last executing test programs: 1m48.88195952s ago: executing program 3 (id=842): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000d00", [0x0, 0x2000000000001]}}) 1m48.821072309s ago: executing program 3 (id=843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1fd, 0x100) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x1) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) dup(r5) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={r9}) (async) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r11, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000080)={r9}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000580)="6466660f3a17ab00608b66b91c02000066b8b000000066ba000000000f30650faefd0f01cb0f20c06635000004000f22c00f9809c18303000066b9800000c00f326635004000000f3066b8020000000f23d00f21f86635000000090f23f8660fd612", 0x62}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x8000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130428bd700000000000ac1414aa000000000000000000000000fe800000000000000000000000000028000000004e2400020200202073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x81c) 1m48.820880658s ago: executing program 3 (id=844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000007840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r3, 0xf39, 0x70bd27, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000200)=""/188) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x801, 0xe2df, 0x40000002, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m47.74158198s ago: executing program 3 (id=862): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000700)=""/238, &(0x7f0000000380)=0xee) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="c901238c093629365fc3a65b1aa782a96573223faf567dee153682049d83cee2f9296ca01e5197000000000000000000", 0x30) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x5, 0x30, 0x80000000, 0x6}, &(0x7f0000000440)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000600)={r6, 0x80000001}, &(0x7f0000000800)=0x8) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b1ea760a37fb9bb400ee5fd0000003c399890703344eafa6a58b6379ab481b3fc6fea9347fd826a7eff8bf00a476e34064a9cd0125676cbc1ac4832e607cad7c70653e166340ec8995cdff488b3f8dbc02b985d5ecf580ecbaeaad129685180bc7e8dad73887db01cfd1dc5e44d1b9b616631654df8080fb9c07c056493eb0e44e2248417c9cf871cfb80a2efd26263f3499d5a0ab68199bb4c8ca405d6934e2b859f7585e31e7df50d8242b3bcad581e1d10ab83d33dee584a1b73b64cf6199ab77fb6169016e77f96a18c2cc10ef3110e4e091ff1d26e0f8414708b6929f8c2dec0bff3b6791aaa8fc4f1", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000080)=[{r8, 0x80}, {r4, 0x4002}], 0x2, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200081, 0x0) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="08002600b41400000a000600ffffffffffff000004000b0008003500000000000a00340002020202020200000500080004000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000000280)) 1m47.530507202s ago: executing program 3 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r1, &(0x7f0000000140)=@known='system.posix_acl_default\x00') r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x1, @multicast}, 0x3d, {0x2, 0xe20, @empty}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x20200, &(0x7f00000000c0)="ac02a0e58d1d0ca5964d82153e383e2544222c9c2b7b", 0x16, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000003c0)="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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x8, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xe, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ec"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4042804}, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m47.26257535s ago: executing program 3 (id=874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f36, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0xb8, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINKMODE={0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xc}, @IFLA_PORT_SELF={0x78, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x14, 0x2, 'veth1_to_batadv\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "62dcd5258bf5ff39039d1496640baacc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "53a2a14d7b77f3c2cc797d227ed09c9b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9cb1458dcda27051fb81773ed8ed7754"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11301c4884e6faa3d4298f79edd7e489"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (rerun: 64) 1m47.19469915s ago: executing program 32 (id=874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f36, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0xb8, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINKMODE={0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xc}, @IFLA_PORT_SELF={0x78, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x14, 0x2, 'veth1_to_batadv\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "62dcd5258bf5ff39039d1496640baacc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "53a2a14d7b77f3c2cc797d227ed09c9b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9cb1458dcda27051fb81773ed8ed7754"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11301c4884e6faa3d4298f79edd7e489"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (rerun: 64) 1m22.89278666s ago: executing program 1 (id=1217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a12600", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x13}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x3ff) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x40080) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES8=r3, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m22.562277832s ago: executing program 1 (id=1221): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m22.562019505s ago: executing program 1 (id=1222): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2a000200000000002100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xc, 'macvtap0\x00'}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m22.343878761s ago: executing program 1 (id=1226): r0 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f0000000140)) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280)=0x4, 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) (rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 64) fstat(r2, &(0x7f0000000300)) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, &(0x7f0000000040)) (async) getpeername$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @remote, @default, @default, @netrom, @default, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 1m22.318462253s ago: executing program 1 (id=1228): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@local, @broadcast, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x3, 0x0, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x78423669}, {@loopback, 0xfff}, {@loopback, 0x6}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x13c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="00000000000000005000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 1m22.19393008s ago: executing program 1 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x1, 0x9c9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x80000001, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x353e, 0x1}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getqdisc={0x38, 0x26, 0xf00, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x3, 0x197f55b99988690e}, {0x0, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x4000060) timer_gettime(r2, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xf705, 0x0, 0x0, {0x0, 0x0, 0x4a00, r6, 0x10800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x40000) 1m22.154216818s ago: executing program 33 