last executing test programs: 2.729639247s ago: executing program 3 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x101ff, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000280)={0xc5, 0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)={0x3, {{0xa, 0x4e23, 0x1, @empty, 0xe79}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x0, @empty, 0x6}}, {{0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}}]}, 0x190) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380017a8b55122002bbd700002000000070000004e871c2b22671617dd64a79ab175b78faca8b27cb2d191f8abf101e02a1b5f44f9eda393d9ab3841baf3f83d340a650ef43dbf3f60704db709956d04b3915418e8b23b5e991e43a5659bc844197528f24db2ba5b83685cbdbe179c3bd605240f2ac8435f27bf0beaeab43c19724c3d5f5b34d895c8d4b8b7b38647dbf39e50debd2e94fbbc4861c0b6a2212e73991d7c30e96bf5e341301abcd365729d096a", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="000200007f00000100"/24, @ANYRESDEC=r5], 0x38}, 0x1, 0x0, 0x0, 0x2004806}, 0x40080c0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0xffffeffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x802}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2800c008}, 0x44) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r9, &(0x7f0000000500)=""/166, 0xa6) r10 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r10, &(0x7f0000001500)=[{&(0x7f0000000000)="47ad3d32240000006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85980084665ea561e52d97fbe9e839a0", 0x34}], 0x1) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$BSG_IO(r8, 0x2285, &(0x7f0000001540)={0x51, 0x0, 0x0, 0x1, &(0x7f00000003c0)='\f', 0x8, 0x0, 0xffffff13, 0x1000, 0x60, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0xfffffbff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c461fd6f88b24c3c13f33e0f0010c4c169de7b06b9800000c00f3235008000000f303e644084e466b8a8008ed036f36f400f01df0fc79d4f150000b8e2a4f387ef66bafc0c66b8007066ef0f20d835200000000f22d8", 0x56}], 0x1, 0x53, 0x0, 0x0) 2.570247302s ago: executing program 3 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001ab000/0x1000)=nil, &(0x7f0000a8c000/0xc000)=nil, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0xe4, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7487, 0x7a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc880}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r6}, './file1\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'bond_slave_0\x00', @multicast}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}}, 0x20}}, 0x8008006) 2.269998902s ago: executing program 3 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) readahead(r0, 0x97, 0x9) 2.21025526s ago: executing program 3 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff073b6b4d732322ac29b2bc00002082b03dcc59051c845cd67000000014000400000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, r5, 0x1, 0x4000003, 0x0, {{}, {}, {0x5, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) 2.202272644s ago: executing program 3 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x619}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40041) listen(r2, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0x260}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd29, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x4004001) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r9, 0x6) syz_kvm_assert_syzos_uexit$x86(r7, r9, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r10, 0x5421, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000840)={0x1, 0x0, [{0x30000, 0x0, 0x0}]}) 2.016611893s ago: executing program 3 (id=466): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000bc0)='./file0\x00', &(0x7f00000004c0), 0x2004800, 0x0) fspick(0xffffffffffffffff, &(0x7f00000010c0)='./file0/file1\x00', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66"]) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000d00)='\\%\xbf()\x92\x01L\x82\x00\xfb#\xff', &(0x7f0000001140)='./file0\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x8000}, 0x6) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = syz_io_uring_setup(0x4757, &(0x7f0000000600)={0x0, 0xa0b, 0x4, 0x1, 0x2bf}, &(0x7f0000000680), &(0x7f00000006c0)) r3 = syz_io_uring_setup(0x10497, &(0x7f0000000700)={0x0, 0x3a83, 0x8000, 0x3, 0x288, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000440)={0x0, 0x1, &(0x7f0000000300)=[0x6], &(0x7f0000000380)=[0x499, 0x51, 0x6, 0xaf3e, 0x81], &(0x7f0000000400)=[0x2, 0x6, 0xf7b1]}) mq_open(&(0x7f0000000180)=',\xa0&^]-\x00', 0x1, 0x138, &(0x7f00000001c0)={0xfffffffffffffff9, 0x5, 0x9, 0x3}) r6 = syz_usb_connect$cdc_ecm(0x3, 0x8c, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000502505a1a440e60002030109027a0001010080060904000d02020600a40724060000ecfc052400e2080d240f010300000003000300f807240a040d01f606241a03000b042402050e24070008000000c9d2080000001524120500a317a88b045e4f01a607c0ffcb7e392a09050002b007040905820210060701860905030220000206040000"], &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x5a, 0x6, 0x80, 0x40, 0xfb}, 0x158, &(0x7f0000001180)=ANY=[], 0x1, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io(r6, &(0x7f0000000b80)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="2000010100000104572c2a3e84e110d2dc3d75d01e1af620821c51d1b0ecc6874e5f3eda94a7c5bafffbbff10e42c5834008398046d9d5edae5ef18fa146c4b0972018ffb6d55edbf54ab198fa29b8f240bbc3e3f21186a3bf8da1a21527c156b7b6efd5096bacc55aa5ca8ea1a94b429b1af1b552800aa1e1217566c833a8baeb4bf77899d288535bbf77e8787b060e69439565145057fe4cf9a19ded501f2f3c319539bdabfab482298c904fe8fe7145e2bf728ce920e62ca99049e25d28dd3505a40daba66469b9586d04bc9f001ba5b3ac3e3c34b2c0d096f4d2dec8456de51b6f659a9e486698ccf2a56c25ff82d92e31a775376455323333d82a81b74000000000000000"], &(0x7f00000011c0)=ANY=[@ANYBLOB="0003c5000000c5030c4524999adc000000000000c9af5727d49eeae7b9b1186fde9ba5aa2e1f94e273d1d9c872bb5ec2c5faa16845972b9cae9bc27b437a43d59ae2543e742df25002bb7ee5e209923f5e58c8c81a680f3c65010db1fc5f14fb32487da5396c61666cd995569e074bb5d21caf82644dae06ec8a08b225511c8001c454c042974f8ac80fd3c82554e823a97fa137167dc57db4c03488e3727d8ad51772346a419cd12dc1b7520633c23ccb5663e5ff83b69af8019391d9ff03000000000000fd238215f6dc9e05389c04081ae1ca395671dd6ff629b765f464bc8e92bb18b6e905ec3f8ca0c518d14e1f09277814e917f253c412404c8db1bb2dbc662f15226505805a1ef23cf31deaab1f612ac5acb57ed87aa52d8c9c1a3e3585f67085999dd88da77294c8c4"], &(0x7f0000000a40)=ANY=[@ANYBLOB="000fac000000050fac0005141004f5c82fcc598887888f5a2458e8e01b797f22100bbf1b68c97fda335ac951304911ed0b83f84bf67ebd6a6d28ff04cd9115e9dc5b100a7b3b7882b7385a99ae2e491ff410e6d693658135d05bce48a85f7797d458260af7bc5713def49894b47bdca7ee9b4397cd147c399e061714096b888b890f8a31c37220fad76c1931fafb8c20f545a6931e76d4eaef7130330b10010488000f910600090b1001024e000907070081"], &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x67, 0x3, '\x00', "9bd8e759"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x5, 0x2f, 0x8, 0x4, 0x80}}}, &(0x7f0000001000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)={0x40, 0x7, 0x2, 0xe9}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "1183"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "c1b4"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x8d}, &(0x7f0000000f80)={0x40, 0x1e, 0x1}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x2}}) r7 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xf24, 0x76d9, 0x27, &(0x7f0000000480)={[0xc]}, 0x8) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="ad", 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x8}) write$usbip_server(r0, &(0x7f0000000140)=@ret_unlink={{0x4, 0x6, 0x0, 0x0, 0x3ec}, {0xfffffffb}}, 0x30) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) fcntl$lock(r8, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x800000001b, 0x4, r9}) 1.258135754s ago: executing program 2 (id=487): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0x0, 0x9, 0x47524247, 0x2, 0x6, [{}, {0xe40b, 0xffffffff}, {0x8, 0x8}, {0x6, 0xff}, {0xae, 0x4}, {0x6, 0x3}, {0xb8b2, 0x8}, {0xa20d}], 0x0, 0x3, 0x3, 0x1, 0x1}}) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ioprio_set$pid(0x1, r1, 0x2004) (async) recvmmsg$unix(r0, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001380)=""/86, 0x56}], 0x4, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x10001, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001580)={"11a5cf578861dc9340b28798051e0eeb676e469ab17bb9b10820843066cab58b", r9, 0xffffffffffffffff}) close(r13) (async) ioctl$XFS_IOC_ERROR_INJECTION(r9, 0x40085874, &(0x7f00000015c0)={r8, 0x7ff}) (async) close_range(r6, r2, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r11, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) r18 = socket$qrtr(0x2a, 0x2, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001880)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000001980)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r7, {0x0, 0x0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000001c00)='./file0\x00', 0x4000, 0x2, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000001e40)=0xe8) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) r26 = geteuid() getgroups(0x2, &(0x7f0000001f40)=[0xee00, 0x0]) sendmsg$unix(r9, &(0x7f00000020c0)={&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r1, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r1, r16, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r18]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r1, r21, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r1, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {r1, r26, r27}}}], 0x110, 0x4004800}, 0x40000) (async) r28 = getgid() (async) r29 = getgid() setgroups(0x3, &(0x7f0000002100)=[r28, r17, r29]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) setuid(r16) r30 = syz_open_dev$mouse(&(0x7f0000004180), 0xfffffffffffffff7, 0x800) ioctl$GIO_FONTX(r30, 0x4b6b, &(0x7f00000045c0)={0x136, 0x10, &(0x7f00000041c0)}) 1.202008077s ago: executing program 2 (id=488): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc}) 1.201636504s ago: executing program 2 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x10000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xd1}]}}}]}, 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) ioctl$KVM_RUN(r3, 0xae80, 0x0) 999.130708ms ago: executing program 2 (id=494): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sysfs$1(0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={&(0x7f00000001c0)=@l2, 0x80, 0x0}, 0x40) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000062102000100000008000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x9, 0x27ae9d265e4b504, 0x6) membarrier(0x10, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000540), 0xeb32, 0x280) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x8, 0x5, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x32, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x52cb, 0x0, 0xff, 0x819, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000600)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r11, r9, 0x0) 881.570504ms ago: executing program 1 (id=497): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) (async) pread64(r0, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1001}, 0x40880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}]}, 0x2c}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x1, 0xfffffffa, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50010}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040c15) (async) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040c15) 880.268458ms ago: executing program 1 (id=498): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c001290fbce2e19", 0x33}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c001290fbce2e19", 0x33}], 0x1}, 0x0) (async) 878.275131ms ago: executing program 1 (id=499): r0 = socket(0xa, 0x5, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) (async) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) tkill(r1, 0x17) tkill(r1, 0x23) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x22041, 0x0) splice(r0, &(0x7f00000001c0)=0x1, r3, &(0x7f00000004c0)=0x9, 0xb, 0x1) (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000307000000ac1414aa00000000300000000000000084000000010000000100050001000000050000000900000001000080050000007b000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="20000000000000008400000008000000000000000000ff"], 0x68, 0x4000094}, 0x24000052) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0600d62b8ec410b843579db604e62da20088602d4afd0dd543af13b5c65641b01d0399907351e36c8060017b9d0b486afc33250df6de101d2d9ecebfbe087745f36889cfc65d8cc99a3b31880c0cef1adef44a35cfa1bb3353262341fa05250000ff0e3c82c5482d1356c27f12fd9892c74334810e44b3468bb4e271c89717a83319718934b412143a255db782d962096b9f0ee54875bf93a06017294340b31bf18add170fd4fc7f1d6fcbc01f12a1a12275ab8f84de4d566d35bd0385718d2a468b8fb3ccc85287df5d5d08c08b13a01785", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25050000000c00038008000300020000000c0006800800060008000000500001800800030008000000090001006574683a00000000380004001400010002004e21ac1414160000000000000000200002000a004e21000000030000000000000000000000000000000001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c088) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="fab0817d0400020024001280110001006272696467655f736c637665040000000c00058005001d0000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044810}, 0x4040) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x5, 0xfffd, 0x8001, 0x2, 0x5, 0x200, 0x1eca, 0x40}, 0x20) 779.765594ms ago: executing program 1 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xbc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000840)="653f34b93f082dfa4c853c1101e687a6942e937632127be2487728d615c5f50dcc5fc85442c7d6a8588ecc127cfe5a268c95077d120dd2a5c1ce9693459807336d8688d15a8a5d7d5459de1c734c94fc"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 670.900235ms ago: executing program 1 (id=503): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7cf}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0xf, 0x87ff59449b678a1c}, &(0x7f0000000240)=0xc) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="184b0b75e0b2cf3c525c4dc5f4de6bc7f1325d312deb11b5200299df156f096b2c1e5f3294c9ccf6b03e772e48a85dcd2a6a33e04557625c1b309fcd94607d61523a93c1bb83caf4fab72cf3bc0a00923d6f863ad01f8a1fbbf5b04a07ea45fb3bb726ce5ef3a9737b05d65bf6a213ac0611005c5a7374de5e2fe086bccd3452be9a6aa4ff6f3e9f350690d4c081b27050a0781709998b6ca2f908", 0x9b}, {&(0x7f0000000340)="fee78b28eee7ad777676ddabb20c6ec0e474f1b2bc2d91d5a327b0d793c2876904c536c03b360fc79ecdeb04bc6d0bd5640a63b5d8b4871b497b4bc9211dbc22ee90d490f51c7ad730550816ddedc4e2edfb1f44190bfad7a66d30486191fe3c3c2aa6ecc3834f4fcd7fd6ede48e6d1d1a5f5da0746cd7bd15d42d1e19e0185c16c569836481cf58b05d853bb372c6a548674f8efd777519906c0c28f5e8befe0d0a6dfd56fc6fd95da15e5ff629404134c82c092481a7c2f2dd16732f6f61f366884f35f79ff60e1b379bca2e665c2d236d38f871a79982659710b29712735be3", 0xe1}, {&(0x7f0000000440)="550ded5546788bbaea464d9bca69b9bfd73995225a167d027d3e5c5b89c95303f8119f82ee4e4b8a3aa4b0b94ff7ae6c3b87d23daf4371833142b5b640e0ccf187671891185f936a249ff3f657eb0b226ae6ccde0ae5824fd7ba4d992e03bcbde357010fb45857dbe27e8300576573c3c45d10b10075919e0733eb58bb53eca31086875be0fe682853d31059acd6668ac7ddf6cb70dd9281f6e56874e4ee68145f8882c117d6e5e79b9a147ace157b81e769a7630af02d2fc1c190ff1118f6952384f248c76f450d84d5d4037adc8c97871e57f2239606d7762b2ee5dd4c14387e053376ff443a6439244ecdba57bbac66258a", 0xf3}, {&(0x7f0000000540)="3935aa43d66598508c972b0671657916d588e0e0bad1290e845bd49a654fb261a92b887ea7cbfd1da44d8193bc5f1755ceaaf639495deec739d93ec9", 0x3c}, {&(0x7f0000000580)="aa44fbd4418ff5b48baed43b997a7cb12b4848df28e5c86246f1cd4ee2da8c70768e73f1e16c2849158576c669550a7d40eb1224973cff0a7ea435d5ecf08d7c56516009bd5f82e7e28d62aa72d48627dd2144ab75f4d0ccac05a8d0a15c2a8291d5fcebdb3c151ee397a2c1d6a494985be14eee01bacc7e48a340c8e6a4cc3c639f070558bc020aa2a5719d6141d8b813070b1c86a37efa305d10a01d5b98b5f8b7", 0xa2}, {&(0x7f0000000640)="11112d21c94f1ad76d2571fa83ea65e44849453bed88a456c3484a2c6253445180649324db1f2e367d3a644977eda770e91fcde8df890fa02001d2853ecb709fdec7dc960cdb584374c2f010c09f55c9c0db932a26c9ce2856ae3d2dc9fd19582dafe63dfc307934d84c613d757262316fb363ed84207bd41bdf13c1dde05a5284c9e2", 0x83}], 0x6, &(0x7f0000000780)=[{0x50, 