867d3e091e1eb9a92f4459ff3d90c825141733951639e348f81935867f844ad7b763a50df0c5215d8dba7f5c0925e635dc4d5d4db0b957861a8ada6820e59c9825ce1e6e9526958d575292d781a4a5af4a1fd0043d582f"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "259b7748ae5829ba6c356047b8299879ae9fa00e895eac787475e5b734bb234142"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x3ff], "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"}, {0x8, 0x88be, 0x0, {{0xf, 0x1, 0x3, 0x3, 0x1, 0x2, 0x5, 0x6}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0xfa, 0x0, 0x1, 0x1, 0x6}, 0x2, {0x3, 0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "c3c1e82d24d226e774f60372"}}}}, 0x11d7) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 0s ago: executing program 6 (id=1185): r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) dup2(r5, r4) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r7, 0xc0104d08, 0x0) write$tcp_congestion(r7, &(0x7f0000000040)='dctcp\x00', 0x6) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r8, 0xc004510e, &(0x7f00000010c0)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r9, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009c00aecb0000000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000001c0)={0x1, 0x400, 0xb94}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.517'. [ 101.529310][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 101.536966][ T7850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7850 comm=syz.1.519 [ 101.575149][ T7850] cifs: Unknown parameter 'nÕ¾+fm%·>] 1 [ 112.459161][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.462200][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.466194][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.469686][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.481146][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.483620][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.490484][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.497403][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.501524][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.548514][ T1204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.595110][ T8384] xfrm0 speed is unknown, defaulting to 1000 [ 112.697940][ T8402] netlink: 'syz.3.693': attribute type 16 has an invalid length. [ 112.703961][ T8402] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.693'. [ 112.731512][ T1204] bridge_slave_1: left allmulticast mode [ 112.733503][ T1204] bridge_slave_1: left promiscuous mode [ 112.736445][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.750169][ T1204] bridge_slave_0: left allmulticast mode [ 112.751982][ T1204] bridge_slave_0: left promiscuous mode [ 112.753800][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.841405][ T1204] bond1 (unregistering): (slave geneve2): Releasing active interface [ 112.992809][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.997016][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.000696][ T1204] bond0 (unregistering): Released all slaves [ 113.005210][ T1204] bond1 (unregistering): Released all slaves [ 113.015318][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 113.060539][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.063004][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.065281][ T8384] bridge_slave_0: entered allmulticast mode [ 113.067875][ T8384] bridge_slave_0: entered promiscuous mode [ 113.069890][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 113.077832][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.080578][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.083381][ T8384] bridge_slave_1: entered allmulticast mode [ 113.086414][ T8384] bridge_slave_1: entered promiscuous mode [ 113.102914][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.116857][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.131773][ T8384] team0: Port device team_slave_0 added [ 113.134742][ T8384] team0: Port device team_slave_1 added [ 113.148868][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.151022][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.159698][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.163959][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.166067][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.176679][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.213045][ T8384] hsr_slave_0: entered promiscuous mode [ 113.215307][ T8384] hsr_slave_1: entered promiscuous mode [ 113.217359][ T8384] debugfs: 'hsr0' already exists in 'hsr' [ 113.219723][ T8384] Cannot create hsr debugfs directory [ 113.219849][ T24] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 113.224018][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.227386][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.230538][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.234484][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.237390][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.242547][ T24] usb 8-1: config 0 descriptor?? [ 113.295978][ T1204] hsr_slave_0: left promiscuous mode [ 113.298266][ T1204] hsr_slave_1: left promiscuous mode [ 113.300843][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.303664][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.306603][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.309072][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.319282][ T1204] veth1_macvtap: left promiscuous mode [ 113.321504][ T1204] veth0_macvtap: left promiscuous mode [ 113.323580][ T1204] veth1_vlan: left promiscuous mode [ 113.325523][ T1204] veth0_vlan: left promiscuous mode [ 113.465216][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 113.472371][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 113.482683][ T40] audit: type=1400 audit(1774685505.658:544): avc: denied { block_suspend } for pid=8427 comm="syz.1.698" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.590930][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 113.593653][ T8430] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.650736][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 113.655580][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 113.661118][ T8384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.667676][ T24] usb 8-1: USB disconnect, device number 6 [ 113.673252][ T8384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.686981][ T8384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.697247][ T8384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.719540][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.721785][ T8384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.724095][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.726267][ T8384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.763355][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.770441][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.773777][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.788370][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.794322][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.796794][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.802215][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.804519][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.859934][ T40] audit: type=1400 audit(1774685506.038:545): avc: denied { ioctl } for pid=8450 comm="syz.1.701" path="socket:[29098]" dev="sockfs" ino=29098 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.929147][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.956734][ T1204] IPVS: stop unused estimator thread 0... [ 114.057184][ T8384] veth0_vlan: entered promiscuous mode [ 114.063849][ T8384] veth1_vlan: entered promiscuous mode [ 114.079873][ T8384] veth0_macvtap: entered promiscuous mode [ 114.085922][ T8384] veth1_macvtap: entered promiscuous mode [ 114.086248][ T40] audit: type=1400 audit(1774685506.258:546): avc: denied { create } for pid=8479 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.096851][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.104953][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.111302][ T101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.114085][ T101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.117662][ T101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.121713][ T101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.158693][ T40] audit: type=1400 audit(1774685506.328:547): avc: denied { ioctl } for pid=8479 comm="syz.1.703" path="socket:[30805]" dev="sockfs" ino=30805 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.159772][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.169255][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.182363][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.185203][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.189422][ T40] audit: type=1400 audit(1774685506.358:548): avc: denied { bind } for pid=8485 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.256110][ T8495] dummy0: entered allmulticast mode [ 114.261242][ T8495] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 114.266368][ T8494] dummy0: left allmulticast mode [ 114.346602][ T8505] Cannot find add_set index 0 as target [ 114.464248][ T8519] ipt_REJECT: ECHOREPLY no longer supported. [ 114.578799][ T5936] Bluetooth: hci3: command tx timeout [ 114.850564][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 114.936006][ T8559] GUP no longer grows the stack in syz.3.714 (8559): 200000002000-200000005000 (200000001000) [ 114.941196][ T8559] CPU: 3 UID: 0 PID: 8559 Comm: syz.3.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.941215][ T8559] Tainted: [L]=SOFTLOCKUP [ 114.941220][ T8559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.941226][ T8559] Call Trace: [ 114.941230][ T8559] [ 114.941234][ T8559] dump_stack_lvl+0x100/0x190 [ 114.941269][ T8559] gup_vma_lookup.cold+0x83/0x96 [ 114.941285][ T8559] __get_user_pages+0x241/0x34d0 [ 114.941303][ T8559] ? down_read_killable+0x30e/0x4c0 [ 114.941322][ T8559] ? __lock_acquire+0x4a5/0x2630 [ 114.941334][ T8559] ? __pfx___get_user_pages+0x10/0x10 [ 114.941351][ T8559] __gup_longterm_locked+0x279/0x16f0 [ 114.941368][ T8559] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.941384][ T8559] ? __get_pfnblock_flags_mask+0x140/0x250 [ 114.941397][ T8559] ? find_held_lock+0x2b/0x80 [ 114.941413][ T8559] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 114.941428][ T8559] gup_fast_fallback+0x18c6/0x2460 [ 114.941450][ T8559] ? __pfx_gup_fast_fallback+0x10/0x10 [ 114.941470][ T8559] pin_user_pages_fast+0xa7/0xf0 [ 114.941484][ T8559] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 114.941498][ T8559] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 114.941516][ T8559] ? frame_vector_create+0x61/0x110 [ 114.941542][ T8559] get_vaddr_frames+0x89/0x190 [ 114.941556][ T8559] vb2_create_framevec+0x64/0xd0 [ 114.941573][ T8559] vb2_vmalloc_get_userptr+0x137/0x510 [ 114.941587][ T8559] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.941606][ T8559] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 114.941620][ T8559] __prepare_userptr.constprop.0+0x3a7/0x1560 [ 114.941644][ T8559] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 114.941679][ T8559] ? __mutex_lock+0x26a/0x1b90 [ 114.941696][ T8559] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.941715][ T8559] __buf_prepare+0x352/0x790 [ 114.941731][ T8559] ? ww_mutex_lock+0x100/0x160 [ 114.941749][ T8559] vb2_core_prepare_buf+0xa9/0x260 [ 114.941761][ T8559] vb2_prepare_buf+0x22f/0x300 [ 114.941773][ T8559] v4l2_m2m_prepare_buf+0xe8/0x1e0 [ 114.941785][ T8559] v4l_prepare_buf+0x93/0xc0 [ 114.941798][ T8559] __video_do_ioctl+0xb2a/0xdf0 [ 114.941815][ T8559] ? __might_fault+0xc5/0x140 [ 114.941830][ T8559] ? __pfx___video_do_ioctl+0x10/0x10 [ 114.941850][ T8559] video_usercopy+0x47a/0x1740 [ 114.941866][ T8559] ? __pfx___video_do_ioctl+0x10/0x10 [ 114.941882][ T8559] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 114.941900][ T8559] ? __pfx_video_usercopy+0x10/0x10 [ 114.941924][ T8559] v4l2_ioctl+0x1bd/0x250 [ 114.941940][ T8559] ? __pfx_v4l2_ioctl+0x10/0x10 [ 114.941956][ T8559] __x64_sys_ioctl+0x18e/0x210 [ 114.941974][ T8559] do_syscall_64+0x106/0xf80 [ 114.941990][ T8559] ? clear_bhb_loop+0x40/0x90 [ 114.942005][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.942016][ T8559] RIP: 0033:0x7f770b79c799 [ 114.942026][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.942037][ T8559] RSP: 002b:00007f770c5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.942048][ T8559] RAX: ffffffffffffffda RBX: 00007f770ba15fa0 RCX: 00007f770b79c799 [ 114.942055][ T8559] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 114.942061][ T8559] RBP: 00007f770b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 114.942067][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.942073][ T8559] R13: 00007f770ba16038 R14: 00007f770ba15fa0 R15: 00007fff2b376138 [ 114.942087][ T8559] [ 115.082725][ T9] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 115.085619][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.089158][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.092259][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.096691][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.100795][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.104930][ T9] usb 9-1: config 0 descriptor?? [ 115.162514][ T8571] afs: Unknown parameter 'Ouí' [ 115.164687][ T8571] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 115.183841][ T8571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.186800][ T8571] bond4: entered allmulticast mode [ 115.190186][ T8573] afs: Unknown parameter 'Ouí' [ 115.280354][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 115.713373][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 115.715516][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 115.721237][ T9] usb 9-1: USB disconnect, device number 2 [ 115.914123][ T8589] syzkaller0: entered promiscuous mode [ 115.916081][ T8589] syzkaller0: entered allmulticast mode [ 115.965832][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 115.965845][ T40] audit: type=1400 audit(1774685508.138:561): avc: denied { write } for pid=8590 comm="syz.3.723" path="socket:[29944]" dev="sockfs" ino=29944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.974405][ T8592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.722'. [ 115.977666][ T40] audit: type=1400 audit(1774685508.138:562): avc: denied { read } for pid=8590 comm="syz.3.723" path="socket:[29944]" dev="sockfs" ino=29944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.009424][ T8594] netlink: 'syz.3.724': attribute type 4 has an invalid length. [ 116.189262][ T40] audit: type=1400 audit(1774685508.368:563): avc: denied { read } for pid=8608 comm="syz.1.728" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.197741][ T40] audit: type=1400 audit(1774685508.368:564): avc: denied { open } for pid=8608 comm="syz.1.728" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.203428][ T8609] binder: BINDER_SET_CONTEXT_MGR already set [ 116.204294][ T8610] binder: 8608:8610 unknown command 0 [ 116.204306][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204348][ T8610] binder: 8608:8610 unknown command 0 [ 116.204356][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204395][ T8610] binder: 8608:8610 unknown command 0 [ 116.204408][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204447][ T8610] binder: 8608:8610 unknown command 0 [ 116.204455][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204495][ T8610] binder: 8608:8610 unknown command 0 [ 116.204502][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204541][ T8610] binder: 8608:8610 unknown command 0 [ 116.204548][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204659][ T8610] binder: 8608:8610 unknown command 0 [ 116.204692][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204801][ T8610] binder: 8608:8610 unknown command 0 [ 116.204810][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204859][ T8610] binder: 8608:8610 unknown command 0 [ 116.204867][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204906][ T8610] binder: 8608:8610 unknown command 0 [ 116.204913][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.204962][ T8610] binder: 8608:8610 unknown command 0 [ 116.204969][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205011][ T8610] binder: 8608:8610 unknown command 0 [ 116.205018][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205077][ T8610] binder: 8608:8610 unknown command 0 [ 116.205084][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205142][ T8610] binder: 8608:8610 unknown command 0 [ 116.205152][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205192][ T8610] binder: 8608:8610 unknown command 0 [ 116.205199][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205240][ T8610] binder: 8608:8610 unknown command 0 [ 116.205247][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205343][ T8610] binder: 8608:8610 unknown command 0 [ 116.205351][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205391][ T8610] binder: 8608:8610 unknown command 0 [ 116.205398][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205439][ T8610] binder: 8608:8610 unknown command 0 [ 116.205446][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.205499][ T8610] binder: 8608:8610 unknown command 0 [ 116.205508][ T8610] binder: 8608:8610 ioctl c0306201 200000000040 returned -22 [ 116.207160][ T40] audit: type=1400 audit(1774685508.378:565): avc: denied { ioctl } for pid=8608 comm="syz.1.728" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.207194][ T40] audit: type=1400 audit(1774685508.378:566): avc: denied { set_context_mgr } for pid=8608 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.209668][ T8609] binder: 8608:8609 ioctl 4018620d 200000000100 returned -16 [ 116.225247][ T8614] selinux_netlink_send: 39 callbacks suppressed [ 116.225259][ T8614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8614 comm=syz.3.730 [ 116.309594][ T8618] netlink: 132 bytes leftover after parsing attributes in process `syz.4.732'. [ 116.325156][ T8614] netlink: 'syz.3.730': attribute type 3 has an invalid length. [ 116.333343][ T8614] netlink: 'syz.3.730': attribute type 3 has an invalid length. [ 116.340513][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 116.386649][ T8620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.733'. [ 116.424837][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 116.440942][ T8627] team0 (unregistering): Port device team_slave_0 removed [ 116.446570][ T8627] team0 (unregistering): Port device team_slave_1 removed [ 116.477660][ T40] audit: type=1400 audit(1774685508.648:567): avc: denied { getopt } for pid=8624 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.485381][ T40] audit: type=1400 audit(1774685508.648:568): avc: denied { view } for pid=8624 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.491778][ T40] audit: type=1400 audit(1774685508.658:569): avc: denied { ioctl } for pid=8624 comm="syz.1.735" path="socket:[28058]" dev="sockfs" ino=28058 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.635524][ T40] audit: type=1400 audit(1774685508.808:570): avc: denied { map } for pid=8621 comm="syz.3.734" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.649652][ T5936] Bluetooth: hci3: command tx timeout [ 116.693834][ T8640] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.697748][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.320769][ T8646] syz.3.739 (8646) used greatest stack depth: 19104 bytes left [ 117.531674][ T840] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 117.662589][ T8665] overlayfs: conflicting lowerdir path [ 117.701897][ T840] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 117.704599][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.708285][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.711939][ T840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.716268][ T840] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.720432][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.725997][ T840] usb 6-1: config 0 descriptor?? [ 117.728548][ T8672] bond0: (slave nr0): Error: Device can not be enslaved while up [ 117.804559][ T8677] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 118.337241][ T840] usbhid 6-1:0.0: can't add hid device: -71 [ 118.339356][ T840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 118.343060][ T840] usb 6-1: USB disconnect, device number 12 [ 118.521967][ T8696] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 118.526263][ T8698] netlink: 236 bytes leftover after parsing attributes in process `syz.3.755'. [ 118.728729][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 118.732695][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.738787][ T63] Bluetooth: hci3: command tx timeout [ 118.802242][ T8715] ext2: Unknown parameter 'di½'' [ 118.953211][ T8739] netlink: 'syz.3.766': attribute type 3 has an invalid length. [ 119.032041][ T8749] random: crng reseeded on system resumption [ 119.318858][ T5985] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 119.500065][ T5985] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 119.502788][ T5985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.506499][ T5985] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.510052][ T5985] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.514331][ T5985] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.517279][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.521527][ T5985] usb 9-1: config 0 descriptor?? [ 119.862739][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 119.881315][ T8775] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 119.901116][ T8776] syzkaller0: entered promiscuous mode [ 119.902963][ T8776] syzkaller0: entered allmulticast mode [ 119.906235][ T8775] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 119.910731][ T8775] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 120.139426][ T5985] usbhid 9-1:0.0: can't add hid device: -71 [ 120.145212][ T5985] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 120.153267][ T5985] usb 9-1: USB disconnect, device number 3 [ 120.684232][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 120.809133][ T63] Bluetooth: hci3: command tx timeout [ 121.015406][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.041972][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.056337][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.065514][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.097364][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 121.097379][ T40] audit: type=1400 audit(1774685513.268:583): avc: denied { write } for pid=8795 comm="syz.1.782" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.118942][ T40] audit: type=1400 audit(1774685513.288:584): avc: denied { ioctl } for pid=8795 comm="syz.1.782" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.162260][ T8801] netlink: 596 bytes leftover after parsing attributes in process `syz.1.783'. [ 121.198041][ T8794] program syz.3.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.204341][ T40] audit: type=1400 audit(1774685513.378:585): avc: denied { connect } for pid=8803 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.214273][ T8804] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.262531][ T40] audit: type=1400 audit(1774685513.438:586): avc: denied { setopt } for pid=8807 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.453032][ T8824] dummy0: entered allmulticast mode [ 121.559946][ T5985] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 121.730156][ T5985] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 121.733518][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.738751][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.742682][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.747839][ T5985] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.751794][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.757828][ T5985] usb 6-1: config 0 descriptor?? [ 121.877533][ T8828] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 122.133552][ T8832] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.794'. [ 122.145049][ T8832] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 122.283756][ T8823] dummy0: left allmulticast mode [ 122.295284][ T8838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.799'. [ 122.301165][ T8838] PM: Enabling pm_trace changes system date and time during resume. [ 122.301165][ T8838] PM: Correct system time has to be restored manually after resume. [ 122.370330][ T5985] usbhid 6-1:0.0: can't add hid device: -71 [ 122.374057][ T5985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 122.387674][ T5985] usb 6-1: USB disconnect, device number 13 [ 122.404331][ T8844] xt_CT: No such helper "snmp_trap" [ 122.440816][ T8844] nbd: must specify a device to reconfigure [ 122.446768][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 122.499517][ T8856] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 122.506536][ T8860] netlink: 'syz.2.807': attribute type 7 has an invalid length. [ 122.513305][ T8856] bond1: entered promiscuous mode [ 122.515191][ T8856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.522874][ T7673] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.526076][ T8860] netlink: 'syz.2.807': attribute type 7 has an invalid length. [ 122.528406][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.534968][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.539576][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.574035][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 122.578194][ T8866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 122.582688][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 122.583009][ T8868] netlink: 'syz.3.808': attribute type 89 has an invalid length. [ 122.742454][ T40] audit: type=1400 audit(1774685514.918:587): avc: denied { ioctl } for pid=8878 comm="syz.2.813" path="/166/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.979408][ T40] audit: type=1400 audit(1774685515.158:588): avc: denied { watch_sb } for pid=8906 comm="syz.4.821" path="/34" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.022108][ T40] audit: type=1400 audit(1774685515.198:589): avc: denied { getopt } for pid=8908 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.033972][ T8911] program syz.2.