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x1, 0x9c9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x80000001, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x353e, 0x1}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getqdisc={0x38, 0x26, 0xf00, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xf}, {0x3, 0x197f55b99988690e}, {0x0, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x4000060) timer_gettime(r2, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xf705, 0x0, 0x0, {0x0, 0x0, 0x4a00, r6, 0x10800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x40000) 35.903067982s ago: executing program 2 (id=1922): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000480)={'vcan0\x00', @random="5dcf01008657"}) 35.827048953s ago: executing program 2 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf25000100000006001d0005001700"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40890) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r13, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x365}]}) close_range(r12, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r11, 0x5207, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) 35.563015728s ago: executing program 2 (id=1928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 34.557738489s ago: executing program 2 (id=1946): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r1 = gettid() (rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) unshare(0x66040080) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f00000002c0)=""/115, 0x73}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac02]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r5) (async) socket(0x2, 0x2, 0x1) (async) accept4(r4, 0x0, &(0x7f0000000000), 0x80000) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000080)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 34.557320259s ago: executing program 2 (id=1947): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000006100)={0x80000000c0000010, 0x1, [0x3, 0x0, 0x9, 0x4, 0x100000000000, 0x401], [0x2, 0x7, 0x5, 0x0, 0x1fe2160e, 0x8], [0xaaa3, 0x1f, 0x9, 0x2, 0x3, 0x7], '\x00', {0x5, 0x0, [{0x40000001, 0x9, 0x0, 0x40, 0x9, 0x224, 0x3f800000}, {0x80000008, 0x30, 0x3, 0x4, 0xfffffffb, 0xa8, 0x8}, {0x7, 0x200, 0x6, 0xdb9608c9, 0x400, 0x3, 0x3c1}, {0xb, 0xf94e, 0x6, 0xe, 0x3ff, 0x8, 0x7}, {0xd, 0x2, 0x3, 0x7, 0x40, 0x6, 0x81}]}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x800) close_range(r3, r0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000004c0)={0x3d6, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 34.449997313s ago: executing program 2 (id=1949): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x9) close(0x4) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f00000005c0)={0x2d, 0x0, r8, 0xc}, 0x10) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnetconf={0x44, 0x52, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x8, r8, 0x9}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="348f63ec449784782fac742b1af7ad9d6da7ee864a55c0c263e335ee564ad9be54c9e23582b37395cbe256b458bcec09b59a769ade04d6c56387ee298861bf1d4294fe1e228f40a05b9c1cd931fcce57b2a2c78909b30e8f344088a96de8250e2e5899a69362b98bcc9483e75b8fae00d5f427432809e25e1c1414759a7493705df564b55b19c1c8a85a19a6da81375a3cf67d9ad4e20df917cfeac2bac7f30c28e7c1555a57f188bcea5fab79db20357d91a77e56f176342e693ebe680299c4d2d158e2", 0xc4}], 0x2}, 0x80) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 18.413542711s ago: executing program 34 (id=1949): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x9) close(0x4) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f00000005c0)={0x2d, 0x0, r8, 0xc}, 0x10) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnetconf={0x44, 0x52, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x8, r8, 