0x11, 0x8, "7c379203d45db05b8cb020fb43695181f3c6c95d829c47746edfdcc7e18c05b976af7a964fc8e97db083c998615386602c34b0999d8d10e833748a15fcfa"}, {0xc0, 0x102, 0x1ff, "7a1aabb8093c9ae9d03b058697caf65824943e8185885813677e666aceae12414e4ab20e3f07de5fd1e7d36d9628783c961d210b7aafdcbee894ab902d11a2de02037b7acfce582d37ad4f4c112718db1e3013feed58cb4f790ea5c289d599882a927839ae376ffb37c37d020d01e8e7701893c3a145a259a4682d94f9b0369858f7e737cb83af9e28a762a5ce029f55f3779202216825e707a1ea6356033c9b889a721fb638960703ef84af26ec3a"}, {0xe8, 0x104, 0x4, "66e60ee13f8bea82ae26b9f761097954365156f06cbba306eea539a29adfe18d0237c066789f108920c3b5ce94af2a3b286a8a6164f961ae12e1407b6c298e7ba266ec6fea75a3ea1989eddb08061ba986a1cb6bde9832f0662dcf50453ca4687471db72875872ae76f4473ee50b40f6f4e110dca3343a1f6f8e5d8433d8ab0bd78fa30ff253fbcd6c190ce6b7c4fba17f366c67d2a53b39e3526a7b8a9ad775dbed1733b5f3553ebe371856aa5bd6f11f804323caae529b319d95bf52b56a2b95d31e2069999edf28bf3246b256d07a6db8486c66d5a7"}, {0x28, 0x114, 0x4, "3006fc914bea8156cbd754a2ccb80ce2c11899d43d"}], 0x220}, 0x8000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x41, &(0x7f0000000ac0)=""/65, 0x41000, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2cbac, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000b40)=[{0x1, 0x3, 0x3, 0x7}], 0x10, 0xffffffc0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000c40)={r0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'gre0\x00'}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000cc0)={{r3}, 0x0, 0x4, @unused=[0x5, 0x7, 0x69, 0x75a], @name="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"}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001cc0), r0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40)={r5}, 0x8) fstatfs(r3, &(0x7f0000001d80)=""/96) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001e00), r7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001ec0)={r2, 0x48, &(0x7f0000001e40)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x7, @private0, 0x5}, @in6={0xa, 0x4e22, 0x0, @private0, 0x39}]}, &(0x7f0000001f00)=0x10) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000001f40)={0xa, {0x3, 0x0, 0x1, 0x3c}, {0xf, 0xfcad, 0x0, 0x4}, {0x2, 0x2}}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001fc0)=@buf={0xf, &(0x7f0000001f80)="6465b99c9c952c4a007eab9757df41"}) fstatfs(r4, &(0x7f0000002000)=""/106) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002200), r7) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x80, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x4020) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x84, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x160f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5272}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000002580)={0x0, 0x1, r4, 0x1}) 621.441427ms ago: executing program 0 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r13, @ANYBLOB="07279f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) 620.385675ms ago: executing program 1 (id=505): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe0c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="200b40e5ffff27b109cab5fb159650aaea29a540e17eb298327b56e8fc029aae6eb5fd3d8584cbc225d10508bbe9bcda3dc383fa589a4bae9053ec6d7047721b06ffd68bd6a0e24d3d03013509d01b8d96c22c3be73196ef4e5232b075444646c410330b39cd64eba4d74945c70b26425906f34a8bf755097567ae99657542eccbe28735d9f31b492d76c5"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x15) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4c0}, 0x30000480) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffe00, 0x40041) (async, rerun: 64) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) (async, rerun: 64) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000240)=""/243) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xa8, @loopback, 0x10001}, 0x1c) (async) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e31, 0x7, @loopback, 0x23}, 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000100)={0x14, 0x6d, &(0x7f0000000080)="f72011ce2476d03b3c1d64e32b786422f246ae990a4ffa33237b868098313b38d2fb0a9278efff05ca31a783b9aa0c5e50dcb31971d3463c783f122fa8b051b4eec17d49741497f27204cc5bddbc6a4333ec0261cd025b2ac75a56b11b5a1202c118a3c8a13b41d2577f27495f"}) (async) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) 430.603531ms ago: executing program 0 (id=506): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0x8000a56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) ioperm(0x6, 0x1, 0x95d) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000002480)={0x1, 0x1, &(0x7f0000002240)=""/207, &(0x7f0000002340)=""/79, &(0x7f0000002400)=""/42}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) (async) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r10, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000004) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r10, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000004) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500140012800b000164030062726964676500000400"], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 271.18884ms ago: executing program 0 (id=507): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaa8aaaaffffffffffff86dd600000000018c8097245d12e20538d9a02730601fe800000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/74, 0x40, 0xab1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@newchain={0x36ac, 0x64, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffe, 0xffe0}, {0xffe0, 0x4}, {0x1, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x9, 0x84}}, @TCA_RATE={0x6, 0x5, {0xf0}}, @filter_kind_options=@f_u32={{0x8}, {0x2d4, 0x2, [@TCA_U32_SEL={0x214, 0x5, {0xa, 0x40, 0x5, 0xb, 0x4, 0x7, 0xd, 0x92a, [{0x70f, 0x1, 0x7, 0x800}, {0x7, 0xcc, 0xb, 0xc}, {0x8, 0xffff, 0x2, 0x9}, {0xffff, 0x8, 0x1, 0x6}, {0x70, 0xffffffff, 0x3, 0x2}, {0x6, 0x9, 0x9, 0x6846}, {0x80, 0x7f, 0x158b, 0x2}, {0x80000000, 0x3, 0x2, 0x7f}, {0x9, 0x800, 0x0, 0x77}, {0xdd, 0x3, 0x1000, 0x9}, {0x9d, 0x8, 0x2, 0x7}, {0x9, 0x8001, 0x7, 0xa98}, {0xcad, 0xb, 0xdc2d, 0x5}, {0xff, 0x8, 0xfffffffb, 0x5}, {0x7ff, 0x2, 0x7ff, 0xed}, {0x8, 0x8, 0x61e, 0x2}, {0x3, 0x4, 0x6, 0xffffffff}, {0x8, 0x10001, 0x8, 0x1}, {0x2, 0x1, 0x4, 0xfff}, {0x8, 0x5, 0x9, 0x1}, {0x200, 0x4, 0x2, 0x9}, {0x9, 0x9, 0x2, 0x6}, {0xfffffffc, 0x7, 0x4, 0x7ff}, {0x2, 0x5, 0x0, 0x80000001}, {0x7a5, 0x6, 0x8c23, 0x2}, {0x800, 0x10, 0x95b, 0x4}, {0x0, 0x1, 0x0, 0xc8}, {0x2, 0x5a, 0x78, 0xfff}, {0xfffffffd, 0x9, 0x7fffffff, 0x8}, {0x80, 0xc, 0x7, 0xd}, {0x700, 0x9, 0x8, 0x89ca}, {0x8, 0x7, 0x6, 0x6}]}}, @TCA_U32_HASH={0x8, 0x2, 0xd96c}, @TCA_U32_POLICE={0x9c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1258980f, 0x4, 0x0, 0x3, 0xd, {0x2, 0x2, 0x8, 0x4, 0x5, 0x2}, {0x5, 0x1, 0xf01, 0x40, 0x7, 0x8}, 0x5, 0x9, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8d85}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x9, 0x0, {0x4, 0x1, 0xd, 0xfff7, 0x5, 0x2}, {0x6, 0x1, 0x7, 0x4, 0x4, 0x1}, 0x1, 0x3, 0x66}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x6}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3304, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_POLICE={0xc18, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x7, 0x10000, 0x5, 0x9, 0x100, 0x1ff, 0x7fffffff, 0x7, 0x9, 0x800, 0x7, 0x2, 0x2, 0x716f, 0x243, 0x2, 0x101, 0x1000000, 0x8d1b, 0x5, 0x8, 0xa7f, 0x9, 0xba, 0x0, 0x4, 0x2, 0xffffcefd, 0x10, 0x1, 0x0, 0x80000000, 0x3ff, 0x4, 0x1, 0xff, 0x6, 0x4, 0x4, 0x9, 0x3, 0x81, 0x9, 0xfffffffb, 0x9, 0x4, 0x0, 0x8, 0x9, 0x400, 0x9, 0x8, 0x978, 0x1, 0x0, 0xfffeffff, 0x8000, 0x1, 0x85, 0x0, 0x2, 0xffc00000, 0x101, 0x7, 0x101, 0x0, 0xdbba, 0xf, 0x620e, 0x947e, 0x30bc, 0x7e4, 0x3, 0x8, 0x0, 0x8000, 0x9, 0x7f7b, 0xabcb, 0xd738, 0x3ff, 0x1, 0xfffffffe, 0x3, 0xff, 0xc, 0x5, 0x3ff, 0x0, 0x0, 0x7, 0x4, 0x397, 0x30, 0x5, 0xf5, 0xd, 0x1, 0x40, 0x7, 0x1, 0x4b9, 0x5b2b, 0xc7, 0x8, 0xda63, 0x4, 0x3, 0x200000, 0x3, 0x6, 0x1000, 0x192f, 0x3, 0x1, 0x9a8, 0x100, 0x27d7, 0x8000, 0x7, 0x1, 0xe, 0x6, 0x1, 0x4, 0xfffffff3, 0xffff, 0x5, 0x7a73, 0x9, 0x8001, 0xfffff801, 0x1, 0x401, 0xaad, 0x0, 0x10, 0x3ff, 0x6, 0x4, 0xc48b, 0x9, 0x5, 0x80000001, 0x0, 0xda9, 0x2, 0x0, 0x7, 0x10001, 0x8000, 0x8000, 0x10, 0x101, 0xf, 0x7, 0x7, 0x2, 0x523, 0x10000, 0x6, 0x5, 0x0, 0x0, 0x6, 0x9, 0x3000000, 0x91a, 0x3, 0x5, 0x7fffffff, 0x7fffffff, 0xeee, 0x800, 0x80000000, 0x1, 0x4, 0xffffffff, 0x7, 0x2, 0x7, 0x8000, 0xf06, 0xd, 0x9, 0x1, 0x7, 0x64d, 0x6, 0x9, 0x7, 0x3, 0x4, 0x7fffffff, 0x4, 0x1, 0x1df3, 0x4, 0x9, 0x7, 0x5, 0x5, 0xc6d, 0x6f3, 0x4, 0x2, 0x5, 0x7, 0xe67, 0x0, 0x9, 0x8, 0x8, 0xffffffff, 0x8, 0x1, 0x1, 0x9, 0x7, 0x38cd538f, 0x1ff, 0x93, 0x2, 0x27, 0x1, 0x1, 0x5, 0x8001, 0x800000, 0x81, 0x3, 0x401, 0x4, 0x7, 0x4, 0x7ff, 0x1d, 0xa7, 0x5, 0x0, 0x3, 0x2, 0x8, 0x8, 0x1, 0x7, 0x1, 0x3, 0x1, 0x9, 0x7, 0x9, 0x7, 0x45d77966, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10, 0x9, 0xd9, 0x0, 0x1fd4, 0x3, 0xffff0001, 0x100, 0x10, 0xecb, 0xfffffe01, 0x84, 0x7ff, 0x43e16fa4, 0xf, 0x8, 0xe4, 0xfffffffe, 0xc, 0x8, 0xff, 0x2, 0x6, 0x200, 0xbe, 0xfffffffb, 0x5, 0x1, 0x1, 0x1, 0x94, 0x7, 0x7f, 0x4, 0x10, 0x5, 0xc, 0x0, 0x1000, 0x19, 0x2, 0x6, 0x5, 0x10000, 0x80000001, 0x1, 0x6, 0x1, 0x1, 0x7, 0x3ff, 0xa, 0x6, 0x5, 0x3db0, 0x1, 0xffffffff, 0x8001, 0x80000000, 0x7, 0xbf, 0x1, 0x2, 0x81, 0xd572, 0xa, 0x0, 0x3, 0x4, 0x2, 0xfffffff9, 0x3, 0x4, 0x2223, 0x3, 0xc, 0x800, 0x7, 0x1, 0x7, 0x8001, 0x3, 0xec8, 0x8, 0xfff, 0xd, 0x7, 0x1000, 0x7, 0x10, 0x7, 0x5, 0x56, 0x6, 0xfff, 0x5, 0x2, 0x10001, 0x1000, 0x5, 0xffff6727, 0x4b, 0x6, 0x2, 0x8001, 0x1, 0x7ff, 0x5, 0xfe000000, 0x80, 0x80, 0xd5a0, 0x7e1, 0x769, 0x8, 0x8, 0xf2, 0xc6, 0x0, 0x8, 0x200, 0x100, 0x8, 0x5, 0x1, 0x0, 0x8, 0x7ff, 0x4, 0xffffffff, 0xd4c, 0x4, 0x10001, 0x4, 0x101, 0x3b, 0x5, 0x0, 0x0, 0x5, 0x9, 0xfffffff8, 0x7, 0x4, 0x9, 0x111e, 0x8, 0x7, 0x3, 0xe9, 0x4, 0xe5bd, 0xffffffd3, 0x3, 0x9, 0x5, 0x8, 0x5, 0x0, 0x2, 0x7fff, 0x4, 0x8, 0x7, 0x5, 0xfffffff7, 0x9, 0x4, 0x9, 0x3, 0xffffff80, 0x400040, 0x3, 0x2, 0x81, 0x7, 0x2, 0xee8e, 0xffffffff, 0x3ad0, 0x0, 0x9, 0xc0, 0x0, 0x0, 0x5, 0x8, 0x9, 0x9, 0x6, 0x5, 0x3, 0x39e6, 0x8e1, 0xb3, 0x8, 0x40, 0x6, 0xd605, 0xfff, 0x14000, 0x2, 0x1, 0x9, 0x7fffffff, 0x1b, 0x5b0, 0x81, 0x7, 0x4, 0x401, 0x1, 0x0, 0x6, 0x0, 0x1, 0x4, 0x1, 0x4000, 0x5, 0x6, 0x8, 0x4, 0x80, 0xd33c, 0xfffffff7, 0xf310, 0x1, 0x400, 0x1, 0x5, 0x4, 0x1, 0xbd6f, 0x80000000, 0x4, 0x7, 0x7, 0x0, 0x0, 0x40, 0x97f, 0x1, 0x7, 0xa, 0xf5, 0x9, 0x8, 0x2, 0x1000, 0x6, 0x80000001, 0x2, 0x4, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x8, 0x8, 0x5a, 0x8, 0x4, 0x4, 0x2, 0x0, 0x4, 0x3, 0x7, 0x3, 0x5, 0xf, 0x4, 0x10001, 0x0, 0x5c, 0xfb8, 0x40, 0x3, 0xa, 0x6, 0x9, 0x9, 0x0, 0x17e2, 0x3, 0x9, 0xfffffffe, 0x5, 0x8, 0x620d, 0x8, 0xe0, 0x1, 0x8000, 0x10000, 0x0, 0x1, 0x3ff, 0xa, 0x2, 0xb47e, 0x0, 0x1, 0x9, 0x0, 0x7, 0x2, 0x40, 0x800, 0xffffffd6, 0x6df6, 0xff, 0xfffffffd, 0x66b, 0x8, 0xf0, 0x2, 0x7f, 0x173d, 0xc0000, 0x2, 0x6, 0xc, 0x10001, 0x7fffffff, 0x2a, 0x4, 0x0, 0x1, 0x9, 0x5, 0x7f, 0x10000, 0x1, 0x4, 0x6, 0x9, 0x7, 0x9, 0xb, 0x6164, 0x3, 0x8, 0x80000001, 0x436, 0xa, 0x8, 0x9, 0x2, 0x6, 0x7f, 0x80000, 0x10001, 0x8b8e, 0x1e7, 0x6, 0xa79a, 0x4d31, 0x7ff, 0x8000, 0x1, 0xda, 0x80000000, 0xfffffff8, 0x7ff, 0x1, 0x3, 0xfffff800, 0xaa, 0xa91, 0x2, 0x0, 0x204, 0x8, 0xffff07c8, 0x1ff, 0x8, 0xcb2d, 0x3ff, 0xf, 0x8, 0x3, 0xfff, 0xd, 0x8, 0x5, 0x4, 0x2, 0x3, 0x8, 0x1883a7d3, 0x6, 0xffff08f6, 0xffff, 0x7, 0x16c3a169, 0x4, 0x7, 0x4, 0x10000, 0xb5, 0x80, 0xf5a4, 0x7, 0x9, 0x8001, 0x9, 0x0, 0xdc90, 0x9, 0xf1, 0x7, 0x6, 0x9, 0x9, 0x4, 0xc599, 0x3, 0x5, 0x81, 0x5, 0x9, 0x7, 0x400, 0x81, 0x7, 0xf2, 0x1ff, 0xe0, 0x8, 0xe, 0x1, 0x0, 0x2e47, 0x1, 0x0, 0x5, 0x80000000, 0xf, 0x7, 0x84b8, 0x100, 0xbec, 0x7f, 0x6, 0x3, 0x5, 0x4, 0x800, 0x0, 0x4, 0x5, 0x2, 0x0, 0x5, 0x1, 0x3, 0x2, 0x8, 0x5, 0x0, 0x6, 0x7, 0x2, 0x7fffffff, 0x2, 0x6, 0x0, 0x68e8, 0x9, 0x5, 0xdd, 0x0, 0x1, 0x10, 0x7, 0x5, 0x9, 0xff, 0x1, 0xfffffff9, 0xff, 0x0, 0x0, 0x4, 0x9, 0x7, 0x0, 0xd, 0x2, 0xb, 0x5, 0x2, 0xea70, 0xa, 0x4, 0x5c25, 0x2, 0x2, 0x7, 0x7, 0xfffffff9, 0x80000001, 0x2, 0x4, 0x4, 0x5, 0x4, 0x0, 0x7, 0x10, 0x1]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x26ac, 0x4, [@m_connmark={0x10dc, 0x12, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x800, 0x1, 0x100, 0xff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x6, 0x9, 0x1}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0xfff, 0x7, 0x4d5, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc16, 0x8001, 0x10000000, 0x0, 0xd29}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x2, 0x1ff, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x3, 0x10000002, 0x8001, 0x9}, 0x7f}}]}, {0x1004, 0x6, "b0c8f22852c23023b83c45ff44d145421f5c28686c13d059442567a31b80b4b53d030a6ec028f1f1a25bc3641dfff09d591afe74f05c1f0bdc33066ea7ea8107e5ffefb572b4a183692ed9067ad817e3c31a049205ce096f6dec8dcd2eccda10ea08d9d01ba2e3212ce1afcfdfc5389eff442066f2234f0f4b36f1be0efc877cfbbd7c32d9b6f2b6ea01a3003fa46fa4ebcda19c71aa7fceb9641d846cb2b80f1a336b148a8afa93d9857df1c9d236cb5e814cd797d6f85dfb9c10c164ee7ae40e615d2aaba0f62194d0ca4f9ec4eb780de47e93e0f4d457967a57135dd5c2f524113d20687782251704402a5959ad9ab8b2b9ae335da5e633d18f7a635a7e80dd808cebf43d86cff8f5181bfcd97c7a93fc070217084df4670d8f40edc7fc3838c3de1618791c8d6a59964907b7c64565a6cd95a481086b22e1d2e39454308fe929aa0313ef0aee38adc7db7398b228c2d7755aa240c7a0e2f747f6c6bdde44e73c20c8a1f4c6b9393c36bc19b10e1c1d73cd546275f6959fc494153e84f73dddbbe7ad502a624be3b03325f00e4d013018029df1effe0aa8b61af6890e0842eac9aca125c71a99e06820a33f7bde3d1f82ac1341f877474d8f27fee4fad58eea97eac0adc968f38d980722b65a2a902527ea055ff31246bcc7412c9babd252452e60561853aa71e6e07eea291e3bf1df82a6bc94b50ea654cea8da930ad20a8802113c82609b4bc95bccb8cb017b81d29d23fac87317c46acc171c64a74fa00a8edfbb4f26d7b8003473a66abbcf1082bbbc0208c478078c50c86e7afbe660af418bcf6b36815552a57ba70adeb88cbb3971f217f56d51bc23881651eba362f1b5ffc71cd2647fdd28f78bc70c00fea00fa58ddc714d0bdfa0df513dcd664b2028e18d7d536699f16228b2152e215157dc30d70a6f363e7eea1fda10711632001fcd75529272683881bc95cfa1f1cb5cef5bb1702f3688866d354f6f1a8cc945f853c8b52419a328fc5e07c41c98d4d20bfddce4fdd8b3297f56151e3dd6264da159c4bc52a9fd485fc781d10b4fbd20e6cad101982263d60365ea9de22d56244a9730478f48e72bd1bf72adc9d6308cd5d9a9137bbe96e8da1c31a746e58ae32fc7cf9abf94ab94341cb5e150205c858821c0b0237e6e335748d07c2cb0f321c0dc257a8be98f0ccc7b21c728969e1368f0be2d101db526e11fdf02895f950d4825652f9dc56546d53e85f0ce65375ff8b717d06ac7cc8d6d68e553c34539c17f26bd06f8ffb76475eae7090413ccf2edbe860e86bf897ac345bd0646bd0a7a01df43c6145d6eec46c59373c299d80975796fb5193354607f778353ade5d8087cb7fda536e96fc5bc2a4e007e36aa3c124db53dacbab867bd129c8bbb59768fbab84d074749bc645da546246c3e073e4f3f4bb3bb5c51b362565090d94d3a87cc88f0991b3202ccf6a6a4667c1f4dd8d15ed929bfd6967753d0a46c8257c1c7769687737b6e4b2eeffdd38bd2d60ab1cd3527c2ad055172d661b860b3a3658ae5df3a135b95654fb14271eeb71d8f76c87d70da88313d5db4a70f2c9a321fa025a5721fc85ce610f39aebe07e0b31333143eed947622f325ef1a32d3f6f6fc53fb4063da722c8010113d2a022d4c7f57e812f817e008b082ce464e3ef65c20e7ebd29bd90db122ef56b509bbed27944ecf4f73833651a91755d167e16258a8e093d96421a99117c570b3e9053ab86e8ad09946ff341c810a50e681c67ca57d31e9fca09a345ac1b906f27cbad0cb152c091c2bc3d86c8a68438b6b83b9e3f260cc591de252495d370f725f181a5a929e27ef81fd0a3b870014516bff24564452b9913fd4363ff93d55a94c005572accc5527a854c2f98cb85051b1061f823ac0b91f2796baa4db1395832c3b071c44c54b7e0d236be6b69b49cdf531c0e42da0df9c40023705c0e1d2755d802cbbef579ceb8eedd5e45c12d244131c608ee61fa00dead6ef2f7644e14d3f44d9cf4f8e7ff642abc16551f49d190fe5115f688d1a3fbbb6a0e0c58834eac8d7a8e782bfe3cea3ada4502f44ed56ed9fb54e0c26a522495fd99acefd0fb4de5e44e858345200d0009e6277ee53c5e02d58d6d060f6b108c6eaaa63efa8c186c3034bc4591a5ae51c92cbf70614d766e88b787b3320358d71aac720e6b18ab795214a8b5a07b7bab127a84154af44ad3d75aae26e1e0242e094068759a504694f69d827692e1d6c0b8fbcabda672e5501a7be6e485125ac1ce0994f571cb2a884f683773ec5745add6bd5eaf078ae80c10eaf890d44450fb05388b620f59025b7369e71338e62283d7bae7afdec193d730c492348b0042345c298d35be00b01407d1babc9721c28bb2bf65cec607758797b226d9d72213bfbf21650762bbc0481ce18bbe05417e84eca86cc100927a46bf9a2e9dd0715cb397c056f58e39b5ece42c871105582b6bf72dcc0be173288d545313c4374c5eb522d2e72892b7dd80d69d82eb873fec8f8cfab3d3225f7008d1f3423a02bb623f2cdb5bb5dbb2e9354002fc73a72a3b8c3d353ee76c8297c29edda2b1f336be954523f7db