last executing test programs: 3m45.502946346s ago: executing program 0 (id=334): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f0000000480)) 3m45.5022498s ago: executing program 0 (id=336): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) (async, rerun: 64) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x800}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000600)={0x1, 0x1, 0x0, 0x8, 0x1, 0xdbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x10301, 0x10000}) (async, rerun: 32) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000000)={0x1d, {0x1, 0x0}}) (rerun: 32) 3m44.62095953s ago: executing program 0 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/devices.allow\x00', 0xa8002, 0x48) open_by_handle_at(r1, &(0x7f0000000480)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x4cc0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r2, 0x129, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc60}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x488d0}, 0x40950) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)="78dd6cad2556cb48431357ed4e12c0eeb9494c87297f4197e64e0b96ae5efed2c9db766eb6db46a563ea701c56dd9bed5fea0f735d5aab7d29ed98250d7dfaad319da5cffd2bd2d7617af6738f1e7868abcc900b798999579b11c184486eadd0ef6a66712bdd3eb8388f80dd0a", 0x6d) 3m44.618300599s ago: executing program 0 (id=348): socket$inet(0x2, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={@rand_addr=0x64010101, 0x0, 0x0, 0x60, 0x0, [{@dev}, {@initdev}, {@broadcast}, {@multicast2}, {@multicast1}, {@remote}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='common_pid > 0', 0xe) write$cgroup_subtree(r5, &(0x7f0000000440), 0x5b) tkill(r4, 0x21) 3m44.543061775s ago: executing program 0 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028011000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f00000004c0)='-0', 0x2) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x236}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000540), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) r4 = dup(r1) write(r4, &(0x7f0000000040)='8', 0x1) 3m44.322521655s ago: executing program 0 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="5f28562613", 0x5}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f00000006c0), 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000700)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) mount(0x0, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x24000, 0x0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', &(0x7f0000000340)={0x2100, 0x8, 0x24}, 0x18) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$getregset(0x4204, r5, 0x6, &(0x7f00000008c0)={0x0}) r6 = openat(r4, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x68) (async) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x5819, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@raid={0x0, 0x1958, 0x0, 0x68, 'raid\x00', {'raid0', 0x20, '1 8', 0x20, 0x1, [{0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}}]}}]}) (async) write(r6, &(0x7f0000000200)='27', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = fsopen(&(0x7f0000000740)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x30, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x7, 0x228, 0xe}}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, 0x1ff, 0x1, 0x81, 0x100, 0xff, 0x43120085, r10}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) munlockall() (async) close(r1) 3m44.243381365s ago: executing program 32 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="5f28562613", 0x5}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f00000006c0), 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000700)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) mount(0x0, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x24000, 0x0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', &(0x7f0000000340)={0x2100, 0x8, 0x24}, 0x18) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$getregset(0x4204, r5, 0x6, &(0x7f00000008c0)={0x0}) r6 = openat(r4, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x68) (async) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x5819, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@raid={0x0, 0x1958, 0x0, 0x68, 'raid\x00', {'raid0', 0x20, '1 8', 0x20, 0x1, [{0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}}]}}]}) (async) write(r6, &(0x7f0000000200)='27', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = fsopen(&(0x7f0000000740)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x30, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x7, 0x228, 0xe}}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000840)={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, 0x1ff, 0x1, 0x81, 0x100, 0xff, 0x43120085, r10}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) munlockall() (async) close(r1) 3m26.87255122s ago: executing program 4 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0300000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r4, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000440)=""/222, &(0x7f0000000540)=0x88fe) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084523, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x95}}, './file0\x00'}) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000580)={[{0x6, 0x100, 0x0, 0xfc, 0x65, 0x3, 0x6, 0x9, 0x8, 0x4, 0xb, 0x0, 0x4}, {0x1000, 0x3, 0x36, 0x46, 0x7f, 0xb, 0x7, 0xe4, 0x74, 0x6a, 0x1, 0x0, 0x3ff}, {0xc, 0x3e, 0x0, 0x1, 0x3, 0x4, 0x2, 0x8, 0x8, 0x3, 0x5, 0x9c, 0xd}], 0xe}) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000080)={@remote, @remote, @empty}, &(0x7f00000000c0)=0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 3m26.783093041s ago: executing program 4 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x25219}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0xf0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000300)='TIPC\x00', 0x134040, &(0x7f0000000340)={@align=0x3, {0x5a07, 0x7ff, 0xfff, 0x6}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x7e9464c2}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000480)=""/47) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x300, 0x0, 0x1, 0x9, 0x0, 0x6}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000ac0)=0x9, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000b00)={0x3c}, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000b40)=0x7f, 0x4) sendto$inet6(r3, &(0x7f0000000b80)="c412", 0xffe6, 0x40, &(0x7f0000000bc0)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) syz_clone3(&(0x7f0000000200)={0x180801400, &(0x7f00000002c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x101a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./drv\x00') mount(0x0, &(0x7f0000000600)='dir0\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./drv/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='0000:00:1f.3', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000700)='./drv/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)='\x00'/11, 0x24) sendfile(r5, r5, 0x0, 0x9) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r7) 3m26.661966564s ago: executing program 4 (id=606): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000003a000701fefeffff0000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4c044}, 0xc000) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x400080, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b80)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_async', 0x0, 0x86) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x3ff, 0x10}, 0xc) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x403}}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000c00), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r10, 0x80106f53, &(0x7f0000000c40)={0x4, &(0x7f0000000c80)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @buffer={"32b555889142a41ed045b3c734c839ba999e105f8f20f05915a84e2763edb306", 0x20}, 0xfff}, {0x23, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000780)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f00000008c0), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000900), 0x4) r11 = fcntl$dupfd(r9, 0x0, r9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000940)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b00)=@gcm_128={{0x304, 0x38}, "45e43f00000000f0", "e6000000000000000000000200", '\x00', "ae7ebf0500e38175"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r11) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x1, &(0x7f0000000080)=@raw=[@generic={0xa, 0x6, 0xf, 0x6, 0xff}], &(0x7f00000000c0)='syzkaller\x00', 0xfac, 0xfa, &(0x7f0000000200)=""/250, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x16, r0, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x8, 0x6, 0x4}, 0x10, 0x0, r1, 0x4, &(0x7f0000000700)=[r3, r4, r5, r6, r7, 0x1, r8], &(0x7f0000000740)=[{0x0, 0x1, 0xd, 0xa}, {0x5, 0x1, 0x9, 0xb}, {0x0, 0x3, 0x6, 0x8}, {0x5, 0x2, 0x6, 0x4}], 0x10, 0x4cec}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m25.99219153s ago: executing program 4 (id=615): r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xd5848, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18225}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x50}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000002c0)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x5, 0xa, 0x0, 0x6, 0x20000, 0x0}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0x3f) 3m25.932435966s ago: executing program 4 (id=617): getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) dup(r0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x20, 0x3, 0x308, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000500], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x19, 0x201, 'veth1_to_batadv\x00', 'vlan1\x00', 'team_slave_0\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x8bcf948d0a58b2ac, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0xe8, 0x138, [], [@common=@nflog={'nflog\x00', 0x50, {{0xffffffff, 0x18, 0x8, 0x0, 0x0, "2b08cae4c3ccb2bf236848cc3abbfe4c0d3c6bec464415beebb465095ab1762dc8682433c21200639f0c79626aaff6509bce2e6bf8ec62f8af6f38a9d2235a53"}}}], @common=@log={'log\x00', 0x28, {{0x7f, "fef6fe311029b10c0eee53f04c1a69de4d79712c9ff206e2277a0c99a876", 0x5}}}}, {0x3, 0x10, 0x16, 'vcan0\x00', 'veth0_to_team\x00', 'tunl0\x00', 'pimreg0\x00', @multicast, [0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x70, 0xf7, 'pimreg1\x00', 'veth1_to_bridge\x00', 'bridge0\x00', 'ip6_vti0\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x380) 3m25.692836923s ago: executing program 4 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010005000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 3m25.636765663s ago: executing program 33 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010005000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 51.740738204s ago: executing program 3 (id=2282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r3, &(0x7f0000000200)='sessname=s1dev/ram0 ', 0x14) 51.491981764s ago: executing program 3 (id=2286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffd}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 51.253484021s ago: executing program 3 (id=2289): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x84000001, 0x1, 0xfffefffc}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x1, 0x1, 0x5, 0x2, 0xedf}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001c40)={'batadv0\x00', 0x0}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="039200e600004000001800128008000100677470000c00028008000200fec2428a8f7210b976f95b", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYRESHEX=r2], 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003e0000003e00000003000000080000000000000c010000000e0000000300800f02000000010000000002000048e800000100000089721937030000000400000004000000010000000d0b0000002e00"], &(0x7f0000000300)=""/53, 0x5b, 0x35, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x9, 0xffff7fff, 0x8, 0x8100, r5, 0x3, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @value=r6}, 0x50) 51.055747886s ago: executing program 3 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) fchmodat(0xffffffffffffffff, 0x0, 0x10a) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyUSB0\x00', 0x1, 0x84) syz_usb_connect$uac1(0x3, 0xfe, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0xfd, 0x0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x47}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x0, 0x9, "30fd78"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x5, "1cd0fb596891"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x5, "c5a4ece1b0e0"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x4, 0x7, 0x4, 0x5, 0x6], 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x1, 0xe, 0x1, 0x8, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x1, "7ed9e4e9e24717"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0xc, 0x7, "e9317549"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2f, 0x5, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc3, 0x5, 0x40, 0x6, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x5, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0xff01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x4, 0x6, 0x5, '$'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x53bc, 0x7f5, 0x1, 0x8}, @as_header={0x7, 0x24, 0x1, 0x36, 0x2, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x12}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x8, 0x7, {0x7, 0x25, 0x1, 0x4, 0x6, 0xfffa}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xa, 0x9, 0xa1, 0x40, 0x1}, 0x70, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f7000051410040525da1dcee917c7ed76767ac94cde132f1c100a0944060000001eff033f000000cf3f00010000ff00cf3f00001c100afd0408060000000000000000000000000014100404f95395a379fd9f450b10010c000006b60e0005c831f12a87b89a2f14ff1a06abf2cab986345402478f6041d47aa5dc4dd00269e906bbbee471ac75e7d4879096680033309456e239e00350cde1d4c5a32fe3c1f836f50131ca5ce9f1af1bdc8436aa8e0a8e23dfa526f52d2b9beb85ef0211036608b7f67e0cf41b5ca06a004267483fd77ccf47da778708569f9bb04f969aa7da2a16adb2daffdb476807116c60891f3cba47710c910fe1910f36650885e68b935b680829194d3182905e5bc54d4819e877c77be9cf7e3be7b2bda0d5132a2cb72b8d7bac6ce05c0f52ebdaadee3368bf107de908cc741839f460e93d7ce31727d972d83a584a5ea41ed240150ce1804928a323830be59c8642237c3e39036e432f5d5caa78757fffd9e56023f5e95b8688410232710aed73cba7bc93c61423a41c0613bcb3f224ae1ae790accb4866e4c998af63f0414c9dc484c2f094122cf2e11bf7e6b3986a7f7752be84f395a1219b2f0b89d3d5f1c1d5d8cc4e07072e411f733f2deade023151e78c2e92eb0acdbddfd46b0f3b954725a9b242000000000000000000000000000000000507792ccddd20c4ea7bc7e0b582da74bbf63f0ec91bd9"], 0x3, [{0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "9177a40657559f2df195d8bdd80f6658954534f36d3bf89dbd89cadda11bca6ccb7064b599cb8ded52257817688adfd82384a611561ca6be46d73b7a0a470d8976bb234e859d75e0002aabfba36941f21fd9f7d03be96eae512d03b2edd2eba1c2b5b67d6ec63f51158439c3cd391d1c1d4d4e5a083fd25f6e3a94ed26e3"}}, {0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "52555e098bbd7e899ffb9abf3970589daa903ebc4b73cc8c8c088d3728988338b24b18bd8f74bacd97"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}]}) write(r0, &(0x7f00000005c0)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 47.92152842s ago: executing program 3 (id=2319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001e40)=[{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f00000003c0)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000400)="bc53c44143bebd16ecb586fb4278f9666de6cd3289c6c5faa690c57e4ed90dc0781a252b530f7d55e69b949a6a3cbdd9f056dfafad9a70faeffa63e3d43e487c639a61490068390504b50cdeb95b546e0c24bfa8a98875f1b8f3c8cc52408d5937c68f6d0637f7f0c2e51ad9db7d76558577e92de9fd47b99655f02350010e61d381c4cc1984d10dd85c49e0c40e1943edd20a3bf933c62818e3c4397d76983ceb28c6bbcb1133fbd37c5c", 0xab}, {&(0x7f00000002c0)="e3de6f897ac30a3c686b434538a1cab0cd9db795e58a47681ce2d5be3babefaaea235924436cf65f378c0564b965ce5d1e480252a87dd298", 0x38}, {&(0x7f0000001ec0)="273e9cee2a765d8e8d5fd7f7ca39f72b0febea30b203b2739f431f1fadb666b37bf88d2e8605707c409e23c87c9cc2475a244ce19f4e92f53040d5f7bf3777932ad0fe21e2f61ee8fc4c09878270c341b9563b62b1da351fe09fb0c675bb32e6380dcdf4b620b8aaf9b5578afe91fc", 0x6f}], 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="3800000000000000170100000200000020000000107b97426cea6dd2348eafdf515247fd78def402d983df5bfdf49b2b86473addb32d000070435c709a399f4bd45174f7be89c837fae866b9f29bbfe1dc95fb1004d32afed69bd02e5be05b6d32c01f8c9ad78f9128e9209865bb95ba1d729402aabb7bdafc6860bab93e77ed0c56ce27"], 0x38, 0x24048890}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b80)="e87c76c79a274c0e322759e4021a9e106e416466243e4019981a9e1a5f3037efdf3840784300da467cf5178a4858cc6ccdf529d46100a386fa3d960b2cd80cfff535cd", 0x43}, {&(0x7f0000001c00)="196cf5275a2d2ce24b7be485698374bd52f50595d7232fd2ff55a11d9eb7f1bed2669763f658b448549eedc7771b82e1cfd50a", 0x33}, {&(0x7f0000001c40)="b22ceb7fcfea527d3c6195fb0bf6ad1f4122a3ecd166f456aebc3620b9284209603d46b941f93e5a28c1d0b5c91bde80cc9e611bd89a9c567b30b282690d467aaa41b93295edcdb766acaca8283cce379dee40cfc504", 0x56}, {&(0x7f0000001cc0)="2d8813f0c578694b0274398a1c088e0543b894d57c36664f2e3650e0e5c944309f1d1b0baf87daf42747cdb1e5801860be9261faab2e89b28cee90168afee557c18375ed34b64b73a01374", 0x4b}, {&(0x7f0000001d40)="df5864a6179bc4462efdfe2801addc36aa3a14f25f5d447fa737ec3f6d612d4c118e7678dd2c3a0a059b1f26599b332034dac3c4337f9923f1d3bae10dfdb9ec3d5728d3cfcfb8c8dcba1feedf31a835dd1ae15c8dc8d0b59bcf3c65f5e69faf61f3ad797e0cd3254f40fc82396885e8a3c307fb", 0x74}], 0x5, 0x0, 0x0, 0x40051}], 0x2, 0x84) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001600)={0x3, 0x3, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./proc\x00', &(0x7f00000016c0)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000001700)='./proc/net/ip_vs_conn\x00', &(0x7f0000001740)='./ip_vs_conn\x00') openat(0xffffffffffffff9c, &(0x7f0000001780)='./ip_vs_conn\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c506) lsetxattr$security_capability(&(0x7f0000000080)='./proc/net/ip_vs_conn\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48005) ptrace(0x11, r5) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001ac0)={0x0, 0x10, &(0x7f0000001b00)=[@in={0x2, 0x0, @local}]}, &(0x7f0000001b40)=0x10) write$binfmt_elf32(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4605069e0dffffffffffffffff0200030009000000ca020000380000005e02000100040000fbff2000010003001e0400020000000051e57464142700000cf2000006000000e6622ca19c00"], 0x58) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000180)={0xfffffffe, 0x0, {0x2, 0x1, 0xa, 0x0, 0x5}, 0x800}) r7 = syz_open_dev$cec(&(0x7f0000001580), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000015c0)=0x40) 47.039434187s ago: executing program 3 (id=2328): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000db0000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x158, 0x0, 0x148, 0x158, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x28, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gretap0\x00', {0x8, 0xfffffffffffffff8, 0x56, 0x9, 0x2, 0x80, 0x20, 0x78, 0x80}, {0x9}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x70b8, 0x24c0, 0x0, 0x40055}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x1}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000a80)='\a\x00', 0xffec, 0x0, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0xffffffffffffff8e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000b00)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r7 = fsopen(&(0x7f0000000b80)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x90) r9 = openat(r8, &(0x7f0000000bc0)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r9}, 0x8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000b40)={'geneve0\x00', {0x2, 0x0, @empty}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xe2002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r12, 0x4068aea3, &(0x7f0000000400)={0xc0, 0x0, 0x10000}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0xa, 0x11, r13, 0x0) 31.957297333s ago: executing program 34 (id=2328): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000db0000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x158, 0x0, 0x148, 0x158, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x28, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gretap0\x00', {0x8, 0xfffffffffffffff8, 0x56, 0x9, 0x2, 0x80, 0x20, 0x78, 0x80}, {0x9}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x70b8, 0x24c0, 0x0, 0x40055}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x1}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000a80)='\a\x00', 0xffec, 0x0, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0xffffffffffffff8e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000b00)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r7 = fsopen(&(0x7f0000000b80)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x90) r9 = openat(r8, &(0x7f0000000bc0)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r9}, 0x8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000b40)={'geneve0\x00', {0x2, 0x0, @empty}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xe2002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r12, 0x4068aea3, &(0x7f0000000400)={0xc0, 0x0, 0x10000}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0xa, 0x11, r13, 0x0) 14.030941413s ago: executing program 6 (id=2593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) getpid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "d1d40510fa16e5d5ad"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 13.941699912s ago: executing program 6 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000130008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) 13.861331545s ago: executing program 6 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b000000000010001a800c000a80050009"], 0x40}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000004840), &(0x7f0000004880)='./file0\x00', &(0x7f00000048c0), 0x2210088, 0x0) setxattr$system_posix_acl(&(0x7f0000004900)='./file0\x00', &(0x7f0000004940)='system.posix_acl_access\x00', &(0x7f0000004980)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x2) 13.781129162s ago: executing program 6 (id=2596): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000800)={'pcl812\x00', [0x140, 0x4, 0x1, 0x2, 0x1, 0x2, 0x8002, 0x1002, 0x20000040, 0xd72d, 0x8, 0xffffffff, 0x2009, 0x6, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x408, 0x4, 0x40000000, 0xe, 0xffffffff, 0xffe, 0x20002f, 0xaf, 0x0, 0xffffffff, 0x7ff]}) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x8) r3 