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.185437][ T40] audit: type=1400 audit(1774685515.348:590): avc: denied { getopt } for pid=8927 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.208191][ T40] audit: type=1400 audit(1774685515.348:591): avc: denied { read } for pid=8927 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.360576][ T5985] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 123.443641][ T40] audit: type=1400 audit(1774685515.618:592): avc: denied { connect } for pid=8941 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.463788][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.469235][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.472637][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.479073][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.481519][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.503882][ T8946] xfrm0 speed is unknown, defaulting to 1000 [ 123.513860][ T5985] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 123.517325][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.530307][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.538661][ T5985] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.548764][ T5985] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.556050][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.577860][ T5985] usb 8-1: config 0 descriptor?? [ 123.628367][ T8957] __nla_validate_parse: 7 callbacks suppressed [ 123.628384][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.838'. [ 123.659621][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 123.669758][ T8954] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 123.673763][ T8954] overlayfs: missing 'lowerdir' [ 123.683498][ T8954] netlink: 80 bytes leftover after parsing attributes in process `syz.2.838'. [ 123.717893][ T8963] usb usb7: usbfs: process 8963 (syz.4.840) did not claim interface 7 before use [ 123.723118][ T8963] tmpfs: Bad value for 'huge' [ 123.757940][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.759503][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.841'. [ 123.760981][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.767365][ T8946] bridge_slave_0: entered allmulticast mode [ 123.770589][ T8946] bridge_slave_0: entered promiscuous mode [ 123.774864][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.777388][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.785764][ T8946] bridge_slave_1: entered allmulticast mode [ 123.789936][ T8946] bridge_slave_1: entered promiscuous mode [ 123.829401][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.835152][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.836627][ T8971] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 123.862779][ T8946] team0: Port device team_slave_0 added [ 123.867611][ T8946] team0: Port device team_slave_1 added [ 123.905973][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.909023][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.919610][ T8974] xt_socket: unknown flags 0x48 [ 123.921133][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.928184][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.931453][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.942960][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.991927][ T8946] hsr_slave_0: entered promiscuous mode [ 123.995291][ T8946] hsr_slave_1: entered promiscuous mode [ 124.190530][ T5985] usbhid 8-1:0.0: can't add hid device: -71 [ 124.193342][ T5985] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 124.198062][ T5985] usb 8-1: USB disconnect, device number 7 [ 124.220217][ T8946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.224716][ T8946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.231430][ T8946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.237837][ T8946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.279876][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 124.284930][ T8988] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.294926][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.308103][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.320306][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.323472][ T7673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.332836][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.336040][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.505927][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.532811][ T9018] i2c i2c-1: Invalid block write size 34 [ 124.694235][ T8946] veth0_vlan: entered promiscuous mode [ 124.700929][ T8946] veth1_vlan: entered promiscuous mode [ 124.718938][ T8946] veth0_macvtap: entered promiscuous mode [ 124.724246][ T8946] veth1_macvtap: entered promiscuous mode [ 124.732949][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.741173][ T9036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 124.744410][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.744497][ T9036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.752584][ T9036] vhci_hcd vhci_hcd.0: Device attached [ 124.753424][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.761313][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.765012][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.797572][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.821280][ T9036] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 124.823829][ T9036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.829747][ T9036] vhci_hcd vhci_hcd.0: Device attached [ 124.844658][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 124.861351][ T9037] usbip_core: unknown command [ 124.863365][ T9037] vhci_hcd: unknown pdu 1233523528 [ 124.864388][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.865461][ T9037] usbip_core: unknown command [ 124.874331][ T9043] netlink: 64 bytes leftover after parsing attributes in process `syz.4.858'. [ 124.878255][ T9040] vhci_hcd: connection closed [ 124.879438][ T7673] vhci_hcd vhci_hcd.3: stop threads [ 124.883842][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.886770][ T7673] vhci_hcd vhci_hcd.3: release socket [ 124.896175][ T7673] vhci_hcd vhci_hcd.3: disconnect device [ 124.905277][ T7673] vhci_hcd vhci_hcd.3: stop threads [ 124.907324][ T7673] vhci_hcd vhci_hcd.3: release socket [ 124.910851][ T7673] vhci_hcd vhci_hcd.3: disconnect device [ 124.915520][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.919355][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.539545][ T5936] Bluetooth: hci2: command tx timeout [ 125.612206][ T9091] netlink: 'syz.3.865': attribute type 7 has an invalid length. [ 125.615821][ T9091] netlink: 'syz.3.865': attribute type 8 has an invalid length. [ 125.630160][ T9091] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.758731][ T5985] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 125.782949][ T9100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9100 comm=syz.3.867 [ 125.790972][ T9100] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 125.813828][ T9100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.833721][ T9100] bond2: (slave dummy0): making interface the new active one [ 125.842598][ T9100] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 125.924693][ T5985] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 125.928220][ T5985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.935395][ T5985] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.952943][ T5985] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.959252][ T5985] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.963485][ T5985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.987292][ T5985] usb 10-1: config 0 descriptor?? [ 126.103075][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 126.103090][ T40] audit: type=1400 audit(1774685518.278:595): avc: denied { bind } for pid=9115 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.173210][ T9122] fuse: Invalid rootmode [ 126.175080][ T9121] fuse: Invalid rootmode [ 126.216374][ T40] audit: type=1400 audit(1774685518.388:596): avc: denied { read write } for pid=9123 comm="syz.3.873" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.227075][ T40] audit: type=1400 audit(1774685518.388:597): avc: denied { open } for pid=9123 comm="syz.3.873" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.239942][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.242404][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.244787][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.247142][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.251654][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.255778][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.260113][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.263091][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.266200][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.272479][ T9039] hid-generic 0805:00B6:0080.0004: unknown main item tag 0x0 [ 126.302033][ T9039] hid-generic 0805:00B6:0080.0004: hidraw1: HID v71.8d Device [syz0] on syz1 [ 126.341010][ T9127] fido_id[9127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.601437][ T5985] usbhid 10-1:0.0: can't add hid device: -71 [ 126.603497][ T5985] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 126.609074][ T5985] usb 10-1: USB disconnect, device number 2 [ 127.127358][ T40] audit: type=1400 audit(1774685519.298:598): avc: denied { name_bind } for pid=9134 comm="syz.5.876" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 127.164888][ T40] audit: type=1400 audit(1774685519.338:599): avc: denied { unmount } for pid=8384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.189437][ T9137] netlink: 84 bytes leftover after parsing attributes in process `syz.5.877'. [ 127.194041][ T40] audit: type=1400 audit(1774685519.368:600): avc: denied { getopt } for pid=9136 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.309029][ T40] audit: type=1400 audit(1774685519.488:601): avc: denied { setopt } for pid=9147 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.360352][ T40] audit: type=1400 audit(1774685519.538:602): avc: denied { create } for pid=9152 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.366435][ T40] audit: type=1400 audit(1774685519.538:603): avc: denied { getopt } for pid=9152 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.433727][ T40] audit: type=1400 audit(1774685519.608:604): avc: denied { write } for pid=9152 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.618853][ T9039] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 127.621635][ T5936] Bluetooth: hci2: command tx timeout [ 127.770416][ T9039] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 127.773130][ T9039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.776679][ T9039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.780728][ T9039] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.785223][ T9039] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.788537][ T9039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.794112][ T9039] usb 8-1: config 0 descriptor?? [ 127.797114][ T9171] netlink: 80 bytes leftover after parsing attributes in process `syz.4.889'. [ 127.832549][ T9176] ªªªªª: renamed from lo (while UP) [ 128.052695][ T9183] netlink: 'syz.4.893': attribute type 15 has an invalid length. [ 128.332429][ T9198] misc userio: Invalid payload size [ 128.401077][ T9039] usbhid 8-1:0.0: can't add hid device: -71 [ 128.403178][ T9039] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 128.406702][ T9039] usb 8-1: USB disconnect, device number 8 [ 128.570977][ T9202] Bluetooth: hci4: Frame reassembly failed (-84) [ 128.577464][ T1176] Bluetooth: hci4: Frame reassembly failed (-84) [ 128.938118][ T9204] siw: device registration error -23 [ 128.948474][ T9204] siw: device registration error -23 [ 129.035700][ T9209] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 129.038395][ T9209] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 129.137611][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 129.348977][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 129.351758][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 129.354965][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 129.358012][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 129.394098][ T9221] loop5: detected capacity change from 0 to 126 [ 129.439442][ T9226] bridge1: entered promiscuous mode [ 129.513053][ T9228] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 