2089849e7e5e435b30754f1770d1500d84026dae5f4d70a1165dea7a0564175b2cce3d925dcccea67647cf984796af182d278365268f8f44387e366ad16b90cea72c7b6ab2ba13db0fcd64219fbea88ca82618f5a1d7af13ad4ce465e6d64dbd0a7382982f5b90578706858f63f5f5123ada10110d2a7ec64d899b2e35ff709e26f9ca25f85bff7b90b8f4497e2a8a19a3410fdd565ebc98b7c941a1f449b689e8556b7c117e8fa86c895f3a12dc82831ad06a7cf4d38e8212e305995def921a1fb4687629484cfac49c761acc78f231fa22b62e96cc25538f83fb579e99533621cfeceb964a1e4177edf63c852ecfa98a4a8ce48921c466c6ccbf3926ea240ee2ba677b102460e7d10136c77b6ca1dc187e8b592ceb6453c74002bdc2160f4b9a9c6f9de31b920146c5aeb3a7c5d479a8a33cc64ae57f01aacf1fe944baa51b31d9a0d579ce442fc0b32948e55680dac2f2ff52c560e0f5bb33fb6e61083343ddefbb0e92234e42f4830c9c61b194f42fefc49d141640156ae2c85498f7ea66de64625f7a449e6a1d923771eb93af77280f05db0ff1ecd3c0e1b3fa82098d9a72a59d82473e72f57fda4d185bdcf9954b7c2d9c41a4b31aa9afbdbc639f114083cae4714eae8f25a4d56eb858c2bd5822943bff285022231cd75c353c318054ecbb6ad30f228b2a950d07e7ff0a5a53c99b15ac85c4e7efb2d3a18dfddb245ee2403671111133cabff137b767f2f506820b47bccf23e8973430b7599a63943394f5ff62f6afd7eb93b3d08fb875e932ab0ba44190265695bda805db8f027ab02b92d87dc84759272be65c5c1e82a1119ec89b3fb31b7f38667e486e6bdc32a16446917eb108bc106a0b4b6c3fb216b7464a9e1a5b02c465a0dffd1201790cc1c26c822169e3bdb75d397a0fea4810188e62ca88ee0a89d7e953fd09dc7b6257a4a479b79623cdfba0250253b82a9635c18b9b3e5af7511f41633f34efa9990309cd145cf7d1fc3b202f3e20b158b24c1a93dcf19ccc74ddae3f03a4b8c961e451ecb9345b28cbb3db1120da60c74a2395fb98c131ccbb42f4d7aefc31b69342a93418262a146d5378110db36a7f5e3e2f4dbd2b449f9345aec58a95a6f90d15baea8170041b1ead34aa4b83d18c948f564a24962e1c03666f8e0a6e280bac0b0198f63b8bae67cd83b3e48a0a5fab05fab776619e8dae1ff3eb208247439184cb0644ab63130351399c46c4db0db94a20f0a0be6a155c83516cc80d824ffdb154b5e78135ee040a2a4f93a5d7d6f2b564fe32cd07e9e467867d23beca8f6442f12e384357333a498a129ce25f5d56254aa4f73f187618892f9c93635beb6e74247c9a2d62a83946a34e00a0e5849dc9f3ce6a297237e7661de883d7189cbf91b07cf357363b379270e6b0ee3867418af357c8c92648fb8c948f0ba2e4ed62bdc9337de0ffa4c13a1d42f00ad82b4cdebed6d059cbde2f160235cd71537cbfe10814bf0bdad3c4381a1d7de35864512fa9f6eaaac1273f3b8490df87b451e0804ac11e34b8ba47987376760a79825e75a617447bff729d19a12441e1652ebd8e4531288772d2586d102ba287743c49138f12c213cf4cab3781f0f5e02770414d402052976d4201ef3722fb81836c81a9bcf9f678a88c83c2b3302a22a752861e483c7cfb1560100f4de2da42416ca0020a8d6eeb5fd76ba0c7d38108bf91feba6cdc23a847d48783947a08d21672a3b4bec397f630260dda25a1600119f245603576f0d30c30ee45a097f86d2029b54df37a05e261bf1220e66def8d6a9abfe62f6d0e5eecf3439cb197e3c4cd7b2223496471d7d750c3029d5c76e0b3712f55acd333c82bc719504541567fca05c8da75e4055cd84fb173771ec136acb949a21c632a46d28cda1a4da46b404eff75767be3824f0074fd3c702272a7c00dc407a9bf3e6f906dc6162bafd7ab61c46deddc025c6d27061706339bc04980815104fe1083c72eeef9dfe2cc73c76cbcff979865b681b371a8707d4191238c2f778341b23482270f59067597ba3582535781d5be9d1a88c47f04fa6d642186d2f06b084f39d1fe6328a53d0d985c1678dc1eab0c9a8dbda357d9f05d878b221323f76aa645cde434313829b94637d70ba8a95e6844f7bcf09775c2c456c3fc846ba77c2bbe5c169b089d3382504febc0c0098a26ac27d5057d723945fa3faf3bef47a0e391d380119766519dfc5c64513a232316fca6ff132e3639c8196f1b8a967957693b3c970fe12159280cfa9ded443df9e42d518ecd196eaa59474f2db0bd3ea9f9c382f4c1ae1a7e612c4ad30ceb82de7a19094dc083c94cf8202a2821a675019b0e3641eb3e3223b17e18aed2b0fbfae8ba44ee6d297d6fc25428194c3c4959b6996f3bfa091ce6f34c0aa6eaa41e9a852e34f5c529fa2bb77920633fe29db2fe4610ece132902f9df5d95dcfe6807ecb62081eaa9aaa9532edc0cc57c51c3efda308cfbf938efbebde0bf7a4bddff1601eed5968f7e56853dcee895e2af0e5da645a57cd00e5579c06982f9c877634ea161e33823cd070b58b0fe0e97b2ce5aecff4fb5c8811ed411810b153f0ae0a37d9c2fa8eebbc07b19f164fa9b1709913ea09d6ee58cfce32353998d1d78af45d4c9dfca930c88f49b676955dd473ab08421a44d26acb068d1d14cb50d406a21bd09bd3b8c44c76f541e0bc02629856114244d16610c80ba278eb30f0fb1c5a07f7e685f25fb650e5e72bd2f775cc5e252f8cd1c8887622db02a3288ec2b82ddb0699e338367a3f599b0c176af24eddd8f5bea1bcdb54aa0263dae5d02cbea00f6c6d1604e7652befe6765bafd4e490019291f7188a7d7709fa597cccef5d81f57e5779782f11d08c0f6a3a6e27fe9225e345fcb26f6d7c23885e41e1e000af83f5ed1ed7d1fb53bcbd8c6b200890c56dbc15815c2779dd0912a188bc082638803c8d985336786f75cd3a24d44b5a544f04bef72cc715754ee97722f85310d9de0ba7fa6e631b9325f532be037854b5b2ba62390547644ae098a13755675f9a572f171fc245a31000cccc50bb9774ea34ef51ad6a1e15e97352a631f72586af52b84257009d4a9024129475c769538696438ef66713b8de5de0851916346fb18b76bd5aea3733cf6a2a2f54e5cc6cb1f15efa5b9152b5db6ca46e1903edd0c9f6e2427e2485"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x154, 0xc, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x7, 0x10000000, 0x2, 0x7f}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0xed, 0x6, "38eb3d396275fb53bbb79abd24cf4579ac3fcbd1eee475d5b819d6f0798bb2814d0d694c2b74a8d332e528117e204169a2abc3f6eadf982726c68989a14fe368bf9a9a5c8e30b0cf6b7cc65daa654d515eb0d2334038262fa30294d475e2ed89df78f3a5bb8fc5b53ec1ec7ff67f28ec6f87818c31b21fdec8aa1d4c61717c9b43e20b3bb3a98fed90cac5b65d7cf7a8a0355094cc9fb80b88f0fed5d98bbed809f4fcd8174a8897b8d5416e5aa1687143241ab547f189fdd46fa029ae20472e6a9b797efa94e67a579c87d029bdcbe21ea36a64aae6b5b592f080bef1ca30363189eeba6df34a997d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x9c, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4c6, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2139, 0x6}}]}, {0x56, 0x6, "6b9cbdf2af81ed16a6ad9d75af00ab99a3f3419ea54156fd93cb639171f81baedda106116a356c457f8b7a839a360bcb494c2437a80bc57dd468c63f8eb9cfb1179cd6a476d2399cd134c83bfcc37e589602"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x103c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_MARK={0x8}]}, {0x1004, 0x6, "f93ccde918bd001ec0cc3cf81407fd74ff037ccf6fb98e8944d849f9b9caffc130c076a15b86851a9241cf552a0d9abfc86506bb77c360bd2f7f8497de4ea2d24a4b8f4fc3f8a8a14890ee0e90837ae45f316790d7a16e51ca9b7d8b0a70c60fdafc96565542115fdb86902777411807a857312f0da8dc28d617efb122d6f782dbde7fd708b751504f83fd4e95c861288ae0d2e2581ae21a37a5507313c1be4c96598d83d37f6e51064eef500cd9111ab9489a9b61b2d2c3f8fb51c49e1361c1569de4f3297e4483b255441387bf797644fa006ab918b16356737fba4665db7a9fa57d3a2749f8b8c07c53a2f6f0ea2bde5ca4c1b4c730b70ce9f68d7580bf4c52fb039d31658d0cabd88dd9278fc35ca42e8d62b5b7760ba6b1ca11d2a0c5d67df30055e7b94125421919b7545b33700455da2be84d0f83ee01e2f8034b55c82a63df85b60baada15cc0755c09b1985f1edb6f3faaaae5e333810adff5bb3b016e82021fecaeb08cf9141a2d1b559716a179fca58d9be4e129afa49e2aa48f94d0af6ea691d3d37b629099f2f778d441b97bfaa2e42fe48f6c7f82477daa03767a4dcb434a326d2cdf9d0c8eb4955970664a3836951298f94ad0152875f45add8abf71c89775880606dab517038b65503f442264926120fe643c63d2f359d1b7d556535d7fe973dddda0eb5c511af289ed64d8900a41d617eff0b0d72a707870282d377fa5099647f48e6b90ccd17c197e9955130e5ac668a60b5e7054c750d8adaa76cece96ae7f68c824d00c261f260125fba88ea3cfd8d65198a7a93c9089239d7f03cc2914d5c2f15f13bb4596ec08be19b82d525b7a338951a21749f12c1bfd6ceb1fac86e2a703125b4fdcfb3b492b790db8d5430e0188bfb6dd0768931e1b8fa50def35090e1ef25577c6a105e53c56daec9db6db63bc0e7edd24ad790abe683a2d6e346d9e5d689a7f2beff69cf35b355a3f4f06d4b84db39b2582f949cbaf8c67ab1051625d47894a066ed0509db05c465a02e97501fce2868bb923482cb4bdd9b776192e3925c05905d27fb5037bd4fba19cfe22e4d2277835e46812b5a21086ef623af6d5017e783c1c0cf9c1d3429cd149160d10c84cd6d8f6d5f7cdcbfd075685ebccf733ca77fc2ba088b4560859e4cc05b7547c8b3db3c0098de4d860380a2fc79e107107a65bfa76436fa8cb86c7a9e3753bd8b72fa01ab69c429120110e2d0903011bdaae4d143404e218c8527066f20f58203c67ad34da6b4e89f4a1cb39649fad0df56a0407bde0c0ca1485f61e25272d9f270ad4594733dd87c7958a4f039be90808306573bc4469ee12d5034177fe993d6e45ba2d4e789f0337e41abc482afed55919223c347336613d284c8c3a0106eb623dc99b3f7fbf44422019c5757a0ef4e45b5add729f42cfa8ddce36e298b070936a5c8c5ccd8046c61768ce6c8b3f7396bcc1b64aa24afc47332fe8ad1b1c0d7772d309a6cc7b8a6ab814d75ff0c237dbd83c29261a2a325e6e2844fa2830ca272449a400f6dc11c5e1cdb2a9a692b0cda6203dad7e6674e2a20e121fb85ee79b781ecc22a37adf4dc51d1fae61d0dc95989bc9894ff1659f7ae776c314518170920f25c1ee8bb0e75f00ffcfca24382c5276d3360056e7089861a40fc63844a7320a9d3b4b6fd4863daadbe12686415a7c91b052054d95b529e104729cfd9b1f5231918fb9b1450dbf6bf5f87b00e47d3b40e56679f1accc0d2718cdd0daa5a25071c55a4ff2eb7f1c5d558a58f36c5338decf807bd69a20dfd6e53921888dd208f8d3d821077cfd17122bc53ff14affbf5a43194018c5a105567fa314d8e30ebc4fcaf01651d753e243714afa62a5478dd1a36a348cc7c0b4cb0e5c51eda4be57815f7152ced81c05d43173334e01233d06c9690472b10d677ecbe58e88ca39038a9850632076fbd2144918f4b9cd6fd7942bc5e486bd6c2f0e331cbf3a2da37e8f61b1570bfe6cf600c333ba482c096ccdafae8634840acc2b16a72436bf65e02280511ae8c71f02b8294210373feaf32c70d09ae42b5b4de78e411d0f3d610a87585c94967da6c346fa0783b8c8396c76659671c279a77e165df5509b3d5c2a601b50b4f3e64e87369bb86adec01fb6683fb62b0a1761653a828cb7f82a67278216035e03ae2fbb1eea71123990ce378cb518321f1a5200589a2a6e6d5f80a9eca8cbb85350a9bbb1ae9a91fa21fc30f8843e26879effa06e8d7251e5d4d3111911231988cef7ea8a30886b46d2001934f3feb42267b5da4cc6ca23a3d16b8fb95386e95b38c87625eb5714f22f76fab9d53aab5f67aa1bbab15424f2313032e13af8317ee17581066e23dee705f5dfa7b57bdb896a6c853b0afb74847f404300ce968a97fa65d88ec4cd49e50455961dcffec78fcb792d24c7d19107d2b7f9cf5f245b7a31f0785d85e021f994c60cc410984dfa25f89e3a1a0e6915295a388238541222a9d8a87de6282988c79fc2fda62bb79c0c7ea03b4651f0af85f21a53937b25ff90551c311bb912f942a708e7d41b50f3c8c810bf81876ead58e2ffc90c6ed9871cd9be0651052b52ea8ad19f5322bd551f6dd0d48f7f65479c827df652c43111f6bb5d05f8d675be390da1d0a98d09a3a9aedecfb35200e918eaf8fd0d14f6212f7ec80611f6cb7ea390c5d2d2939faefc4e2ee5d8f02ff800ebc6c5b9fb9c72a359fd9d05bbc6ca49bf11e64b7f75093fa6308f52b01183956d873f19084ab3a57030c6be3e3975b7ac471c79c3194ba561e4a4644346041e17e03e7e332f3e8b9d8d663dbc9b5e67aa5c258533ab18e6610eab7a351a5f9d03556e8577a44c672bf9517dc456851e9617e830be88a63d75f3bf151a6ed8fea7c2434eb1047ebb1f36c97d5689309a892e9b343e6f515aee3c9a8238b8406a4d2e513478a1deaa8c0f1ac7153036e6b559656f8e31432e9af01c0ba1a068af04faece008269393a6a46c8cea5e356752faadbc7dde48735be5df82a0cea025609fb7e40780a7d354bdb940c59b91b75067be153f3410732fd7522070641b0f5d8d6e9e8ae6e058b7ffdd706aea51f431d44af3d0732b6253c88b1f67919bad5ad8231964f833f11a206107ce06e383be927b2dcd2ab2697fcd0790d1e21ae13755aa93532e42141b97cffb7945758b18d1b569198296e897583eca62becc9eaa9b971dc6a29c8e67676cdf591c10557cab0aea61011ea8fc57045ce258c5d561a6e67ecb56831c15f4b88c6f0f633e94c592420640dfe7d8340eab0e5e6be894587dbf8fb89141c33bb27aa4225d1667114ef97272d7c738b61929202a59812f4791b981a0db1bd708d634252a780871f2a118a7a4231243d1eace7d99d42771a69e18d27d6e9d9f9d019895aa11472e4863d344fb496ff4144f30bf72e474a729642ceeb640ea313638675bd35ea5d0ecd0815beff64e398c8f4cd5b286e46238371f34e279d6bf59b1519525daa94f2b71a01318a1d2cfe9e3c318b71fce8cab9f9023fe5a213185defe5c5085bba71a283e23022a9042f160c02b71465141de8ba1059c25e0e6346dfa813cf88ba080d71682cfe242cef6ca1ce0dcb18ddcabb4032514a69ee9b30532866800622c7e10a98806fbf4f0ba690bc2631d7b1ec333c57144cc7d653e71cb465cc61644b9ddb16aa89ef2406eb5e794f3cf506bd5a6c6adbed9f3c09a23ed7fb538ffa90778504237ee410f962df0930e291fcac541621d166f32491d4f3157ae346d560cdacc8823c85cca2a1f3a40e6145e757f7cec751395d57f0edb6470e669a9de1c98e25e21e4ebda4d31da17c47253a0cddce8a7ef739ce2a619699b1b19d9df0fe4a4ed7d65d5cc9eec6220354b3b39071f7930caec0690893aa95eaa6e70363ab0dec434618a0893b65f62775fd33905a8b325136ad2801061dbaa7d6588359cd26c2430fe89a96153c59c1cda4353c39a3c1eb6c10c733ffe8813d450602057d9813dd78e265be153e714914947c7c70163d7da2b078cc0b5e25147fe365cd43c5d48083d63c5a3f8d47a12fb60a1dbc79463f7370669bd4e0f03b5593c0b76b007c7bc67c65ac4e71646359a9a968f8633a6c543f445c8129cf0063cbdd55d1757a2ed0e377647b84d8fb396c8b5d3cc6a7529759b888ca4c36cae0c7b7fb478ff6f4ceace8b98280b8eca6788e16fc61a93294dcbf4b08167048fcce45641d6748ccb01c76ecd6497037f429b806d28c7225c1af562ce37821c417c7983acda64748a2ad01aefc9ea2c432f1599aa679f95151ea2b030fb1222b11d30c0098704931b61946f1f5d479e2161d7b06cac075e9e17bdd35ac2e8eb76c6297ed573bd44b09980f65703173f33a2dd1bbff7fd7f8808cfbc2adfa0479a5ce051fff53475f26a6e08fd80d15397994004d88531e97de913a823ae8a01629eabf188e24a645639f5fd23da3edbc53325e7cf79d52c6e4b41895ff76d7e46a7b718a7391e4a92ba34bebec3e5001d815b71091288ac7f6a6375e8030eaa55d9db7293952703141bb5fa4e7439c72bfe7841168b16be3940ab58bf85a7c0b7ba109069c00842817a4d6222a124652daf97b9a7a3f38aec0d5ad4be0ecc4537dc98a86b39a0eafaa8e52f8208886820afe1e900894f780a5fa9eef6443ac085ecfd22229cb5c189f0f8eff21b12d69514cdfe9cf23ef416b8444a7888f862a80b30d7a5119984c463d45cbfcce31e26b1ff208e4ea47830c72a1a210051b19db3d917dc8ebc21e1120153627a4227977d85e60aa31a47d0c4fa7e7ad92b5ec92fceece734b962e7f78284fbf93a96eba5e27f8bc4f1012552ad35fbabfe033c35538db140b7acba94a722dd470c0eb78e7f7e1a1b00e865aa47056491153cfe43de3fbd666a80e9e320177ecc8d1195b68bb74a27f92e3a1a8573484d77ef105809ef012e42d3160f9b603fd5cbed5b52509016ad66dd9685c01584bfa12a91db74f4c10f56e0992383929cfb9e7fdc00927c64d5beca50863161c4456526749c1fa661ffe89c52c8eb320701c305381ece6cf84d3fef0f45f5a961591fa2a3897b0fc5017f09f5de2711bf0f8c67a5339bae006c33e59fc9d6928431d9249a9035abfae2b33ea310d219d41b2ca4d0b35d837f6c23d14083c2425e74acf334c83d9f7d0f4635a9753409dbc2675cb090d02b88ee93577aa5caed47d4d4a16d0524b7e34909a19ab658f43902db31b619411375bec04fa57a40c2028d8ea65ba7d06f734e90f352c3a3448645f4bcc63e58b6c4ff4fd86a0d8b53b5f8ddefa041a80499949c4f583017a94d77294d12464fd968d64ab12e5798fb67ad440285026b07c924e80997db347ee979bfbebbfd5c8e0749bbc64afc996ba59b95e459b77326019be8d2e616807fe5fe0c8124eced362178ae21dd0e219ab7aed28acf58bf383d009fb1695cb8185a95be3d423b4322b3c89c6b0740b2d5107b54c4444ddc06e7b1473e9e84e958ab0ca9f9d48c8936254a6acd8e4cffd85e0eebb281dde58010353dadd23963b45d614b421802c6da81abf36cfdfdcfbc82c4250f67f178753d127357cb5f028aaa3af30b536c35a30697c14a68c4c07a049ac478e59f211da231d0a151b6cdb34c44a52623d18deb128d9661c85d421e1db1a4bddc952b3ffb7e6237cffc82874cf09fb99592b133c98a95b1a2056613453b8a657275c4012a20830545c57a663273ac0b90f4808512da1d4db3eed0990ffea6be029a2d19e461ca95b96b14082832ad3b9ad56ecd5e0aba1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x1a4, 0x2, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x15c}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x8, 0x1}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x8, 0x5, 0x7, 0x3}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xef, 0x6, "a5aa48cd33c30680b099f26206d307eb38939bfea60287f96978cf3c12a07b37163f3c3a3dd6011572356eef4bb6cfc6b40e209244a349344ced9f0f6125d7d42da0851ea4a02530514d73ff6aaff63290834c4af257a2bca63d60ec48611303817b1fabdad76016b984bb687aa7c4d7545374dddc0e42227f698eb669344e8480cbbdcb57971be454fdcabba91480b831a6463d44fc3cbb80436a5acabc37c908887ee6cf18d89bbe03d7acbaa562a1ea5b654786bbd39fdfa2fea10e380082f0a873a28af9697fafa9c93667d340a34cf3d8b008754b14b233ca370e3b18311b322d5b763e55a98d8569"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x174, 0x18, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x93bf}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0xf8, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xdcc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x80, 0x0, 0x8, 0xfffffff8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x634, 0x2, 0x6, 0x8001, 0x5}}]}, {0xd7, 0x6, "dcaeed541a866c26fe72db5d064668ea8a8acc68503184d2ff55b61de1dbe30320d5da794c511ddff8072f9f467bd3d7de5b3a161f6e2ff4117f35cc700d64d1575092dcfc78a0640136edeb4e8233d66d1f764ecd89e5125031b02b278ffe3cd1a3f698fd585e2405af17eb1b0e5d86961cd1972d5af5a4c36df449a0c92147155b626e90154b2cbc9bb36583994faf0383d7c8d7e723ac2f386cf2813f711584e9a8ffacac0fe50ea0cc5702401d723245763a2738879a480ee59881cc88838e3ad05da3218576c885de35d06cf1e102124e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_skbedit={0x88, 0x1d, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x83}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7b6}]}, {0x49, 0x6, "33e1e808632a193d99b2599c5b276d7b9f97b01559a55ddfd64778e139d7ae8b15e078c0598a5a5906f1a00fed07d0f85ecbdd7f6848d7a4c1e654ce32dca0a4864a8f71d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4f, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff]}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xa331b44d58e09a9a]}]}}]}, 0x36ac}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000000) 270.632132ms ago: executing program 0 (id=508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async, rerun: 32) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x5, 