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/features/transaction_report\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000400)=[0x0, 0xffffffffffffffff]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x34008050) write$FUSE_ATTR(r3, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x4, 0xe24b, 0x0, {0x1, 0x0, 0x9, 0x8, 0x81, 0x2, 0x7, 0x80000001, 0x2, 0xa000, 0x1ff, r4, r5, 0xfffffff8}}}, 0x78) close(0x3) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./sys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys/power/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000a80)='plat', 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r9, 0x4010e501, 0x0) 13.381359755s ago: executing program 6 (id=2602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc000000190001000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000380)) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x805) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5, 0x1, 0x0, {}, {}, {}, 0x2, @can={{}, 0x6, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x5c2a8f2afe09a0d3}, 0x51) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13.000992293s ago: executing program 6 (id=2605): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40006, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xffffffff, 0x7fff, 0x34324152, 0x5, 0x2, [{0x7, 0x3}, {0x8, 0x4000000}, {0x8, 0x21}, {0xc91, 0x80000000}, {0x6, 0x9}, {0x4, 0x1000c}, {0x802, 0x2}, {0xfffffffe}], 0xb, 0x5, 0x8, 0x2, 0x5}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1a, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}]}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 12.941772543s ago: executing program 35 (id=2605): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40006, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xffffffff, 0x7fff, 0x34324152, 0x5, 0x2, [{0x7, 0x3}, {0x8, 0x4000000}, {0x8, 0x21}, {0xc91, 0x80000000}, {0x6, 0x9}, {0x4, 0x1000c}, {0x802, 0x2}, {0xfffffffe}], 0xb, 0x5, 0x8, 0x2, 0x5}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1a, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}]}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 7.271227055s ago: executing program 2 (id=2643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) shutdown(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xe0042, 0x1ff) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) execveat(r3, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x100) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) clock_settime(0xffffffffffffffff, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001180)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x2, @loopback}]}, &(0x7f0000000000)=0x10) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000200)={0x0, 0xfffffff8}) 6.7697423s ago: executing program 1 (id=2646): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x8, @vbi={0x5, 0x401, 0x7f, 0x4f565559, [0x5, 0x4], [0x9, 0x8], 0x13a}}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="02000000540800000900000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="04000040010000000100000003000000d6439ce653ceea9c813fe1bcbb5fdc059a36cf1387bdc45d75163629f3f3b0bd08e06caea38ad05d30211baf2656522253e6cf9b08f7662f174fd6fc35eb0ba3e7d0f3e64d44632e454b5cfa203b4a09513a309d6da7eab7c1635ee6022e4e9ce7406dccdf351cd7ad12fbc5635a7fd0218ff93d22389a74635ecd5942a80f0e2b76f45ada2f54dbf2269fb35870f5dd59dae4277e5a912495797c4058d731c567366d629265a62663b615bef5e9c4eba3161346d837a7944bcccef43c5b96f17c77747c03af44a12f9fc669994259c77c103c1bb92db508e206100f1613296fd87d5c279ea05c255abff55f8c7d252c30e8d9195cba52de2f4c529251dfbf969a8a"], 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x8, 0x1c0000000000000, 0x1}) openat$loop_ctrl(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff5e}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x2, 0xb, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24}, 0x94) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d1905"], 0x20) sendmsg$nl_route(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70ad2c, 0x25dfdbfb, {0x2, 0x10, 0x12, 0x2, r1}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x80) 6.319422858s ago: executing program 2 (id=2652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000017c0)=0x7b, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000010000000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500001000"/28], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000700)={0x20000000}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000780)={0x9, {"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", 0x1000}}, 0x1006) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED]}, 0x60}, 0x1, 0x0, 0x0, 0x2000e020}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000540), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000580)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r11, 0x100000000) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r12, 0x45a7e000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5408200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES16=r2, @ANYRES16=r0], 0x450}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000000)) 5.901340093s ago: executing program 2 (id=2656): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x144, 0x1, 0x9, 0x40000004}, {0x47, 0x1, 0x5, 0x43}, {0xd, 0xff, 0x2a, 0x1}, {0x1, 0xe, 0xff, 0x40000004}, {0x7fff, 0x26, 0xe0, 0x1}, {0xfffc, 0xfd, 0x0, 0x428}, {0x9c73, 0xd5, 0x9, 0x4}, {0x3, 0xcd, 0x3}, {0x1, 0x12, 0x1, 0x10001}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0500e40001000000665d5be80a4c9c70e74449a340f975b5963e6e15287253284dd1a9e0ff38322a47fc3d3a1bb05d019fcb4284e6aa6b461929aa9ce5c12183f4c97f21fcb593"], 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="251c0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf256300000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="01abe1c9000000000000f2548d5773a500ad8aa7fb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000b80)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r4, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x200080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) sendmsg$inet(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48c0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x122, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f"], 0x4a) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) 5.41991333s ago: executing program 2 (id=2659): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x800, &(0x7f0000000880)={[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) timer_create(0x4, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000340)="b81eecf6c386554820961a7d895be00ff5bad6096eeac6b6f45d6f2f10f3f7872fe905c4a35344537e738fc07d5dd285c2f2a735804ad6cac9528bd86e898456b539913746b2ac7aa74589787cddfd343e73f591ee2dee9e5424bda025ff9305ed096e10054bdf0f3524aa6f60b5e5066217d3294a6d4c36273a0af23b8994206d7d8b0112b36a9f5e43acd9110626dd3b363e8a455b7cf663f70b7d7f0f5ce5ab5d38fee2b057e536037ece7d6df5c1bf895e7a3d8b38151e55fe11433e26c0f25bed373ae76e3a75ec314f53fc5338", &(0x7f0000000440)="e69a0ba0d44ba349c6fc4bb692ca9fca6b847d7ed23458f7b6299623a82106a7931dabd82c5b70d37711558f329826f6119cdce89f7d936624667fde6f4a9a3a906aea467e1f4159ab134471c9c7c0d6de10317eb0154a0cef241be19f221a679d86c6402686e71f0fdea714778edd13f9293f23adea236b518a5a671ade2d4bd97fb64309b059d7956bab9fb00bd5eb4d579b63eae53b7f6d7e2a2c3492269ef042785837365720a6883d077de8e58d1ec220c4e324e22c71d1c232cbf37520270df28eb5db19461718937873f0406bd537d657f9a6dd909e77f0a34086026a3d52494ade20ea41e4117c5cecbb2eea67d80620e0587d28c1ec90f10cc0"}}, &(0x7f0000000300)) capset(&(0x7f0000000640)={0x19980330, r1}, &(0x7f0000000680)={0x9, 0xb2, 0xb, 0xb, 0x2, 0x2}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) accept4(r0, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000200)=0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x2c, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0xfff, 0xcf6, 0x36315247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x1000000001, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) (async) mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x800, &(0x7f0000000880)={[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async) timer_create(0x4, &(0x7f0000000240)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000340)="b81eecf6c386554820961a7d895be00ff5bad6096eeac6b6f45d6f2f10f3f7872fe905c4a35344537e738fc07d5dd285c2f2a735804ad6cac9528bd86e898456b539913746b2ac7aa74589787cddfd343e73f591ee2dee9e5424bda025ff9305ed096e10054bdf0f3524aa6f60b5e5066217d3294a6d4c36273a0af23b8994206d7d8b0112b36a9f5e43acd9110626dd3b363e8a455b7cf663f70b7d7f0f5ce5ab5d38fee2b057e536037ece7d6df5c1bf895e7a3d8b38151e55fe11433e26c0f25bed373ae76e3a75ec314f53fc5338", &(0x7f0000000440)="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"}}, &(0x7f0000000300)) (async) capset(&(0x7f0000000640)={0x19980330, r1}, &(0x7f0000000680)={0x9, 0xb2, 0xb, 0xb, 0x2, 0x2}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) accept4(r0, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000200)=0x80, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x2c, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0xfff, 0xcf6, 0x36315247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x1000000001, 0xfffe}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) utime(&(0x7f0000000140)='./file0\x00', 0x0) (async) 5.231625158s ago: executing program 1 (id=2661): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0xfffffffffffffffc, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000100)={0x1f, 0x3, 0x9117}, 0x0, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000200), 0x8000, 0x0) read$sequencer(r4, &(0x7f0000000380)=""/98, 0x62) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fcffffff1300000008000300", @ANYRES32=r2, @ANYBLOB="0a0010000100000006001200010000000400131a080071106c2bd211af32d01e0faee933dec869a7fecb6b92d792a27408d0ccdf4c84e2365d0d891b0c35db8ca694b97f6f8a046989f5c16ae8c01ccfffd23309e589ffa61d8296880874c642adb1211548c6d563645e125000fb365c6961510360bce21f690a"], 0x44}}, 0x0) 4.287429863s ago: executing program 1 (id=2662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010000", 0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newsa={0x104, 0x10, 0x713, 0xfffffffd, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, @in6=@loopback={0x100000000000000}, {}, {}, {}, 0x0, 0x1000, 0x2}, [@coaddr={0x14, 0xe, @in=@private=0xa010101}]}, 0x104}}, 0x0) 4.049910446s ago: executing program 1 (id=2663): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) wait4(0x0, 0x0, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000061197c0000000000950000000000000006fee979a7ab6397f67ead6b06213264ff7047ee3a8556c59d9e51a4bdb84422a5306c08552c98d0952b7d820e42a625308b50f5475e9a2b572794345aebb68d44fd312620ec6fca85a6c8e208b13d3a49e8cba43d1ac9a6e3ff4c3a5779"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r4, &(0x7f0000000600), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x292dade4896eef71, 0x40032, 0xffffffffffffffff, 0x40000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = eventfd2(0x2, 0x800) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000007c0)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000800)={0x0, r7}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x2001}) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000400)=0x1ad2, 0x4) bind$packet(r10, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r10, &(0x7f0000000480)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.597615477s ago: executing program 2 (id=2664): r0 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000580)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x58, 0x5, 0x9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @rdmsr={0x66, 0x18, {0xbca}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @uexit={0x0, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @code={0xa, 0x55, {"420f01cb420f07480fc75a5fb9730a00000f32c7442400b1000000c744240297000000ff1c2436470fc72f400f5b43be440fc73f418135fe409c391a2674b0c4820d0132"}}], 0x27d}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000900)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000940)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000b00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, &(0x7f0000000b80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) r8 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000500)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000800)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) sendmsg$tipc(r8, &(0x7f0000000840)={&(0x7f0000000880)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) (rerun: 64) 3.111367051s ago: executing program 1 (id=2668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000001c80), 0x4) fcntl$notify(r1, 0x402, 0x8000002c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000080)=0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002000)={0x0, 0x13, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003aaaaaa00000000004500001c0064000000099078ac1e1001ac1414aa100090780000fc01b5e67be43e2224e36e490116da2de711391d22535c2d4c269e250f389a95b5b8438c68e4fe860670c0a100ff7f8b913bc9335044873ebc8a1cca78815b222cbe9c2031cec0c232bad1d8583d510ab754aa3cd6668f99c6eeaae4895df101583f8c731df21416db78503d501865fde2dae3c623e29e2ddd6d25021d8a86c3c5575237f2215441b5283b8cb5cd2a6b"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0x9e, 0x0, &(0x7f0000002240)="74c4748c38a9b50a964a2a66591b2bf7e243964d1407b4d7848b77f9178fc77fe7f473a852519c040000003bea7b40abb3a4153b821a07c88516d03284a5cf43de7f57123b47d6ae28ade72451ed39652b8886017ba29f6c3909003111dfbbc6e9c44e2a0a7f2a71260e00546c89744eb9a0d4b26eaf3f5de9af739db8f856603c5c0ba358ed811b8a9f1b23b3349f67b2f76de1de8cc2d1cc85f8000000", 0x0, 0x2, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="1800b45b9f83bea52bfa0684d0378b36d75b734a", @ANYRES32=r6, @ANYBLOB="000000000000000071000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r8 = getpid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000006c0)=0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x4000010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000002040)={0x14, &(0x7f0000002080)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001ec0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001f00)='./sys\x00', &(0x7f0000001f40)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r12, &(0x7f0000001fc0)='sessname=s. device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) sendmsg$nl_generic(r0, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000700)={0x14d4, 0x42, 0x20, 0x70bd27, 0x25dfdbfc, {0x4}, [@generic="d64927e384d0f59d5502a536617c9a41b8b8a553be8dae752c47b19d7658114c44037b6cf9f0b84a40e2ac097b2cfcc40338c8dda1185f2b90b36561c2649e8c1f940f2d", @nested={0xc9, 0x96, 0x0, 0x1, [@generic="c9201500e1c1d424a01a08eb453722d43299cb4efacefd968f389b8d028782e2864b0af52091c30f5bd0afafdb257680d6d8d26e0db982994dd332dc7ca6135110bd7a267e86c70e856a16615c239ef6d75cfc5837cef1517c710e4c7d5200e503226091289ea6ba667602c562f26a62e3cc3da5a232c75372535a29d5848dcb7f50c963676de3c1d623fa14d2de58703149bc27e7d2cc6db6927352", @generic="fa69a17f19af111a1dfbdb9931245762da3444ce9432a5b4a7d1fd0ebf", @nested={0x4, 0x130}, @typed={0x8, 0x4b, 0x0, 0x0, @uid=r7}]}, @typed={0x8, 0xbb, 0x0, 0x0, @pid=r8}, @nested={0x10ed, 0xa4, 0x0, 0x1, [@generic="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", @generic="cf4eb469971f0a353c77308a7a7c736c09766e7f027a8e6f8cd622f467c44d2ba4f7cfeeff0911a849391f821d7fe7125d7f2ac8dc63b5f4a9365810215e395786c2087564855860f5dd7f2955a09af5691620fad6ddd9d7e6a70e63fff7baf0d882098f3472d0eb4a39c4b9ce2794887ea38e8c56dd8bde3d33c70a933cee4039f8a8ba67551806ddbfa83c7702335cd87c9c15fbbbcdb26cb69f368b9c3d3839e4212c50716f8aa1c5238eed0a32174abe39618349d859a59548a388f6e9a2ca92d03ae8043490a8e0909b18194c756f5e058dddbded2b10e687af9f39c3bbc1", @typed={0x8, 0x122, 0x0, 0x0, @pid=r9}]}, @nested={0x2a3, 0xb7, 0x0, 0x1, [@generic="e084c9bae4a6f20cf30e7d", @nested={0x4, 0xa}, @typed={0x5, 0x86, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x4, 0x163}, @generic="2c6919aacc3a977fefca4793e35fac78d00b27b2b9c22fb837cc5ad38932113ca5b5b72d109b77cfc9a518b973844ae8932de828faf657d4ae5a6ac1605afd56443c8c32a542d8ac3f79e9b24376432ab8fe38c44933680da6f40acd19c2dcba7950d47ea98f96d050e424795801f2ce16f275d4e4566ca5d6e44f6e34123f87508b1385a1e1f22dfa6ab17152f96fc82ac7890fa615178cc71f78a1c205746d492bbdf3e8d988286e0f2b7db0111d6a6d38aa8f", @generic="2f1a72cf17be6fcf1e08570853ec1de38ba606c68e20ce02af75a0a4adc4a44e1cf27a639fd085da6ca9320e80ae5e2ad4730f5e98c94e4c0a12408ddb7e0179b90e1851f021ca79e3f80ab74f887bbd498889901ae1883e7431a0d623203bb99afa7e3ad3690553133c1d36ccaa89b02fc24975a40da8b42ebb8dc814ac3b6354327f99c2f0cb956b47cd846fea036bbb5906bb5f9edf8353f6de32f649c63dae8a1851cf5a52da432273ef114653c29c8077e05407de7caae10dd85221371becaddcc261ad200c860a0533afcc8d10d3", @generic="2c2edd4eb78a83e8eb023ef6ede8c71d1d28f230fb646800c2f3c84267fe36aa1966e59361787b4208b2213b0b724668d012f9b5a66057da75220e85ba334f0278f74f0be73754cc77b2f2aac0499431d774a87da2e8395c66da3f89fb6c34b51254258c0cba36cc87f489650eaff0f91de71f7de2077136456fcb5b1149d3834c661561942e8e1598d45236a1f07b9683295e30cdde0f01f916bb227949ea7a89e557cba2650b894b8b35233bcccd8fcddeec14a6f17456f6bf69357efb24e6e95da0926d41c7064bc29d6cea17377014139894afbc0f89ff30e1452d79d1ab352e06caaa4e4926a8d376"]}, @typed={0x5, 0xfb, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x9}]}, 0x14d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 2.541647004s ago: executing program 7 (id=2674): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', r2, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @loopback}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) write(r3, &(0x7f0000000700)='\\x01000000 2147483647 0 - 0', 0x1b) 2.443550618s ago: executing program 1 (id=2675): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980), 0x149002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/560, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000740)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x2, 0x10}, 0xc) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000007c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0x84, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000900)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r3, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000940)='Y', 0x1) rt_sigsuspend(&(0x7f0000000540)={[0x4]}, 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x40280, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl(r10, 0x4048aecb, &(0x7f0000000c40)="070000000000000001000000ffffffff40894088") mount(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000600)='ns/net\x00') socket$kcm(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 2.218852688s ago: executing program 7 (id=2677): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x144, 0x1, 0x9, 0x40000004}, {0x47, 0x1, 0x5, 0x43}, {0xd, 0xff, 0x2a, 0x1}, {0x1, 0xe, 0xff, 0x40000004}, {0x7fff, 0x26, 0xe0, 0x1}, {0xfffc, 0xfd, 0x0, 0x428}, {0x9c73, 0xd5, 0x9, 0x4}, {0x3, 0xcd, 0x3}, {0x1, 0x12, 0x1, 0x10001}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0500e40001000000665d5be80a4c9c70e74449a340f975b5963e6e15287253284dd1a9e0ff38322a47fc3d3a1bb05d019fcb4284e6aa6b461929aa9ce5c12183f4c97f21fcb593"], 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="251c0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf256300000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="01abe1c9000000000000f2548d5773a500ad8aa7fb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000b80)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r4, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x200080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) sendmsg$inet(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48c0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x122, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f"], 0x4a) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) 1.930537329s ago: executing program 7 (id=2679): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='hfs\x00', 0x200013, 0x0) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='hfs\x00', 0x200013, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000880)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000900)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000a40)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x1, 0x5, 0xfff, 0xb, 0x9, 0x5}, &(0x7f0000000040)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x1, 0x5, 0xfff, 0xb, 0x9, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0204000000000003000500030009000800000000c0b33b558f5fe1b14d16d4295fbe3526d0298fc790f318180c1ef6ef4a83f98d3e44bfa623976879b57f5f23c1f618d22319b409270bda13a403a48ea952d43925c3b5d9b462000000000000000000"], 0x18) 1.710665837s ago: executing program 7 (id=2681): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) fchmodat(0xffffffffffffffff, 0x0, 0x10a) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyUSB0\x00', 0x1, 0x84) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xa, 0x9, 0xa1, 0x40, 0x1}, 0x70, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x3, [{0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "9177a40657559f2df195d8bdd80f6658954534f36d3bf89dbd89cadda11bca6ccb7064b599cb8ded52257817688adfd82384a611561ca6be46d73b7a0a470d8976bb234e859d75e0002aabfba36941f21fd9f7d03be96eae512d03b2edd2eba1c2b5b67d6ec63f51158439c3cd391d1c1d4d4e5a083fd25f6e3a94ed26e3"}}, {0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "52555e098bbd7e899ffb9abf3970589daa903ebc4b73cc8c8c088d3728988338b24b18bd8f74bacd97"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}]}) write(r0, &(0x7f00000005c0)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 950.943313ms ago: executing program 5 (id=2685): syz_ublk_setup_io_uring(0x20, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000001300)=0x0, &(0x7f0000001340)=0x0, &(0x7f0000001380)=0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch\n\x00', 0x25) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f00000006c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r5, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='1\n', 0x2) prctl$PR_GET_SECCOMP(0x44) syz_io_uring_submit$UBLK(r0, r1, r2, &(0x7f0000001400)=@ublk_get_dev_info_sqe={0x2e, 0x6, 0x0, r3, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x40, &(0x7f0000001480)=@ublk_ctrl_dev_info_existing}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x7ff, 0x7, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @remote, {[@generic={0x83, 0x10, "5a0af78af61b032f4daa258253a0"}, @timestamp_prespec={0x44, 