129.518283][ T9228] kernel profiling enabled (shift: 63) [ 129.521283][ T9228] profiling shift: 63 too large [ 129.689204][ T63] Bluetooth: hci2: command tx timeout [ 129.789649][ T840] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 129.950340][ T840] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 129.953774][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.958012][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.961763][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.965855][ T840] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.969149][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.977503][ T840] usb 8-1: config 0 descriptor?? [ 130.586132][ T840] usbhid 8-1:0.0: can't add hid device: -71 [ 130.588146][ T840] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 130.592614][ T840] usb 8-1: USB disconnect, device number 9 [ 130.648917][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 130.649252][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.144592][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 131.144603][ T40] audit: type=1400 audit(1774685523.318:608): avc: denied { connect } for pid=9257 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.281769][ T9269] netlink: 'syz.5.919': attribute type 12 has an invalid length. [ 131.301237][ T5357] block nbd0: Connection timed out, retrying (0/5 alive) [ 131.305161][ T5357] block nbd0: Connection timed out, retrying (0/5 alive) [ 131.307567][ T5357] block nbd0: Connection timed out, retrying (0/5 alive) [ 131.309939][ T5357] block nbd0: Connection timed out, retrying (0/5 alive) [ 131.312854][ T5357] block nbd0: Dead connection, failed to find a fallback [ 131.315459][ T5357] block nbd0: shutting down sockets [ 131.317479][ T5357] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.322440][ T5357] Buffer I/O error on dev nbd0, logical block 3, async page read [ 131.325135][ T5357] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.328207][ T5357] Buffer I/O error on dev nbd0, logical block 2, async page read [ 131.331799][ T5357] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.335070][ T5357] Buffer I/O error on dev nbd0, logical block 1, async page read [ 131.337549][ T5357] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.343410][ T5357] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.347009][ T7799] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.349815][ T9272] Bluetooth: hci0: load_link_keys: too big key_count value 11008 [ 131.351018][ T7799] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.354908][ T9272] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 131.356276][ T7799] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.363000][ T7799] Buffer I/O error on dev nbd0, logical block 1, async page read [ 131.365505][ T7799] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.368526][ T7799] Buffer I/O error on dev nbd0, logical block 2, async page read [ 131.369250][ T9272] dvmrp0: entered allmulticast mode [ 131.371068][ T7799] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.376190][ T7799] Buffer I/O error on dev nbd0, logical block 3, async page read [ 131.378747][ T7799] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.381788][ T7799] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.384251][ T7799] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 131.387248][ T7799] Buffer I/O error on dev nbd0, logical block 1, async page read [ 131.390606][ T7799] ldm_validate_partition_table(): Disk read failed. [ 131.393515][ T7799] Dev nbd0: unable to read RDB block 0 [ 131.395978][ T7799] nbd0: unable to read partition table [ 131.399894][ T7799] ldm_validate_partition_table(): Disk read failed. [ 131.402351][ T7799] Dev nbd0: unable to read RDB block 0 [ 131.404434][ T7799] nbd0: unable to read partition table [ 131.478682][ T1472] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 131.630164][ T1472] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.633767][ T1472] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.637821][ T1472] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.641688][ T1472] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.646304][ T1472] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.648739][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 131.652473][ T1472] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.657319][ T1472] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.660682][ T1472] usb 8-1: Product: syz [ 131.662522][ T1472] usb 8-1: Manufacturer: syz [ 131.670649][ T1472] cdc_wdm 8-1:1.0: skipping garbage [ 131.672936][ T1472] cdc_wdm 8-1:1.0: skipping garbage [ 131.676983][ T1472] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 131.679556][ T1472] cdc_wdm 8-1:1.0: Unknown control protocol [ 131.768714][ T5936] Bluetooth: hci2: command tx timeout [ 131.800110][ T24] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 131.802693][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.806202][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.809492][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.813454][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.816549][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.821512][ T24] usb 9-1: config 0 descriptor?? [ 131.870080][ T40] audit: type=1400 audit(1774685524.048:609): avc: denied { read write } for pid=9263 comm="syz.3.917" name="cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 131.877519][ T40] audit: type=1400 audit(1774685524.048:610): avc: denied { open } for pid=9263 comm="syz.3.917" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 131.909740][ T5985] usb 8-1: USB disconnect, device number 10 [ 132.274062][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'. [ 132.278988][ T9279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=9279 comm=syz.5.923 [ 132.312022][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 132.316075][ T40] audit: type=1400 audit(1774685524.488:611): avc: denied { ioctl } for pid=9280 comm="syz.5.924" path="socket:[32442]" dev="sockfs" ino=32442 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.431652][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 132.433419][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 132.436570][ T24] usb 9-1: USB disconnect, device number 4 [ 132.521433][ T40] audit: type=1400 audit(1774685524.698:612): avc: denied { getopt } for pid=9292 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.595954][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.930'. [ 132.688641][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.931'. [ 132.731009][ T9304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9304 comm=syz.5.931 [ 132.746909][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.932'. [ 132.852987][ T40] audit: type=1400 audit(1774685525.028:613): avc: denied { audit_read } for pid=9312 comm="syz.3.935" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.981782][ T40] audit: type=1400 audit(1774685525.158:614): avc: denied { mount } for pid=9317 comm="syz.4.936" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 133.070969][ T40] audit: type=1400 audit(1774685525.248:615): avc: denied { unmount } for pid=8384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 133.392540][ T9340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.397249][ T9333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.600090][ T9353] Unsupported ieee802154 address type: 0 [ 133.630224][ T9357] loop6: detected capacity change from 0 to 524287999 [ 133.633082][ T7981] ldm_validate_partition_table(): Disk read failed. [ 133.635167][ T7981] Dev loop6: unable to read RDB block 0 [ 133.636971][ T7981] loop6: unable to read partition table [ 133.644861][ T9359] random: crng reseeded on system resumption [ 133.645179][ T9357] ldm_validate_partition_table(): Disk read failed. [ 133.652735][ T9357] Dev loop6: unable to read RDB block 0 [ 133.655205][ T9357] loop6: unable to read partition table [ 133.657117][ T9357] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 133.699709][ T9357] ldm_validate_partition_table(): Disk read failed. [ 133.701845][ T9357] Dev loop6: unable to read RDB block 0 [ 133.703684][ T9357] loop6: unable to read partition table [ 133.705623][ T9357] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 133.708157][ T40] audit: type=1400 audit(1774685525.878:616): avc: denied { unmount } for pid=8946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.884535][ T9370] pim6reg: entered allmulticast mode [ 133.901011][ T9373] kAFS: unable to lookup cell 'syz1' [ 133.973918][ T40] audit: type=1400 audit(1774685526.148:617): avc: denied { append } for pid=9380 comm="syz.3.953" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.092849][ T9391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.200696][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 134.338720][ T34] usb 9-1: device descriptor read/64, error -71 [ 134.577787][ T9441] __nla_validate_parse: 5 callbacks suppressed [ 134.577800][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.5.972'. [ 134.594983][ T9441] bond1 (unregistering): Released all slaves [ 134.598819][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 134.644980][ T9437] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 134.652816][ T9437] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 134.728673][ T34] usb 9-1: device descriptor read/64, error -71 [ 134.773037][ T9450] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.974'. [ 134.839488][ T34] usb usb9-port1: attempt power cycle [ 134.841344][ T9453] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 134.846525][ T9453] bond1 (unregistering): Released all slaves [ 134.865952][ T9456] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.872761][ T9456] program syz.3.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.987370][ T9468] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 135.000482][ T9468] bond4: entered promiscuous mode [ 135.002548][ T9468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.007744][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 135.179234][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 135.212453][ T34] usb 9-1: device descriptor read/8, error -71 [ 135.253752][ T9479] fuse: Bad value for 'fd' [ 135.360877][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 135.470035][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 135.509923][ T34] usb 9-1: device descriptor read/8, error -71 [ 135.520912][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 135.524744][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 135.628859][ T34] usb usb9-port1: unable to enumerate USB device [ 135.632672][ T9498] overlayfs: failed to resolve './file1': -2 [ 135.705694][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 135.745207][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.990'. [ 135.754437][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.990'. [ 135.927523][ T9513] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 136.034263][ T9517] xfrm0 speed is unknown, defaulting to 1000 [ 136.134755][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.418540][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 136.418552][ T40] audit: type=1400 audit(1774685528.588:622): avc: denied { setopt } for pid=9539 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.467149][ T9545] can0: slcan on ttyS3. [ 136.611222][ T9544] can0 (unregistered): slcan off ttyS3. [ 136.759366][ T40] audit: type=1400 audit(1774685528.938:623): avc: denied { map } for pid=9554 comm="syz.3.1002" path="socket:[36320]" dev="sockfs" ino=36320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 136.964908][ T9564] tmpfs: User quota block hardlimit too large. [ 137.121775][ T40] audit: type=1400 audit(1774685529.298:624): avc: denied { mounton } for pid=9565 comm="syz.4.1004" path="/79/file0" dev="9p" ino=73924663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.315462][ T40] audit: type=1400 audit(1774685529.488:625): avc: denied { checkpoint_restore } for pid=9571 comm="syz.5.1007" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.364441][ T9574] netlink: 'syz.5.1007': attribute type 1 has an invalid length. [ 137.434407][ T9576] bond1: (slave geneve2): making interface the new active one [ 137.437410][ T9576] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 137.440896][ T1176] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.444722][ T1176] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.447943][ T1176] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.457602][ T1176] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.691037][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.778787][ T34] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 137.908812][ T34] usb 10-1: device descriptor read/64, error -71 [ 138.159146][ T34] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 138.288739][ T34] usb 10-1: device