0x9}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="348f63ec449784782fac742b1af7ad9d6da7ee864a55c0c263e335ee564ad9be54c9e23582b37395cbe256b458bcec09b59a769ade04d6c56387ee298861bf1d4294fe1e228f40a05b9c1cd931fcce57b2a2c78909b30e8f344088a96de8250e2e5899a69362b98bcc9483e75b8fae00d5f427432809e25e1c1414759a7493705df564b55b19c1c8a85a19a6da81375a3cf67d9ad4e20df917cfeac2bac7f30c28e7c1555a57f188bcea5fab79db20357d91a77e56f176342e693ebe680299c4d2d158e2", 0xc4}], 0x2}, 0x80) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 2.467329814s ago: executing program 6 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x154, 0x0, 0x1fe, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe05}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r2 = socket(0x15, 0x80005, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'veth0_macvtap\x00', {0x2, 0x4e21, @broadcast}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = syz_clone(0x0, &(0x7f0000000880)="164ab13c2af4438660ea21e0353446abaa8906591f10e1396046cde12755751b79ad5eabd9e21530b1f2f0dff6d96b5dba5d9207e2f3d28b321fa78991473e91079e86ab9791b872e5a867d67651f468c05f6d3afe01cf44a122104c7cc249b3e60f86084e1d90cbe512e844adde74f1cc9835f9939e8ee0b61358b7e2a9cd04d7ef552ab04adfd5bcdc2f50ffd4c39b8778cdc71d8d727f9eb432ce8f336ad4a9645df0d8970ea315374834e74f5d9fcab8fb304827a7959af5eb7ba04e785b015f9e06e45f2b9152aa93bb85659cc98c9c224427688c293b1528e3046d066b8e1e033c00b5c54af1a7e4f40fed5bea926662", 0xf3, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="90f11764feed8ea313d3bac724f589da5c383bd711c43ec9c7c2cb53903e6618059f92f5bb1390c3e36688363e4febe459e52a24c5ed6064f27435499804439a9988541d24e0caeab622c22e2a9a6d3c28e82e972e467725a0a13c3708eeb88617051636f4850172c271017fc8a49031675f7efc60e2a6976eaf36bd1509b9137f1acbbdbbd1866f5b") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) keyctl$get_persistent(0x16, r7, 0xfffffffffffffffb) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = gettid() sendmsg$netlink(r8, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000022c0)={0x10, 0x2d, 0x200, 0x70bd2d}, 0x10}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r6, r7}}}], 0x20}, 0x0) sendmsg$netlink(r2, &(0x7f0000001fc0)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000001f80)=[{&(0x7f0000002300)={0x3fc, 0x35, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xac, 0x72, 0x0, 0x1, [@nested={0x4, 0x11c}, @generic="29aeec1c16407e0ef5d5a589e666d283984b067ef0ca31356a95236f17e96803bfe86faf019823356ee6d009849d1b11d587fae961b186cacfedf0da3b815fcb4e3230527e9c332a966c55d0f7d1aa3ebb0a7b50ef518829637fce42478b7017f9658f95c95ed44598e34729215e5f276be809df7a885ee898df857dad87d47b66a8df6821c0761d7480b186fc3f716cf29917480fdf872bfba417d73055f4db", @nested={0x4, 0x9d}]}, @generic="52f9d463c0b62a023cc8df8201c67448edaf7855d7a28955665e27861b8b8838d6e6dc42727bdbbc333f761835958335de935de1a98a9ba506a49913ed0858915f67298f30441639c0fcc3cf3cde45f6828fc13f072567a1b18b2008142a287f8ff1b97a4587b75b14bcc6756d6e779fc484894f63308c7526907005be3fedd4f6016eb85d57cbecf1057f44abf3e1e79fcb92542ae62abe6da62095f5268b94a654adc0a3823998efd449bb492eb0ad6e87f04fab8b05fab1860e3e18bffe41bdb9fc6128273bdba59047a0d62f9e0bf9bb32bc3e", @nested={0x14, 0x85, 0x0, 0x1, [@typed={0xa, 0xf0, 0x0, 0x0, @str='&([&&\x00'}, @nested={0x4, 0xde}]}, @nested={0xc4, 0xe4, 0x0, 0x1, [@generic="1e59cbbc13921ea6d9676b7fc6a4e42f399ae9e1458120c889bc47251e090d49ae0fc9e79f7b97e4f8a87eade81e6caeae750ca351798bd5eefa20ea246d11ae6dd1064dbaf6b1f15d701715a8d3", @nested={0x4, 0xd6}, @generic="bb54b88e6e3805207046e4cd8b4982cf02b45b08fbeb6b3a5d22ffb5dc49a220e487f049a06d0f41fc9e8f6e13492cb0dfefafdacf60572ee76e6e6cc25fc6b4429371c40121902f6e955e30211cb149f87405e019dcc06f8fd5f6262881c3be2a2d68fdfa4b5caac1769acc3ef1"]}, @generic="c37d870ec722b7db7a61368dc2ae7634d9ff3bc051871096b11115ad4ae9bb22e8f55ce30fd0cff67451206329200a23d8394f9316df03a7facf95efd8eeaea1113f5e8a83b9a778d5491cf93b929f1dae2294dd02ee25046a36c0c47c8f0a689d4a293c302b4c6d869515f7871d514022a989011941d1d6485da8ae72162f14f40ed8ba5893", @nested={0x109, 