0x400802) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x7, @void}, 0x10) 121.177311ms ago: executing program 2 (id=509): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1e, @private=0xa010100}, 0x4e) (async) r1 = socket$inet(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x11c5, &(0x7f0000000b40)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x118b, 0x3a, 0x1, @empty, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0xe, 0xe, "167eb16580da6e0b09c1cb470cac58fe9f0d7f13a32ec5a32ae4662769448a96077bdc3bdbe02ced74e389b5ec3ef2bc6f00f5c00265dfa734eb3d877e055473ad599aa3e361905db86f797bcf7e10292b9d0a377304b81dafa0c98b120353abc3a2cf4ae96e7e884ce447e65e00f16dc722"}, {0x2, 0x200, "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"}, {0x22, 0x1, "05afc66afaaa9e82"}, {0x5, 0x1c, "956ce22c1471deb9c8fa417124b6fe232a4f2f3852360f82d09164ebc1e7f8408fbe892f71f26464593564672510f0732d47636cf7c72c9c5b57a4afec37b08b3d931ded36d1db879d221c35b70f61c916a9aa820bbe68138774aaa388b8cb295e8ff4d7125540afd25d865ecec410e465677832fec0c4b31cdc678b1de1a32a11e12f74e18845e1bf65594bc14c061ac3a6a7c70f61c83f851e33d31b4f70fc2277cf0d0505d9a368860ec23cdc32f62e782f37b71e303b53f9115f467be2e4dd8f81ecd1808e6c0fadc7c98b2ba729d5bbfa7a84cbbea6f6b5de61ba4525a034"}]}}}}}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbf2a0000}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x7) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00ff07fdffff7f00000000000000000006000300010000000000000000000000b33fbf405df77f6625207019433de82894d070d72182c84891c2e4a98d26527d3dfac99b0c576de11ede7a41a40cd92850655927b69185273155587eccada4493be546273844c880e8303a74b1bbca02a9166b6c08cb256fbef409c047dfb7421e2d16f8d6eb37730e4258fa244e6b963f340b40fed240f9333b36e8490a42db4ffff400348c54a1fc60aede50300b60c74b7010ab42d5189d008e65259abe52ae"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000240)=[@exit_looper], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0x3c, 0x71, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/113, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@private1, 0x0}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xf3, &(0x7f0000000100)=""/243, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0x7ff, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x5, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xb) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) 61.340536ms ago: executing program 0 (id=510): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="180006000000000000000000000000000300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 573.507µs ago: executing program 2 (id=511): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000480)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x7}]}) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) close_range(r5, r8, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {0x9a4}, 0x68, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="51d8e26806ca1b7b6937ed438e9ba6c8ab8669a1ac4acf185301a098451ad2aa24ac396d54973d4129306a6e8c065eb154948fdd9a4921e267c9d69b279eee5d48615d35389c83b3e5b6e67f86126bca6f50f6f927567b8acce4620b912b3fd99280db8eb00a3782d95ea269fa09a52c839f6e241d09fd1715b092dd96dccf19a2e932fe52425541726271e186a3d536b0c6a2912e122ea47423c6e82e3012c1cd80171a45bb4a0e13fc0689b85c731e58945e2380cfbcddd3d83255db544dd53da0dce81a1ba0724aa7311bec60c78a1bccd71bc25115071dcebb96b952b161743da41b7dcae451cae7111dd1602eacb17bc156fdb99762a5f9c576770ef986309ae5a668f0c98c84902e7199626f322a4af8fd9eb9267e4ae2a67750d6a53c3350eee29270cd26c7b19de41aa598a9cb5bbcfa6c732a690865275eefb28aa0a8cb538191a39b2ea44e90a2d3a64d637b196f608c3f8dfc250560f5ddd06756c6047576645820379fe8a7acbdc3acd919fe69f066881f72ba453accde5ff97128ce4428", 0x184, 0x0, &(0x7f0000000300)={0x2, 0x84, {0x1, 0xc, 0x77, "61983ace5d3de267b402053e25a3cb95b520e50b5693cbe380405c11dcefc052e5901f075e502acc2514139b38ecd7599171923a2a148803f3383ad480bdd2e3aabd090ce0aefb60b3c676b0d74afbcc38956e34c53b335ddf3b9dcfd009b52daf68e310163c542f8354f30fdafb85b0977faa2676a4cd"}, 0x58, "1b5320d7d44427ecf7af11d85ad9459027c707c5d6ccd90f4f75ccf96dedfa7426507198f14f22f1a1a1dce8344515999ab2087027eb7ee51ab1f506821bb706088dda81aa535a6d2a3aacf0d33c05dcae58b7f0ca600cf6"}, 0xe8}) 0s ago: executing program 0 (id=512): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0xfffffffffffffe60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x10000}]}]}, {0x0, [0x30, 0x10]}}, 0x0, 0x34, 0x0, 0x1, 0xfffffffd}, 0x28) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, 0x0, 0xfffffffffffffe60) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x10000}]}]}, {0x0, [0x30, 0x10]}}, 0x0, 0x34, 0x0, 0x1, 0xfffffffd}, 0x28) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0xa) (async) 0s ago: executing program 2 (id=513): syz_usbip_server_init(0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffea2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000007000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00010400000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x880) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r9, 0x0}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r11, &(0x7f0000000280)=""/251, 0xfb) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x1, 0x3}}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r11, 0x54a2) readv(r11, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/197, 0xc5}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000240)={r10}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x240880, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) kernel console output (not intermixed with test programs): [ 52.866935][ T40] audit: type=1400 audit(1772496407.029:61): avc: denied { siginh } for pid=5895 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:39703' (ED25519) to the list of known hosts. [ 54.755457][ T40] audit: type=1400 audit(1772496408.949:62): avc: denied { name_bind } for pid=5911 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.803053][ T40] audit: type=1400 audit(1772496408.989:63): avc: denied { execute } for pid=5912 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.814578][ T40] audit: type=1400 audit(1772496408.999:64): avc: denied { execute_no_trans } for pid=5912 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.989451][ T40] audit: type=1400 audit(1772496411.179:65): avc: denied { mounton } for pid=5912 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.998139][ T40] audit: type=1400 audit(1772496411.189:66): avc: denied { mount } for pid=5912 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.001321][ T5912] cgroup: Unknown subsys name 'net' [ 57.187277][ T5912] cgroup: Unknown subsys name 'cpuset' [ 57.191748][ T5912] cgroup: Unknown subsys name 'rlimit' [ 57.395458][ T5918] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.175964][ T5912] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.734303][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.734320][ T40] audit: type=1400 audit(1772496415.899:82): avc: denied { execmem } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.888404][ T40] audit: type=1400 audit(1772496416.079:83): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.897017][ T40] audit: type=1400 audit(1772496416.089:84): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.907339][ T40] audit: type=1400 audit(1772496416.089:85): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.911684][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.918207][ T40] audit: type=1400 audit(1772496416.089:86): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="socket:[6455]" dev="sockfs" ino=6455 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.922327][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.935129][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.956271][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.959912][ T5931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.963648][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.971304][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.973404][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.975195][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.977619][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.979123][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.980862][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.982628][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.991145][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.991866][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.994632][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.995817][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.996312][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.008583][ T40] audit: type=1400 audit(1772496416.199:87): avc: denied { read } for pid=5926 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.019833][ T40] audit: type=1400 audit(1772496416.199:88): avc: denied { open } for pid=5926 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.029960][ T40] audit: type=1400 audit(1772496416.199:89): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.039276][ T5928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.050104][ T5928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.285018][ T40] audit: type=1400 audit(1772496416.479:90): avc: denied { module_request } for pid=5926 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.340027][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 62.367407][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 62.398135][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 62.438902][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 62.624435][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.626857][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.629291][ T5930] bridge_slave_0: entered allmulticast mode [ 62.632750][ T5930] bridge_slave_0: entered promiscuous mode [ 62.654793][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.657331][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.659730][ T5926] bridge_slave_0: entered allmulticast mode [ 62.665112][ T5926] bridge_slave_0: entered promiscuous mode [ 62.668463][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.670774][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.673237][ T5926] bridge_slave_1: entered allmulticast mode [ 62.676137][ T5926] bridge_slave_1: entered promiscuous mode [ 62.679588][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.682012][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.684529][ T5930] bridge_slave_1: entered allmulticast mode [ 62.688214][ T5930] bridge_slave_1: entered promiscuous mode [ 62.691478][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.694739][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.697845][ T5933] bridge_slave_0: entered allmulticast mode [ 62.701820][ T5933] bridge_slave_0: entered promiscuous mode [ 62.716769][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.719148][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.721517][ T5933] bridge_slave_1: entered allmulticast mode [ 62.724515][ T5933] bridge_slave_1: entered promiscuous mode [ 62.783043][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.796586][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.800536][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.803675][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.807229][ T5936] bridge_slave_0: entered allmulticast mode [ 62.811694][ T5936] bridge_slave_0: entered promiscuous mode [ 62.816668][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.819817][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.823208][ T5936] bridge_slave_1: entered allmulticast mode [ 62.828364][ T5936] bridge_slave_1: entered promiscuous mode [ 62.833867][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.839512][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.850734][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.866117][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.925972][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.942228][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.947345][ T5933] team0: Port device team_slave_0 added [ 62.951117][ T5926] team0: Port device team_slave_0 added [ 62.954871][ T5930] team0: Port device team_slave_0 added [ 62.968566][ T5930] team0: Port device team_slave_1 added [ 62.972064][ T5933] team0: Port device team_slave_1 added [ 62.975842][ T5926] team0: Port device team_slave_1 added [ 62.991643][ T5936] team0: Port device team_slave_0 added [ 63.000272][ T5936] team0: Port device team_slave_1 added [ 63.045001][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.047650][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.057248][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.061842][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.064510][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.073110][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.077979][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.081061][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.092424][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.105377][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.108129][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.117010][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.121190][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.124518][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.136071][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.141932][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.145508][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.156432][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.161920][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.164651][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.173020][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.194359][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.196669][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.205307][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.261115][ T5926] hsr_slave_0: entered promiscuous mode [ 63.264463][ T5926] hsr_slave_1: entered promiscuous mode [ 63.280704][ T5933] hsr_slave_0: entered promiscuous mode [ 63.283528][ T5933] hsr_slave_1: entered promiscuous mode [ 63.286230][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 63.288233][ T5933] Cannot create hsr debugfs directory [ 63.293437][ T5930] hsr_slave_0: entered promiscuous mode [ 63.296451][ T5930] hsr_slave_1: entered promiscuous mode [ 63.299022][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 63.300893][ T5930] Cannot create hsr debugfs directory [ 63.345835][ T5936] hsr_slave_0: entered promiscuous mode [ 63.348537][ T5936] hsr_slave_1: entered promiscuous mode [ 63.350830][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 63.352764][ T5936] Cannot create hsr debugfs directory [ 63.686944][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.693958][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.699230][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.713922][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.756896][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.763454][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.777535][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.781958][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.837443][ T5930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.851172][ T5930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.858840][ T5930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.865150][ T5930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.946256][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.953639][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.962008][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.968525][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.007352][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.015299][ T5928] Bluetooth: hci1: command tx timeout [ 64.015556][ T5940] Bluetooth: hci0: command tx timeout [ 64.018179][ T5286] Bluetooth: hci2: command tx timeout [ 