descriptor read/64, error -71 [ 138.399384][ T34] usb usb10-port1: attempt power cycle [ 138.738700][ T34] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 138.759577][ T34] usb 10-1: device descriptor read/8, error -71 [ 138.999250][ T34] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 139.020533][ T34] usb 10-1: device descriptor read/8, error -71 [ 139.139064][ T34] usb usb10-port1: unable to enumerate USB device [ 139.740897][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.745686][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.749643][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.752801][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.755542][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.806108][ T9590] xfrm0 speed is unknown, defaulting to 1000 [ 139.911243][ T9590] chnl_net:caif_netlink_parms(): no params data found [ 139.955738][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.958121][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.962340][ T9590] bridge_slave_0: entered allmulticast mode [ 139.965168][ T9590] bridge_slave_0: entered promiscuous mode [ 139.968561][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.971002][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.973285][ T9590] bridge_slave_1: entered allmulticast mode [ 139.976186][ T9590] bridge_slave_1: entered promiscuous mode [ 140.012982][ T1204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.017904][ T1204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.038770][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.043261][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.059643][ T9590] team0: Port device team_slave_0 added [ 140.063010][ T9590] team0: Port device team_slave_1 added [ 140.083105][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.085947][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.096517][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.103537][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.106534][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.117742][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.140420][ T1204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.143670][ T1204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.187711][ T9590] hsr_slave_0: entered promiscuous mode [ 140.191319][ T9590] hsr_slave_1: entered promiscuous mode [ 140.194334][ T9590] debugfs: 'hsr0' already exists in 'hsr' [ 140.196842][ T9590] Cannot create hsr debugfs directory [ 140.230106][ T1204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.233420][ T1204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.324981][ T1204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.330764][ T1204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.342154][ T9590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.346943][ T9590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.352057][ T9590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.356382][ T9590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.383014][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.386350][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.389853][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.392931][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.454899][ T1204] bridge_slave_1: left allmulticast mode [ 140.456565][ T1204] bridge_slave_1: left promiscuous mode [ 140.458430][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.462286][ T1204] bridge_slave_0: left allmulticast mode [ 140.463942][ T1204] bridge_slave_0: left promiscuous mode [ 140.465610][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.592283][ T9607] netlink: 'syz.5.1013': attribute type 1 has an invalid length. [ 140.644082][ T1204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.647043][ T1204] bond_slave_0: left allmulticast mode [ 140.650735][ T1204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.653874][ T9610] binder: 9609:9610 unknown command 0 [ 140.654014][ T1204] bond_slave_1: left allmulticast mode [ 140.656303][ T9610] binder: 9609:9610 ioctl c0306201 200000000080 returned -22 [ 140.659075][ T1204] bond0 (unregistering): Released all slaves [ 140.666009][ T1204] bond1 (unregistering): Released all slaves [ 140.678082][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.682477][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.713165][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1015'. [ 140.717747][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.737730][ T9590] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.752987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.755755][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.793155][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.795956][ T7679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.881516][ T9590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.895495][ T40] audit: type=1400 audit(1774685533.068:626): avc: denied { getopt } for pid=9618 comm="syz.5.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.998282][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.008457][ T1204] hsr_slave_0: left promiscuous mode [ 141.013407][ T1204] hsr_slave_1: left promiscuous mode [ 141.016306][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.020870][ T1204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.024030][ T1204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.043385][ T40] audit: type=1400 audit(1774685533.218:627): avc: denied { listen } for pid=9640 comm="syz.5.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 141.043598][ T1204] veth1_macvtap: left promiscuous mode [ 141.053300][ T1204] veth0_macvtap: left promiscuous mode [ 141.053372][ T9638] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.055206][ T1204] veth1_vlan: left promiscuous mode [ 141.060708][ T1204] veth0_vlan: left promiscuous mode [ 141.146589][ T9649] netlink: 'syz.3.1021': attribute type 13 has an invalid length. [ 141.177291][ T1204] team0 (unregistering): Port device team_slave_1 removed [ 141.184466][ T1204] team0 (unregistering): Port device team_slave_0 removed [ 141.263217][ T9645] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.315194][ T9657] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1024'. [ 141.330996][ T9657] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1024'. [ 141.415750][ T9590] veth0_vlan: entered promiscuous mode [ 141.426215][ T9590] veth1_vlan: entered promiscuous mode [ 141.455049][ T9590] veth0_macvtap: entered promiscuous mode [ 141.465191][ T9590] veth1_macvtap: entered promiscuous mode [ 141.473859][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.480566][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.488003][ T7673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.498728][ T7673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.503429][ T7673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.507108][ T7673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.584733][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.587892][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.637111][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.642834][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.657986][ T1204] IPVS: stop unused estimator thread 0... [ 141.745500][ T9691] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1031'. [ 141.862254][ T63] Bluetooth: hci4: command tx timeout [ 141.979518][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.982096][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.064233][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.069799][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.141707][ T110] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.144710][ T110] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.150213][ T110] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.154025][ T110] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.428762][ T9728] netlink: 'syz.6.1038': attribute type 3 has an invalid length. [ 142.568647][ T40] audit: type=1400 audit(1774685534.738:628): avc: denied { mount } for pid=9735 comm="syz.6.1041" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 142.678154][ T9746] netlink: 'syz.6.1045': attribute type 27 has an invalid length. [ 142.721839][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.725236][ T9746] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.732491][ T9746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.735057][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1046'. [ 142.820292][ C3] Illegal XDP return value 16128 on prog (id 73) dev veth0_to_bond, expect packet loss! [ 142.827702][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1047'. [ 142.833518][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1047'. [ 142.847551][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1048'. [ 142.861773][ T9756] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.868013][ T9756] xt_bpf: check failed: parse error [ 143.005995][ T40] audit: type=1326 audit(1774685535.178:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.017077][ T40] audit: type=1326 audit(1774685535.178:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.028380][ T40] audit: type=1326 audit(1774685535.178:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.038651][ T40] audit: type=1326 audit(1774685535.178:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.048301][ T40] audit: type=1326 audit(1774685535.178:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.056024][ T40] audit: type=1326 audit(1774685535.188:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.065509][ T40] audit: type=1326 audit(1774685535.188:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.076272][ T40] audit: type=1326 audit(1774685535.188:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2839c799 code=0x7ffc0000 [ 143.084658][ T40] audit: type=1326 audit(1774685535.188:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e2839c42b code=0x7ffc0000 [ 143.222766][ T9776] xt_hashlimit: max too large, truncated to 1048576 [ 143.225439][ T9776] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 143.268052][ T9780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.803886][ T9786] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.808349][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1056'. [ 143.843853][ T9794] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.848631][ T9795] program syz.5.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.876470][ T9804] overlayfs: missing 'lowerdir' [ 143.882613][ T9804] overlayfs: missing 'lowerdir' [ 143.923535][ T9810] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=9810 comm=syz.5.1060 [ 143.938704][ T63] Bluetooth: hci4: command tx timeout [ 144.008124][ T9819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.244878][ T9827] vxlan0: entered promiscuous mode [ 144.246555][ T9827] vxlan0: entered allmulticast mode [ 144.248543][ T101] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.255258][ T101] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.260374][ T101] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.263191][ T101] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.291327][ T9829] hfsplus: unable to find HFS+ superblock [ 144.520150][ T9831] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.524647][ T9831] block device autoloading is deprecated and will be removed. [ 144.625303][ T9849] veth1_to_batadv: entered promiscuous mode [ 144.655351][ T9851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9851 comm=syz.6.1073 [ 144.670622][ T9852] geneve2: entered promiscuous mode [ 144.672338][ T9852] geneve2: entered allmulticast mode [ 144.675325][ T1204] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.688417][ T1204] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.692368][ T1204] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.695186][ T1204] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.980565][ T9874] xfrm0 speed is unknown, defaulting to 1000 [ 145.788762][ T9039] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 145.894865][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1085'. [ 145.898485][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1085'. [ 145.938714][ T9039] usb 9-1: Using ep0 maxpacket: 8 [ 145.941580][ T9039] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.944747][ T9039] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.947579][ T9039] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 145.951616][ T9039] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 145.955071][ T9039] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.958033][ T9039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.963887][ T9901] hpfs: hpfs_map_sector(): read error [ 145.968494][ T9039] hub 9-1:1.0: bad descriptor, ignoring hub [ 145.970578][ T9039] hub 9-1:1.0: probe with driver hub failed with error -5 [ 