0xee, 0x0, 0x1, [@typed={0x32, 0x12f, 0x0, 0x0, @binary="b700370108b908778397eadf56bb76cd82c46810c551e700ffdab4661656b9bf00"/46}, @nested={0x4, 0x4f}, @nested={0x4, 0xc93}, @generic="4dba0f8df005be23db71b49c3d390563c16e8a46497ec5ae3015c42e501b3a3af1801f351063c44cef4f48e0cacdde4d3279ebeeb97cfec57ac47d61e81ffafb12e9ad025f502124603d9844a7a03ecc86f0ac2f345cb6b6b5dbae621651375e35004ceebf3c35f87816d7347747f02c2f54e6d53540521a24507fa9a9516316a789ef2221b16f25b7c2301a61e1453bd33195b5f7cc57c3e1bc6780ce0e447aa03ae1eb6acc24e8de20006f9abb83f2930461c6efb1cb3c636de882e4bc4c0b3b", @typed={0x5, 0x7a, 0x0, 0x0, @str='\x00'}]}]}, 0x3fc}, {&(0x7f0000002700)={0x1308, 0x41, 0x200, 0x70bd25, 0x25dfdbfc, "", [@generic="1cfd4e9a5e6cdf76b86d473b8ac2ee96b352c72e34b15f8cfe44a73cb5b2b6be4f4765754d9f7cedcc1ee86d9d9a70756a57b463e8a6", @nested={0x27, 0x8c, 0x0, 0x1, [@typed={0xc, 0x98, 0x0, 0x0, @u64=0x80000000}, @typed={0x8, 0x98, 0x0, 0x0, @uid=r7}, @typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}, @generic="e870ce"]}, @generic="9f593f8427f1ec0cdb523dd6ffddf41f10e07a3b628ec93ae198716abd08a03ae0a640e3056f9687f907c47dcc122dd23c093e5831b88404a00da2f553a621e4c0a620c96cd90c2797a4f2a8bc70dd4c7114f265ecca344d52da5a707faef7fd6e34b6be650302baa6f305399cd012c31849053230a7be173b4406841de27029bc79bb6286591374ba481f8d028e2a678d8234736381170c4c33cb9bc68e04a19d7cc7ffce72e778b339d0204eadec61485ba9635728a2ae0a48eb21be8e1f189242b09e588f26bd173cc3b63792f1992c00e37ad813303113cfbfbb18fbd835a72fb9af13c5cbdd161dc6b6b99459e5e12405bd1018", @nested={0x10e0, 0xe, 0x0, 0x1, [@generic="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", @generic="03430de4d49e72759fc486fda0e302535db5ac1965f7eeefc37f193721c98ba69ce852ba920af71d54851a01c26fb6481c7ff3f924eac0b08aa2c7e86d1d", @typed={0x8, 0xe2, 0x0, 0x0, @u32}, @generic="1d8220008d23423bc27deee6a74ee4fb6216fdca2c072f0b18a4bca840190bc396efcd656b9a5de22c47ea3c2bdbb0e1297745d07b1afc58e6a559a9cb73466db5c836d140e6b2d003f01aeb41b838809ef1688c0bfa28f517c2bb142e6693e4eea91a528bf98c37516b83b5b102aa89bb1031cb260479506f5654880c71b939df", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x2}, @generic="6f09fbf04a", @typed={0x8, 0x152, 0x0, 0x0, @pid=r9}]}, @nested={0xae, 0x40, 0x0, 0x1, [@nested={0x4, 0x7b}, @typed={0xc, 0xd4, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x109, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xe}, @generic="3d391c197452f8f866258eb7782fe05fcec4256d8a88abb00a70c1bac4ebc34ef82ea28dad25f7fdb79abf495f5ac6d0d2a45a02470988071f4eadf3790ca28ffd6b03033bf99ae6695aea4a5dfa4d6ad61e90d6e8a5e5765ccdc54c6da690b0b67b7767a8096d27ab33fc3129a68610a7e93c8e03a000c1db66188312fc6a5750bda92e260b3803e14a", @nested={0x4, 0x73}]}, @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@mcast1}]}, 0x1308}], 0x2, 0x0, 0x0, 0x40}, 0x20044000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0xd0400, 0x136) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f00000040c0), 0x7, 0x8000004, 0x0, 0x0, 0x1) fdatasync(r10) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto(r12, 0x0, 0x0, 0x4014, 0x0, 0x0) 2.191891555s ago: executing program 6 (id=2532): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864d0, &(0x7f00000003c0)={0x29, 0x0, 0x0, 0xb0b0b0b0}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./bus\x00', 0x0, 0x8}, 0x18) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8000000) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) write$fb(r6, &(0x7f0000000040)="bc1721db57bbefa0c3d1f6367f5123fb6acc44fb441fd783a7e807fa61251655c1d9d304ba5929fd523ad840a3a25940995a54143275fca98289650294f414000491c9449f2241cadfa2dfc1bfd53a56df1741fa4a9410249c74e86e86fcf9ef2b3387e4257d190bfd4eb7584e33ac5107af3b2331627a12f1b9e9205bde7d775134cad5cb062e18ebf01bfc77787c0244584aa07c0371e327ed4e73360cebc47c27eec2b877a0b7cd38d0a59bf2b7cf30c30b3ede20f21009915f3f76408a7d073033a264ecb4b90dea4fcf69bfb016", 