64.033838][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.056433][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.058886][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.066452][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.077029][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080008][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.095371][ T5928] Bluetooth: hci3: command tx timeout [ 64.118381][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.137636][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.139996][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.159054][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.165998][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.169262][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.178308][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.202166][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.213883][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.220824][ T40] audit: type=1400 audit(1772496418.409:91): avc: denied { sys_module } for pid=5926 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.225199][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.233280][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.256612][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.258975][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.275638][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.298653][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.301903][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.325737][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.328908][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.369060][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.412515][ T5926] veth0_vlan: entered promiscuous mode [ 64.422247][ T5926] veth1_vlan: entered promiscuous mode [ 64.447302][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.462909][ T5926] veth0_macvtap: entered promiscuous mode [ 64.471174][ T5926] veth1_macvtap: entered promiscuous mode [ 64.489106][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.493622][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.508140][ T388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.511758][ T388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.522635][ T388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.527570][ T388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.542701][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.551197][ T5933] veth0_vlan: entered promiscuous mode [ 64.577435][ T5933] veth1_vlan: entered promiscuous mode [ 64.610377][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.610552][ T388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.624321][ T388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.646145][ T5933] veth0_macvtap: entered promiscuous mode [ 64.661707][ T5933] veth1_macvtap: entered promiscuous mode [ 64.666333][ T388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.673135][ T388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.683443][ T5930] veth0_vlan: entered promiscuous mode [ 64.696680][ T5936] veth0_vlan: entered promiscuous mode [ 64.701583][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.710795][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.718789][ T5930] veth1_vlan: entered promiscuous mode [ 64.719901][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.724715][ T5936] veth1_vlan: entered promiscuous mode [ 64.731218][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.741808][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759151][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.762814][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.793293][ T6015] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 64.818674][ T5936] veth0_macvtap: entered promiscuous mode [ 64.825915][ T5930] veth0_macvtap: entered promiscuous mode [ 64.832357][ T5930] veth1_macvtap: entered promiscuous mode [ 64.841644][ T5936] veth1_macvtap: entered promiscuous mode [ 64.861284][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.865311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.869366][ T6017] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 64.877079][ T6017] netlink: 'syz.1.5': attribute type 2 has an invalid length. [ 64.893996][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.903000][ T6017] netlink: 'syz.1.5': attribute type 29 has an invalid length. [ 64.907936][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.911694][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.921159][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.924567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.937293][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.945035][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.948762][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.958775][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968900][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.981459][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985371][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000978][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016264][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.133733][ T388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.137442][ T388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.141941][ T6027] Cannot find add_set index 0 as target [ 65.174142][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.179765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.191267][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.193891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.229454][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.232591][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.275743][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.279452][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.283551][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.289952][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.295247][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.298641][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.301900][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.310449][ T6041] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 65.310738][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.319561][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.322921][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.333659][ T6042] overlay: filesystem on ./bus is read-only [ 65.443962][ T6051] netlink: 'syz.3.13': attribute type 11 has an invalid length. [ 65.544567][ T6070] fuse: Bad value for 'group_id' [ 65.547609][ T6070] fuse: Bad value for 'group_id' [ 65.730311][ T6086] netlink: 'syz.3.20': attribute type 9 has an invalid length. [ 65.733778][ T6086] netlink: 'syz.3.20': attribute type 11 has an invalid length. [ 65.739035][ T6086] netlink: 'syz.3.20': attribute type 12 has an invalid length. [ 65.883627][ T6089] 9pnet_fd: p9_fd_create_tcp (6089): problem connecting socket to 127.0.0.1 [ 66.042166][ T6102] netlink: 'syz.0.27': attribute type 11 has an invalid length. [ 66.095129][ T5928] Bluetooth: hci0: command tx timeout [ 66.102213][ T6104] ======================================================= [ 66.102213][ T6104] WARNING: The mand mount option has been deprecated and [ 66.102213][ T6104] and is ignored by this kernel. Remove the mand [ 66.102213][ T6104] option from the mount to silence this warning. [ 66.102213][ T6104] ======================================================= [ 66.117421][ T5928] Bluetooth: hci1: command tx timeout [ 66.117449][ T5286] Bluetooth: hci2: command tx timeout [ 66.120459][ T6104] bridge_slave_1: left allmulticast mode [ 66.124660][ T6104] bridge_slave_1: left promiscuous mode [ 66.128387][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.149051][ T6104] bridge_slave_0: left allmulticast mode [ 66.151177][ T6104] bridge_slave_0: left promiscuous mode [ 66.153424][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.155771][ T6109] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.160657][ T6109] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 66.165958][ T6109] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.169379][ T6109] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 66.175610][ T5286] Bluetooth: hci3: command tx timeout [ 66.598717][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=6134 comm=syz.2.34 [ 66.767269][ T6149] syzkaller0: entered promiscuous mode [ 66.769653][ T6149] syzkaller0: entered allmulticast mode [ 66.778875][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 66.778887][ T40] audit: type=1400 audit(1772496420.969:239): avc: denied { write } for pid=6148 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.808611][ T6149] bond1: entered promiscuous mode [ 66.810600][ T6149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.813627][ T6151] fuse: blksize only supported for fuseblk [ 66.957372][ T40] audit: type=1400 audit(1772496421.149:240): avc: denied { write } for pid=6154 comm="syz.0.39" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.012745][ T6158] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 67.082405][ T6161] gretap1: entered promiscuous mode [ 67.213963][ T40] audit: type=1400 audit(1772496421.399:241): avc: denied { ioctl } for pid=6162 comm="syz.0.43" path="socket:[10776]" dev="sockfs" ino=10776 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.278987][ T40] audit: type=1400 audit(1772496421.469:242): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.631244][ T40] audit: type=1400 audit(1772496421.819:243): avc: denied { create } for pid=6172 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.635056][ T6174] all: renamed from bridge_slave_0 (while UP) [ 67.639092][ T40] audit: type=1400 audit(1772496421.819:244): avc: denied { connect } for pid=6172 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.038299][ T40] audit: type=1400 audit(1772496422.229:245): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.174272][ T5286] Bluetooth: hci2: command tx timeout [ 68.174297][ T5928] Bluetooth: hci1: command tx timeout [ 68.176170][ T5286] Bluetooth: hci0: command tx timeout [ 68.254317][ T5286] Bluetooth: hci3: command tx timeout [ 68.474212][ T40] audit: type=1400 audit(1772496422.649:246): avc: denied { read append } for pid=6176 comm="syz.0.46" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.548732][ T40] audit: type=1400 audit(1772496422.739:247): avc: denied { sys_module } for pid=6178 comm="syz.3.47" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.664302][ T40] audit: type=1400 audit(1772496422.849:248): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.721027][ T6201] syz.2.50(6201): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 68.838566][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.856075][ T6208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.876426][ T6211] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 69.362150][ T6170] Zero length message leads to an empty skb [ 69.503339][ T6246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6246 comm=syz.2.62 [ 69.504453][ T5299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.675342][ T5299] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 69.680560][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.689893][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.703741][ T6259] netlink: 'syz.2.64': attribute type 39 has an invalid length. [ 69.715740][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.720387][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.732022][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.736384][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.741036][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.747292][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.751464][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.755139][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.761081][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.766044][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.773586][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.779652][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.786361][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.791261][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 69.798115][ T5299] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 69.802453][ T5299] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 69.806232][ T5299] usb 5-1: Product: syz [ 69.807859][ T5299] usb 5-1: Manufacturer: syz [ 69.810065][ T5299] usb 5-1: SerialNumber: syz [ 69.828898][ T5299] usb 5-1: config 0 descriptor?? [ 70.145577][ T6233] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.254455][ T5286] Bluetooth: hci1: command tx timeout [ 70.254833][ T5940] Bluetooth: hci0: command tx timeout [ 70.256944][ T5286] Bluetooth: hci2: command tx timeout [ 70.326188][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.334573][ T5286] Bluetooth: hci3: command tx timeout [ 70.341278][ T6286] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 70.341320][ T6287] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 70.343791][ T6286] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.343946][ T6286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.351530][ T6286] IPv6: NLM_F_CREATE should be set when creating new route [ 70.354039][ T6286] IPv6: NLM_F_CREATE should be set when creating new route [ 70.356486][ T6286] IPv6: NLM_F_CREATE should be set when creating new route [ 70.359654][ T6287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.368440][ T6286] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 70.371781][ T6286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.409555][ T6293] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 70.478615][ T6299] xt_hashlimit: size too large, truncated to 1048576 [ 70.765840][ T6307] binder: 6305:6307 ioctl 7005 0 returned -22 [ 71.226971][ T6349] MPI: mpi too large (130784 bits) [ 71.230787][ T6349] __nla_validate_parse: 20 callbacks suppressed [ 71.230798][ T6349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.90'. [ 71.526171][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.95'. [ 71.531490][ T6366] sch_tbf: burst 88 is lower than device vlan1 mtu (1514) ! [ 71.578069][ T6373] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 71.582903][ T6373] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 71.637937][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 71.744576][ T6381] netlink: 'syz.2.99': attribute type 7 has an invalid length. [ 71.762459][ T6381] netlink: 'syz.2.99': attribute type 7 has an invalid length. [ 71.769438][ T103] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.773582][ T103] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.798724][ T388] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.805212][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.816752][ T6387] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 71.819348][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 71.819358][ T40] audit: type=1400 audit(1772496426.009:340): avc: denied { read write } for pid=6388 comm="syz.3.102" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.834637][ T40] audit: type=1400 audit(1772496426.009:341): avc: denied { ioctl open } for pid=6388 comm="syz.3.102" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.872318][ T6393] Cannot find add_set index 65532 as target [ 71.970597][ T40] audit: type=1400 audit(1772496426.159:342): avc: denied { read } for pid=6397 comm="syz.3.105" path="socket:[12609]" dev="sockfs" ino=12609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.107841][ C2] hrtimer: interrupt took 104892 ns [ 72.133889][ T40] audit: type=1400 audit(1772496426.319:343): avc: denied { getopt } for pid=6401 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.134780][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 72.151581][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.151716][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 72.155200][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.163915][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.167576][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.187830][ T54] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.220924][ T839] usb 5-1: USB disconnect, device number 2 [ 72.299387][ T40] audit: type=1400 audit(1772496426.489:344): avc: denied { map_create } for pid=6406 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.305882][ T40] audit: type=1400 audit(1772496426.489:345): avc: denied { mount } for pid=6406 comm="syz.1.108" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.344340][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 72.359722][ T54] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.363424][ T54] usb 7-1: config 179 has no interface number 0 [ 72.367425][ T54] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 72.372484][ T54] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 72.378100][ T54] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 72.383415][ T54] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 72.388602][ T54] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.393040][ T54] usb 7-1: config 179 interface 65 has no altsetting 0 [ 72.396081][ T54] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 72.399351][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.410200][ T6396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.421008][ T54] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input5 [ 72.496190][ T5321] input input5: unable to receive magic message: -110 [ 72.520082][ T5321] input input5: unable to receive magic message: -32 [ 72.523150][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 72.533381][ T5321] input input5: unable to receive magic message: -32 [ 72.542664][ T40] audit: type=1400 audit(1772496426.729:346): avc: denied { create } for pid=6444 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.543996][ T5321] input input5: unable to receive magic message: -32 [ 72.550592][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 72.557654][ T40] audit: type=1400 audit(1772496426.729:347): avc: denied { read } for pid=5321 comm="acpid" name="event4" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.567993][ T5321] input input5: unable to receive magic message: -32 [ 72.573759][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 72.577386][ T40] audit: type=1400 audit(1772496426.729:348): avc: denied { open } for pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.603440][ T40] audit: type=1400 audit(1772496426.739:349): avc: denied { write } for pid=6444 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.615279][ T5321] input input5: unable to receive magic message: -32 [ 72.623241][ T5321] input input5: unable to receive magic message: -32 [ 72.637706][ T6396] nfs4: Bad value for 'source' [ 72.642045][ T54] usb 7-1: USB disconnect, device number 2 [ 72.642106][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 72.747401][ T6456] ISOFS: Unable to identify CD-ROM format. [ 72.809380][ T6462] program syz.0.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.951116][ T6475] syzkaller0: entered promiscuous mode [ 72.953594][ T6475] syzkaller0: entered allmulticast mode [ 73.014015][ T6478] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.127'. [ 73.017790][ T6478] openvswitch: netlink: Missing key (keys=40, expected=100) [ 73.061077][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 73.114829][ T6483] xt_hashlimit: max too large, truncated to 1048576 [ 73.128899][ T6490] overlayfs: conflicting lowerdir path [ 73.140711][ T6493] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 73.237193][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 73.241335][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 73.318938][ T6514] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 73.326329][ T6501] sg_write: data in/out 124/1 bytes for SCSI command 0x0-- guessing data in; [ 73.326329][ T6501] program syz.2.134 not setting count and/or reply_len properly [ 73.369064][ T5286] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 73.597266][ T6542] openvswitch: netlink: Flow key attr not present in new flow. [ 73.869677][ T6560] loop1: detected capacity change from 0 to 4 [ 73.882227][ T6560] Dev loop1: unable to read RDB block 4 [ 73.882275][ T6560] loop1: unable to read partition table [ 73.882382][ T6560] loop1: partition table beyond EOD, truncated [ 73.884354][ T6560] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 73.889360][ T6560] overlay: ./file0 is not a directory [ 73.913179][ T6562] qnx4: no qnx4 filesystem (no root dir). [ 73.951374][ T6571] syz.0.155 (6571): /proc/6569/oom_adj is deprecated, please use /proc/6569/oom_score_adj instead. [ 73.957426][ T6571] process 'syz.0.155' launched './file1' with NULL argv: empty string added [ 74.226626][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6587 comm=syz.2.159 [ 74.481291][ T6607] macsec1: entered promiscuous mode [ 74.481326][ T6607] macsec1: entered allmulticast mode [ 74.601064][ T13] bond0: (slave bond_slave_0): interface is now down [ 74.603414][ T13] bond0: (slave bond_slave_1): interface is now down [ 74.693279][ T6634] macsec0: entered promiscuous mode [ 74.695912][ T6634] macsec0: entered allmulticast mode [ 74.698141][ T6634] veth1_macvtap: entered allmulticast mode [ 74.722377][ T6635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.727431][ T6405] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.756870][ T103] bond0: (slave bond_slave_0): interface is now down [ 74.759700][ T103] bond0: (slave bond_slave_1): interface is now down [ 74.766107][ T103] bond0: now running without any active interface! [ 74.864802][ T6405] usb 5-1: device descriptor read/64, error -71 [ 75.119941][ T6405] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.255800][ T6405] usb 5-1: device descriptor read/64, error -71 [ 75.268582][ T6668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.278903][ T6670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.325162][ T6673] bridge0: port 3(syz_tun) entered blocking state [ 75.328599][ T6673] bridge0: port 3(syz_tun) entered disabled state [ 75.330913][ T6673] syz_tun: entered allmulticast mode [ 75.335002][ T6673] syz_tun: entered promiscuous mode [ 75.339565][ T6673] bridge0: port 3(syz_tun) entered blocking state [ 75.342255][ T6673] bridge0: port 3(syz_tun) entered forwarding state [ 75.365157][ T6405] usb usb5-port1: attempt power cycle [ 75.431016][ T6671] netlink: 'syz.2.183': attribute type 32 has an invalid length. [ 75.444298][ T5299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.455735][ T6671] bond4: Setting coupled_control to off (0) [ 75.574317][ T5299] usb 6-1: device descriptor read/64, error -71 [ 75.712434][ T6708] program syz.3.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.724392][ T6405] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.745920][ T6405] usb 5-1: device descriptor read/8, error -71 [ 75.824300][ T5299] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.964319][ T5299] usb 6-1: device descriptor read/64, error -71 [ 75.984786][ T6405] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.005082][ T6405] usb 5-1: device descriptor read/8, error -71 [ 76.085980][ T5299] usb usb6-port1: attempt power cycle [ 76.115578][ T6405] usb usb5-port1: unable to enumerate USB device [ 76.434283][ T5299] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.455427][ T5299] usb 6-1: device descriptor read/8, error -71 [ 76.694356][ T5299] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.715012][ T5299] usb 6-1: device descriptor read/8, error -71 [ 76.741368][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.743982][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.824656][ T5299] usb usb6-port1: unable to enumerate USB device [ 77.138661][ T39] cfg80211: failed to load regulatory.db [ 77.294333][ T5286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 77.294386][ T5928] Bluetooth: hci4: command 0x1003 tx timeout [ 77.355203][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 77.355219][ T40] audit: type=1400 audit(1772496431.549:392): avc: denied { bind } for pid=6735 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.366960][ T40] audit: type=1400 audit(1772496431.549:393): avc: denied { ioctl } for pid=6735 comm="syz.3.203" path="socket:[13123]" dev="sockfs" ino=13123 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.401558][ T6738] __nla_validate_parse: 61 callbacks suppressed [ 77.401571][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 77.472012][ T6740] ip6gre1: entered promiscuous mode [ 77.474549][ T6740] ip6gre1: entered allmulticast mode [ 77.664397][ T40] audit: type=1400 audit(1772496431.849:394): avc: denied { read } for pid=6752 comm="syz.0.209" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.716869][ T40] audit: type=1400 audit(1772496431.909:395): avc: denied { read } for pid=6752 comm="syz.0.209" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.726223][ T40] audit: type=1400 audit(1772496431.909:396): avc: denied { open } for pid=6752 comm="syz.0.209" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.734430][ T40] audit: type=1400 audit(1772496431.909:397): avc: denied { ioctl } for pid=6752 comm="syz.0.209" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.742606][ T40] audit: type=1400 audit(1772496431.909:398): avc: denied { create } for pid=6752 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.749265][ T40] audit: type=1400 audit(1772496431.909:399): avc: denied { accept } for pid=6752 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.913023][ T40] audit: type=1400 audit(1772496432.099:400): avc: denied { load_policy } for pid=6759 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.916092][ T6760] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 77.924745][ T6760] SELinux: failed to load policy [ 77.962098][ T6755] xt_policy: output policy not valid in PREROUTING and INPUT [ 77.995033][ T6761] SELinux: failed to load policy [ 78.040403][ T6767] netlink: 'syz.2.212': attribute type 12 has an invalid length. [ 78.043890][ T6767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.212'. [ 78.095791][ T6770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 78.101613][ T6770] overlayfs: failed to set uuid (58/file0, err=-13); falling back to uuid=null. [ 78.105809][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.214'. [ 78.161532][ T6778] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 78.167511][ T40] audit: type=1400 audit(1772496432.359:401): avc: denied { audit_write } for pid=6776 comm="syz.2.216" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.210831][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.212417][ T6784] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.214678][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.223596][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.231528][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.760901][ T6808] Falling back ldisc for ttyS3. [ 78.782757][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 78.814233][ T6818] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 78.887876][ T6827] netlink: 348 bytes leftover after parsing attributes in process `syz.2.231'. [ 78.894454][ T6827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.231'. [ 78.896868][ T6825] syzkaller0: entered promiscuous mode [ 78.900121][ T6825] syzkaller0: entered allmulticast mode [ 78.927971][ T6825] tipc: Started in network mode [ 78.930391][ T6825] tipc: Node identity 4628276727a3, cluster identity 4711 [ 78.933731][ T6825] tipc: Enabled bearer , priority 0 [ 78.965357][ T6824] tipc: Resetting bearer [ 79.033411][ T6824] tipc: Disabling bearer [ 79.068567][ T6848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1770242055 (113295491520 ns) > initial count (66812984704 ns). Using initial count to start timer. [ 79.305045][ T6865] batadv_slave_1: entered promiscuous mode [ 79.310431][ T6863] batadv_slave_1: left promiscuous mode [ 79.358524][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 79.374788][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 79.408290][ T6875] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 79.568963][ T6888] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 79.572684][ T6888] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 79.581535][ T6888] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 79.594968][ T13] bond0: (slave netdevsim0): link status definitely up [ 79.598635][ T13] bond0: active interface up! [ 79.658574][ T6897] netlink: 14 bytes leftover after parsing attributes in process `syz.1.247'. [ 79.682686][ T6902] netlink: 14 bytes leftover after parsing attributes in process `syz.0.250'. [ 79.706435][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.713094][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.721854][ T6897] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 79.726714][ T6897] bond0 (unregistering): Released all slaves [ 79.754517][ T6888] team0 (unregistering): Port device team_slave_0 removed [ 79.759219][ T6888] team0 (unregistering): Port device team_slave_1 removed [ 79.886277][ T6913] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.895545][ T6913] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 79.898844][ T6913] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 79.902168][ T6913] iommufd_mock iommufd_mock3: Adding to iommu group 12 [ 79.908634][ T6913] iommufd_mock iommufd_mock4: Adding to iommu group 13 [ 79.913746][ T6913] iommufd_mock iommufd_mock5: Adding to iommu group 14 [ 79.917948][ T6913] iommufd_mock iommufd_mock6: Adding to iommu group 15 [ 79.923344][ T6913] iommufd_mock iommufd_mock7: Adding to iommu group 16 [ 79.928964][ T6913] iommufd_mock iommufd_mock8: Adding to iommu group 17 [ 79.935528][ T6913] iommufd_mock iommufd_mock9: Adding to iommu group 18 [ 79.994427][ T6405] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 80.166638][ T6405] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 80.170149][ T6405] usb 8-1: config 0 has no interface number 0 [ 80.172829][ T6405] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.194458][ T6405] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.199270][ T6405] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.215984][ T6405] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 80.220238][ T6405] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.228495][ T6405] usb 8-1: config 0 descriptor?? [ 80.231592][ T6904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.237855][ T6405] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.120/input/input7 [ 80.423882][ T6930] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 80.623826][ T6941] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.986913][ T6954] orangefs_devreq_open: device cannot be opened in blocking mode [ 81.178781][ T6971] ipt_REJECT: ECHOREPLY no longer supported. [ 81.239877][ T6975] team0: Port device team_slave_0 removed [ 81.460335][ T6990] input: syz1 as /devices/virtual/input/input8 [ 81.502353][ T6995] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 81.517520][ T6995] bond3: entered promiscuous mode [ 81.519647][ T6995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.596059][ T5286] Bluetooth: hci1: Malformed Event: 0x13 [ 82.736372][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 82.736387][ T40] audit: type=1400 audit(1772496436.929:480): avc: denied { read write } for pid=7026 comm="syz.2.287" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.754510][ T40] audit: type=1400 audit(1772496436.939:481): avc: denied { open } for pid=7026 comm="syz.2.287" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.769394][ T7030] ptrace attach of "/syz-executor exec"[5926] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 82.771160][ T7030] netlink: 'syz.1.288': attribute type 11 has an invalid length. [ 82.809205][ T39] usb 8-1: USB disconnect, device number 2 [ 82.820311][ T40] audit: type=1400 audit(1772496436.939:482): avc: denied { ioctl } for pid=7026 comm="syz.2.287" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.835868][ T7030] __nla_validate_parse: 4 callbacks suppressed [ 82.835887][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.288'. [ 82.876726][ T40] audit: type=1400 audit(1772496437.069:483): avc: denied { execmem } for pid=7026 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.947157][ T40] audit: type=1400 audit(1772496437.139:484): avc: denied { read write } for pid=7035 comm="syz.1.290" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 82.974364][ T40] audit: type=1400 audit(1772496437.139:485): avc: denied { open } for pid=7035 comm="syz.1.290" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.014700][ T40] audit: type=1400 audit(1772496437.149:486): avc: denied { mounton } for pid=7035 comm="syz.1.290" path="/71/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.044498][ T40] audit: type=1400 audit(1772496437.149:487): avc: denied { mount } for pid=7035 comm="syz.1.290" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.053465][ T40] audit: type=1400 audit(1772496437.199:488): avc: denied { mounton } for pid=7035 comm="syz.1.290" path="/71/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.102725][ T40] audit: type=1400 audit(1772496437.289:489): avc: denied { read write } for pid=7045 comm="syz.3.292" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.503093][ T7071] netlink: 160 bytes leftover after parsing attributes in process `syz.1.300'. [ 83.567477][ T7073] ntfs3: Unknown parameter 'Q [ 83.567477][ T7073] ]Ύ%I׍T@BTYCe-e.