0x2c, 0x22, 0x3, 0x5, [{@loopback, 0x1}, {@broadcast, 0x6}, {@multicast2, 0x897b}, {@multicast2, 0x8505}, {@local, 0x81}]}, @timestamp_addr={0x44, 0x34, 0x83, 0x1, 0x9, [{@multicast2, 0x2743b94c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3}, {@empty, 0x8e}, {@local, 0x7fffffff}, {@multicast2, 0x3}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x30, [@empty]}]}}}}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40980, 0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$sock_bt_hci(r12, 0x400448df, &(0x7f00000005c0)) connect$inet6(r9, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000440), 0x3) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000000800000000000000100000000100eeff040007800900020058797a3200000000cba0b504806f743b60265cd77088a8"], 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x48800) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x8, 0x2, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8320, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x48000) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_256={{0x314}, "3939e0286ea0c77e", "ffc2397ac39cbf398197cba3a2fb57388e5b0a7a9142af7f48d84be28795f4c3", "47d2afcd", "00000200"}, 0x38) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@newtfilter={0x25c8, 0x2c, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x1}, {0xffff, 0xc}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x101, 0xff, 0xd, 0x5}, {0x80, 0x2, 0xbc, 0x7}]}}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0xb, 0x4, 0x6}]}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x221c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffeb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}, @TCA_MATCHALL_ACT={0x21e0, 0x2, [@m_bpf={0x68, 0x2, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x2d, 0x6, "4f4dcd4fc3497cae6e1911bbcb8a6fd6ec3feb75062746532fb64066975108f6f6ba401bb6f0f3f286"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x80, 0x1c, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0xc, 0x10000000, 0xc1cf, 0x10}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x16, 0x3, '/dev/ublk-control\x00'}]}, {0x1b, 0x6, "da0196be95ece728d7f0104965acde5bfa794ff5fae873"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x11a8, 0x0, 0x0, 0x0, {{0xb}, {0x1128, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x75a39fb8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0xffff, 0xfffffeff, 0x0, 0x7, 0x56c8, 0x1, 0x0, 0x2, 0x7, 0x9, 0x4, 0x1, 0x1, 0x0, 0x0, 0x81, 0x39f6, 0x0, 0x401, 0x6, 0x5, 0x1, 0x800, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x3, 0xffffff10, 0x4, 0x80000000, 0xfd9, 0x2, 0xd, 0x100, 0x8, 0x7f, 0x200, 0x8, 0x8, 0xf, 0x1000, 0x80000001, 0x8000, 0x9, 0x8, 0x5, 0x99, 0x23, 0xe, 0x3, 0xfffffffd, 0x1, 0x2, 0x3ff, 0xc41, 0x260, 0x0, 0x6, 0x5, 0x8, 0x9, 0x9, 0xc, 0x8, 0x0, 0x7bc, 0x7, 0x9, 0x3, 0x0, 0x7, 0xa901, 0x0, 0x7, 0xdc, 0x5, 0xfffffff9, 0x9, 0xfffffffa, 0x41, 0x1, 0x9, 0x8, 0x0, 0x2, 0x1, 0x5, 0x3, 0x1f6a0345, 0xb922, 0x1, 0x7, 0x9, 0x4, 0x7e216961, 0x1, 0x2, 0x2, 0x5, 0x4, 0x9, 0x2, 0x0, 0xac, 0x3, 0xfffffffc, 0x8, 0x887, 0x6, 0x1, 0x8, 0x5, 0x2, 0xfffffffb, 0x6, 0x0, 0xfffffffc, 0x8, 0x8, 0x80000000, 0x9, 0x8, 0xfffffffb, 0xd88, 0x9, 0x80000001, 0x0, 0xfffffff9, 0x4, 0x8001, 0x57, 0x0, 0x166c, 0xf5, 0x1000, 0x8, 0x6, 0xec60, 0xd, 0x1, 0xd, 0x8, 0x9, 0x200, 0x7d, 0x6, 0x80000001, 0x2, 0x101, 0x400, 0x3, 0x8, 0x9, 0xffffffc0, 0xab, 0xd, 0xa78, 0x2, 0x4, 0xffff7fff, 0x1, 0x7, 0x7fffffff, 0x7, 0x3, 0x2, 0x7, 0x4, 0xbd75, 0xffffffff, 0x6, 0x7b2a, 0x8001, 0x444, 0x9, 0xb, 0x6, 0x80000001, 0x67b, 0x8, 0x9d, 0x0, 0xa, 0x2, 0x50, 0x7fff, 0x5, 0x63a, 0x3, 0x9dd3, 0x8, 0x9, 0x50d1, 0x5, 0x8, 0x0, 0xe, 0x8, 0x1, 0x9, 0x3, 0x29, 0x0, 0x7fffffff, 0x171, 0x8, 0x6, 0x1700, 0x800, 0x5, 0x2, 0x7ff, 0x5, 0x2, 0x3, 0x7, 0x7, 0x2, 0x0, 0xba46, 0x7, 0xffffffff, 0x1, 0x7, 0x8, 0x3, 0x8, 0x1, 0x4, 0x4, 0x4b9, 0x4, 0x2, 0x10001, 0x8, 0x5, 0xf0, 0x3, 0x3, 0xc85, 0x0, 0x81, 0x4, 0x7f, 0x3, 0x6, 0x6, 0x4, 0x401, 0x200, 0x51e, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff69b, 0x5, 0xffffff07, 0x40, 0xfab, {0x0, 0x0, 0x4, 0x2, 0x8, 0x1ff}, {0xff, 0x0, 0x2, 0x3, 0x0, 0x7fff}, 0x9, 0x6, 0x2a3a}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa00, 0x5b15, 0x5, 0x7fffffff, 0xeb, 0xfffffffe, 0x66b, 0x14d, 0x4, 0x759, 0xc16b, 0xe71, 0x3b, 0xe, 0x8, 0x1a7, 0x6, 0x9, 0xb9c, 0x100, 0x1, 0xa, 0x0, 0x4, 0x9, 0x2, 0x10000, 0xff, 0x5, 0x9c10, 0x8, 0x0, 0x5, 0x1ff, 0x1, 0x3, 0xc, 0xaf, 0x9, 0x401, 0xbe1, 0xca, 0x2, 0x10, 0x1, 0x3, 0x10001, 0x0, 0x1, 0x6, 0x6, 0xc6cf, 0x2a38, 0x4, 0x400, 0x7, 0xb, 0x8, 0x1, 0x3ff, 0x0, 0x3, 0x0, 0x2, 0xffff6db3, 0x60, 0x5e01, 0x2, 0x8000, 0xffffffff, 0x1, 0x9, 0x2b4b, 0x10, 0x2, 0xdd, 0x1, 0x3, 0x1, 0x1, 0x2, 0x4, 0x7f, 0x42f, 0x7a4a341b, 0x3, 0xe42, 0x37f, 0x6, 0x1, 0x80, 0x6, 0x0, 0x7, 0x9ef6, 0x7, 0x755, 0x1, 0x0, 0xa6, 0xffffffff, 0xc5c, 0xff, 0x4a, 0x7724, 0x8, 0x9, 0x101, 0x8, 0xc, 0x800, 0x200, 0x7fff, 0x1, 0x3, 0x877c, 0x222a, 0xe, 0x28000000, 0x5, 0x80000001, 0xffff7fd6, 0x7, 0x7fff, 0x4, 0x40, 0x400, 0x58c, 0x1340, 0x8, 0x53, 0x8, 0x247c, 0x4, 0x2f046852, 0x5, 0x401, 0xea42, 0x5, 0x0, 0x3, 0x2, 0x401, 0x2, 0xd, 0x3, 0xffffff62, 0xe86, 0x40, 0x5, 0x0, 0x6, 0x8, 0x7fff, 0x8, 0x0, 0x200, 0x7, 0x55f6, 0x4, 0xf, 0x2, 0x1, 0x3, 0x800, 0x7fffffff, 0x0, 0x7, 0x5b0a, 0x5, 0xfffffffe, 0x1, 0x9, 0x7, 0x7, 0x4, 0x4, 0x7, 0x6, 0x2, 0x1ff, 0x7, 0x8000, 0x8, 0xf, 0x1, 0x6, 0x10001, 0x7, 0xc0e, 0x541, 0x0, 0x2, 0xef, 0x120, 0xffffffff, 0x9d6, 0xd, 0x7, 0x2, 0xf, 0x207, 0x0, 0x400, 0x3, 0x7, 0x80000001, 0x9fd3, 0x0, 0x4, 0x2, 0x1, 0x6, 0x36, 0x7, 0x0, 0x7, 0x8, 0x2, 0x3, 0x8, 0x44, 0xd27, 0x4, 0x9, 0x1, 0x2, 0x4, 0x1, 0xfff, 0xd, 0x7ff, 0x7fffffff, 0x6, 0x0, 0x4, 0x5, 0x5, 0xfffffff9, 0x5, 0x9, 0x9, 0x3, 0x0, 0x8001, 0xd82, 0x6c2, 0x400, 0x100, 0x3ff, 0x8, 0x4, 0x9, 0x8, 0x4, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xddfb}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x10, 0x28c, 0x7ff, {0x2, 0x1, 0xc0, 0x71, 0x101}, {0x80, 0x1, 0xa849, 0x7, 0x2, 0xfffffffe}, 0xff, 0x7f, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x2, 0x4e, 0x5, {0xf, 0x0, 0x23, 0x4, 0x7ff, 0x10000}, {0xc0, 0x2, 0x5, 0x9, 0x5, 0x8}, 0x0, 0xd, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0xffff, 0x6, 0x2, 0x3, 0x101, 0x5, 0x10000, 0xff, 0x401, 0x9, 0x4, 0x6, 0x5, 0x76, 0x1, 0xdfb, 0x0, 0x7, 0x81, 0x143, 0x5, 0x9, 0x8000, 0x2, 0xde4, 0x1, 0x2, 0x3, 0xb, 0x4, 0x6, 0x8, 0x9, 0x8, 0x2, 0x6, 0x1, 0x8, 0x7, 0x4, 0x10001, 0x5, 0x8, 0x10001, 0x8, 0x2, 0x4, 0x80000000, 0x7fff, 0xb, 0xb41, 0x8, 0xa, 0xa445, 0x0, 0x1c8de944, 0x7fb6, 0x0, 0x2, 0x40, 0x0, 0x8, 0x96e9, 0x401, 0x0, 0x1, 0x0, 0x8, 0x10000, 0x3, 0x1, 0x7, 0x9, 0x8, 0x8, 0xfffffedd, 0x10001, 0x7, 0xb9, 0x2a63b56c, 0x2, 0x3, 0xb, 0x56a2, 0x10000, 0x1, 0xe9, 0xb, 0x9, 0x2, 0x4, 0x7, 0x6d, 0x4, 0x0, 0x6, 0x8001, 0xffffd09b, 0xb406, 0x5, 0xe49, 0x1, 0xc, 0xf9, 0xfffffc01, 0x2, 0x496, 0x80, 0x2, 0x9, 0xbe62, 0x3, 0x9, 0x6, 0x7, 0x3ff, 0x0, 0x2, 0xfedd, 0x0, 0xf, 0x2, 0x4, 0x7, 0x11, 0x3ff, 0x3, 0x7, 0x0, 0x7ff, 0xfffffffb, 0x4, 0x8d3, 0xa4e, 0x2, 0x7, 0x3, 0x6, 0x8, 0x2, 0xe, 0xfffffff0, 0xffffff8f, 0xffff0001, 0xa0, 0x8, 0x3, 0x0, 0x6, 0x7, 0x8, 0x3, 0x9, 0x3, 0x0, 0x1, 0x5, 0x1, 0x3, 0x5, 0x6, 0x6, 0x3, 0x58, 0x1000, 0x5, 0xfffffff3, 0x24cb, 0x4, 0xf, 0x73, 0x9, 0x0, 0x4, 0x1, 0x80000001, 0x80000001, 0x9, 0x5, 0x3, 0xfffffffb, 0xe, 0x4, 0x6, 0x7, 0x22a3, 0x8, 0x6, 0x6, 0x9, 0x1ff, 0x7, 0x3, 0x1c00000, 0xff, 0xb, 0x0, 0x0, 0x6, 0x0, 0x2, 0x2800000, 0x5, 0x400, 0xfffffff7, 0xb, 0x2, 0x95f, 0x8, 0x7, 0x4, 0x20, 0xffff, 0x0, 0xd9, 0x1000, 0x5, 0x18228b15, 0xd23c, 0x4, 0x82d, 0x80000000, 0x3, 0xfffffffd, 0xffff, 0x2, 0x3, 0xffffffff, 0x4, 0x80, 0x80000000, 0x6, 0x5, 0x5, 0x8, 0x1ff, 0x8b1e260, 0x1fc69d20, 0x0, 0x2, 0x8, 0x1a1, 0x4, 0x61, 0x6, 0x7, 0x8000, 0xd036, 0x3, 0xfff, 0x5, 0x9, 0x3, 0x9]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x75f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x101, 0x8, 0xfc000000, 0x4, 0x1157f926, 0x8, 0xfffffff7, 0x2, 0xa9, 0x43c8, 0x200, 0x6, 0x0, 0x101, 0x40, 0x1000, 0x9, 0x1000, 0x1, 0x5, 0x740, 0xd, 0x9, 0x9, 0x1d, 0x6, 0xfffff001, 0x9b, 0x3, 0x1, 0xa, 0x80, 0xe98, 0x6, 0x1ff, 0x4, 0x2, 0xffffffff, 0x8001, 0x3ff, 0x3, 0x9, 0x511e, 0x101, 0xfffffff7, 0x3ff, 0x9, 0xc, 0x7fffffff, 0x6, 0x10001, 0xa, 0xbc, 0x7, 0xfffffff4, 0xcf44, 0xfffffff9, 0x800, 0x1, 0x8, 0x101, 0x9, 0x8, 0x3, 0x4, 0xa8, 0x7f, 0x100, 0x7, 0x0, 0x112, 0x100, 0x5, 0x0, 0x1ff, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0x1, 0x2, 0xfffffff9, 0xffffffff, 0x6, 0x4, 0x3, 0xfffffffa, 0x99, 0x8, 0x53f, 0xc, 0x6, 0x9, 0x4, 0xa4a, 0x8, 0x3, 0x7f, 0xd3ed, 0x6, 0x9, 0x0, 0x0, 0x151, 0x1, 0x5, 0xd900, 0x5, 0x7, 0x7, 0x5, 0xb, 0x7, 0x4, 0x1ff, 0x3, 0x100, 0x4, 0x7f2, 0xff, 0x3, 0xffff, 0x46, 0x6, 0xfffffff4, 0x10001, 0x3, 0x9, 0x8, 0x1000, 0x3, 0x5, 0x800, 0xfff, 0x9, 0x4, 0x3ff, 0x401, 0x1, 0x0, 0x6, 0x1, 0x1, 0x35, 0xfffff379, 0x8, 0xfff, 0x8, 0x5, 0x0, 0x5, 0x80, 0x7, 0x6, 0x0, 0x6, 0x3, 0x4, 0x2, 0x4, 0x3, 0xe, 0x5, 0x35e0, 0xc0000000, 0x2141b7f1, 0x10, 0x7, 0x9, 0x7, 0x366d, 0x8, 0x45, 0x0, 0x4, 0xe3aa, 0x480, 0x9ac, 0x3, 0x2, 0x3, 0xb730, 0xc, 0x5, 0x3, 0x0, 0x4, 0x8, 0xfffffff8, 0x92, 0x28, 0x4, 0x0, 0x401, 0x0, 0x4, 0x0, 0x1ce42d6e, 0xed22, 0x4, 0xf2, 0x7fff, 0x5d3f, 0x12, 0x1ff, 0x6, 0x5, 0x0, 0x7fffffff, 0x3, 0xe5, 0xfffffffd, 0x3, 0x1, 0x180, 0x1, 0xfa, 0x3427106d, 0x81, 0x0, 0x5, 0x400, 0x5, 0x2, 0x201ff, 0x2, 0x5, 0xffffffff, 0x5, 0x2, 0x4, 0x6cc, 0x100, 0x0, 0xf655, 0x2, 0x5ad, 0x3, 0x2, 0x5, 0x2, 0x3, 0x4000000, 0xb7, 0xb, 0xffffffff, 0x4d, 0x1ff, 0x2, 0x80000000, 0x81, 0x6, 0x1000, 0x5]}]]}, {0x57, 0x6, "cf98c40be5e4e764fcdd5ebb43d9dee11657191102ba74ea00c87b293f82392d4078d2ac33f07218da316de9b1f794d3d622109ddbb443b2396042b4fc44ebba124353a51c8c42c4624fc4f6f306000d96ce8c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xf4c, 0x4, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xe, 0x0, 0x5, 0x0, 0x1}, 0x40, 0xf0, [{0x878, 0xad, 0x3, 0x3, 0x5, 0x8}, {0x2, 0x1, 0x6, 0x1, 0x6, 0xc497}, {0x4, 0x5, 0xe8ab, 0x7, 0xd0d, 0x5}, {0x8, 0x3, 0x1000, 0x9, 0x80000000, 0x7}]}, [{0x80000000, 0x4, 0x38, 0x8, 0x10001, 0x1}, {0xd04c, 0x9, 0xfffffffa, 0x580000, 0x1d1, 0x8}, {0x9c3a, 0x7, 0x0, 0xfffffff8, 0x1, 0x3}, {0x1, 0x2, 0xff, 0xfffffffd, 0xe, 0x7}, {0x0, 0x7, 0xe, 0x3, 0x1, 0xf5ac}, {0x0, 0x0, 0x7, 0x4, 0xf, 0x9}, {0x100, 0x0, 0xd39, 0x3, 0x5, 0x3}, {0x0, 0xfffffffc, 0x1, 0x8, 0x4, 0x7}, {0x1b, 0x7, 0x7, 0x101, 0x5, 0x5}, {0x0, 0x0, 0xa1f, 0x2, 0x9, 0xe}, {0x800, 0x1ff, 0x4, 0x10001, 0xe4, 0x40}, {0x80000000, 0x33, 0x80, 0x928, 0xf, 0x4}, {0x4, 0x115b24c3, 0x6, 0x2, 0x1, 0x4}, {0xffff, 0xf, 0xf046, 0x9, 0x9, 0x6}, {0x94, 0x5, 0xff, 0x7ff, 0x1ff, 0x7ff}, {0xffff, 0xffffffff, 0x10000, 0x4, 0x0, 0x1}, {0x5, 0x9, 0x6, 0x4, 0x2, 0x12}, {0x3, 0x5, 0x6, 0x6, 0x5, 0x10000}, {0x40, 0x6b07, 0x0, 0x9, 0x5, 0x9}, {0x80000001, 0x0, 0x81, 0x9, 0x8, 0xff}, {0x6, 0x0, 0x3, 0x4, 0xff, 0x8}, {0x1, 0x2, 0x1, 0x4, 0xc925, 0x8}, {0x0, 0x6, 0x8, 0xf, 0x4}, {0x4, 0x8, 0x3, 0x1, 0x8001, 0x9}, {0x1ff, 0x6, 0x8001, 0x532, 0x40d, 0x400}, {0x6, 0x98, 0x3, 0xbce5, 0x2b, 0x401}, {0x6, 0x0, 0xbc, 0x55, 0x0, 0x5}, {0xf, 0x8, 0x103b, 0x9, 0x9, 0xffff12c2}, {0x6, 0xe5, 0x6136, 0xffff, 0x400, 0x3}, {0x8, 0x0, 0x80000000, 0x7, 0xd, 0x8}, {0x1000, 0xffffffff, 0xeb17, 0x9, 0x9, 0x5}, {0xfffffff0, 0x6, 0x9, 0x1, 0x9, 0x5}, {0x3, 0x35, 0x3, 0x4, 0xe, 0x524}, {0x4, 0x6, 0x0, 0x1, 0x400, 0x7fffffff}, {0x6, 0x800, 0x10, 0x100, 0x8, 0x7fff}, {0x4, 0x8, 0x4, 0x4, 0x101, 0xffffffff}, {0x1, 0x9, 0x1, 0x2, 0x1, 0x80000000}, {0x7, 0xffff7fff, 0x7ff, 0x1, 0x9, 0x1ff}, {0x9, 0x58ef, 0x1, 0x0, 0x6, 0x8}, {0x3b34e6be, 0x8000, 0x9, 0x6, 0x2, 0x7}, {0x1800000, 0x2, 0x200, 0xfe0, 0x7, 0xfffff94a}, {0x4, 0x0, 0x0, 0x0, 0x9, 0x9}, {0xfffffffd, 0x4, 0x1c2d, 0x400000, 0xa, 0xfffffff3}, {0x3, 0x1, 0x9, 0x80000001, 0x4, 0xef7e}, {0x7, 0xfff, 0x80000001, 0x7, 0x40, 0x8}, {0x7291, 0x200, 0x5, 0x10001, 0x5, 0xffff}, {0x7, 0x7, 0x9, 0xaf2f, 0x7fff, 0x730}, {0x3, 0x0, 0x100, 0xd, 0xfffffff8, 0x27d}, {0xe, 0x6, 0x1, 0x940, 0x0, 0xfffffff8}, {0x2, 0x7, 0x5c59216b, 0x6, 0x3, 0xec2d}, {0x30000, 0x2, 0x964, 0xffffffba, 0x9, 0x6}, {0x81, 0xfffffffa, 0x1, 0x1, 0x4, 0x1}, {0x5, 0x3, 0x8, 0x4, 0x2, 0x5}, {0xfffffffe, 0x4, 0x1, 0x0, 0x9171, 0x1}, {0xaa1, 0xbf, 0x2, 0x4, 0x5, 0x9}, {0x4f, 0x1, 0x10001, 0x9, 0xe, 0x8000}, {0x6, 0x5, 0x10001, 0x10000, 0xa4c, 0x9}, {0x8, 0x10000, 0xffff, 0x6, 0xb0, 0x6}, {0x5, 0xfffffff9, 0x1, 0x4, 0x5, 0xee53}, {0x1b, 0x8, 0x5, 0x3, 0x0, 0xf79c}, {0x6, 0xab2, 0x7f, 0x9, 0x75bf, 0x3}, {0x6, 0x7, 0x3, 0x10, 0x2, 0xd34e}, {0x9, 0x4, 0x3, 0x8, 0x2f0, 0x660}, {0x4, 0x0, 0x6, 0x7, 0x0, 0x3ff}, {0xc, 0x70d, 0xb8, 0x3, 0x10001, 0x100000}, {0x101, 0x9, 0x1, 0x0, 0x40, 0x9}, {0x10000, 0x100, 0x9, 0x2, 0x3, 0x5}, {0x4, 0x6ccd7ff3, 0x2000, 0x1, 0x80000000, 0x121}, {0x2, 0x867, 0x6, 0x2, 0x0, 0x4}, {0xd2, 0xffffff30, 0x3, 0x5, 0x0, 0xb8}, {0x3ac931eb, 0xffffffc0, 0x10001, 0x0, 0x800, 0x3}, {0x9, 0x10000, 0x7fffffff, 0x200, 0xb, 0x8001}, {0x2, 0x800, 0x81, 0x2, 0x8, 0x5}, {0x800, 0x9e9, 0x10, 0x6, 0x2, 0xa6e}, {0x4, 0x0, 0xb57, 0x3, 0xd, 0x2}, {0x3c7c, 0xa, 0x3, 0x2, 0x6, 0x1}, {0x1, 0x2, 0x400, 0xa4, 0x2, 0x3}, {0xfffffff8, 0x3, 0x7, 0x57, 0xa, 0x2}, {0x8, 0x8, 0x1, 0x407e, 0x7, 0x4}, {0x8, 0x6, 0x8, 0x1, 0xae, 0x9}, {0x80000000, 0x3ff, 0x4, 0x6, 0xe, 0x9}, {0xfffffffd, 0x8, 0xeb62, 0xc, 0x0, 0xcf5b}, {0x2, 0x3, 0x3, 0xd1, 0x8, 0x8001}, {0x5, 0xfffffff0, 0x9, 0x1, 0x3, 0x80000001}, {0x4fa, 0x8, 0x4, 0x5, 0x4, 0x3}, {0x6a, 0x243, 0x5, 0xfffffe00, 0x722, 0x200}, {0x8000, 0x3, 0x6, 0x2, 0x8, 0x9}, {0x8, 0x13e, 0x1bb, 0x3ff, 0xffff6215}, {0x4, 0x8000, 0xde95, 0x3, 0x7ff, 0x7}, {0x10001, 0x1, 0x6, 0x2, 0x3, 0xb5f}, {0x1, 0x3, 0x3, 0xc2f, 0xfdce, 0xff}, {0xe, 0x9, 0x7, 0xfff, 0xfffffffb, 0x2a800}, {0x6a5fba35, 0xac50, 0x1fb2, 0x6, 0x2, 0x2b}, {0xb4d1, 0x1, 0x9, 0x9, 0x2, 0x4}, {0xc3b5, 0x7f, 0x4d, 0x800, 0x2, 0x8}, {0x6, 0x8d6, 0xd674, 0xe88, 0x4, 0x8000}, {0x6, 0x6, 0x9, 0x33e, 0xfffeffff, 0x81}, {0x10, 0x8001, 0xc, 0x0, 0xd, 0xcf2c}, {0x10000, 0x8000, 0x0, 0x9, 0x1, 0x2}, {0x7, 0xfffffffc, 0x0, 0xdd, 0x9}, {0x2, 0x4, 0x200, 0x6, 0x1ff, 0x8}, {0x8, 0x8, 0x7, 0x9, 0x4, 0x8}, {0x7ff, 0x3, 0x1000, 0x2, 0x5, 0x80000001}, {0xcc3, 0x2, 0x7, 0x3, 0x3a5}, {0x80000000, 0x5, 0x0, 0x2, 0x0, 0xdd6}, {0x0, 0x9, 0x1, 0xe, 0x9, 0x9}, {0x1, 0x2, 0xf1, 0x1800, 0xff, 0x9}, {0x1, 0x958, 0x9, 0xfff, 0x1, 0xb3a}, {0x4d0, 0x5, 0x10000, 0x101, 0xffffdef2, 0x4}, {0xd, 0x5, 0x3, 0x9, 0x5}, {0x5, 0x4, 0x4, 0x2, 0x8, 0x81}, {0x6, 0x5, 0x4, 0x3, 0x8001, 0x80000001}, {0x46, 0x2, 0x8, 0x8e, 0x8, 0x9}, {0x3, 0xec7, 0xc07, 0xc, 0x800, 0x2}, {0x4, 0x3c2, 0x9, 0x3, 0x3, 0xffff}, {0xfffffff5, 0x63, 0x0, 0x7fffffff, 0x4, 0x6}, {0x7, 0xb, 0x951, 0xa, 0xf, 0x4}, {0xc2, 0x4, 0x8, 0x8, 0x5, 0x2}, {0x3, 0x4, 0x0, 0x5, 0x40, 0xe826}, {0x4, 0xfffffff9, 0x8, 0x3, 0x3, 0x7f1}, {0xfc9, 0x0, 0xffff, 0x1, 0x100, 0x4}, {0x0, 0x5, 0x7, 0x9, 0x1, 0x1}, {0x4, 0x8, 0xffff, 0xfffffff8, 0x9, 0x3}, {0x8, 0x7, 0xd0d, 0x6, 0xc, 0x8}, {0x9, 0x40, 0x8001, 0x6, 0x4, 0x43e7}, {0x8, 0x0, 0x5, 0x4, 0x4, 0xb28b}, {0x9, 0x0, 0x0, 0x7f7, 0x7, 0x8}, {0x4, 0x30, 0x0, 0x80000000, 0x4, 0x2}], [{0x1}, {}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0xa7258680e33fa114, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x3}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}]}}]}, {0x9d, 0x6, "b4ec45b44eae84d6e248e3d6784c6561b32d2f5f03230e348da48fcd64a1c8f93c6e6ce1071a15730e4ffae0dad37200d593f5c79e939a6cb3cbb174c5e315e1175d87ccdbc0ebaf345734a294d35285781b603866fb1b544162fd8e8e3e90ccfd6d75aa34224f51ffb887168acff9d775762034b5dd955c79ed594a06b7a34c685219d58ea5787ea44cd874a1a5a1ba382f773a508ca1a3c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x2f4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_MATCHALL_ACT={0x2e8, 0x2, [@m_skbedit={0x50, 0xa, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x10, 0x2, 0x3, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x138, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x102, 0x6, "8f9f56e770db502dd1c84cc626e81557631de643ebffa9cd7acd5a24d21939abfa4d15cc34ddc0d192788d628ec97489a5f6d03a9891724c6e169ee61e7e9d4574aaca1b846f2dc00013a07511bf83d740414e98dc9b9316e4667820be6b52c7365e792d71e0cd7b087299e24233b5776653f7f9d185a9c37c5e9c3145f697f29390fb7316744261df5776a8b5c562ffdf55ddbf0b7a41d3199b0e60714ecf5a5754ac956f266eed1b33b5ef518252b7d40a29997bf264005fca812ca14e607e6aae3b0ba6a27b833ba5ab1ee832e4eca2f34e7ca5070e7307568b40e343f9608d1bfa2071c97f709df0d8efab8d220d5b13b59e918130978866c6c8ca4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x15c, 0x1e, 0x0, 0x0, {{0x8}, {0xec, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x6, 0x10, 0x0, 0x4}, {0x2, 0x3f, 0xf, 0x1}, {0x6, 0xff, 0x0, 0x9}, {0x3, 0x1, 0x2, 0xd}, {0xfffa, 0x5, 0x9, 0x1}, {0xa800, 0x9, 0xce, 0x10000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x100, 0xffffffffffffffff, 0xa7b5, 0x43}}, @TCA_ACT_BPF_NAME={0x23, 0x6, './tracefs/dynamic_events/file0\x00'}, @TCA_ACT_BPF_NAME={0x1d, 0x6, './tracefs/dynamic_events\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xb, 0x5}}, @TCA_ACT_BPF_NAME={0x26, 0x6, './tracefs/dynamic_events/../file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x4b, 0x6, "83440f4c876dc4dd56eda1ae3a0bb0deb2a785b8fe6e001f5360e162a5751a0292c69671b03d9936a59405b8d725205e713a2bea593738afae6bb7fa5cd8db68dc29d40efb4819"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xb, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x25c8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 950.804312ms ago: executing program 2 (id=2686): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0xfffffffc}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 811.257853ms ago: executing program 5 (id=2687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000900)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x48, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc, 0xac, "c0d2c68fd9778d99"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x6c, r6}, 0x38) 621.192022ms ago: executing program 5 (id=2688): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x144, 0x1, 0x9, 0x40000004}, {0x47, 0x1, 0x5, 0x43}, {0xd, 0xff, 0x2a, 0x1}, {0x1, 0xe, 0xff, 0x40000004}, {0x7fff, 0x26, 0xe0, 0x1}, {0xfffc, 0xfd, 0x0, 0x428}, {0x9c73, 0xd5, 0x9, 0x4}, {0x3, 0xcd, 0x3}, {0x1, 0x12, 0x1, 0x10001}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0500e40001000000665d5be80a4c9c70e74449a340f975b5963e6e15287253284dd1a9e0ff38322a47fc3d3a1bb05d019fcb4284e6aa6b461929aa9ce5c12183f4c97f21fcb593"], 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="251c0000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf256300000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="01abe1c9000000000000f2548d5773a500ad8aa7fb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000b80)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r4, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x200080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000700)=r5, 0x4) sendmsg$inet(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48c0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x122, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) read$FUSE(r3, 0x0, 0x0) write$char_usb(r10, &(0x7f0000000040)="e2", 0x12d8) 531.288876ms ago: executing program 5 (id=2689): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0), 0x20000328) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000006c0)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000700), {[{{@ip={@loopback, @empty, 0xff, 0xffffffff, 'batadv0\x00', 'hsr0\x00', {}, {}, 0x16, 0x3, 0x70}, 0x0, 0x198, 0x1c8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x6, 0x51f, 0x20, 0x1, 'syz0\x00', 0x5, [0xffffffff, 0xffffff00, 0xff000000, 0xff]}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10000, 0x5, 0x5, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x9, 0xd, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x7, 0x0, 0x4, 0x2, 0xa1d4d0d187faa730], 0x1, 0x2}, {0x2, [0x0, 0x6, 0x1, 0x3, 0x5, 0x1], 0x5, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "3e17"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x5, "bddb16226d5406b5fbce84216f03fa2d1f99a08a5bf0a824aae16d721db4"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x0, 'virt_wifi0\x00', {0x3}, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = fsopen(&(0x7f0000000240)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000500)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000440), 0x101002) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='fd/3\x00') sendmmsg$inet_sctp(r7, &(0x7f0000000c40), 0x0, 0x48000) pread64(r7, 0x0, 0x0, 0x6) read$FUSE(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\a\x00', @ANYRES16=r5, @ANYBLOB="080029bd7000fedbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0c0099002a0000000f00000005001301000000001a001300b00c249200301bc89b8c000203180512968402e01330000006001000a8000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000b1", @ANYRES16=r5, @ANYBLOB="000228bd7000fbdbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f0000000c40)='tracefs\x00', 0x10, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./trace/trace\x00', 0x0, 0x42) preadv(r9, &(0x7f0000002780)=[{&(0x7f00000027c0)=""/180, 0xb4}], 0x1, 0x802e, 0x6) 479.463338ms ago: executing program 7 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000080)=0x100ce, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002140)=r2, 0x4) 350.450871ms ago: executing program 7 (id=2691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0xffffffff) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000001240)=[{0x6, 0xfd}]}) syz_emit_vhci(&(0x7f0000001280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x80, 0x0, 0x80b}}}, 0x7) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f00000012c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2], 0x44}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt/fillfile\x00', 0x42, 0x9f) write(r4, &(0x7f0000001340)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5ca}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffff837}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044044}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000002e00)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfffffea8) 89.761199ms ago: executing program 5 (id=2692): socket$netlink(0x10, 0x3, 0x8000000004) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvlan1\x00', 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0500180000bb43337280000067828debdd93000018000000180000000200000000000000010000050000000000009c00"/60], &(0x7f0000000400)=""/4089, 0x32, 0xff9, 0xa}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000200), &(0x7f0000000240)=""/227}, 0x20) 0s ago: executing program 5 