0xd0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, &(0x7f0000003500)=0x1e) memfd_create(&(0x7f0000000040), 0x5) open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) 2.123160744s ago: executing program 6 (id=2534): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b13f6876fe13fece2b180000360c8ebce690fe441f83000400000000000000001000f3ebe82bceeaefeda6f2a4fdf679fd134d2e7a1af0777ab182c3afecfd981594d3a0f02d79c3fbf9dc7f34d0dab783d4bcae70e1fe9dc5190f4ce80c333e84433f6b252e89c2c08fab242f03417b268984ed3f63b052c611c8e58a38b5f834cbe3ac5924722ee2bcd63804ea1aea7f0d0879d211ddae03d06a5a638780c623e9a525cc907a160ac1dcc1ec5f1b7e28489e1acf0e72056fcfbd363d2a3bcc743b", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3ed0100fcffffff8570e0ffffffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x34, &(0x7f0000000080)=""/52, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x104e05, 0x10, 0xfffffff0, 0x6}, 0x10, 0x0, 0x0, 0x100000000000003f, 0x0, &(0x7f0000000100), 0x10, 0xffff0002}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000450d0000850000000600000018110500", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000d469056dfcffffff"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40e00, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xd, 0x3, 0x2d}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x1, 0x1, 0x10, 0x1}, {0x1, 0x1, 0xb, 0x8}, {0x5, 0x3, 0x4, 0x9}, {0x0, 0x5, 0xb, 0x9}, {0x3, 0x2, 0x9, 0x6}, {0x0, 0x4, 0xa, 0xa}], 0x10, 0x42f}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) unshare(0x62000000) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0xffffffffffffffff, {0x7fffffffffffffff, 0x2, 0x101, 0xfffffffffffffff7, 0x3, 0x7, {0x0, 0xd08, 0x0, 0x100, 0x8000000002000, 0x0, 0x7, 0x10, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x208ff, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x600300, 0x3) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000840)=0x5, 0x4) keyctl$set_timeout(0xf, 0x0, 0x2) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000740)={0x6}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, r0, 0x30, 0x2030, r8, @void, @void, @value, @void, r6}, 0x20) write$selinux_user(r4, &(0x7f0000000180)={'system_u:object_r:mail_spool_t:s0', 0x20, 'user_u\x00'}, 0x29) r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r9, 0x0) readv(r9, &(0x7f00000001c0)=[{0x0}], 0x1) 1.838290634s ago: executing program 0 (id=2543): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000000)=0xd) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) (async) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000000)=0xd) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 1.77637487s ago: executing program 0 (id=2546): unshare(0x62000000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000002c0)={0x79c, "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"}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000100)=0x1000) fcntl$notify(r2, 0x402, 0x8000001f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x401, 0x6, 0x6, 0x9, 0x800000]}, &(0x7f0000000180)=0x54) 1.667354082s ago: executing program 4 (id=2550): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000002240)={0x1, "b500e2279c29000000002be208000000000000ffafbf08060000faff00"}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0xfffffffffffffe11, &(0x7f0000000780)={&(0x7f0000004380)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd2f, 0xfffffffe, {0x0, 0x0, 0x12, r2, {0xe, 0x10}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) (async) syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000180)=ANY=[]) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r9, {0x7, 0x9, 0x0, 