145.973127][ T9039] cdc_wdm 9-1:1.0: skipping garbage [ 145.974798][ T9039] cdc_wdm 9-1:1.0: skipping garbage [ 145.978936][ T9039] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 145.981451][ T9039] cdc_wdm 9-1:1.0: Unknown control protocol [ 146.009020][ T63] Bluetooth: hci4: command tx timeout [ 146.093195][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1091'. [ 146.114490][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 146.270461][ T4156] usb 9-1: USB disconnect, device number 9 [ 146.270570][ T9886] cdc_wdm 9-1:1.0: Error autopm - -16 [ 146.297265][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1094'. [ 146.414823][ T9932] CIFS mount error: No usable UNC path provided in device string! [ 146.414823][ T9932] [ 146.417732][ T9932] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.421176][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'. [ 146.521262][ T1472] IPVS: starting estimator thread 0... [ 146.523935][ T9938] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 146.608702][ T9940] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.665217][ T9956] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 146.665418][ T9955] __vm_enough_memory: pid: 9955, comm: syz.6.1104, bytes: 4503599627366400 not enough memory for the allocation [ 146.726086][ T9960] netlink: 'syz.6.1105': attribute type 3 has an invalid length. [ 146.942295][ T9971] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 146.974788][ T9974] Mount JFS Failure: -22 [ 147.084833][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 147.195561][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 147.198908][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1115'. [ 147.201768][ T9988] netlink: 'syz.6.1115': attribute type 12 has an invalid length. [ 147.202278][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 147.207156][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 147.238887][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 147.242839][ T24] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 147.245431][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 147.249111][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.252261][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 147.255331][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 147.258413][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.263079][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.265927][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.279321][ T24] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 148.073665][T10006] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 148.077023][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 148.077032][ T40] audit: type=1400 audit(1774685540.248:716): avc: denied { relabelto } for pid=9999 comm="syz.3.1119" name="314" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 148.088084][ T40] audit: type=1400 audit(1774685540.258:717): avc: denied { associate } for pid=9999 comm="syz.3.1119" name="314" dev="tmpfs" ino=1674 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 148.098726][ T63] Bluetooth: hci4: command tx timeout [ 148.119789][T10009] netlink: 'syz.6.1120': attribute type 1 has an invalid length. [ 148.172848][T10009] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.176404][T10009] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 148.180959][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.200531][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.239267][T10009] bond1: (slave gretap1): making interface the new active one [ 148.242704][T10009] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 148.250429][T10009] macvlan2: entered promiscuous mode [ 148.253045][T10009] macvlan2: entered allmulticast mode [ 148.257418][T10009] bond1: entered promiscuous mode [ 148.262248][T10009] gretap1: entered promiscuous mode [ 148.264532][T10009] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.268752][T10009] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 148.273279][T10009] bond1: left promiscuous mode [ 148.274818][T10009] gretap1: left promiscuous mode [ 148.368215][ T40] audit: type=1400 audit(1774685540.538:718): avc: denied { ioctl } for pid=10020 comm="syz.4.1124" path="socket:[40237]" dev="sockfs" ino=40237 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.398071][T10027] netlink: 'syz.4.1126': attribute type 63 has an invalid length. [ 148.678949][ T9039] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 148.740477][ T10] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 148.840150][ T9039] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 148.842848][ T9039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.846368][ T9039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.849757][ T9039] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.853845][ T9039] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.856781][ T9039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.860999][ T9039] usb 9-1: config 0 descriptor?? [ 148.879899][ T40] audit: type=1400 audit(1774685541.048:719): avc: denied { remove_name } for pid=5930 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 148.888512][ T40] audit: type=1400 audit(1774685541.058:720): avc: denied { rmdir } for pid=5930 comm="syz-executor" name="314" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 148.900221][ T10] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 148.902843][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.906491][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.909948][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.913980][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.916884][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.921929][ T10] usb 11-1: config 0 descriptor?? [ 149.267934][ T9039] hid_parser_main: 4086 callbacks suppressed [ 149.267947][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.273151][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.275524][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.277890][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.280336][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.282734][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.285147][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.287504][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.289978][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.292348][ T9039] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.304983][ T9039] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 149.338849][ T10] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 149.531946][T10032] FAULT_INJECTION: forcing a failure. [ 149.531946][T10032] name failslab, interval 1, probability 0, space 0, times 1 [ 149.532938][ T1472] usb 11-1: USB disconnect, device number 2 [ 149.535919][T10032] CPU: 2 UID: 0 PID: 10032 Comm: syz.4.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.535937][T10032] Tainted: [L]=SOFTLOCKUP [ 149.535941][T10032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.535947][T10032] Call Trace: [ 149.535952][T10032] [ 149.535957][T10032] dump_stack_lvl+0x100/0x190 [ 149.535992][T10032] should_fail_ex.cold+0x5/0xa [ 149.536007][T10032] ? tomoyo_realpath_from_path+0xb6/0x690 [ 149.536032][T10032] should_failslab+0xc2/0x120 [ 149.536044][T10032] __kmalloc_noprof+0xe0/0x850 [ 149.536064][T10032] tomoyo_realpath_from_path+0xb6/0x690 [ 149.536085][T10032] tomoyo_path_number_perm+0x23c/0x580 [ 149.536099][T10032] ? tomoyo_path_number_perm+0x22e/0x580 [ 149.536119][T10032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.536151][T10032] ? find_held_lock+0x2b/0x80 [ 149.536166][T10032] ? __fget_files+0x215/0x3d0 [ 149.536177][T10032] ? hook_file_ioctl_common+0x146/0x410 [ 149.536191][T10032] ? __fget_files+0x21f/0x3d0 [ 149.536206][T10032] security_file_ioctl+0xd3/0x230 [ 149.536223][T10032] __x64_sys_ioctl+0xb7/0x210 [ 149.536241][T10032] do_syscall_64+0x106/0xf80 [ 149.536265][T10032] ? clear_bhb_loop+0x40/0x90 [ 149.536279][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.536291][T10032] RIP: 0033:0x7fc0f339c799 [ 149.536301][T10032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.536312][T10032] RSP: 002b:00007fc0f42e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.536323][T10032] RAX: ffffffffffffffda RBX: 00007fc0f3615fa0 RCX: 00007fc0f339c799 [ 149.536330][T10032] RDX: 00002000000000c0 RSI: 00000000400c4808 RDI: 0000000000000004 [ 149.536337][T10032] RBP: 00007fc0f42e9090 R08: 0000000000000000 R09: 0000000000000000 [ 149.536343][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.536349][T10032] R13: 00007fc0f3616038 R14: 00007fc0f3615fa0 R15: 00007fffa53c9cb8 [ 149.536363][T10032] [ 149.536368][T10032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.621052][ T6017] usb 9-1: USB disconnect, device number 10 [ 149.759588][ T10] usb 10-1: USB disconnect, device number 7 [ 150.187824][ T40] audit: type=1400 audit(1774685542.358:721): avc: denied { bind } for pid=10075 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.206347][ T24] IPVS: starting estimator thread 0... [ 150.250398][T10075] delete_channel: no stack [ 150.289046][T10081] IPVS: using max 42 ests per chain, 100800 per kthread [ 150.289369][T10085] ip6t_srh: unknown srh match flags 4000 [ 150.301681][T10085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.383544][T10091] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 150.429930][ T40] audit: type=1400 audit(1774685542.608:722): avc: denied { read } for pid=10092 comm="syz.4.1144" path="socket:[39553]" dev="sockfs" ino=39553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 150.462579][ T40] audit: type=1400 audit(1774685542.638:723): avc: denied { watch_mount } for pid=10094 comm="syz.6.1145" path="/50" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.538873][ T1472] delete_channel: no stack [ 150.748717][ T10] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 150.758712][ T1027] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 150.900625][ T10] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 150.904204][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.909027][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.910741][ T1027] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 150.913567][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.921919][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.925277][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.928673][ T1027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.929987][ T10] usb 11-1: config 0 descriptor?? [ 150.932229][ T1027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.937509][ T1027] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.945768][ T1027] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.950046][ T1027] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.954521][ T1027] usb 9-1: config 0 descriptor?? [ 151.155657][T10103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10103 comm=syz.5.1149 [ 151.260100][T10112] __nla_validate_parse: 4 callbacks suppressed [ 151.260156][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1151'. [ 151.351908][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 151.368091][ T1027] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.377848][T10122] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1154'. [ 151.453553][T10127] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1155'. [ 151.610353][T10097] FAULT_INJECTION: forcing a failure. [ 151.610353][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 151.616153][T10097] CPU: 2 UID: 0 PID: 10097 Comm: syz.4.