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}, 0x1, 0x2000000, 0x0, 0x2004c011}, 0x90) kernel console output (not intermixed with test programs): 8][ T855] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 255.869828][ T855] usb 10-1: Product: syz [ 255.869836][ T855] usb 10-1: Manufacturer: syz [ 255.870865][T15049] fuse: fd is not a fuse device [ 255.872847][T15049] fuse: fd is not a fuse device [ 255.899640][T14949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.981544][ T5722] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:06A3:0CD0.000A/input/input31 [ 256.082463][ T5722] saitek 0003:06A3:0CD0.000A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 256.229432][T15058] pim6reg99999999: entered allmulticast mode [ 256.342469][ T855] scsi host7: uas [ 256.377689][T15064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2436'. [ 256.448235][T14949] veth0_vlan: entered promiscuous mode [ 256.468708][T14949] veth1_vlan: entered promiscuous mode [ 256.480775][T15066] netlink: 'syz.2.2437': attribute type 16 has an invalid length. [ 256.480795][T15066] netlink: 'syz.2.2437': attribute type 17 has an invalid length. [ 256.523250][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x640a instead [ 256.523272][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0243 instead [ 256.523286][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x039d instead [ 256.523298][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x4022 instead [ 256.523311][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0e8a instead [ 256.523324][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x48eb instead [ 256.523337][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb731 instead [ 256.523400][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5680 instead [ 256.523415][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x03cf instead [ 256.523428][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x5c7b instead [ 256.523440][T15042] jffs2: Further such events for this erase block will not be printed [ 256.523881][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xc058 instead [ 256.523895][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xea2a instead [ 256.523907][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x308c instead [ 256.523919][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x3228 instead [ 256.523931][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xced1 instead [ 256.523942][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xfd63 instead [ 256.524451][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x46e6 instead [ 256.524466][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x030e instead [ 256.524536][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xf96c instead [ 256.524549][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x85a5 instead [ 256.524562][T15042] jffs2: Further such events for this erase block will not be printed [ 256.525025][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x6e09 instead [ 256.525040][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0a4f instead [ 256.525053][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x9b6a instead [ 256.525100][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xcf8d instead [ 256.525167][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xcc63 instead [ 256.525181][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xbcf9 instead [ 256.525193][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x43ee instead [ 256.525206][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x5fb9 instead [ 256.525217][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xf89c instead [ 256.525230][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x6209 instead [ 256.525241][T15042] jffs2: Further such events for this erase block will not be printed [ 256.525861][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xb15e instead [ 256.525875][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xb99f instead [ 256.525888][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xab61 instead [ 256.525900][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x3b61 instead [ 256.525965][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x3347 instead [ 256.525979][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x5e1f instead [ 256.525991][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xdc0d instead [ 256.526003][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xf8d6 instead [ 256.526015][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x5fdc instead [ 256.526027][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xe278 instead [ 256.526039][T15042] jffs2: Further such events for this erase block will not be printed [ 256.526472][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xb0f3 instead [ 256.526487][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x5111 instead [ 256.526498][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xadef instead [ 256.526510][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x0db2 instead [ 256.526577][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xb063 instead [ 256.526589][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x33d4 instead [ 256.526600][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x40a3 instead [ 256.526612][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xaf25 instead [ 256.526626][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xa1ca instead [ 256.526641][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x6965 instead [ 256.526654][T15042] jffs2: Further such events for this erase block will not be printed [ 256.527252][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x55f0 instead [ 256.527267][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x9985 instead [ 256.527279][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x264e instead [ 256.527292][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x8e01 instead [ 256.527348][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x0c8e instead [ 256.527365][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x3980 instead [ 256.527377][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xb8ea instead [ 256.527387][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x1062 instead [ 256.527399][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x4041 instead [ 256.527410][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x72de instead [ 256.527422][T15042] jffs2: Further such events for this erase block will not be printed [ 256.527870][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x43a6 instead [ 256.527883][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x6bb5 instead [ 256.527893][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x8bcf instead [ 256.527948][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xa714 instead [ 256.527961][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x0fe2 instead [ 256.527972][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xb9d7 instead [ 256.527983][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x10f7 instead [ 256.527994][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xe482 instead [ 256.528006][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x5634 instead [ 256.528017][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x16bf instead [ 256.528029][T15042] jffs2: Further such events for this erase block will not be printed [ 256.528477][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x249a instead [ 256.528492][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xf85e instead [ 256.528504][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x78b9 instead [ 256.528569][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x6ccf instead [ 256.528582][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x418c instead [ 256.528593][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xfead instead [ 256.528603][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd868 instead [ 256.528614][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x5f98 instead [ 256.528625][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x1ee4 instead [ 256.528635][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xc8a4 instead [ 256.528647][T15042] jffs2: Further such events for this erase block will not be printed [ 256.529117][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x1fbc instead [ 256.529186][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x916c instead [ 256.529200][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x0d54 instead [ 256.529211][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x3b62 instead [ 256.529223][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x663a instead [ 256.529235][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xcbca instead [ 256.529247][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x109b instead [ 256.529259][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x4928 instead [ 256.529271][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xb203 instead [ 256.529283][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x0863 instead [ 256.529350][T15042] jffs2: Further such events for this erase block will not be printed [ 256.529928][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x357c instead [ 256.529944][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x1bd4 instead [ 256.529958][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xab30 instead [ 256.529972][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x0f62 instead [ 256.529985][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x724e instead [ 256.529996][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x6f82 instead [ 256.530072][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa4b2 instead [ 256.530088][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x7ad0 instead [ 256.530102][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x2f3a instead [ 256.530114][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x234f instead [ 256.530126][T15042] jffs2: Further such events for this erase block will not be printed [ 256.530594][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x7489 instead [ 256.530609][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0c11 instead [ 256.530620][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xe41d instead [ 256.530631][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf188 instead [ 256.530697][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x7da1 instead [ 256.530709][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xce5c instead [ 256.530720][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0cc6 instead [ 256.530731][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xb5d8 instead [ 256.530742][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x2c29 instead [ 256.530753][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x9b19 instead [ 256.530764][T15042] jffs2: Further such events for this erase block will not be printed [ 256.531207][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x109a instead [ 256.531220][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x2090 instead [ 256.531231][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xce39 instead [ 256.531242][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x99a9 instead [ 256.531302][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x65bc instead [ 256.531315][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x517d instead [ 256.531326][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x68d4 instead [ 256.531336][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x5eec instead [ 256.531347][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x87e1 instead [ 256.531362][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x3f50 instead [ 256.531373][T15042] jffs2: Further such events for this erase block will not be printed [ 256.531820][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x6a64 instead [ 256.531836][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xde83 instead [ 256.531848][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xcd27 instead [ 256.531860][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xa001 instead [ 256.531872][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x75cb instead [ 256.531938][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x1b76 instead [ 256.531950][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0008 instead [ 256.531961][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xd9fe instead [ 256.531972][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x2923 instead [ 256.531983][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x60a2 instead [ 256.531994][T15042] jffs2: Further such events for this erase block will not be printed [ 256.532460][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2c2e instead [ 256.532476][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x1469 instead [ 256.532492][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x7c19 instead [ 256.532507][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x1866 instead [ 256.532583][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x5394 instead [ 256.532601][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xadb8 instead [ 256.532614][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc74b instead [ 256.532627][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xc64d instead [ 256.532640][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xfd63 instead [ 256.532652][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x1d80 instead [ 256.532661][T15042] jffs2: Further such events for this erase block will not be printed [ 256.532962][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x6f95 instead [ 256.532972][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x972d instead [ 256.533039][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xe097 instead [ 256.533053][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x01d5 instead [ 256.533064][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xe889 instead [ 256.533076][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xa154 instead [ 256.533087][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x6ac9 instead [ 256.533099][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x845e instead [ 256.533110][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x585c instead [ 256.533121][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x622a instead [ 256.533132][T15042] jffs2: Further such events for this erase block will not be printed [ 256.533576][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x2155 instead [ 256.533589][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x73f0 instead [ 256.533655][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x6428 instead [ 256.533668][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xf235 instead [ 256.533680][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xe6a7 instead [ 256.533691][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x093e instead [ 256.533702][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x7ea5 instead [ 256.533713][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x1cff instead [ 256.533724][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x2ee0 instead [ 256.533735][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x83ab instead [ 256.533746][T15042] jffs2: Further such events for this erase block will not be printed [ 256.534211][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x518d instead [ 256.534279][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0641 instead [ 256.534292][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x4b51 instead [ 256.534319][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xa7bc instead [ 256.534330][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x8bd1 instead [ 256.534341][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x1a7e instead [ 256.534352][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x887e instead [ 256.534367][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x9ce6 instead [ 256.534378][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xc8ab instead [ 256.534434][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xd9a9 instead [ 256.534447][T15042] jffs2: Further such events for this erase block will not be printed [ 256.534800][T15042] jffs2: Old JFFS2 bitmask found at 0x00010a14 [ 256.534807][T15042] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 256.534938][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4236 instead [ 256.534948][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x8c30 instead [ 256.534957][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x529a instead [ 256.534965][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x4413 instead [ 256.534974][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xc93b instead [ 256.534982][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x12b5 instead [ 256.534991][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xb24e instead [ 256.534999][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xec65 instead [ 256.535055][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x7181 instead [ 256.535065][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x47bd instead [ 256.535073][T15042] jffs2: Further such events for this erase block will not be printed [ 256.535428][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xc809 instead [ 256.535438][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xec75 instead [ 256.535447][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x43d2 instead [ 256.535455][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x8c52 instead [ 256.535463][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x8ed0 instead [ 256.535510][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xfd8d instead [ 256.535520][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xbe28 instead [ 256.535529][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xbc6d instead [ 256.535537][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x4fbf instead [ 256.535545][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x41d5 instead [ 256.535553][T15042] jffs2: Further such events for this erase block will not be printed [ 256.535902][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xcdad instead [ 256.535912][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x896b instead [ 256.535921][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xa833 instead [ 256.535929][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x3f86 instead [ 256.535975][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x11b1 instead [ 256.535986][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x6d6b instead [ 256.535994][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xcc2d instead [ 256.536003][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xe397 instead [ 256.536011][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x6c79 instead [ 256.536019][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x9d4a instead [ 256.536027][T15042] jffs2: Further such events for this erase block will not be printed [ 256.536368][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x9fc3 instead [ 256.536383][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x797a instead [ 256.536446][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xf419 instead [ 256.536456][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xece8 instead [ 256.536465][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x4340 instead [ 256.536473][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x2995 instead [ 256.536481][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1b3d instead [ 256.536489][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x4d48 instead [ 256.536498][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xdba0 instead [ 256.536506][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x8ea4 instead [ 256.536514][T15042] jffs2: Further such events for this erase block will not be printed [ 256.536809][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x1c17 instead [ 256.536819][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x4cdc instead [ 256.536828][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xfec6 instead [ 256.536836][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xc5fc instead [ 256.536844][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xca81 instead [ 256.536903][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xa54c instead [ 256.536914][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa75c instead [ 256.536922][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x33ea instead [ 256.536930][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x4853 instead [ 256.536938][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x9d34 instead [ 256.536946][T15042] jffs2: Further such events for this erase block will not be printed [ 256.537254][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x1898 instead [ 256.537269][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x7714 instead [ 256.537282][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x4119 instead [ 256.537297][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x4d5a instead [ 256.537372][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xbe9a instead [ 256.537382][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xa892 instead [ 256.537390][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3309 instead [ 256.537398][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xc6c9 instead [ 256.537406][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x50d8 instead [ 256.537415][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x3e65 instead [ 256.537423][T15042] jffs2: Further such events for this erase block will not be printed [ 256.537726][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x1ae3 instead [ 256.537737][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x311a instead [ 256.537745][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x57c7 instead [ 256.537753][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x95d4 instead [ 256.537762][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x4eed instead [ 256.537770][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xf9fd instead [ 256.537817][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd945 instead [ 256.537827][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x4352 instead [ 256.537835][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xd309 