~[mAܓ\H1 [qsHva1ê3N]]"eLm' [ 83.712794][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 83.812967][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 83.931250][ T7094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.308'. [ 84.608952][ T7102] QAT: failed to copy from user. [ 85.553860][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 85.570705][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 85.685805][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 85.689826][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 85.693889][ T7143] netlink: 'syz.0.323': attribute type 11 has an invalid length. [ 85.697513][ T7143] netlink: 'syz.0.323': attribute type 7 has an invalid length. [ 85.798899][ T7156] tipc: Started in network mode [ 85.801090][ T7156] tipc: Node identity ac1414aa, cluster identity 3865 [ 85.807454][ T7156] tipc: Enabled bearer , priority 10 [ 86.109888][ T5286] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 86.161007][ T7184] openvswitch: netlink: Duplicate or invalid key (type 0). [ 86.167742][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.821268][ T7170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.824444][ T7170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.832288][ T7170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.839459][ T7170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.841864][ T7170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.847988][ T7170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.852028][ T7170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.855767][ T7170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.859604][ T7170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.865951][ T7170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.868697][ T7170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.873138][ T7170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.910647][ T7199] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.935214][ T7205] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 86.936793][ T54] tipc: Node number set to 2886997162 [ 86.937773][ T7205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.342'. [ 87.254969][ T7238] nbd2: detected capacity change from 0 to 112 [ 87.285051][ T7244] block nbd2: shutting down sockets [ 87.290245][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.294774][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.298304][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.302433][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.306715][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.310851][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.313690][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.319415][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.322267][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.328812][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.332260][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.336625][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.340068][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.344564][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.348151][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.353079][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.359416][ T6120] ldm_validate_partition_table(): Disk read failed. [ 87.362534][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.367916][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.369942][ T7249] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 87.372410][ T6120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 87.374026][ T7249] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 87.378339][ T6120] Buffer I/O error on dev nbd2, logical block 0, async page read [ 87.387591][ T7249] erofs (device loop3): cannot find valid erofs superblock [ 87.394362][ T6120] Dev nbd2: unable to read RDB block 0 [ 87.396970][ T6120] nbd2: unable to read partition table [ 87.403505][ T6120] ldm_validate_partition_table(): Disk read failed. [ 87.406463][ T6120] Dev nbd2: unable to read RDB block 0 [ 87.409007][ T6120] nbd2: unable to read partition table [ 87.412209][ T7238] ldm_validate_partition_table(): Disk read failed. [ 87.423500][ T7238] Dev nbd2: unable to read RDB block 0 [ 87.426679][ T7238] nbd2: unable to read partition table [ 87.443649][ T5336] ldm_validate_partition_table(): Disk read failed. [ 87.449470][ T5336] Dev nbd2: unable to read RDB block 0 [ 87.451879][ T5336] nbd2: unable to read partition table [ 87.473916][ T5336] ldm_validate_partition_table(): Disk read failed. [ 87.476688][ T5336] Dev nbd2: unable to read RDB block 0 [ 87.478694][ T5336] nbd2: unable to read partition table [ 87.544417][ T7269] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.604511][ T7276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.606945][ T7276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.608685][ T7276] bond0 (unregistering): Released all slaves [ 87.731716][ T7285] netlink: 'syz.3.365': attribute type 11 has an invalid length. [ 87.731736][ T7285] netlink: 'syz.3.365': attribute type 11 has an invalid length. [ 87.733083][ T7285] mmap: syz.3.365 (7285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.810313][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 87.810325][ T40] audit: type=1400 audit(1772496441.999:652): avc: denied { ioctl } for pid=7284 comm="syz.3.365" path="socket:[18549]" dev="sockfs" ino=18549 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.915008][ T7294] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.926427][ T7294] CIFS mount error: No usable UNC path provided in device string! [ 87.926427][ T7294] [ 87.931403][ T7294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.973016][ T7298] afs: Unknown parameter '\lock' [ 88.029517][ T40] audit: type=1400 audit(1772496442.219:653): avc: denied { name_connect } for pid=7302 comm="syz.3.372" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.040062][ T40] audit: type=1400 audit(1772496442.219:654): avc: denied { getopt } for pid=7302 comm="syz.3.372" lport=45460 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.175488][ T5928] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.218761][ T40] audit: type=1400 audit(1772496442.409:655): avc: denied { ioctl } for pid=7305 comm="syz.3.373" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.233687][ T40] audit: type=1400 audit(1772496442.409:656): avc: denied { read append } for pid=7305 comm="syz.3.373" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 88.246316][ T40] audit: type=1400 audit(1772496442.409:657): avc: denied { open } for pid=7305 comm="syz.3.373" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 88.257645][ T40] audit: type=1400 audit(1772496442.409:658): avc: denied { ioctl } for pid=7305 comm="syz.3.373" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x3b80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 88.382647][ T7313] __nla_validate_parse: 6 callbacks suppressed [ 88.382664][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 88.382691][ T40] audit: type=1400 audit(1772496442.569:659): avc: denied { getopt } for pid=7310 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.451773][ T40] audit: type=1400 audit(1772496442.639:660): avc: denied { unlink } for pid=7314 comm="syz.0.376" name="#9" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.460431][ T40] audit: type=1400 audit(1772496442.639:661): avc: denied { mount } for pid=7314 comm="syz.0.376" name="/" dev="overlay" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.463601][ T7315] evm: overlay not supported [ 88.666668][ T7330] netlink: 100 bytes leftover after parsing attributes in process `syz.0.380'. [ 88.705547][ T7332] dummy0: entered allmulticast mode [ 88.895722][ T5928] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.895920][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.899349][ T5928] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.993186][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 89.008416][ T7364] atomic_op ffff8880595ae198 conn xmit_atomic 0000000000000000 [ 89.448695][ T7381] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.394'. [ 90.033740][ T7400] sctp: [Deprecated]: syz.0.400 (pid 7400) Use of int in max_burst socket option deprecated. [ 90.033740][ T7400] Use struct sctp_assoc_value instead [ 90.254345][ T5286] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.640798][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 90.684716][ T7423] loop9: detected capacity change from 0 to 7 [ 90.688569][ T7423] ldm_validate_partition_table(): Disk read failed. [ 90.691447][ T7423] Dev loop9: unable to read RDB block 0 [ 90.693876][ T7423] loop9: unable to read partition table [ 90.696636][ T7423] loop9: partition table beyond EOD, truncated [ 90.699360][ T7423] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 90.699360][ T7423] ) failed (rc=-5) [ 90.708237][ T7422] ldm_validate_partition_table(): Disk read failed. [ 90.710984][ T7422] Dev loop9: unable to read RDB block 0 [ 90.712974][ T7422] loop9: unable to read partition table [ 90.715355][ T7422] loop9: partition table beyond EOD, truncated [ 90.718012][ T7423] ldm_validate_partition_table(): Disk read failed. [ 90.720680][ T7423] Dev loop9: unable to read RDB block 0 [ 90.723097][ T7423] loop9: unable to read partition table [ 90.725921][ T7423] loop9: partition table beyond EOD, truncated [ 90.803074][ T7425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7425 comm=syz.1.407 [ 90.808967][ T7425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7425 comm=syz.1.407 [ 90.974441][ T5286] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.974505][ T5928] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.984281][ T5928] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.011675][ T7429] overlayfs: conflicting lowerdir path [ 91.016690][ T7429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.408'. [ 91.023799][ T7431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.150720][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 91.154968][ T7436] openvswitch: netlink: Flow key attr not present in new flow. [ 91.244851][ T7433] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 91.699078][ T7332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.779094][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.414'. [ 91.922049][ T7463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.419'. [ 92.043537][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.053143][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.111415][ T7468] veth1_macvtap: left allmulticast mode [ 92.156254][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 92.167962][ T60] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.171045][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.177882][ T60] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.181710][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.187559][ T60] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.189577][ T7471] UHID_CREATE from different security context by process 355 (syz.2.422), this is not allowed. [ 92.191318][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.191346][ T60] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.205362][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.236397][ T7481] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.236451][ T7480] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.344266][ T5928] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.563103][ T7502] xt_recent: Unsupported userspace flags (000000b2) [ 92.825941][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 92.825954][ T40] audit: type=1400 audit(1772496447.019:719): avc: denied { create } for pid=7530 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.827787][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.835155][ T40] audit: type=1400 audit(1772496447.019:720): avc: denied { ioctl } for pid=7530 comm="syz.3.440" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.854325][ T5299] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.865080][ T5928] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 93.004323][ T5299] usb 7-1: Using ep0 maxpacket: 8 [ 93.011583][ T5299] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 93.015580][ T5299] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 93.018940][ T5299] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 93.022691][ T5299] usb 7-1: config 250 has no interface number 0 [ 93.026320][ T5299] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 93.031060][ T5299] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 93.038177][ T5299] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 93.043419][ T5299] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 93.047474][ T5299] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 93.053139][ T5299] usb 7-1: config 250 interface 228 has no altsetting 0 [ 93.056467][ T5928] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.056570][ T5286] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.058245][ T5299] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 93.058271][ T5299] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 93.058289][ T5299] usb 7-1: Product: syz [ 93.058302][ T5299] usb 7-1: SerialNumber: syz [ 93.064562][ T5928] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.075982][ T5299] hub 7-1:250.228: bad descriptor, ignoring hub [ 93.078956][ T5299] hub 7-1:250.228: probe with driver hub failed with error -5 [ 93.280263][ T5299] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 93.303260][ T40] audit: type=1400 audit(1772496447.489:721): avc: denied { setopt } for pid=7542 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.365258][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 93.368300][ T1114] ata1: failed to read log page 10h (errno=-5) [ 93.384898][ T40] audit: type=1400 audit(1772496447.569:722): avc: denied { setattr } for pid=7544 comm="syz.0.446" name="[io_uring]" dev="anon_inodefs" ino=20579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.449569][ T40] audit: type=1400 audit(1772496447.639:723): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.461068][ T40] audit: type=1400 audit(1772496447.649:724): avc: denied { write } for pid=7550 comm="syz.0.448" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.479670][ T40] audit: type=1400 audit(1772496447.669:725): avc: denied { read write } for pid=7507 comm="syz.2.433" name="lp0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.494339][ T40] audit: type=1400 audit(1772496447.669:726): avc: denied { open } for pid=7507 comm="syz.2.433" path="/dev/usb/lp0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 93.540055][ T40] audit: type=1400 audit(1772496447.729:727): avc: denied { ioctl } for pid=7507 comm="syz.2.433" path="socket:[20598]" dev="sockfs" ino=20598 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.562663][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 93.566807][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: Service action out(16), sa=0x18 9f 98 00 00 00 00 00 00 00 00 00 00 [ 93.567510][ C1] usblp0: nonzero read bulk status received: -71 [ 93.647085][ T7566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.684236][ T40] audit: type=1400 audit(1772496447.869:728): avc: denied { read write } for pid=7552 comm="syz.3.449" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.698128][ T6001] usb 7-1: USB disconnect, device number 3 [ 93.710421][ T6001] usblp0: removed [ 93.750756][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 93.808169][ T7578] __nla_validate_parse: 2 callbacks suppressed [ 93.808180][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 93.812156][ T7579] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.924578][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 93.929439][ T7590] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 94.079693][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 94.087439][ T1114] ata1.00: configured for UDMA/100 [ 94.133561][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 94.139811][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 94.175644][ T7611] program syz.0.