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.616183][T10097] Tainted: [L]=SOFTLOCKUP [ 151.616189][T10097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.616199][T10097] Call Trace: [ 151.616205][T10097] [ 151.616212][T10097] dump_stack_lvl+0x100/0x190 [ 151.616245][T10097] should_fail_ex.cold+0x5/0xa [ 151.616270][T10097] ? tomoyo_encode2+0xfb/0x3c0 [ 151.616294][T10097] should_failslab+0xc2/0x120 [ 151.616318][T10097] __kmalloc_noprof+0xe0/0x850 [ 151.616342][T10097] ? d_absolute_path+0x136/0x1b0 [ 151.616365][ T6017] usb 11-1: USB disconnect, device number 3 [ 151.616373][T10097] tomoyo_encode2+0xfb/0x3c0 [ 151.616403][T10097] tomoyo_encode+0x29/0x50 [ 151.616428][T10097] tomoyo_realpath_from_path+0x18c/0x690 [ 151.616460][T10097] tomoyo_path_number_perm+0x23c/0x580 [ 151.616483][T10097] ? tomoyo_path_number_perm+0x22e/0x580 [ 151.616503][T10097] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.616548][T10097] ? find_held_lock+0x2b/0x80 [ 151.616568][T10097] ? __fget_files+0x215/0x3d0 [ 151.616586][T10097] ? hook_file_ioctl_common+0x146/0x410 [ 151.616607][T10097] ? __fget_files+0x21f/0x3d0 [ 151.616629][T10097] security_file_ioctl+0xd3/0x230 [ 151.616654][T10097] __x64_sys_ioctl+0xb7/0x210 [ 151.616676][T10097] do_syscall_64+0x106/0xf80 [ 151.616693][T10097] ? clear_bhb_loop+0x40/0x90 [ 151.616707][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.616719][T10097] RIP: 0033:0x7fc0f339c799 [ 151.616729][T10097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.616740][T10097] RSP: 002b:00007fc0f42e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.616750][T10097] RAX: ffffffffffffffda RBX: 00007fc0f3615fa0 RCX: 00007fc0f339c799 [ 151.616757][T10097] RDX: 00002000000000c0 RSI: 00000000400c4808 RDI: 0000000000000004 [ 151.616764][T10097] RBP: 00007fc0f42e9090 R08: 0000000000000000 R09: 0000000000000000 [ 151.616770][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.616777][T10097] R13: 00007fc0f3616038 R14: 00007fc0f3615fa0 R15: 00007fffa53c9cb8 [ 151.616792][T10097] [ 151.616807][T10097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.706869][ T1472] usb 9-1: USB disconnect, device number 11 [ 151.798421][T10139] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1159'. [ 151.863420][ T40] audit: type=1400 audit(1774685544.038:724): avc: denied { mount } for pid=10141 comm="syz.5.1160" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 151.864017][T10142] fuse: Bad value for 'user_id' [ 151.870459][ T40] audit: type=1400 audit(1774685544.038:725): avc: denied { mounton } for pid=10141 comm="syz.5.1160" path="/122/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 151.872091][T10142] fuse: Bad value for 'user_id' [ 151.881309][T10142] fuse: Bad value for 'user_id' [ 151.882974][T10142] fuse: Bad value for 'user_id' [ 151.884707][T10142] fuse: Bad value for 'user_id' [ 151.886249][T10142] fuse: Bad value for 'user_id' [ 151.887975][T10142] fuse: Bad value for 'user_id' [ 151.889722][T10142] fuse: Bad value for 'user_id' [ 151.891512][T10142] fuse: Bad value for 'user_id' [ 151.893150][T10142] fuse: Bad value for 'user_id' [ 151.894853][T10142] fuse: Bad value for 'user_id' [ 151.896409][T10142] fuse: Bad value for 'user_id' [ 151.898129][T10142] fuse: Bad value for 'user_id' [ 151.899976][T10142] fuse: Bad value for 'user_id' [ 151.901686][T10142] fuse: Bad value for 'user_id' [ 151.903327][T10142] fuse: Bad value for 'user_id' [ 151.905020][T10142] fuse: Bad value for 'user_id' [ 151.906571][T10142] fuse: Bad value for 'user_id' [ 151.908312][T10142] fuse: Bad value for 'user_id' [ 151.909958][T10142] fuse: Bad value for 'user_id' [ 151.911651][T10142] fuse: Bad value for 'user_id' [ 151.913200][T10142] fuse: Bad value for 'user_id' [ 151.915189][T10142] fuse: Bad value for 'user_id' [ 151.916764][T10142] fuse: Bad value for 'user_id' [ 151.918531][T10142] fuse: Bad value for 'user_id' [ 151.920195][T10142] fuse: Bad value for 'user_id' [ 151.921902][T10142] fuse: Bad value for 'user_id' [ 151.923457][T10142] fuse: Bad value for 'user_id' [ 151.925230][T10142] fuse: Bad value for 'user_id' [ 151.925736][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 151.926789][T10142] fuse: Bad value for 'user_id' [ 151.926931][T10142] fuse: Bad value for 'user_id' [ 151.933697][T10142] fuse: Bad value for 'user_id' [ 151.935755][T10142] fuse: Bad value for 'user_id' [ 151.937402][T10142] fuse: Bad value for 'user_id' [ 151.939380][T10142] fuse: Bad value for 'user_id' [ 151.940942][T10142] fuse: Bad value for 'user_id' [ 151.942623][T10142] fuse: Bad value for 'user_id' [ 151.944204][T10142] fuse: Bad value for 'user_id' [ 151.946022][T10142] fuse: Bad value for 'user_id' [ 151.947724][T10142] fuse: Bad value for 'user_id' [ 151.949823][T10142] fuse: Bad value for 'user_id' [ 151.951396][T10142] fuse: Bad value for 'user_id' [ 151.953076][T10142] fuse: Bad value for 'user_id' [ 151.954628][T10142] fuse: Bad value for 'user_id' [ 151.956400][T10142] fuse: Bad value for 'user_id' [ 151.958007][T10142] fuse: Bad value for 'user_id' [ 151.960198][T10142] fuse: Bad value for 'user_id' [ 151.961813][T10142] fuse: Bad value for 'user_id' [ 151.963507][T10142] fuse: Bad value for 'user_id' [ 151.965051][T10142] fuse: Bad value for 'user_id' [ 151.966809][T10142] fuse: Bad value for 'user_id' [ 151.968405][T10142] fuse: Bad value for 'user_id' [ 151.970292][T10142] fuse: Bad value for 'user_id' [ 151.971861][T10142] fuse: Bad value for 'user_id' [ 151.973787][T10142] fuse: Bad value for 'user_id' [ 151.975346][T10142] fuse: Bad value for 'user_id' [ 151.977487][T10142] fuse: Bad value for 'user_id' [ 151.979279][T10142] fuse: Bad value for 'user_id' [ 151.980967][T10142] fuse: Bad value for 'user_id' [ 151.982518][T10142] fuse: Bad value for 'user_id' [ 151.984199][T10142] fuse: Bad value for 'user_id' [ 151.985746][T10142] fuse: Bad value for 'user_id' [ 151.987556][T10142] fuse: Bad value for 'user_id' [ 151.989145][T10142] fuse: Bad value for 'user_id' [ 151.990821][T10142] fuse: Bad value for 'user_id' [ 151.992377][T10142] fuse: Bad value for 'user_id' [ 152.027469][T10150] overlay: ./file0 is not a directory [ 152.074060][T10159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1166'. [ 152.076922][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1166'. [ 152.079942][T10159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1166'. [ 152.082759][T10159] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1166'. [ 152.102798][T10159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.147065][T10163] netlink: zone id is out of range [ 152.150082][T10163] netlink: zone id is out of range [ 152.152324][T10163] netlink: zone id is out of range [ 152.153978][T10163] netlink: zone id is out of range [ 152.155613][T10163] netlink: zone id is out of range [ 152.157273][T10163] netlink: zone id is out of range [ 152.159438][T10163] netlink: zone id is out of range [ 152.161163][T10163] netlink: zone id is out of range [ 152.162934][T10163] netlink: zone id is out of range [ 152.260648][T10166] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 152.311439][T10179] tipc: Started in network mode [ 152.313637][T10179] tipc: Node identity 4, cluster identity 4711 [ 152.316272][T10179] tipc: Node number set to 4 [ 152.326643][T10179] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.332002][T10179] overlayfs: failed to set xattr on upper [ 152.334188][T10179] overlayfs: ...falling back to redirect_dir=nofollow. [ 152.336371][T10179] overlayfs: ...falling back to metacopy=off. [ 152.338348][T10179] overlayfs: ...falling back to index=off. [ 152.340636][T10179] overlayfs: ...falling back to uuid=null. [ 152.387670][T10183] ªªªªªª: renamed from vlan0 (while UP) [ 152.459921][T10185] bond2: (slave bond_slave_1): Device is not our slave [ 152.462310][T10185] bond2: option active_slave: invalid value (bond_slave_1) [ 152.465738][T10185] bond2 (unregistering): Released all slaves [ 152.498725][ T1472] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 152.515888][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1177'. [ 152.650139][ T1472] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 152.652705][ T1472] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.656100][ T1472] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.659910][ T1472] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.663989][ T1472] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.666978][ T1472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.670898][ T1472] usb 10-1: config 0 descriptor?? [ 152.795818][T10214] devtmpfs: Cannot change global quota limit on remount [ 152.918677][ T840] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 153.070025][ T840] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 153.072600][ T840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.074900][T10166] netlink: 'syz.5.1169': attribute type 10 has an invalid length. [ 153.075989][ T840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.076003][ T840] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.076025][ T840] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.080254][T10166] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c02064b6, magic 64 != 6b] [ 153.081610][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.089584][ T840] usb 9-1: config 0 descriptor?? [ 153.096145][T10166] bond0: Error: Cannot enslave bond to itself. [ 153.106135][ T1472] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 153.454662][ T63] block nbd5: Receive control failed (result -107) [ 153.459068][ T63] [ 153.459871][ T63] ====================================================== [ 153.462072][ T63] WARNING: possible circular locking dependency detected [ 153.464250][ T63] syzkaller #0 Tainted: G L [ 153.466199][ T63] ------------------------------------------------------ [ 153.468370][ T63] kworker/u33:0/63 is trying to acquire lock: [ 153.470283][ T63] ffff88803978b560 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 153.473081][ T63] [ 153.473081][ T63] but task is already holding lock: [ 153.475364][ T63] ffff88803c632870 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 153.478068][ T63] [ 153.478068][ T63] which lock already depends on the new lock. [ 153.478068][ T63] [ 153.481232][ T63] [ 153.481232][ T63] the existing dependency chain (in reverse order) is: [ 153.484005][ T63] [ 153.484005][ T63] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 153.486373][ T63] __mutex_lock+0x1a2/0x1b90 [ 153.488013][ T63] nbd_queue_rq+0x428/0x1080 [ 153.489625][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 153.491549][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 153.493677][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 153.495705][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 153.497460][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 153.499312][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 153.501173][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 153.502868][ T63] __submit_bio+0x584/0x6c0 [ 153.504135][T10244] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20003 [ 153.504467][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 153.505786][ T840] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 153.512679][ T63] submit_bio_noacct+0xd17/0x2010 [ 153.514422][ T63] submit_bh_wbc+0x59c/0x770 [ 153.516035][ T63] block_read_full_folio+0x264/0x8e0 [ 153.518121][ T63] filemap_read_folio+0xfc/0x3b0 [ 153.519920][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 153.521693][ T63] read_part_sector+0xd1/0x370 [ 153.523371][ T63] adfspart_check_ICS+0x93/0x910 [ 153.525076][ T63] bdev_disk_changed+0x7f8/0xc80 [ 153.526789][ T63] blkdev_get_whole+0x187/0x290 [ 153.528527][ T63] bdev_open+0x2c7/0xe40 [ 153.530035][ T63] blkdev_open+0x34e/0x4f0 [ 153.531615][ T63] do_dentry_open+0x6d8/0x1660 [ 153.533284][ T63] vfs_open+0x82/0x3f0 [ 153.534731][ T63] path_openat+0x208c/0x31a0 [ 153.536367][ T63] do_file_open+0x20e/0x430 [ 153.538007][ T63] do_sys_openat2+0x10d/0x1e0 [ 153.539667][ T63] __x64_sys_openat+0x12d/0x210 [ 153.541365][ T63] do_syscall_64+0x106/0xf80 [ 153.543048][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.545044][ T63] [ 153.545044][ T63] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 153.547329][ T63] __mutex_lock+0x1a2/0x1b90 [ 153.548944][ T63] nbd_queue_rq+0xba/0x1080 [ 153.550529][ T63] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 153.552466][ T63] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 153.554597][ T63] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 153.556634][ T63] blk_mq_run_hw_queue+0x23c/0x670 [ 153.558427][ T63] blk_mq_dispatch_list+0x51d/0x1360 [ 153.560265][ T63] blk_mq_flush_plug_list+0x130/0x600 [ 153.562137][ T63] __blk_flush_plug+0x2c4/0x4b0 [ 153.563830][ T63] __submit_bio+0x584/0x6c0 [ 153.565421][ T63] submit_bio_noacct_nocheck+0x562/0xc10 [ 153.567408][ T63] submit_bio_noacct+0xd17/0x2010 [ 153.569143][ T63] submit_bh_wbc+0x59c/0x770 [ 153.570825][ T63] block_read_full_folio+0x264/0x8e0 [ 153.572646][ T63] filemap_read_folio+0xfc/0x3b0 [ 153.574301][ T63] do_read_cache_folio+0x2d7/0x6b0 [ 153.576038][ T63] read_part_sector+0xd1/0x370 [ 153.577750][ T63] adfspart_check_ICS+0x93/0x910 [ 153.579478][ T63] bdev_disk_changed+0x7f8/0xc80 [ 153.581191][ T63] blkdev_get_whole+0x187/0x290 [ 153.582889][ T63] bdev_open+0x2c7/0xe40 [ 153.584408][ T63] blkdev_open+0x34e/0x4f0 [ 153.585968][ T63] do_dentry_open+0x6d8/0x1660 [ 153.587862][ T63] vfs_open+0x82/0x3f0 [ 153.589843][ T63] path_openat+0x208c/0x31a0 [ 153.591655][ T63] do_file_open+0x20e/0x430 [ 153.593255][ T63] do_sys_openat2+0x10d/0x1e0 [ 153.594896][ T63] __x64_sys_openat+0x12d/0x210 [ 153.596603][ T63] do_syscall_64+0x106/0xf80 [ 153.598264][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.600283][ T63] [ 153.600283][ T63] -> #4 (set->srcu){.+.