instead [ 256.537843][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x8f5b instead [ 256.537851][T15042] jffs2: Further such events for this erase block will not be printed [ 256.538173][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x24cb instead [ 256.538185][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x6778 instead [ 256.538194][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x30e5 instead [ 256.538203][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xa863 instead [ 256.538212][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x9f50 instead [ 256.538281][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x7a9e instead [ 256.538291][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x97f4 instead [ 256.538300][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x8e36 instead [ 256.538309][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x3111 instead [ 256.538321][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x5435 instead [ 256.538333][T15042] jffs2: Further such events for this erase block will not be printed [ 256.538693][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x3e62 instead [ 256.538755][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x632d instead [ 256.538765][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x437d instead [ 256.538790][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x918c instead [ 256.538802][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x1660 instead [ 256.538811][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x9628 instead [ 256.538820][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xe27e instead [ 256.538828][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xcc55 instead [ 256.538837][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x04ac instead [ 256.538846][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x4058 instead [ 256.538854][T15042] jffs2: Further such events for this erase block will not be printed [ 256.539210][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xb8cd instead [ 256.539221][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xdd3f instead [ 256.539230][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xcae8 instead [ 256.539239][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x48af instead [ 256.539248][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x5896 instead [ 256.539257][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x7f01 instead [ 256.539266][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd44d instead [ 256.539274][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x40d8 instead [ 256.539283][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x3d85 instead [ 256.539292][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xebcb instead [ 256.539300][T15042] jffs2: Further such events for this erase block will not be printed [ 256.539664][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xbd33 instead [ 256.539680][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x277c instead [ 256.539692][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x6fa0 instead [ 256.539704][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x59b9 instead [ 256.539718][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x7740 instead [ 256.539732][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x7120 instead [ 256.539744][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8b5c instead [ 256.539759][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xcacc instead [ 256.539836][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x46f2 instead [ 256.539851][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xc6e1 instead [ 256.539864][T15042] jffs2: Further such events for this erase block will not be printed [ 256.540320][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x56b0 instead [ 256.540331][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xb30a instead [ 256.540339][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x459a instead [ 256.540347][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xb125 instead [ 256.540356][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x9c5b instead [ 256.540368][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xbdde instead [ 256.540376][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x7bc9 instead [ 256.540385][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x45b8 instead [ 256.540393][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xe321 instead [ 256.540401][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x3f2d instead [ 256.540456][T15042] jffs2: Further such events for this erase block will not be printed [ 256.540762][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xc54d instead [ 256.540773][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x559a instead [ 256.540781][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x04a9 instead [ 256.540789][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x09c6 instead [ 256.540797][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x7b39 instead [ 256.540806][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x2a0b instead [ 256.540814][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x25e0 instead [ 256.540822][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xd93b instead [ 256.540830][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x2eb4 instead [ 256.540839][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x395e instead [ 256.540847][T15042] jffs2: Further such events for this erase block will not be printed [ 256.541145][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x25ec instead [ 256.541156][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xb02e instead [ 256.541212][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xfb05 instead [ 256.541222][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x9428 instead [ 256.541230][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x6235 instead [ 256.541238][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x8df1 instead [ 256.541247][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xe66e instead [ 256.541255][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x4f3f instead [ 256.541263][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x54be instead [ 256.541271][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x0660 instead [ 256.541279][T15042] jffs2: Further such events for this erase block will not be printed [ 256.541586][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x1233 instead [ 256.541597][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xe4e4 instead [ 256.541605][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xa9aa instead [ 256.541613][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x86f6 instead [ 256.541659][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xb04b instead [ 256.541670][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x1a99 instead [ 256.541678][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x7fe8 instead [ 256.541687][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xa286 instead [ 256.541695][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xf061 instead [ 256.541703][T15042] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xe738 instead [ 256.541711][T15042] jffs2: Further such events for this erase block will not be printed [ 256.542004][T15042] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 256.542011][T15042] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 256.593283][ C2] usb 10-1: stat urb: status -71 [ 256.593546][ C2] usb 10-1: cmd cmplt err -71 [ 256.594981][ T5722] usb 10-1: USB disconnect, device number 41 [ 256.598392][ T5722] scsi 7:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 256.598467][ T5722] scsi 7:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 256.644922][T15066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.659964][T15066] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 256.695837][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.695876][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.695905][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.695996][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.744964][T14949] veth0_macvtap: entered promiscuous mode [ 256.771799][T14949] veth1_macvtap: entered promiscuous mode [ 256.831209][T14949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.850402][T14949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.865532][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.865627][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.865941][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.865960][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.986908][ T8381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.986921][ T8381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.013959][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.013972][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.215969][ T5142] Bluetooth: hci0: command tx timeout [ 257.395827][ T7664] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 257.518052][T15089] netlink: 'syz.5.2444': attribute type 5 has an invalid length. [ 257.559303][ T7664] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 257.577968][ T7664] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.578010][ T7664] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.595377][ T7664] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 257.595403][ T7664] usb 7-1: Product: syz [ 257.595418][ T7664] usb 7-1: Manufacturer: syz [ 257.608560][ T7664] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 257.609029][ T7664] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 257.609053][ T7664] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 257.819913][T15075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.820254][T15075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.824450][ T7674] usb 7-1: USB disconnect, device number 16 [ 257.825193][ T7674] garmin_gps 7-1:1.0: device disconnected [ 257.985766][ T7664] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 258.091197][ T7674] usb 6-1: USB disconnect, device number 20 [ 258.158823][ T7664] usb 11-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 258.161779][ T7664] usb 11-1: config 0 has no interfaces? [ 258.167190][ T7664] usb 11-1: config 0 has no interfaces? [ 258.181328][ T7664] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.181345][ T7664] usb 11-1: Product: syz [ 258.181352][ T7664] usb 11-1: Manufacturer: syz [ 258.181360][ T7664] usb 11-1: SerialNumber: syz [ 258.184830][ T7664] usb 11-1: config 0 descriptor?? [ 258.229531][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.233438][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.234302][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.234947][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.235345][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.315264][T15119] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2453'. [ 258.368948][T13117] bond0: (slave syz_tun): Releasing backup interface [ 258.370136][T13117] syz_tun (unregistering): left promiscuous mode [ 258.370155][T13117] syz_tun (unregistering): left allmulticast mode [ 258.436919][ T5722] usb 11-1: USB disconnect, device number 2 [ 258.563101][T15133] fuse: fd is not a fuse device [ 258.576326][T15133] fuse: fd is not a fuse device [ 258.772541][T15143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=15143 comm=syz.2.2458 [ 258.773835][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2458'. [ 258.938527][ T42] kauditd_printk_skb: 1198 callbacks suppressed [ 258.938540][ T42] audit: type=1400 audit(258.830:53815): avc: denied { bind } for pid=15145 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.941892][ T42] audit: type=1400 audit(258.830:53816): avc: denied { write } for pid=15145 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.941920][ T42] audit: type=1400 audit(258.830:53817): avc: denied { write } for pid=15145 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.944594][ T42] audit: type=1400 audit(258.830:53818): avc: denied { name_bind } for pid=15145 comm="syz.2.2459" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 258.945100][ T42] audit: type=1400 audit(258.830:53819): avc: denied { node_bind } for pid=15145 comm="syz.2.2459" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 258.950797][ T42] audit: type=1400 audit(258.840:53820): avc: denied { sys_module } for pid=15145 comm="syz.2.2459" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 258.958497][ T42] audit: type=1400 audit(258.850:53821): avc: denied { module_request } for pid=15145 comm="syz.2.2459" kmod="vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 258.963348][ T42] audit: type=1400 audit(258.850:53822): avc: denied { unmount } for pid=14949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 258.967512][ T42] audit: type=1400 audit(258.850:53823): avc: denied { sys_module } for pid=15115 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 258.967554][ T42] audit: type=1400 audit(258.850:53824): avc: denied { module_request } for pid=15115 comm="syz-executor" kmod="rose1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.063622][T15115] rxe_eth0 speed is unknown, defaulting to 1000 [ 259.286744][ T5142] Bluetooth: hci0: command tx timeout [ 259.432094][T15178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 259.558389][T15184] trusted_key: encrypted_key: insufficient parameters specified [ 259.610469][T15115] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.610518][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.610586][T15115] bridge_slave_0: entered allmulticast mode [ 259.611295][T15115] bridge_slave_0: entered promiscuous mode [ 259.620194][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.621287][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.621386][T15115] bridge_slave_1: entered allmulticast mode [ 259.622148][T15115] bridge_slave_1: entered promiscuous mode [ 259.649694][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 259.649718][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 259.679398][T15115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.685047][T15115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.701505][T15115] team0: Port device team_slave_0 added [ 259.705999][T15115] team0: Port device team_slave_1 added [ 259.722251][T15115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.722263][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.722276][T15115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.727791][T15115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.727805][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.727825][T15115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.755047][T15115] hsr_slave_0: entered promiscuous mode [ 259.756042][T15115] hsr_slave_1: entered promiscuous mode [ 259.756328][T15115] debugfs: 'hsr0' already exists in 'hsr' [ 259.756340][T15115] Cannot create hsr debugfs directory [ 259.874720][T15115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.910458][T15210] FAULT_INJECTION: forcing a failure. [ 259.910458][T15210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.910480][T15210] CPU: 0 UID: 0 PID: 15210 Comm: syz.2.2473 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 259.910497][T15210] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 259.910501][T15210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.910508][T15210] Call Trace: [ 259.910515][T15210] [ 259.910520][T15210] dump_stack_lvl+0x100/0x190 [ 259.910540][T15210] should_fail_ex.cold+0x5/0xa [ 259.910557][T15210] _copy_from_user+0x2e/0xd0 [ 259.910572][T15210] move_addr_to_kernel+0x65/0x170 [ 259.910617][T15210] __sys_bind+0x11d/0x260 [ 259.910633][T15210] ? __pfx___sys_bind+0x10/0x10 [ 259.910646][T15210] ? __fget_files+0x21f/0x3d0 [ 259.910668][T15210] ? __pfx_ksys_write+0x10/0x10 [ 259.910685][T15210] __x64_sys_bind+0x72/0xb0 [ 259.910699][T15210] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.910715][T15210] do_syscall_64+0x123/0x790 [ 259.910732][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.910744][T15210] RIP: 0033:0x7f654bd9f559 [ 259.910754][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.910792][T15210] RSP: 002b:00007f654cd40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 259.910809][T15210] RAX: ffffffffffffffda RBX: 00007f654c025fa0 RCX: 00007f654bd9f559 [ 259.910817][T15210] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 259.910824][T15210] RBP: 00007f654cd40090 R08: 0000000000000000 R09: 0000000000000000 [ 259.910830][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.910837][T15210] R13: 00007f654c026038 R14: 00007f654c025fa0 R15: 00007ffdd78f1028 [ 259.910851][T15210] [ 259.996960][T15115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.032001][T15220] netlink: 'syz.2.2476': attribute type 63 has an invalid length. [ 260.032015][T15220] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2476'. [ 260.037694][T15213] 9p: Could not find request transport: virt­„ [ 260.092235][T15115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.134355][T15115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.167341][T15223] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 260.326241][ T5142] Bluetooth: hci1: command tx timeout [ 260.366707][T15115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.368444][T15115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.374477][T15115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.378872][T15115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.383193][T15115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.384765][T15115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.391674][T15115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.393512][T15115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.447032][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.447080][T15115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.447189][T15115] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.447232][T15115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.473957][T15252] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 260.487350][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.487846][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.514295][T15251] misc userio: Can't change port type on an already running userio instance [ 260.539054][T15115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.565068][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.573440][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.573487][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.579150][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.579194][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.262421][T15115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.318173][T15272] i2c i2c-0: delete_device: Extra parameters [ 261.327587][T15115] veth0_vlan: entered promiscuous mode [ 261.341328][T15115] veth1_vlan: entered promiscuous mode [ 261.367370][ T5142] Bluetooth: hci0: command tx timeout [ 261.389066][T15115] veth0_macvtap: entered promiscuous mode [ 261.397870][T15115] veth1_macvtap: entered promiscuous mode [ 261.419586][T15115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.425310][T15115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.457674][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.457734][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.457759][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.457776][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.476264][T15278] netlink: 'syz.6.2489': attribute type 1 has an invalid length. [ 261.597755][ T8385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.597769][ T8385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.634717][ T8385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.634731][ T8385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.814923][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 261.827642][T15291] FAULT_INJECTION: forcing a failure. [ 261.827642][T15291] name failslab, interval 1, probability 0, space 0, times 0 [ 261.827665][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.2.2493 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 261.827682][T15291] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 261.827686][T15291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.827693][T15291] Call Trace: [ 261.827698][T15291] [ 261.827702][T15291] dump_stack_lvl+0x100/0x190 [ 261.827792][T15291] should_fail_ex.cold+0x5/0xa [ 261.827810][T15291] should_failslab+0xc2/0x120 [ 261.827835][T15291] __kmalloc_noprof+0xfc/0x840 [ 261.827848][T15291] ? rcu_is_watching+0x13/0xc0 [ 261.827866][T15291] ? tomoyo_realpath_from_path+0xb6/0x690 [ 261.827890][T15291] tomoyo_realpath_from_path+0xb6/0x690 [ 261.827904][T15291] tomoyo_path_number_perm+0x23c/0x580 [ 261.827921][T15291] ? tomoyo_path_number_perm+0x22e/0x580 [ 261.827939][T15291] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.827956][T15291] ? __pfx_futex_wait+0x10/0x10 [ 261.827974][T15291] ? __lock_acquire+0x5c0/0x1f40 [ 261.827994][T15291] ? __fget_files+0x34/0x3d0 [ 261.828011][T15291] ? find_held_lock+0x2b/0x80 [ 261.828021][T15291] ? hook_file_ioctl_common+0x140/0x440 [ 261.828037][T15291] ? __fget_files+0x21f/0x3d0 [ 261.828056][T15291] security_file_ioctl+0xd3/0x230 [ 261.828074][T15291] __x64_sys_ioctl+0xb7/0x210 [ 261.828089][T15291] do_syscall_64+0x123/0x790 [ 261.828131][T15291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.828144][T15291] RIP: 0033:0x7f654bd9f559 [ 261.828154][T15291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.828165][T15291] RSP: 002b:00007f654cd40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.828178][T15291] RAX: ffffffffffffffda RBX: 00007f654c025fa0 RCX: 00007f654bd9f559 [ 261.828186][T15291] RDX: 0000200000000640 RSI: 0000000040045010 RDI: 0000000000000001 [ 261.828195][T15291] RBP: 00007f654be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 261.828202][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.828209][T15291] R13: 00007f654c026038 R14: 00007f654c025fa0 R15: 00007ffdd78f1028 [ 261.828225][T15291] [ 261.828230][T15291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.939110][T15295] bond1: Unable to set up delay as MII monitoring is disabled [ 261.939942][T15295] bond1 (unregistering): Released all slaves [ 261.956620][T15299] ima: rule for LSM 'u' is undefined [ 261.959910][T15299] xt_hashlimit: size too large, truncated to 1048576 [ 261.982247][T15301] netlink: 'syz.1.2452': attribute type 38 has an invalid length. [ 261.987163][ T7664] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 262.008483][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'. [ 262.009405][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.009421][T15295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.011078][ T5142] Bluetooth: hci2: unexpected event for opcode 0x204e [ 262.011150][T15295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.011159][T15295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.091859][T15297] ima: policy update failed [ 262.149227][ T7664] usb 11-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 262.161471][ T7664] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.161512][ T7664] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.161534][ T7664] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.179369][ T7664] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 262.179393][ T7664] usb 11-1: Product: syz [ 262.179406][ T7664] usb 11-1: Manufacturer: syz [ 262.209159][ T7664] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected [ 262.210382][ T7664] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 262.210785][ T7664] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 262.262515][T15306] vcan0: entered allmulticast mode [ 262.405872][ T5142] Bluetooth: hci1: command tx timeout [ 262.424590][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.424806][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.426769][ T5722] usb 11-1: USB disconnect, device number 3 [ 262.434378][ T5722] garmin_gps 11-1:1.0: device disconnected [ 262.439289][T15308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.444720][ T8381] IPVS: starting estimator thread 0... [ 262.509951][T15309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.525958][T15310] IPVS: using max 43 ests per chain, 103200 per kthread [ 262.568240][T15308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.740467][T15313] syz_tun: entered allmulticast mode [ 262.801388][T15316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=15316 comm=syz.5.2500 [ 262.847929][T15312] syz_tun: left allmulticast mode [ 262.936172][ T5142] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 263.297973][T15342] overlayfs: conflicting options: userxattr,redirect_dir=on [ 263.471231][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2508'. [ 263.640974][T15358] random: crng reseeded on system resumption [ 263.644889][T15358] FAULT_INJECTION: forcing a failure. [ 263.644889][T15358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.644917][T15358] CPU: 2 UID: 0 PID: 15358 Comm: syz.6.2511 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 263.644934][T15358] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 263.644939][T15358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.644945][T15358] Call Trace: [ 263.644950][T15358] [ 263.644955][T15358] dump_stack_lvl+0x100/0x190 [ 263.644976][T15358] should_fail_ex.cold+0x5/0xa [ 263.644990][T15358] ? prepare_alloc_pages+0x16d/0x5b0 [ 263.645008][T15358] should_fail_alloc_page+0xeb/0x140 [ 263.645025][T15358] prepare_alloc_pages+0x1f0/0x5b0 [ 263.645041][T15358] ? unwind_get_return_address+0x59/0xa0 [ 263.645060][T15358] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 263.645077][T15358] ? stack_trace_save+0x8e/0xc0 [ 263.645092][T15358] ? __pfx_stack_trace_save+0x10/0x10 [ 263.645106][T15358] ? stack_depot_save_flags+0x27/0x9f0 [ 263.645133][T15358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.645147][T15358] ? kasan_save_stack+0x3f/0x50 [ 263.645160][T15358] ? kasan_save_track+0x14/0x30 [ 263.645175][T15358] ? __kasan_kmalloc+0xaa/0xb0 [ 263.645188][T15358] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 263.645199][T15358] ? memory_bm_create+0x12c/0xcf0 [ 263.645217][T15358] ? create_basic_memory_bitmaps+0xbd/0x350 [ 263.645230][T15358] ? snapshot_open+0x23b/0x2b0 [ 263.645246][T15358] ? misc_open+0x26d/0x450 [ 263.645279][T15358] ? chrdev_open+0x234/0x6a0 [ 263.645298][T15358] ? do_dentry_open+0x674/0x1470 [ 263.645312][T15358] ? vfs_open_consume+0xcc/0x460 [ 263.645322][T15358] ? path_openat+0x1547/0x23f0 [ 263.645338][T15358] ? do_file_open+0x20e/0x430 [ 263.645354][T15358] ? do_sys_openat2+0x163/0x1d0 [ 263.645364][T15358] ? __x64_sys_openat+0x12d/0x210 [ 263.645374][T15358] ? do_syscall_64+0x123/0x790 [ 263.645389][T15358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.645411][T15358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.645431][T15358] ? policy_nodemask+0xed/0x4f0 [ 263.645448][T15358] alloc_pages_mpol+0x201/0x560 [ 263.645465][T15358] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.645482][T15358] ? kasan_save_track+0x14/0x30 [ 263.645495][T15358] ? __kasan_kmalloc+0xaa/0xb0 [ 263.645510][T15358] alloc_pages_noprof+0x1a/0x160 [ 263.645522][T15358] get_zeroed_page_noprof+0x18/0xb0 [ 263.645537][T15358] get_image_page+0x18/0x1a0 [ 263.645554][T15358] memory_bm_create+0xb27/0xcf0 [ 263.645592][T15358] ? blocking_notifier_call_chain_robust+0xf6/0x160 [ 263.645612][T15358] ? create_basic_memory_bitmaps+0x9d/0x350 [ 263.645628][T15358] create_basic_memory_bitmaps+0xbd/0x350 [ 263.645642][T15358] snapshot_open+0x23b/0x2b0 [ 263.645655][T15358] ? __pfx_snapshot_open+0x10/0x10 [ 263.645669][T15358] misc_open+0x26d/0x450 [ 263.645684][T15358] ? __pfx_misc_open+0x10/0x10 [ 263.645698][T15358] chrdev_open+0x234/0x6a0 [ 263.645715][T15358] ? __pfx_chrdev_open+0x10/0x10 [ 263.645731][T15358] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 263.645749][T15358] do_dentry_open+0x674/0x1470 [ 263.645763][T15358] ? __pfx_chrdev_open+0x10/0x10 [ 263.645782][T15358] vfs_open_consume+0xcc/0x460 [ 263.645794][T15358] path_openat+0x1547/0x23f0 [ 263.645813][T15358] ? __pfx_path_openat+0x10/0x10 [ 263.645834][T15358] do_file_open+0x20e/0x430 [ 263.645852][T15358] ? __pfx_do_file_open+0x10/0x10 [ 263.645879][T15358] ? _raw_spin_unlock+0x28/0x50 [ 263.645892][T15358] ? alloc_fd+0x471/0x7a0 [ 263.645918][T15358] do_sys_openat2+0x163/0x1d0 [ 263.645930][T15358] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.645941][T15358] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.645964][T15358] __x64_sys_openat+0x12d/0x210 [ 263.645976][T15358] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.645994][T15358] do_syscall_64+0x123/0x790 [ 263.646013][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.646026][T15358] RIP: 0033:0x7f80a879f559 [ 263.646036][T15358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.646047][T15358] RSP: 002b:00007f80a96c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.646058][T15358] RAX: ffffffffffffffda RBX: 00007f80a8a25fa0 RCX: 00007f80a879f559 [ 263.646066][T15358] RDX: 0000000000121001 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 263.646072][T15358] RBP: 00007f80a8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 263.646079][T15358] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000000 [ 263.646086][T15358] R13: 00007f80a8a26038 R14: 00007f80a8a25fa0 R15: 00007ffff853ecd8 [ 263.646101][T15358] [ 263.817235][ T79] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 263.882581][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.893454][T15363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.894538][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.909401][T15363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.912573][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.921872][T15370] overlayfs: missing 'lowerdir' [ 263.921877][T15363] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.922943][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.935853][T15363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.936911][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.947872][T15363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.949370][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.960966][T15363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.962032][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.968420][ T42] kauditd_printk_skb: 1154 callbacks suppressed [ 263.968430][ T42] audit: type=1400 audit(263.860:54979): avc: denied { ioctl } for pid=15354 comm="syz.5.2510" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x40085503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.968454][ T42] audit: type=1400 audit(263.860:54980): avc: denied { read } for pid=14949 comm="syz-executor" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.968517][ T79] usb 10-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 263.968944][ T42] audit: type=1400 audit(263.860:54981): avc: denied { read open } for pid=14949 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.969511][ T42] audit: type=1400 audit(263.860:54982): avc: denied { ioctl } for pid=14949 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.970080][ T42] audit: type=1400 audit(263.860:54983): avc: denied { ioctl } for pid=15354 comm="syz.5.2510" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x80085502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.978174][T15363] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.979870][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 263.985921][ T42] audit: type=1400 audit(263.870:54984): avc: denied { ioctl } for pid=15354 comm="syz.5.2510" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x40085503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.985947][ T42] audit: type=1400 audit(263.880:54985): avc: denied { ioctl } for pid=15354 comm="syz.5.2510" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x80085502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.994980][ T42] audit: type=1400 audit(263.880:54986): avc: denied { unmount } for pid=13352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 264.005931][ T42] audit: type=1400 audit(263.890:54987): avc: denied { read } for pid=13352 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.005960][ T42] audit: type=1400 audit(263.890:54988): avc: denied { read open } for pid=13352 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.010184][T15363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.012096][T15363] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 264.032197][T15363] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.048559][T15363] 8021q: adding VLAN 0 to HW filter on device bond10 [ 264.058972][ T79] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.058998][ T79] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.059016][ T79] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.059783][T15363] 8021q: adding VLAN 0 to HW filter on device bond11 [ 264.072309][T15363] 8021q: adding VLAN 0 to HW filter on device bond12 [ 264.089749][T15363] 8021q: adding VLAN 0 to HW filter on device bond13 [ 264.101382][ T79] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 264.101397][ T79] usb 10-1: Product: syz [ 264.101405][ T79] usb 10-1: Manufacturer: syz [ 264.102088][T15363] 8021q: adding VLAN 0 to HW filter on device bond14 [ 264.119036][T15363] 8021q: adding VLAN 0 to HW filter on device bond15 [ 264.129435][ T79] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 264.150383][ T79] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 264.154396][ T79] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 264.161099][T15363] 8021q: adding VLAN 0 to HW filter on device bond16 [ 264.174551][T15363] 8021q: adding VLAN 0 to HW filter on device bond17 [ 264.187039][T15363] 8021q: adding VLAN 0 to HW filter on device bond18 [ 264.198347][T15363] 8021q: adding VLAN 0 to HW filter on device bond19 [ 264.213129][T15363] 8021q: adding VLAN 0 to HW filter on device bond20 [ 264.243588][T15363] 8021q: adding VLAN 0 to HW filter on device bond21 [ 264.283700][T15363] 8021q: adding VLAN 0 to HW filter on device bond22 [ 264.308383][T15363] 8021q: adding VLAN 0 to HW filter on device bond23 [ 264.325415][T15363] 8021q: adding VLAN 0 to HW filter on device bond24 [ 264.337281][T15363] 8021q: adding VLAN 0 to HW filter on device bond25 [ 264.347526][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.347728][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.348834][ T79] usb 10-1: USB disconnect, device number 42 [ 264.350029][ T79] garmin_gps 10-1:1.0: device disconnected [ 264.363635][T15363] 8021q: adding VLAN 0 to HW filter on device bond26 [ 264.375565][T15415] nftables ruleset with unbound set [ 264.385352][T15363] 8021q: adding VLAN 0 to HW filter on device bond27 [ 264.401437][T15363] 8021q: adding VLAN 0 to HW filter on device bond28 [ 264.413539][T15363] 8021q: adding VLAN 0 to HW filter on device bond29 [ 264.423958][T15363] 8021q: adding VLAN 0 to HW filter on device bond30 [ 264.434122][T15363] 8021q: adding VLAN 0 to HW filter on device bond31 [ 264.457137][T15363] 8021q: adding VLAN 0 to HW filter on device bond32 [ 264.467838][T15363] 8021q: adding VLAN 0 to HW filter on device bond33 [ 264.473158][T15424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2520'. [ 264.487598][ T5142] Bluetooth: hci1: command tx timeout [ 264.521602][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2520'. [ 264.524613][T15424] bridge0: port 3(team0) entered blocking state [ 264.524654][T15424] bridge0: port 3(team0) entered disabled state [ 264.524737][T15424] team0: entered allmulticast mode [ 264.524746][T15424] team_slave_0: entered allmulticast mode [ 264.524754][T15424] team_slave_1: entered allmulticast mode [ 264.528960][T15424] team0: entered promiscuous mode [ 264.528971][T15424] team_slave_0: entered promiscuous mode [ 264.529056][T15424] team_slave_1: entered promiscuous mode [ 264.536107][T15424] bridge0: port 3(team0) entered blocking state [ 264.536204][T15424] bridge0: port 3(team0) entered forwarding state [ 264.753095][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 264.944474][T15440] fuse: fd is not a fuse device [ 265.009153][T15443] ufs: You didn't specify the type of your ufs filesystem [ 265.009153][T15443] [ 265.009153][T15443] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 265.009153][T15443] [ 265.009153][T15443] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 265.009181][T15443] ufs: ufstype=old is supported read-only [ 265.020320][T15443] ufs: ufs_fill_super(): bad magic number [ 265.182702][T15447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2527'. [ 265.248923][T15455] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.541929][T15479] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 265.552900][T15478] IPVS: Error connecting to the multicast addr [ 265.555809][T15479] qrtr: Invalid version 14 [ 265.651449][T15490] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 265.799600][T15507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2543'. [ 265.809870][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2543'. [ 265.855838][ T855] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 266.016005][ T855] usb 11-1: Using ep0 maxpacket: 8 [ 266.019516][ T855] usb 11-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.022080][ T855] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.022097][ T855] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.022109][ T855] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.022121][ T855] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.022141][ T855] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.239961][ T855] usb 11-1: GET_CAPABILITIES returned 0 [ 266.239985][ T855] usbtmc 11-1:16.0: can't read capabilities [ 266.476965][ T5722] usb 11-1: USB disconnect, device number 4 [ 266.513351][ T8382] Bluetooth: hci3: Frame reassembly failed (-90) [ 266.551341][T15527] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2547'. [ 266.575836][ T67] Bluetooth: hci1: command tx timeout [ 266.654218][T15535] overlayfs: failed to resolve './file1': -2 [ 266.759470][T15539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 266.759854][ T67] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 266.976350][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 266.976394][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 266.979828][ T5784] Bluetooth: hci2: hardware error 0x00 [ 267.185366][T15541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15541 comm=syz.6.2551 [ 267.772289][T15560] ISOFS: Unable to identify CD-ROM format. [ 267.785918][ T7679] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 267.947787][ T7679] usb 10-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 267.953981][ T7679] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.953996][ T7679] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.975804][ T7679] usb 10-1: string descriptor 0 read error: -22 [ 267.975898][ T7679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.994653][ T7679] etas_es58x 10-1:1.0: Starting (null) (null) (Serial Number (null)) [ 267.994756][ T7679] etas_es58x 10-1:1.0: could not retrieve the product info string [ 268.146080][ T7679] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 268.290156][ T7673] usb 10-1: USB disconnect, device number 43 [ 268.296317][ T7673] etas_es58x 10-1:1.0: Disconnecting (null) (null) [ 268.309902][ T7679] usb 11-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 268.323855][ T7679] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.323882][ T7679] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 268.323894][ T7679] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.351340][ T7679] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 268.351357][ T7679] usb 11-1: Product: syz [ 268.351364][ T7679] usb 11-1: Manufacturer: syz [ 268.364578][T15562] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 268.369233][ T7679] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected [ 268.375789][ T7679] usb 11-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 268.566709][ T5789] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 268.566755][ T67] Bluetooth: hci3: command 0x1003 tx timeout [ 268.587187][ T24] usb 11-1: USB disconnect, device number 5 [ 268.601985][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 268.602268][ T24] garmin_gps 11-1:1.0: device disconnected [ 268.832434][T15577] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 268.977655][ T42] kauditd_printk_skb: 2503 callbacks suppressed [ 268.977673][ T42] audit: type=1400 audit(268.860:57492): avc: denied { getattr } for pid=15582 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.978581][ T42] audit: type=1400 audit(268.870:57493): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.978621][ T42] audit: type=1400 audit(268.870:57494): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.978700][ T42] audit: type=1400 audit(268.870:57495): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.978789][ T42] audit: type=1400 audit(268.870:57496): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.979466][ T42] audit: type=1400 audit(268.870:57497): avc: denied { read } for pid=15580 comm="syz.5.2565" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 268.979914][ T42] audit: type=1400 audit(268.870:57498): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.980020][ T42] audit: type=1400 audit(268.870:57499): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.980054][ T42] audit: type=1400 audit(268.870:57500): avc: denied { search } for pid=15582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.980088][ T42] audit: type=1400 audit(268.870:57501): avc: denied { read } for pid=15582 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.048568][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 269.188277][T15588] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.393688][T15601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2571'. [ 269.401639][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2570'. [ 269.417264][T15599] bond1: entered allmulticast mode [ 269.441262][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2571'. [ 269.452478][T15601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2571'. [ 269.462289][T15601] lo: entered promiscuous mode [ 269.470346][T15601] tunl0: entered promiscuous mode [ 269.472894][T15601] gre0: entered promiscuous mode [ 269.484967][T15601] gretap0: entered promiscuous mode [ 269.493088][T15601] erspan0: entered promiscuous mode [ 269.494354][T15601] ip_vti0: entered promiscuous mode [ 269.495194][T15601] ip6_vti0: entered promiscuous mode [ 269.502701][T15601] sit0: entered promiscuous mode [ 269.507944][T15601] ip6tnl0: entered promiscuous mode [ 269.513593][T15601] ip6gre0: entered promiscuous mode [ 269.518740][T15601] syz_tun: entered promiscuous mode [ 269.521450][T15601] ip6gretap0: entered promiscuous mode [ 269.532413][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.532667][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.533158][T15601] bridge0: entered promiscuous mode [ 269.547261][T15601] bond0: entered promiscuous mode [ 269.547275][T15601] bond_slave_0: entered promiscuous mode [ 269.547381][T15601] bond_slave_1: entered promiscuous mode [ 269.548972][T15601] team0: entered promiscuous mode [ 269.548983][T15601] team_slave_0: entered promiscuous mode [ 269.549072][T15601] team_slave_1: entered promiscuous mode [ 269.554819][T15601] dummy0: entered promiscuous mode [ 269.559670][T15601] nlmon0: entered promiscuous mode [ 269.562918][T15601] batadv0: entered promiscuous mode [ 269.568061][T15601] vxcan0: entered promiscuous mode [ 269.568859][T15601] vxcan1: entered promiscuous mode [ 269.569944][T15601] veth0: entered promiscuous mode [ 269.572059][T15601] veth1: entered promiscuous mode [ 269.575559][T15601] wg0: entered promiscuous mode [ 269.594064][T15601] wg1: entered promiscuous mode [ 269.599552][T15601] wg2: entered promiscuous mode [ 269.600526][T15601] veth0_to_bridge: entered promiscuous mode [ 269.602589][T15601] veth1_to_bridge: entered promiscuous mode [ 269.613861][T15601] veth0_to_bond: entered promiscuous mode [ 269.615253][T15601] veth1_to_bond: entered promiscuous mode [ 269.619655][T15601] veth0_to_team: entered promiscuous mode [ 269.632757][T15601] veth1_to_team: entered promiscuous mode [ 269.634764][T15601] veth0_to_batadv: entered promiscuous mode [ 269.640402][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.642779][T15601] batadv_slave_0: entered promiscuous mode [ 269.642807][T15617] overlayfs: conflicting options: userxattr,metacopy=on [ 269.644073][T15601] veth1_to_batadv: entered promiscuous mode [ 269.645151][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.645175][T15601] batadv_slave_1: entered promiscuous mode [ 269.651280][T15601] xfrm0: entered promiscuous mode [ 269.652267][T15601] veth0_to_hsr: entered promiscuous mode [ 269.656910][T15601] veth1_to_hsr: entered promiscuous mode [ 269.663519][T15601] hsr0: entered promiscuous mode [ 269.664617][T15601] veth1_virt_wifi: entered promiscuous mode [ 269.671171][T15601] veth0_virt_wifi: entered promiscuous mode [ 269.679759][T15601] virt_wifi0: entered promiscuous mode [ 269.685475][T15601] vlan0: entered promiscuous mode [ 269.690350][T15601] macvlan0: entered promiscuous mode [ 269.693204][T15601] macvlan1: entered promiscuous mode [ 269.694326][T15601] ipvlan0: entered promiscuous mode [ 269.695365][T15601] ipvlan1: entered promiscuous mode [ 269.709200][T15601] macvtap0: entered promiscuous mode [ 269.710332][T15601] macsec0: entered promiscuous mode [ 269.717465][T15601] geneve0: entered promiscuous mode [ 269.718765][T15601] geneve1: entered promiscuous mode [ 269.723169][T15601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 269.729389][T15601] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 269.733315][T15601] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 269.736751][T15601] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 269.754840][T15601] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 269.767253][T15601] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 269.769658][T15601] ip6gretap1: entered promiscuous mode [ 269.771142][T15601] vxlan0: entered promiscuous mode [ 269.772095][T15601] bridge1: entered promiscuous mode [ 269.778360][T15601] bond1: entered promiscuous mode [ 269.778771][T15601] vx0: entered promiscuous mode [ 269.779539][T15601] batadv_slave_1.: entered promiscuous mode [ 269.780311][T15601] geneve2: entered promiscuous mode [ 269.780389][T15601] syztnl1: entered promiscuous mode [ 269.780471][T15601] pim6reg99999999: entered promiscuous mode [ 269.784406][T15601] vcan0: entered promiscuous mode [ 269.806374][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.806395][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.806553][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.806567][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.806635][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.806649][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.806666][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.806680][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.889634][T15630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.187213][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2583'. [ 270.247401][T15654] null_blk: disk nullb1 created syzkaller [ 270.327731][T15662] validate_nla: 26 callbacks suppressed [ 270.327744][T15662] netlink: 'syz.6.2588': attribute type 1 has an invalid length. [ 270.327751][T15662] netlink: 'syz.6.2588': attribute type 2 has an invalid length. syzkaller login: [ 270.385759][ T50] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 270.548602][ T50] usb 10-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 270.556000][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.556043][ T50] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.556061][ T50] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.563520][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 270.563545][ T50] usb 10-1: Product: syz [ 270.563558][ T50] usb 10-1: Manufacturer: syz [ 270.587995][ T50] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 270.589131][ T50] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 270.594164][ T50] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 270.661167][T15672] fuse: fd is not a fuse device [ 270.799529][T15652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.799852][T15652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.805366][ T8901] usb 10-1: USB disconnect, device number 44 [ 270.814885][ T8901] garmin_gps 10-1:1.0: device disconnected [ 271.239785][T15688] bridge_slave_0: left allmulticast mode [ 271.239809][T15688] bridge_slave_0: left promiscuous mode [ 271.241305][T15688] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.243699][T15688] bridge_slave_1: left allmulticast mode [ 271.243718][T15688] bridge_slave_1: left promiscuous mode [ 271.243861][T15688] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.262532][T15688] bond0: (slave bond_slave_0): Releasing backup interface [ 271.270021][T15688] bond0: (slave bond_slave_1): Releasing backup interface [ 271.280005][T15688] team0: Port device team_slave_0 removed [ 271.285301][T15688] team0: Port device team_slave_1 removed [ 271.287036][T15688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.300869][T15688] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2598'. [ 271.306221][T15690] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 271.310853][T15688] vlan0: entered promiscuous mode [ 271.315063][T15688] team0: Port device vlan0 added [ 271.322476][T15688] tipc: Started in network mode [ 271.322491][T15688] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 271.322559][T15688] tipc: Enabled bearer , priority 0 [ 271.345689][T15690] overlayfs: failed to resolve './bus': -2 [ 271.567879][T15702] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 271.581442][T15702] vlan2: entered promiscuous mode [ 271.581461][T15702] bridge0: entered promiscuous mode [ 271.593150][T15706] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 271.812762][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.894263][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.970380][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.030916][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.046425][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.049408][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.051183][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.063018][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.064951][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.235703][ T8901] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 272.389701][ T8901] usb 10-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 272.402531][ T8901] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.402565][ T8901] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.402578][ T8901] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.402589][ T8901] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.426744][ T8901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 272.426759][ T8901] usb 10-1: Product: syz [ 272.426766][ T8901] usb 10-1: Manufacturer: syz [ 272.442401][ T1355] tipc: Node number set to 11578026 [ 272.447921][ T8901] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 272.448527][ T8901] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 272.448691][ T8901] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 272.477280][ T13] team0: left allmulticast mode [ 272.477299][ T13] team_slave_0: left allmulticast mode [ 272.477313][ T13] team_slave_1: left allmulticast mode [ 272.484711][ T13] team0: left promiscuous mode [ 272.484727][ T13] team_slave_0: left promiscuous mode [ 272.484893][ T13] team_slave_1: left promiscuous mode [ 272.485203][ T13] bridge0: port 3(team0) entered disabled state [ 272.498508][T15732] befs: (nullb0): No write support. Marking filesystem read-only [ 272.498677][ T13] bridge_slave_1: left allmulticast mode [ 272.498696][ T13] bridge_slave_1: left promiscuous mode [ 272.498886][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.500325][T15731] netlink: 'syz.1.2611': attribute type 32 has an invalid length. [ 272.500779][T15732] befs: (nullb0): invalid magic header [ 272.507257][ T13] bridge_slave_0: left allmulticast mode [ 272.507277][ T13] bridge_slave_0: left promiscuous mode [ 272.507431][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.618148][T15735] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2612'. [ 272.645285][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.649653][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.650447][ T13] bond0 (unregistering): Released all slaves [ 272.653268][ T13] bond1 (unregistering): Released all slaves [ 272.655567][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.658777][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.660231][ T855] usb 10-1: USB disconnect, device number 45 [ 272.661996][ T855] garmin_gps 10-1:1.0: device disconnected [ 272.678684][T15738] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2612'. [ 272.678719][T15738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 272.840353][T15744] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2613'. [ 272.840369][T15744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 272.912889][T15717] rxe_eth0 speed is unknown, defaulting to 1000 [ 273.222637][ T13] hsr_slave_0: left promiscuous mode [ 273.223438][ T13] hsr_slave_1: left promiscuous mode [ 273.224763][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.224780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.225616][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.228233][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.262450][ T13] veth1_macvtap: left promiscuous mode [ 273.262485][ T13] veth0_macvtap: left promiscuous mode [ 273.262557][ T13] veth1_vlan: left promiscuous mode [ 273.262692][ T13] veth0_vlan: left promiscuous mode [ 273.421130][T15762] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 273.468431][ T13] team0 (unregistering): Port device team_slave_1 removed [ 273.483179][ T13] team0 (unregistering): Port device team_slave_0 removed [ 273.610041][T15759] tipc: Enabled bearer , priority 0 [ 273.611548][ T5496] 8021q: adding VLAN 0 to HW filter on device eth10 [ 273.628648][T15754] tipc: Resetting bearer [ 273.820529][T15769] syzkaller0: entered promiscuous mode [ 273.820552][T15769] syzkaller0: entered allmulticast mode [ 273.825388][T15753] tipc: Resetting bearer [ 273.853927][T15753] tipc: Disabling bearer [ 273.993184][T15717] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.993270][T15717] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.993334][T15717] bridge_slave_0: entered allmulticast mode [ 273.994025][T15717] bridge_slave_0: entered promiscuous mode [ 273.999625][T15717] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.999736][T15717] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.999838][T15717] bridge_slave_1: entered allmulticast mode [ 274.000976][T15717] bridge_slave_1: entered promiscuous mode [ 274.005874][ T42] kauditd_printk_skb: 1897 callbacks suppressed [ 274.005885][ T42] audit: type=1400 audit(273.890:59399): avc: denied { ioctl } for pid=15782 comm="syz.5.2622" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.021810][ T42] audit: type=1400 audit(273.900:59400): avc: denied { create } for pid=15789 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.021841][ T42] audit: type=1400 audit(273.900:59401): avc: denied { prog_load } for pid=15782 comm="syz.5.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.021860][ T42] audit: type=1400 audit(273.900:59402): avc: denied { bpf } for pid=15782 comm="syz.5.2622" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.021883][ T42] audit: type=1400 audit(273.900:59403): avc: denied { perfmon } for pid=15782 comm="syz.5.2622" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.021903][ T42] audit: type=1400 audit(273.910:59404): avc: denied { create } for pid=15789 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.021923][ T42] audit: type=1400 audit(273.910:59405): avc: denied { write } for pid=15789 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.021942][ T42] audit: type=1400 audit(273.910:59406): avc: denied { perfmon } for pid=15782 comm="syz.5.2622" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.021961][ T42] audit: type=1400 audit(273.910:59407): avc: denied { read } for pid=15789 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.021981][ T42] audit: type=1400 audit(273.910:59408): avc: denied { perfmon } for pid=15782 comm="syz.5.2622" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.047795][T15717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.067255][T15717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.139961][T15717] team0: Port device team_slave_0 added [ 274.151357][T15717] team0: Port device team_slave_1 added [ 274.166526][ T5784] Bluetooth: hci0: command tx timeout [ 274.168731][T15717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.168741][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.168754][T15717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.184446][T15717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.184457][T15717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.184470][T15717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.230050][T15717] hsr_slave_0: entered promiscuous mode [ 274.231331][T15717] hsr_slave_1: entered promiscuous mode [ 274.231643][T15717] debugfs: 'hsr0' already exists in 'hsr' [ 274.231655][T15717] Cannot create hsr debugfs directory [ 274.356701][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 274.438400][T15717] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.448189][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.456326][T15717] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.464336][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.471795][T15717] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.480103][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.486554][T15717] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.489413][T15717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.507825][ T10] usb 6-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 274.519156][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.519186][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.519199][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.519212][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.537264][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 274.537285][ T10] usb 6-1: Product: syz [ 274.537293][ T10] usb 6-1: Manufacturer: syz [ 274.555336][ T10] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 274.555998][ T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 274.558755][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 274.595186][T15717] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.595261][T15717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.595441][T15717] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.595524][T15717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.658714][ T5496] 8021q: adding VLAN 0 to HW filter on device eth11 [ 274.729653][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.730183][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.741223][T15717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.767942][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.768140][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.776821][ T5934] usb 6-1: USB disconnect, device number 21 [ 274.778258][ T5934] garmin_gps 6-1:1.0: device disconnected [ 274.787034][T15815] IPVS: Error connecting to the multicast addr [ 274.793725][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.801260][T15814] IPVS: Error connecting to the multicast addr [ 274.813634][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.813685][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.831762][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.831810][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.867333][T15814] Invalid source name [ 274.867345][T15814] UBIFS error (pid: 15814): cannot open "ubifs", error -22 [ 275.528106][ T5496] 8021q: adding VLAN 0 to HW filter on device eth12 [ 275.633399][T15841] bridge0: port 1(dummy0) entered blocking state [ 275.633491][T15841] bridge0: port 1(dummy0) entered disabled state [ 275.633635][T15841] dummy0: entered allmulticast mode [ 275.636390][T15841] dummy0: entered promiscuous mode [ 275.637441][T15841] bridge0: port 1(dummy0) entered blocking state [ 275.637533][T15841] bridge0: port 1(dummy0) entered forwarding state [ 275.746615][T15846] key id 000004d2 not found [ 275.779080][T15717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.790196][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 275.969733][T15852] device-mapper: table: 248:13: thin-pool: Error opening metadata block device (-ENOENT) [ 275.969757][T15852] device-mapper: ioctl: error adding target to table [ 276.100297][T15860] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.255930][ T5784] Bluetooth: hci0: command tx timeout [ 276.379382][T15860] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.516116][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 276.576997][T15860] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.663307][ T5496] 8021q: adding VLAN 0 to HW filter on device eth13 [ 276.697086][ T34] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 276.712671][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.712700][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.712712][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 276.712723][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.739354][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 276.739370][ T34] usb 7-1: Product: syz [ 276.739378][ T34] usb 7-1: Manufacturer: syz [ 276.783973][ T34] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 276.785038][ T34] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 276.791690][ T34] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 276.843448][T15860] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.012096][T15717] veth0_vlan: entered promiscuous mode [ 277.013270][T15869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.013470][T15869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.019320][ T34] usb 7-1: USB disconnect, device number 17 [ 277.020737][ T34] garmin_gps 7-1:1.0: device disconnected [ 277.041303][T15717] veth1_vlan: entered promiscuous mode [ 277.137838][T15717] veth0_macvtap: entered promiscuous mode [ 277.151493][T15717] veth1_macvtap: entered promiscuous mode [ 277.190150][T15717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.204880][T15717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.246436][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.246511][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.248917][T15884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=15884 comm=syz.5.2638 [ 277.286947][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.286984][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.410258][ T8381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.410272][ T8381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.453073][ T8381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.453093][ T8381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.617488][T15894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 277.702960][T15901] ip_tables: iptables: counters copy to user failed while replacing table [ 277.761497][T15903] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 277.768273][T15904] program syz.1.2644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.049872][T15914] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 278.056266][T15914] FAULT_INJECTION: forcing a failure. [ 278.056266][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 278.056294][T15914] CPU: 2 UID: 0 PID: 15914 Comm: syz.7.2606 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 278.056312][T15914] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 278.056316][T15914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.056324][T15914] Call Trace: [ 278.056338][T15914] [ 278.056342][T15914] dump_stack_lvl+0x100/0x190 [ 278.056371][T15914] should_fail_ex.cold+0x5/0xa [ 278.056390][T15914] should_failslab+0xc2/0x120 [ 278.056412][T15914] __kmalloc_cache_noprof+0x91/0x6d0 [ 278.056424][T15914] ? acpi_evaluate_object+0xf5/0xe00 [ 278.056441][T15914] acpi_evaluate_object+0xf5/0xe00 [ 278.056457][T15914] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 278.056469][T15914] ? kernel_text_address+0x8d/0x100 [ 278.056481][T15914] ? __kernel_text_address+0xd/0x30 [ 278.056494][T15914] acpi_evaluate_integer+0xdf/0x220 [ 278.056511][T15914] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 278.056534][T15914] acpi_bus_get_status+0x19c/0x420 [ 278.056552][T15914] ? __pfx_acpi_bus_get_status+0x10/0x10 [ 278.056570][T15914] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.056590][T15914] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.056607][T15914] i2c_acpi_do_lookup+0x9b/0x280 [ 278.056638][T15914] ? __pfx_up+0x10/0x10 [ 278.056655][T15914] ? __pfx_i2c_acpi_do_lookup+0x10/0x10 [ 278.056668][T15914] ? acpi_ut_track_stack_ptr+0x114/0x180 [ 278.056685][T15914] i2c_acpi_get_info+0x115/0x360 [ 278.056698][T15914] ? __pfx_i2c_acpi_get_info+0x10/0x10 [ 278.056712][T15914] ? acpi_fetch_acpi_dev+0x99/0xe0 [ 278.056726][T15914] ? __pfx_acpi_fetch_acpi_dev+0x10/0x10 [ 278.056742][T15914] i2c_acpi_add_device+0xb5/0x200 [ 278.056754][T15914] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 278.056765][T15914] ? __pfx_up+0x10/0x10 [ 278.056781][T15914] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.056800][T15914] ? acpi_os_signal_semaphore+0x11e/0x1a0 [ 278.056817][T15914] acpi_ns_walk_namespace+0x4cc/0x760 [ 278.056829][T15914] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 278.056841][T15914] ? __pfx_i2c_acpi_add_device+0x10/0x10 [ 278.056853][T15914] acpi_walk_namespace+0xff/0x1d0 [ 278.056866][T15914] i2c_acpi_register_devices+0x82/0x160 [ 278.056879][T15914] i2c_register_adapter+0x8c0/0x13f0 [ 278.056902][T15914] ? of_alias_get_id+0xb1/0x110 [ 278.056937][T15914] i801_probe.cold+0x30c/0x8bf [ 278.056961][T15914] ? __pfx_i801_probe+0x10/0x10 [ 278.056981][T15914] ? mark_held_locks+0x40/0x70 [ 278.056995][T15914] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.057011][T15914] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.057027][T15914] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.057043][T15914] ? __pfx_i801_probe+0x10/0x10 [ 278.057060][T15914] local_pci_probe+0xdd/0x1b0 [ 278.057075][T15914] pci_call_probe+0x176/0x800 [ 278.057088][T15914] ? pci_match_device+0x147/0x7d0 [ 278.057101][T15914] ? __pfx_pci_call_probe+0x10/0x10 [ 278.057119][T15914] ? __pfx_pci_match_device+0x10/0x10 [ 278.057131][T15914] ? pci_find_host_bridge+0x3c/0x80 [ 278.057160][T15914] pci_device_probe+0x25b/0x400 [ 278.057179][T15914] ? __pfx_pci_device_probe+0x10/0x10 [ 278.057207][T15914] ? sysfs_create_link+0x68/0xc0 [ 278.057230][T15914] ? __pfx_pci_device_probe+0x10/0x10 [ 278.057254][T15914] really_probe+0x241/0xa60 [ 278.057305][T15914] __driver_probe_device+0x210/0x460 [ 278.057328][T15914] device_driver_attach+0xd1/0x220 [ 278.057345][T15914] bind_store+0x123/0x1d0 [ 278.057360][T15914] ? __pfx_bind_store+0x10/0x10 [ 278.057377][T15914] drv_attr_store+0x74/0xb0 [ 278.057392][T15914] ? __pfx_drv_attr_store+0x10/0x10 [ 278.057407][T15914] sysfs_kf_write+0xf2/0x150 [ 278.057424][T15914] kernfs_fop_write_iter+0x3e0/0x5f0 [ 278.057444][T15914] ? __pfx_sysfs_kf_write+0x10/0x10 [ 278.057472][T15914] vfs_write+0x6af/0x1050 [ 278.057498][T15914] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 278.057526][T15914] ? __pfx_vfs_write+0x10/0x10 [ 278.057547][T15914] ? find_held_lock+0x2b/0x80 [ 278.057583][T15914] ksys_write+0x12a/0x250 [ 278.057605][T15914] ? __pfx_ksys_write+0x10/0x10 [ 278.057630][T15914] do_syscall_64+0x123/0x790 [ 278.057648][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.057660][T15914] RIP: 0033:0x7f906399f559 [ 278.057670][T15914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.057680][T15914] RSP: 002b:00007f90648c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.057692][T15914] RAX: ffffffffffffffda RBX: 00007f9063c25fa0 RCX: 00007f906399f559 [ 278.057701][T15914] RDX: 000000000000000c RSI: 0000200000000b00 RDI: 0000000000000009 [ 278.057709][T15914] RBP: 00007f9063a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 278.057716][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.057723][T15914] R13: 00007f9063c26038 R14: 00007f9063c25fa0 R15: 00007fffcd5869b8 [ 278.057738][T15914] [ 278.064980][T15914] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 278.221499][T15921] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 278.252776][T15918] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 278.335782][ T5784] Bluetooth: hci0: command tx timeout [ 278.463049][T15928] nfs4: Unknown parameter '00000000000000000000003' [ 278.474622][T15929] kAFS: Invalid Command on /proc/fs/afs/cells file [ 278.532144][T15931] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2650'. [ 278.605947][ T8901] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 278.647174][T15939] CUSE: unknown device info "" [ 278.647189][T15939] CUSE: unknown device info "" [ 278.647196][T15939] CUSE: unknown device info "" [ 278.647202][T15939] CUSE: unknown device info "" [ 278.647209][T15939] CUSE: zero length info key specified [ 278.780158][ T8901] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 278.787934][ T8901] usb 6-1: config index 0 descriptor too short (expected 65374, got 45) [ 278.799098][ T8901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.799114][ T8901] usb 6-1: Product: syz [ 278.799122][ T8901] usb 6-1: Manufacturer: syz [ 278.799131][ T8901] usb 6-1: SerialNumber: syz [ 278.917234][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2654'. [ 278.917256][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2654'. [ 279.020097][ T42] kauditd_printk_skb: 2097 callbacks suppressed [ 279.020113][ T42] audit: type=1400 audit(278.910:61506): avc: denied { ioctl } for pid=15915 comm="syz.1.