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.293774][ T7613] netlink: 'syz.1.469': attribute type 39 has an invalid length. [ 94.302772][ T7619] 9pnet_virtio: no channels available for device syz [ 94.317503][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7619 comm=syz.2.472 [ 94.367233][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 94.368154][ T7625] loop6: detected capacity change from 0 to 7 [ 94.384138][ C1] blk_print_req_error: 75 callbacks suppressed [ 94.386935][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.391062][ C1] buffer_io_error: 122 callbacks suppressed [ 94.391075][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.397413][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.401397][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.405430][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.409543][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.413316][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.417544][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.421710][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.425971][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.474930][ T7625] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.478292][ T7625] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.481594][ T7625] ldm_validate_partition_table(): Disk read failed. [ 94.485026][ T7625] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.488427][ T7625] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.491727][ T7625] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.494268][ T54] usb 8-1: device descriptor read/64, error -71 [ 94.495740][ T7625] Dev loop6: unable to read RDB block 0 [ 94.500501][ T7625] loop6: unable to read partition table [ 94.503018][ T7625] loop6: partition table beyond EOD, truncated [ 94.509226][ T7625] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 94.597997][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 94.641001][ T7635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7635 comm=syz.1.477 [ 94.646156][ T7639] capability: warning: `syz.2.479' uses 32-bit capabilities (legacy support in use) [ 94.655874][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 94.658908][ T7635] netlink: 92 bytes leftover after parsing attributes in process `syz.1.477'. [ 94.710103][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'. [ 94.735842][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.874387][ T54] usb 8-1: device descriptor read/64, error -71 [ 94.985150][ T54] usb usb8-port1: attempt power cycle [ 95.049502][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 95.052608][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 95.070979][ T7686] erspan0: entered promiscuous mode [ 95.080191][ T7691] macsec1: entered promiscuous mode [ 95.082639][ T7691] macsec1: entered allmulticast mode [ 95.134604][ T5928] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.185151][ T7704] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 95.185151][ T7704] program syz.1.499 not setting count and/or reply_len properly [ 95.191248][ T7703] random: crng reseeded on system resumption [ 95.199394][ T7703] : Can't lookup blockdev [ 95.216393][ T7707] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 95.324389][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.345260][ T54] usb 8-1: device descriptor read/8, error -71 [ 95.456157][ T7717] syzkaller0: entered promiscuous mode [ 95.458216][ T7717] syzkaller0: entered allmulticast mode [ 95.586117][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 95.608808][ T54] usb 8-1: device descriptor read/8, error -71 [ 95.696374][ T6001] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 95.714505][ T54] usb usb8-port1: unable to enumerate USB device [ 95.782458][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.785268][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.788530][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.791394][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.855841][ T6001] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.860726][ T6001] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.864972][ T6001] usb 6-1: config 0 interface 0 has no altsetting 0 [ 95.868134][ T6001] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 95.872111][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.880035][ T6001] usb 6-1: config 0 descriptor?? [ 96.058501][ T7741] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 96.301088][ T7752] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 96.303595][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.307658][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 96.313465][ T7752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7752 comm=syz.2.513 [ 96.320128][ T7752] ------------[ cut here ]------------ [ 96.322245][ T7752] i != fen6_info->nsiblings [ 96.322253][ T7752] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xbc1/0xe40, CPU#1: syz.2.513/7752 [ 96.328298][ T7752] Modules linked in: [ 96.330151][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.2.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.333057][ T6001] usbhid 6-1:0.0: can't add hid device: -71 [ 96.334361][ T7752] Tainted: [L]=SOFTLOCKUP [ 96.337201][ T6001] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 96.337300][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.343094][ T7752] RIP: 0010:nsim_fib_event_nb+0xbc1/0xe40 [ 96.345233][ T7752] Code: 20 48 8b 6c 24 28 e8 1e fa cc fa e8 19 fa cc fa 44 89 ee 44 89 ff e8 fe f3 cc fa 45 39 fd 0f 84 6a fd ff ff e8 00 fa cc fa 90 <0f> 0b 90 e9 5c fd ff ff e8 f2 f9 cc fa 48 c7 c7 e0 20 7d 8c e8 e6 [ 96.347015][ T6001] usb 6-1: USB disconnect, device number 6 [ 96.351527][ T7752] RSP: 0018:ffffc90020037118 EFLAGS: 00010287 [ 96.351541][ T7752] RAX: 0000000000000a1b RBX: ffffc90020037260 RCX: ffffc9000cbc1000 [ 96.351548][ T7752] RDX: 0000000000080000 RSI: ffffffff873bb8e0 RDI: ffff8880381cec18 [ 96.351556][ T7752] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 96.351562][ T7752] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888058759000 [ 96.351569][ T7752] R13: 0000000000000001 R14: ffff888030b52d00 R15: ffff8880381cec00 [ 96.351576][ T7752] FS: 00007f1e9365b6c0(0000) GS:ffff8880d6445000(0000) knlGS:0000000000000000 [ 96.373023][ T7752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.375582][ T7752] CR2: 00007f1e92785dc0 CR3: 000000003a71e000 CR4: 0000000000352ef0 [ 96.378323][ T7752] Call Trace: [ 96.379498][ T7752] [ 96.380500][ T7752] notifier_call_chain+0x99/0x420 [ 96.382200][ T7752] atomic_notifier_call_chain+0x71/0x1c0 [ 96.384208][ T7752] call_fib_notifiers+0x33/0x70 [ 96.386424][ T7752] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 96.389345][ T7752] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 96.392502][ T7752] ? find_held_lock+0x2b/0x80 [ 96.394107][ T7752] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 96.396365][ T7752] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 96.398988][ T7752] ip6_route_multipath_add+0x128f/0x1ba0 [ 96.401121][ T7752] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 96.403095][ T7752] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 96.404973][ T7752] ? inet6_rtm_newroute+0xf5/0x160 [ 96.406647][ T7752] inet6_rtm_newroute+0xf5/0x160 [ 96.408318][ T7752] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 96.410206][ T7752] ? __lock_acquire+0x4a5/0x2630 [ 96.411850][ T7752] ? find_held_lock+0x2b/0x80 [ 96.413445][ T7752] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 96.415375][ T7752] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 96.417399][ T7752] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 96.419370][ T7752] rtnetlink_rcv_msg+0x95e/0xe90 [ 96.421078][ T7752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.422872][ T7752] ? ref_tracker_free+0x37e/0x6c0 [ 96.424842][ T7752] netlink_rcv_skb+0x159/0x420 [ 96.426601][ T7752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.428774][ T7752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.431317][ T7752] ? netlink_deliver_tap+0x1ae/0xcc0 [ 96.433613][ T7752] netlink_unicast+0x5aa/0x870 [ 96.435695][ T7752] ? __pfx_netlink_unicast+0x10/0x10 [ 96.437566][ T7752] netlink_sendmsg+0x8b0/0xda0 [ 96.439234][ T7752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.441212][ T7752] ? __might_fault+0x40/0x140 [ 96.443130][ T7752] ____sys_sendmsg+0xa54/0xc30 [ 96.445027][ T7752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.446808][ T7752] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.448681][ T7752] ___sys_sendmsg+0x190/0x1e0 [ 96.450234][ T7752] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.452020][ T7752] __sys_sendmsg+0x170/0x220 [ 96.453663][ T7752] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.455511][ T7752] ? __x64_sys_futex+0x34f/0x4d0 [ 96.457346][ T7752] do_syscall_64+0x106/0xf80 [ 96.458876][ T7752] ? clear_bhb_loop+0x40/0x90 [ 96.460459][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.462402][ T7752] RIP: 0033:0x7f1e9279c799 [ 96.463964][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.471071][ T7752] RSP: 002b:00007f1e9365b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.474139][ T7752] RAX: ffffffffffffffda RBX: 00007f1e92a15fa0 RCX: 00007f1e9279c799 [ 96.477099][ T7752] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000008 [ 96.479800][ T7752] RBP: 00007f1e92832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 96.482490][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.485325][ T7752] R13: 00007f1e92a16038 R14: 00007f1e92a15fa0 R15: 00007ffecb169138 [ 96.488071][ T7752] [ 96.489152][ T7752] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.491673][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.2.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.495388][ T7752] Tainted: [L]=SOFTLOCKUP [ 96.496913][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.500399][ T7752] Call Trace: [ 96.501673][ T7752] [ 96.502874][ T7752] dump_stack_lvl+0x100/0x190 [ 96.504690][ T7752] vpanic+0x552/0x970 [ 96.506107][ T7752] ? __pfx_vpanic+0x10/0x10 [ 96.507684][ T7752] panic+0xd1/0xe0 [ 96.509004][ T7752] ? __pfx_panic+0x10/0x10 [ 96.510491][ T7752] check_panic_on_warn.cold+0x19/0x34 [ 96.512262][ T7752] ? nsim_fib_event_nb+0xbc1/0xe40 [ 96.513973][ T7752] __warn.cold+0x191/0x348 [ 96.515463][ T7752] __report_bug+0x296/0x3d0 [ 96.517019][ T7752] ? nsim_fib_event_nb+0xbc1/0xe40 [ 96.518690][ T7752] ? __pfx___report_bug+0x10/0x10 [ 96.520376][ T7752] ? nsim_fib_event_nb+0xbc1/0xe40 [ 96.522060][ T7752] report_bug+0xb2/0x220 [ 96.523475][ T7752] ? nsim_fib_event_nb+0xbc1/0xe40 [ 96.525170][ T7752] handle_bug+0x16a/0x2a0 [ 96.526637][ T7752] exc_invalid_op+0x17/0x50 [ 96.528307][ T7752] asm_exc_invalid_op+0x1a/0x20 [ 96.529914][ T7752] RIP: 0010:nsim_fib_event_nb+0xbc1/0xe40 [ 96.531784][ T7752] Code: 20 48 8b 6c 24 28 e8 1e fa cc fa e8 19 fa cc fa 44 89 ee 44 89 ff e8 fe f3 cc fa 45 39 fd 0f 84 6a fd ff ff e8 00 fa cc fa 90 <0f> 0b 90 e9 5c fd ff ff e8 f2 f9 cc fa 48 c7 c7 e0 20 7d 8c e8 e6 [ 96.538022][ T7752] RSP: 0018:ffffc90020037118 EFLAGS: 00010287 [ 96.540077][ T7752] RAX: 0000000000000a1b RBX: ffffc90020037260 RCX: ffffc9000cbc1000 [ 96.542647][ T7752] RDX: 0000000000080000 RSI: ffffffff873bb8e0 RDI: ffff8880381cec18 [ 96.545217][ T7752] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 96.547792][ T7752] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888058759000 [ 96.550404][ T7752] R13: 0000000000000001 R14: ffff888030b52d00 R15: ffff8880381cec00 [ 96.552955][ T7752] ? nsim_fib_event_nb+0xbc0/0xe40 [ 96.554712][ T7752] ? nsim_fib_event_nb+0xbc0/0xe40 [ 96.556507][ T7752] notifier_call_chain+0x99/0x420 [ 96.558305][ T7752] atomic_notifier_call_chain+0x71/0x1c0 [ 96.560240][ T7752] call_fib_notifiers+0x33/0x70 [ 96.561832][ T7752] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 96.563957][ T7752] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 96.566210][ T7752] ? find_held_lock+0x2b/0x80 [ 96.567758][ T7752] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 96.569693][ T7752] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 96.571574][ T7752] ip6_route_multipath_add+0x128f/0x1ba0 [ 96.573425][ T7752] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 96.575393][ T7752] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 96.577190][ T7752] ? inet6_rtm_newroute+0xf5/0x160 [ 96.578939][ T7752] inet6_rtm_newroute+0xf5/0x160 [ 96.580649][ T7752] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 96.582505][ T7752] ? __lock_acquire+0x4a5/0x2630 [ 96.584165][ T7752] ? find_held_lock+0x2b/0x80 [ 96.585715][ T7752] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 96.587412][ T7752] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 96.589097][ T7752] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 96.590901][ T7752] rtnetlink_rcv_msg+0x95e/0xe90 [ 96.592575][ T7752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.594437][ T7752] ? ref_tracker_free+0x37e/0x6c0 [ 96.596168][ T7752] netlink_rcv_skb+0x159/0x420 [ 96.597750][ T7752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.599528][ T7752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.601304][ T7752] ? netlink_deliver_tap+0x1ae/0xcc0 [ 96.603046][ T7752] netlink_unicast+0x5aa/0x870 [ 96.604651][ T7752] ? __pfx_netlink_unicast+0x10/0x10 [ 96.606432][ T7752] netlink_sendmsg+0x8b0/0xda0 [ 96.608064][ T7752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.609792][ T7752] ? __might_fault+0x40/0x140 [ 96.611342][ T7752] ____sys_sendmsg+0xa54/0xc30 [ 96.612922][ T7752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.614670][ T7752] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.616415][ T7752] ___sys_sendmsg+0x190/0x1e0 [ 96.617961][ T7752] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.619741][ T7752] __sys_sendmsg+0x170/0x220 [ 96.621586][ T7752] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.623363][ T7752] ? __x64_sys_futex+0x34f/0x4d0 [ 96.625106][ T7752] do_syscall_64+0x106/0xf80 [ 96.626701][ T7752] ? clear_bhb_loop+0x40/0x90 [ 96.628348][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.630456][ T7752] RIP: 0033:0x7f1e9279c799 [ 96.632004][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.638637][ T7752] RSP: 002b:00007f1e9365b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.641367][ T7752] RAX: ffffffffffffffda RBX: 00007f1e92a15fa0 RCX: 00007f1e9279c799 [ 96.643978][ T7752] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000008 [ 96.646572][ T7752] RBP: 00007f1e92832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 96.649388][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.651955][ T7752] R13: 00007f1e92a16038 R14: 00007f1e92a15fa0 R15: 00007ffecb169138 [ 96.654532][ T7752] [ 96.656385][ T7752] Kernel Offset: disabled [ 96.657814][ T7752] Rebooting in 86400 seconds..