+}-{0:0}: [ 153.602521][ T63] __synchronize_srcu+0xa2/0x300 [ 153.604242][ T63] blk_mq_quiesce_queue+0x149/0x1c0 [ 153.606036][ T63] elevator_switch+0x17b/0x7e0 [ 153.607745][ T63] elevator_change+0x352/0x530 [ 153.609414][ T63] elevator_set_default+0x29e/0x360 [ 153.611216][ T63] blk_register_queue+0x412/0x590 [ 153.613198][ T63] __add_disk+0x73f/0xe40 [ 153.614747][ T63] add_disk_fwnode+0x118/0x5c0 [ 153.616433][ T63] nbd_dev_add+0x77a/0xb10 [ 153.618034][ T63] nbd_init+0x291/0x2b0 [ 153.619564][ T63] do_one_initcall+0x11d/0x760 [ 153.621231][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 153.623040][ T63] kernel_init+0x1f/0x1e0 [ 153.624583][ T63] ret_from_fork+0x754/0xd80 [ 153.626202][ T63] ret_from_fork_asm+0x1a/0x30 [ 153.628051][ T63] [ 153.628051][ T63] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 153.630424][ T63] __mutex_lock+0x1a2/0x1b90 [ 153.632043][ T63] elevator_change+0x1bc/0x530 [ 153.633700][ T63] elevator_set_none+0x92/0xf0 [ 153.635364][ T63] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 153.637391][ T63] nbd_start_device+0x1a6/0xbd0 [ 153.639092][ T63] nbd_genl_connect+0xff2/0x1a40 [ 153.640796][ T63] genl_family_rcv_msg_doit+0x214/0x300 [ 153.642694][ T63] genl_rcv_msg+0x560/0x800 [ 153.644257][ T63] netlink_rcv_skb+0x159/0x420 [ 153.645916][ T63] genl_rcv+0x28/0x40 [ 153.647401][ T63] netlink_unicast+0x5aa/0x870 [ 153.649061][ T63] netlink_sendmsg+0x8b0/0xda0 [ 153.650698][ T63] ____sys_sendmsg+0x9e1/0xb70 [ 153.652362][ T63] ___sys_sendmsg+0x190/0x1e0 [ 153.653994][ T63] __sys_sendmsg+0x170/0x220 [ 153.655620][ T63] do_syscall_64+0x106/0xf80 [ 153.657296][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.659317][ T63] [ 153.659317][ T63] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 153.661989][ T63] blk_alloc_queue+0x610/0x790 [ 153.663660][ T63] blk_mq_alloc_queue+0x174/0x290 [ 153.665400][ T63] __blk_mq_alloc_disk+0x29/0x120 [ 153.667175][ T63] nbd_dev_add+0x492/0xb10 [ 153.668739][ T63] nbd_init+0x291/0x2b0 [ 153.670216][ T63] do_one_initcall+0x11d/0x760 [ 153.671888][ T63] kernel_init_freeable+0x6e5/0x7a0 [ 153.673673][ T63] kernel_init+0x1f/0x1e0 [ 153.675214][ T63] ret_from_fork+0x754/0xd80 [ 153.676820][ T63] ret_from_fork_asm+0x1a/0x30 [ 153.678507][ T63] [ 153.678507][ T63] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 153.680790][ T63] fs_reclaim_acquire+0xc4/0x100 [ 153.682502][ T63] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 153.684486][ T63] __alloc_skb+0x140/0x710 [ 153.686042][ T63] tcp_stream_alloc_skb+0x34/0x660 [ 153.687819][ T63] tcp_sendmsg_locked+0x1396/0x45e0 [ 153.689596][ T63] tcp_sendmsg+0x2e/0x50 [ 153.691108][ T63] inet_sendmsg+0xb9/0x140 [ 153.692675][ T63] sock_write_iter+0x4ea/0x5a0 [ 153.694294][ T63] vfs_write+0x6ac/0x1070 [ 153.695811][ T63] ksys_write+0x1f8/0x250 [ 153.697353][ T63] do_syscall_64+0x106/0xf80 [ 153.698976][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.700981][ T63] [ 153.700981][ T63] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 153.702059][T10207] FAULT_INJECTION: forcing a failure. [ 153.702059][T10207] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.703356][ T63] __lock_acquire+0x14b8/0x2630 [ 153.707448][T10207] CPU: 3 UID: 0 PID: 10207 Comm: syz.4.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.707467][T10207] Tainted: [L]=SOFTLOCKUP [ 153.707471][T10207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.707477][T10207] Call Trace: [ 153.707482][T10207] [ 153.707486][T10207] dump_stack_lvl+0x100/0x190 [ 153.707506][T10207] should_fail_ex.cold+0x5/0xa [ 153.707520][T10207] _copy_from_user+0x2e/0xd0 [ 153.707532][T10207] hiddev_ioctl+0x514/0x15b0 [ 153.707543][T10207] ? __pfx_hiddev_ioctl+0x10/0x10 [ 153.707557][T10207] ? selinux_file_ioctl+0x139/0x290 [ 153.707572][T10207] ? selinux_file_ioctl+0xb4/0x290 [ 153.707588][T10207] ? __pfx_hiddev_ioctl+0x10/0x10 [ 153.707598][T10207] __x64_sys_ioctl+0x18e/0x210 [ 153.707615][T10207] do_syscall_64+0x106/0xf80 [ 153.707631][T10207] ? clear_bhb_loop+0x40/0x90 [ 153.707643][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.707654][T10207] RIP: 0033:0x7fc0f339c799 [ 153.707662][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.707673][T10207] RSP: 002b:00007fc0f42e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.707684][T10207] RAX: ffffffffffffffda RBX: 00007fc0f3615fa0 RCX: 00007fc0f339c799 [ 153.707690][T10207] RDX: 00002000000000c0 RSI: 00000000400c4808 RDI: 0000000000000004 [ 153.707697][T10207] RBP: 00007fc0f42e9090 R08: 0000000000000000 R09: 0000000000000000 [ 153.707703][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.707709][T10207] R13: 00007fc0f3616038 R14: 00007fc0f3615fa0 R15: 00007fffa53c9cb8 [ 153.707719][T10207] [ 153.708100][ T6000] usb 9-1: USB disconnect, device number 12 [ 153.709115][ T63] lock_acquire+0x1cf/0x380 [ 153.709130][ T63] lock_sock_nested+0x41/0xf0 [ 153.709144][ T63] inet_shutdown+0x67/0x410 [ 153.709160][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 153.709175][ T63] recv_work+0x5fb/0x8c0 [ 153.770942][ T63] process_one_work+0xa23/0x19a0 [ 153.772642][ T63] worker_thread+0x5ef/0xe50 [ 153.774231][ T63] kthread+0x370/0x450 [ 153.775692][ T63] ret_from_fork+0x754/0xd80 [ 153.777317][ T63] ret_from_fork_asm+0x1a/0x30 [ 153.778976][ T63] [ 153.778976][ T63] other info that might help us debug this: [ 153.778976][ T63] [ 153.782104][ T63] Chain exists of: [ 153.782104][ T63] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 153.782104][ T63] [ 153.785917][ T63] Possible unsafe locking scenario: [ 153.785917][ T63] [ 153.788250][ T63] CPU0 CPU1 [ 153.789922][ T63] ---- ---- [ 153.791602][ T63] lock(&nsock->tx_lock); [ 153.793011][ T63] lock(&cmd->lock); [ 153.795041][ T63] lock(&nsock->tx_lock); [ 153.797195][ T63] lock(sk_lock-AF_INET); [ 153.798602][ T63] [ 153.798602][ T63] *** DEADLOCK *** [ 153.798602][ T63] [ 153.801103][ T63] 3 locks held by kworker/u33:0/63: [ 153.802726][ T63] #0: ffff88802a07e148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 153.806024][ T63] #1: ffffc90000b0fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 153.809479][ T63] #2: ffff88803c632870 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 153.812309][ T63] [ 153.812309][ T63] stack backtrace: [ 153.814147][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.814164][ T63] Tainted: [L]=SOFTLOCKUP [ 153.814167][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.814175][ T63] Workqueue: nbd5-recv recv_work [ 153.814186][ T63] Call Trace: [ 153.814191][ T63] [ 153.814196][ T63] dump_stack_lvl+0x100/0x190 [ 153.814214][ T63] print_circular_bug.cold+0x178/0x1c7 [ 153.814232][ T63] check_noncircular+0x146/0x160 [ 153.814251][ T63] __lock_acquire+0x14b8/0x2630 [ 153.814262][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 153.814283][ T63] lock_acquire+0x1cf/0x380 [ 153.814292][ T63] ? inet_shutdown+0x67/0x410 [ 153.814310][ T63] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 153.814327][ T63] lock_sock_nested+0x41/0xf0 [ 153.814341][ T63] ? inet_shutdown+0x67/0x410 [ 153.814358][ T63] inet_shutdown+0x67/0x410 [ 153.814375][ T63] nbd_mark_nsock_dead+0xae/0x5c0 [ 153.814391][ T63] recv_work+0x5fb/0x8c0 [ 153.814401][ T63] ? __lock_acquire+0xd73/0x2630 [ 153.814411][ T63] ? __pfx_recv_work+0x10/0x10 [ 153.814421][ T63] ? debug_object_deactivate+0x2e4/0x3b0 [ 153.814440][ T63] ? rcu_is_watching+0x12/0xc0 [ 153.814455][ T63] process_one_work+0xa23/0x19a0 [ 153.814469][ T63] ? __pfx_process_one_work+0x10/0x10 [ 153.814482][ T63] ? __pfx_recv_work+0x10/0x10 [ 153.814492][ T63] worker_thread+0x5ef/0xe50 [ 153.814506][ T63] ? kthread+0x13a/0x450 [ 153.814515][ T63] ? __pfx_worker_thread+0x10/0x10 [ 153.814526][ T63] kthread+0x370/0x450 [ 153.814535][ T63] ? __pfx_kthread+0x10/0x10 [ 153.814546][ T63] ret_from_fork+0x754/0xd80 [ 153.814558][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 153.814569][ T63] ? __switch_to+0x7b4/0x1120 [ 153.814582][ T63] ? __pfx_kthread+0x10/0x10 [ 153.814592][ T63] ret_from_fork_asm+0x1a/0x30 [ 153.814608][ T63] [ 153.885720][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 153.885732][ T40] audit: type=1400 audit(1774685546.048:733): avc: denied { write } for pid=5911 comm="syz-executor" path="pipe:[1958]" dev="pipefs" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.216206][ T101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.298434][T10173] block nbd5: shutting down sockets [ 154.328790][ T6936] usb 10-1: USB disconnect, device number 8 [ 154.346566][ T101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.474361][ T101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.515458][ T101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.594724][ T101] bridge_slave_1: left allmulticast mode [ 154.596516][ T101] bridge_slave_1: left promiscuous mode [ 154.598376][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.601501][ T101] bridge_slave_0: left allmulticast mode [ 154.603323][ T101] bridge_slave_0: left promiscuous mode [ 154.605186][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.638866][ T101] bond1 (unregistering): (slave gretap1): Releasing active interface [ 154.681985][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.685301][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.688349][ T101] bond0 (unregistering): Released all slaves [ 154.692090][ T101] bond1 (unregistering): Released all slaves [ 154.960438][ T101] hsr_slave_0: left promiscuous mode [ 154.962794][ T101] hsr_slave_1: left promiscuous mode [ 154.964976][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.967757][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.010778][ T101] team0 (unregistering): Port device team_slave_1 removed [ 155.015165][ T101] team0 (unregistering): Port device team_slave_0 removed [ 155.352801][ T101] IPVS: stop unused estimator thread 0... [ 155.492302][ T101] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.495588][ T101] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 155.583603][ T101] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.587901][ T101] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 155.642657][ T101] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.646208][ T101] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 155.700967][ T101] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.704228][ T101] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 155.811467][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.815253][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.884291][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.888548][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.942263][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.945518][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.022557][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.025785][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.123093][ T101] bridge_slave_1: left allmulticast mode [ 156.125003][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.129175][ T101] bridge_slave_0: left allmulticast mode [ 156.131039][ T101] bridge_slave_0: left promiscuous mode [ 156.132884][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.136714][ T101] bridge_slave_1: left allmulticast mode [ 156.138534][ T101] bridge_slave_1: left promiscuous mode [ 156.141910][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.145011][ T101] bridge_slave_0: left allmulticast mode [ 156.146850][ T101] bridge_slave_0: left promiscuous mode [ 156.148856][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.195861][ T101] bond1 (unregistering): (slave geneve2): Releasing active interface [ 156.365802][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.370118][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.373468][ T101] bond0 (unregistering): Released all slaves [ 156.376516][ T101] bond1 (unregistering): Released all slaves [ 156.393346][ T101] dvmrp0 (unregistering): left allmulticast mode [ 156.595824][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.600885][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.605476][ T101] bond0 (unregistering): Released all slaves [ 156.610332][ T101] bond1 (unregistering): Released all slaves [ 156.690645][ T101] tipc: Left network mode [ 157.115861][ T101] hsr_slave_0: left promiscuous mode [ 157.118520][ T101] hsr_slave_1: left promiscuous mode [ 157.120552][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.122883][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.125606][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.127947][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.132867][ T101] hsr_slave_0: left promiscuous mode [ 157.134887][ T101] hsr_slave_1: left promiscuous mode [ 157.140469][ T101] veth1_macvtap: left promiscuous mode [ 157.142224][ T101] veth0_macvtap: left promiscuous mode [ 157.143976][ T101] veth1_vlan: left promiscuous mode [ 157.145650][ T101] veth0_vlan: left promiscuous mode [ 157.147968][ T101] veth1_macvtap: left promiscuous mode [ 157.149897][ T101] veth0_macvtap: left promiscuous mode [ 157.151661][ T101] veth1_vlan: left promiscuous mode [ 157.153324][ T101] veth0_vlan: left promiscuous mode [ 157.227579][ T101] team0 (unregistering): Port device team_slave_1 removed [ 157.238211][ T101] team0 (unregistering): Port device team_slave_0 removed [ 157.265608][ T101] pim6reg (unregistering): left allmulticast mode [ 157.863656][ T101] IPVS: stop unused estimator thread 0...