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x4004550e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.041895][ T42] audit: type=1400 audit(278.930:61507): avc: denied { prog_load } for pid=15915 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 279.042867][ T42] audit: type=1400 audit(278.930:61508): avc: denied { bpf } for pid=15915 comm="syz.1.2646" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.044109][ T42] audit: type=1400 audit(278.930:61509): avc: denied { perfmon } for pid=15915 comm="syz.1.2646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.045978][ T42] audit: type=1400 audit(278.940:61510): avc: denied { perfmon } for pid=15915 comm="syz.1.2646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.049147][ T42] audit: type=1400 audit(278.940:61511): avc: denied { perfmon } for pid=15915 comm="syz.1.2646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.049221][ T42] audit: type=1400 audit(278.940:61512): avc: denied { perfmon } for pid=15915 comm="syz.1.2646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.049714][ T42] audit: type=1400 audit(278.940:61513): avc: denied { bpf } for pid=15915 comm="syz.1.2646" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.051730][ T42] audit: type=1400 audit(278.940:61514): avc: denied { prog_load } for pid=15915 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 279.053099][ T5784] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 279.078966][ T42] audit: type=1400 audit(278.970:61515): avc: denied { create } for pid=15956 comm="syz.2.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.087087][ T8901] rtl8150 6-1:1.0: couldn't reset the device [ 279.087310][ T8901] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 279.095108][ T8901] usb 6-1: USB disconnect, device number 22 [ 279.108702][T13778] udevd[13778]: setting owner of /dev/bus/usb/006/022 to uid=0, gid=0 failed: No such file or directory [ 279.145013][T15959] netlink: 'syz.5.2657': attribute type 11 has an invalid length. [ 279.173193][T15959] fuse: fd is not a fuse device [ 279.188335][T15946] syzkaller0: entered promiscuous mode [ 279.188351][T15946] syzkaller0: entered allmulticast mode [ 279.212602][T15959] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 279.220595][T15959] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 279.445045][T15965] overlay: Unknown parameter 'fowner>18446744073709551615' [ 279.491545][T15966] 9p: Bad value for 'rfdno' [ 279.571984][T15974] overlay: Unknown parameter 'fowner>18446744073709551615' [ 279.574516][T15969] 9p: Bad value for 'rfdno' [ 279.713004][T15985] netlink: 'syz.1.2661': attribute type 16 has an invalid length. [ 279.713018][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2661'. [ 280.407016][ T5784] Bluetooth: hci0: command tx timeout [ 280.617174][T15992] Bluetooth: MGMT ver 1.23 [ 281.371681][T16002] netlink: 'syz.5.2665': attribute type 1 has an invalid length. [ 281.371694][T16002] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2665'. [ 281.809777][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 281.809797][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 281.823285][T16020] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 281.823337][T16020] rtrs_client L2844: pathname cannot contain / and . [ 281.878704][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2669'. [ 282.008517][T16024] netlink: 15231 bytes leftover after parsing attributes in process `syz.7.2670'. [ 282.190498][T16029] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 282.245150][T16027] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 282.440828][T16037] bond1: Removing last arp target with arp_interval on [ 282.571809][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2676'. [ 282.612839][T16045] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.725772][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 282.726281][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.036204][T16058] hfs: can't find a HFS filesystem on dev sr0 [ 283.053364][T16057] hfs: can't find a HFS filesystem on dev sr0 [ 283.392528][T16071] fuse: fd is not a fuse device [ 283.405796][ T10] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 283.559692][ T10] usb 12-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 283.564637][ T10] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.564679][ T10] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 283.564700][ T10] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.571910][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 283.571932][ T10] usb 12-1: Product: syz [ 283.571944][ T10] usb 12-1: Manufacturer: syz [ 283.585533][T16062] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 283.592031][ T10] garmin_gps 12-1:1.0: Garmin GPS usb/tty converter detected [ 283.601159][ T10] usb 12-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 283.805126][ T7682] usb 12-1: USB disconnect, device number 2 [ 283.808719][ T7682] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 283.808996][ T7682] garmin_gps 12-1:1.0: device disconnected [ 284.027490][ T42] kauditd_printk_skb: 719 callbacks suppressed [ 284.027508][ T42] audit: type=1400 audit(283.920:62235): avc: denied { ioctl } for pid=16080 comm="syz.2.2686" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x80085502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.075998][ T42] audit: type=1400 audit(283.960:62236): avc: denied { prog_load } for pid=16084 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.078338][ T42] audit: type=1400 audit(283.970:62237): avc: denied { bpf } for pid=16084 comm="syz.5.2687" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.078367][ T42] audit: type=1400 audit(283.970:62238): avc: denied { perfmon } for pid=16084 comm="syz.5.2687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.080552][ T42] audit: type=1400 audit(283.970:62239): avc: denied { perfmon } for pid=16084 comm="syz.5.2687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.080645][ T42] audit: type=1400 audit(283.970:62240): avc: denied { perfmon } for pid=16084 comm="syz.5.2687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.081745][ T42] audit: type=1400 audit(283.970:62241): avc: denied { perfmon } for pid=16084 comm="syz.5.2687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.082925][ T42] audit: type=1400 audit(283.970:62242): avc: denied { perfmon } for pid=16084 comm="syz.5.2687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.083639][ T42] audit: type=1400 audit(283.970:62243): avc: denied { bpf } for pid=16084 comm="syz.5.2687" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.084220][ T42] audit: type=1400 audit(283.970:62244): avc: denied { prog_load } for pid=16084 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.155848][ T1371] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 284.308076][ T1371] usb 7-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 284.323354][ T1371] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.323397][ T1371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.518751][T16097] x_tables: duplicate underflow at hook 2 [ 284.575157][ T1371] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 284.590135][ T5784] Bluetooth: hci0: unexpected event for opcode 0x080b [ 284.590578][T16099] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2691'. [ 284.609229][ T1371] wwan wwan0: port wwan0qmi0 attached [ 284.752190][T16102] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 284.803904][ T1371] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 02:4a:47:dd:f0:f5 [ 284.919541][ C2] [ 284.920623][ C2] ============================= [ 284.922680][ C2] [ BUG: Invalid wait context ] [ 284.924741][ C2] syzkaller #0 Tainted: G L Y [ 284.927432][ C2] ----------------------------- [ 284.929599][ C2] swapper/2/0 is trying to lock: [ 284.931715][ C2] ffff88805a865bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x255/0xd70 [ 284.935702][ C2] other info that might help us debug this: [ 284.938112][ C2] context-{2:2} [ 284.939624][ C2] locks held by swapper/2/0: 1, last CPU#2: [ 284.942099][ C2] #0: ffff88805a866118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 284.946172][ C2] stack backtrace: [ 284.947782][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 284.952172][ C2] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 284.954665][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.958873][ C2] Call Trace: [ 284.960359][ C2] [ 284.961602][ C2] dump_stack_lvl+0x100/0x190 [ 284.963634][ C2] __lock_acquire+0xfcc/0x1f40 [ 284.965631][ C2] ? xa_load+0x149/0x2c0 [ 284.967590][ C2] ? xa_load+0x149/0x2c0 [ 284.969444][ C2] lock_acquire+0x1d1/0x380 [ 284.971408][ C2] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 284.973765][ C2] _raw_read_lock_irqsave+0x46/0x90 [ 284.975994][ C2] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 284.978341][ C2] kvm_xen_set_evtchn_fast+0x255/0xd70 [ 284.980661][ C2] ? kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 284.983044][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.985405][ C2] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 284.987954][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 284.990158][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.992614][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 284.995030][ C2] xen_timer_callback+0x1db/0x2a0 [ 284.997143][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 284.999463][ C2] ? __hrtimer_run_queues+0x361/0x9a0 [ 285.001686][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 285.003891][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 285.006202][ C2] __hrtimer_run_queues+0x135/0x9a0 [ 285.008391][ C2] hrtimer_interrupt+0x441/0xaa0 [ 285.010501][ C2] __sysvec_apic_timer_interrupt+0x109/0x470 [ 285.013003][ C2] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 285.015401][ C2] [ 285.016666][ C2] [ 285.017923][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.020368][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 285.022664][ C2] Code: 07 a5 02 e9 83 63 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 fe 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 285.030588][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 285.033151][ C2] RAX: 0000000000226b91 RBX: ffff8880206f4b00 RCX: ffffffff8be9c325 [ 285.036458][ C2] RDX: 0000000000000001 RSI: ffffffff8e61bf5d RDI: ffffffff8c831080 [ 285.039747][ C2] RBP: ffffed10040de960 R08: 0000000000000001 R09: ffffed100d446825 [ 285.043056][ C2] R10: ffff88806a23412b R11: 0000000000000001 R12: 0000000000000000 [ 285.046365][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 285.049668][ C2] ? ct_kernel_exit+0x125/0x180 [ 285.051747][ C2] default_idle+0x9/0x10 [ 285.053523][ C2] default_idle_call+0x6c/0xb0 [ 285.055591][ C2] do_idle+0x3ae/0x5b0 [ 285.057332][ C2] ? __pfx_do_idle+0x10/0x10 [ 285.059317][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 285.061795][ C2] cpu_startup_entry+0x4f/0x60 [ 285.063772][ C2] start_secondary+0x21d/0x2d0 [ 285.065797][ C2] ? __pfx_start_secondary+0x10/0x10 [ 285.068033][ C2] common_startup_64+0x13e/0x158 [ 285.070162][ C2] [ 285.081074][ T1371] usb 7-1: USB disconnect, device number 18 [ 285.082060][ T1371] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.151854][ T1371] wwan wwan0: port wwan0qmi0 disconnected [ 285.810012][T11169] bridge_slave_1: left allmulticast mode [ 285.810185][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.813291][T11169] bridge_slave_0: left allmulticast mode [ 285.813423][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.834103][T11169] pim6reg99999999: left allmulticast mode [ 285.917312][T11169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.918667][T11169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.919298][T11169] bond0 (unregistering): Released all slaves [ 285.921413][T11169] bond1 (unregistering): Released all slaves [ 286.185244][T11169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.185856][T11169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.293335][T11169] team0 (unregistering): Port device team_slave_1 removed [ 286.301706][T11169] team0 (unregistering): Port device team_slave_0 removed [ 286.468623][ T5496] 8021q: adding VLAN 0 to HW filter on device eth14 [ 286.590393][T11169] IPVS: stop unused estimator thread 0... [ 286.772176][T11169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.831175][T11169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.841688][ T5496] 8021q: adding VLAN 0 to HW filter on device eth15 [ 286.881659][T11169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.924668][T11169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.040029][T11169] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.100941][T11169] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.139647][T11169] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.190699][T11169] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.228097][ T5496] 8021q: adding VLAN 0 to HW filter on device eth16 [ 287.246570][T11169] dummy0: left allmulticast mode [ 287.246629][T11169] dummy0: left promiscuous mode [ 287.246759][T11169] bridge0: port 1(dummy0) entered disabled state [ 287.256633][T11169] bridge_slave_1: left allmulticast mode [ 287.256649][T11169] bridge_slave_1: left promiscuous mode [ 287.256741][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.257971][T11169] bridge_slave_0: left allmulticast mode [ 287.257986][T11169] bridge_slave_0: left promiscuous mode [ 287.258077][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.343886][T11169] bond0 (unregistering): Released all slaves [ 287.349217][T11169] bond1 (unregistering): Released all slaves [ 287.352712][T11169] bond2 (unregistering): Released all slaves [ 287.356151][T11169] bond3 (unregistering): Released all slaves [ 287.359526][T11169] bond4 (unregistering): Released all slaves [ 287.364259][T11169] bond5 (unregistering): Released all slaves [ 287.370596][T11169] bond6 (unregistering): Released all slaves [ 287.375352][T11169] bond7 (unregistering): Released all slaves [ 287.381568][T11169] bond8 (unregistering): Released all slaves [ 287.385410][T11169] bond9 (unregistering): Released all slaves [ 287.389873][T11169] bond10 (unregistering): Released all slaves [ 287.395624][T11169] bond11 (unregistering): Released all slaves [ 287.400921][T11169] bond12 (unregistering): Released all slaves [ 287.406840][T11169] bond13 (unregistering): Released all slaves [ 287.412092][T11169] bond14 (unregistering): Released all slaves [ 287.418074][T11169] bond15 (unregistering): Released all slaves [ 287.421751][T11169] bond16 (unregistering): Released all slaves [ 287.425923][T11169] bond17 (unregistering): Released all slaves [ 287.429533][T11169] bond18 (unregistering): Released all slaves [ 287.433073][T11169] bond19 (unregistering): Released all slaves [ 287.438530][T11169] bond20 (unregistering): Released all slaves [ 287.442431][T11169] bond21 (unregistering): Released all slaves [ 287.445518][T11169] bond22 (unregistering): Released all slaves [ 287.448630][T11169] bond23 (unregistering): Released all slaves [ 287.451766][T11169] bond24 (unregistering): Released all slaves [ 287.453885][T11169] bond25 (unregistering): Released all slaves [ 287.456008][T11169] bond26 (unregistering): Released all slaves [ 287.458417][T11169] bond27 (unregistering): Released all slaves [ 287.460279][T11169] bond28 (unregistering): Released all slaves [ 287.462312][T11169] bond29 (unregistering): Released all slaves [ 287.465116][T11169] bond30 (unregistering): Released all slaves [ 287.467532][T11169] bond31 (unregistering): Released all slaves [ 287.469658][T11169] bond32 (unregistering): Released all slaves [ 287.472245][T11169] bond33 (unregistering): Released all slaves [ 287.511324][T11169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.512707][T11169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.513478][T11169] bond0 (unregistering): Released all slaves [ 287.515299][T11169] bond1 (unregistering): Released all slaves [ 287.615014][T11169] tipc: Disabling bearer [ 287.617915][T11169] tipc: Left network mode [ 287.951056][ T5496] 8021q: adding VLAN 0 to HW filter on device eth17 [ 288.020153][T11169] hsr_slave_0: left promiscuous mode [ 288.020503][T11169] hsr_slave_1: left promiscuous mode [ 288.022177][T11169] hsr_slave_0: left promiscuous mode [ 288.022392][T11169] hsr_slave_1: left promiscuous mode [ 288.022605][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.022618][T11169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.022945][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.022953][T11169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.044860][T11169] veth1_macvtap: left promiscuous mode [ 288.044888][T11169] veth0_macvtap: left promiscuous mode [ 288.044939][T11169] veth1_vlan: left promiscuous mode [ 288.051265][T11169] veth1_macvtap: left promiscuous mode [ 288.051291][T11169] veth0_macvtap: left promiscuous mode [ 288.051342][T11169] veth1_vlan: left promiscuous mode [ 288.051389][T11169] veth0_vlan: left promiscuous mode [ 288.140497][T11169] team0 (unregistering): Port device vlan0 removed [ 288.300024][T11169] team0 (unregistering): Port device team_slave_1 removed [ 288.302023][T11169] team0 (unregistering): Port device team_slave_0 removed [ 288.357056][ T5496] 8021q: adding VLAN 0 to HW filter on device eth18 [ 289.062934][ T42] kauditd_printk_skb: 4091 callbacks suppressed [ 289.062946][ T42] audit: type=1400 audit(288.950:66336): avc: denied { search } for pid=16166 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.062970][ T42] audit: type=1400 audit(288.950:66337): avc: denied { search } for pid=16166 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.062986][ T42] audit: type=1400 audit(288.950:66338): avc: denied { search } for pid=16166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.063029][ T42] audit: type=1400 audit(288.950:66339): avc: denied { search } for pid=16166 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.072141][ T42] audit: type=1400 audit(288.960:66340): avc: denied { search } for pid=16167 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.074358][ T42] audit: type=1400 audit(288.960:66341): avc: denied { search } for pid=16167 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.074383][ T42] audit: type=1400 audit(288.960:66342): avc: denied { search } for pid=16167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.074400][ T42] audit: type=1400 audit(288.960:66343): avc: denied { read } for pid=16167 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.074416][ T42] audit: type=1400 audit(288.960:66344): avc: denied { read open } for pid=16167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.074432][ T42] audit: type=1400 audit(288.960:66345): avc: denied { getattr } for pid=16167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.892123][ T5496] 8021q: adding VLAN 0 to HW filter on device eth19 [ 290.299200][ T5496] 8021q: adding VLAN 0 to HW filter on device eth20 [ 290.694276][ T5496] 8021q: adding VLAN 0 to HW filter on device eth21 [ 291.089100][ T5496] 8021q: adding VLAN 0 to HW filter on device eth22 [ 291.469530][ T5496] 8021q: adding VLAN 0 to HW filter on device eth23 [ 291.811219][ T5496] 8021q: adding VLAN 0 to HW filter on device eth24 [ 292.199718][ T5496] 8021q: adding VLAN 0 to HW filter on device eth25