0x796a3c7eb22bc59f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) (async) chown(&(0x7f0000000000)='./file0\x00', r10, r11) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_fuse_handle_req(r7, &(0x7f0000002380)="5da96bc6c0ed1b975e0e6e9459df523cbc4091f9f381ed04761851988c8ed9a1c5dfe7b5f92f4aa3af5e00993fba2cd12c2bd92527426b515de66bc2b689f4f1a3dc6d24430ba1c9b21eb9d232e8f01abad394e3ae8ea3a2fac521dd605221041454d05122f736673436c6e9b05aca84c607f4943957088daee466c36d335120e76b789fde63da75f287196e895a90a2ae5ac7b1bcd379322de79ae0fd1d6dd0aa94ccaebc81ded77e149e3165fcef5a3713fd14f1fb4d8d12cb5f8aa2ad7135baaf6e2e2a66033fb7aa7efe6f674d576211484061e817d5580033e004326ec9ca58c111eb95c38226a2cb1c373b1b25ef146b39715b592759ffa33c3edbb0a7e219e56163cc4ee152ac4dc0d118ac6e3ba2f6d543ff6fabbfe9f65ecb71efbb517cf8888122def695b14d7f46f89245f0f8787ee7f2106da95752249c538e613837cdaf2cb0af9f9ebf8859824408244c5bbf91d964288403557db829a9f1bf61a931dc35f2bb4ac44b2c35f31ee63c3cd2be1700b9af75f7e50cdbbc54e744f3147e1c8ddb87ad28e662902e13e56dde247534095e5dd146b61666dfbbfbc6d461ac42514f8b3b6fce33cbe421d5983efe87ca0ff89f49b00575c0fae0d318cf284f211dc5edc09d6d65ca5316c306061f124a8078bf1c3ce2a162517542b604535e87fe1a31978bf656339fd2a27cba78d2650888ecc28d8d80ccebc6c18fda7e77ad9aba157e3134d38b5d5b2ff7833f2b3828b4d71aee81ee242450519b0d51295eedff49fcdce67ed6ba3bc57a7d024b55018f8b294fafe0aa24de92bd2b0ddbe8290f3ccc7f765ae2a7e371f1c7d8f19899619e5b01c5cfdde7262766ceb8217f7ef4fb869271e9d6987ce5ae00f3a2255d22f7316315e3b8c3cdc0ac1c2488b7474b5d5ed3f87f4b96e826136fcc39a65ef82ce49394a9181a220589494b49b83faa2710ef0088484ed0d5b69a68445bd0f5f2850090ab931e0625eaec0e50a9c2465fd47f76ee251bc5659920c4bc887825529ca50331d3fea536aa717fbff0ad5bedb1a455502bbde218f010cc051a5b774d5f7e26d654510ca34c1187268fe7e7606ad62bbfe6c9da20f8a3d89268a8e748274990bf7538ce90e9a6f26e569e2cf48ec56c805e8c71a7b4ad56928b4705d5a2fc0fc78208290590d23f1337eac411b2cb1acc17e5400381d297464d43833695cb22b299bd578b530bad3a5564e743f1074e85a1f693956308c48d647fee9fba7089d0b4478737362af87b24483c198ce2b0952ab15612b0a495a26fa958b806b6261c1c9e24495e4b3c7c66560e98cba41bee2c5d224751e409dc221d672e2a666cb9b2f1408f375fcb447a4e8b3fb6d12cc59fb2044362bdaa25506371bb57ba8b52ab7a020959ad9ee14a63ffd37a8308945fe6e41215cfe6b3c94e0b2c3467babc2fe6b9a9ec51bd0f5769e6b3bd2db1f2bb7527a5e14b98513687863110704cecbac69cf3f021f2f9af2e96a8e595af5b128bfbd59709b93deece5e48307067cfd2d3ce28ac080bdd90a5799c619853436655aaa5bf08a5a41cc0d6869e3f4ce7b7dda7cfdeff4944e007580167ca9ead10f5ec4f0e9337e5620a3b023173f572a9f1482fa3b431237b64c9ea7ba1ee5f8af00d02b538754d7cb3d365683cc25bb90943143ebd7f7dcc7ee624377c1109c4000f1511373cd515c7f569999073f9d5538488150a06885b1619eec19c4f43522ed6ee902b02f0a29d45bda3ccb5e5896c72b15f8745616c9cc0d08f503ad6e894a0157825e6453f4290e4670f2c21ae82eb6d5c60189ff373751c1c35f0020affbc6f43549618df4c5b6cb34dd94510c29a1191f09b41137de75bb0875e71077f2c3613b4dd7b72d580324de8c6835ab8c2a54716c9a9eb4abc0fec86c1928db5ecbe39790d253808f3d81a876fa79473f9f7b6462f348b0320415dcaff32b092fe9f72b691b2ecc74f804bf88914e5de85d6f601018d848efecac79df454fe1b99fcdcf947bd6a81396be68b687167b3f69dd4f44bac3841c586318308da40f90cc5e6d503ccc04fb57cf0592faac61c8b6321be719239fd0ae671e81614f069e9e790da986a0849b6d35e4b6c048bda650c1888a62638deb6d29f5361e097df7f2355f429b40bc554c686b56c56750dddff60b5a14c9b4ddb5c8983fd597ed0c93d52653d3bbd5ba2a08289efa2f44b8ff3cf0f9910666b8c123ee01378f81505fcce3c15eca585383f153cda0aeb098885e3b29527df72a8fbb6557c266a3ecbd7742dca92f8f676f177a742f178465ed810f688658e1fbbb006cc792a1cbc19db434f9866bb123531b1a9b6b9f94d85eec165b041e083703415fb549c9fe0b41de0af3eef5be3d72e3b2f6dc627cd434604e7d7d762e31e9a033acfcfc61259b5a67998686d0fc864c67e6ac0b8e7c9ebc42f19e4d419501d468f073f9fb36b9af658a4d39c75ff3c5a675bc00639988c9cc2fd14ced13332744daaf6f598dc1a448ed623da0c441f0e62ae1be9daf3bde0d471f633f2e98c4397bf31578423ef369d8ab71491b775ecfc7dd2ac0359de4858ee9951d649643cd2cc41d0ca39201fd2ff3cadac282fdef4c69de56ac66484139e82886555c88f4f13c39e8c1f01aacaf7d56a6f56100ae3762ba856ac27388dcdbd066e13922667aa4df035b6a22da70e68b1ea8c6ffee01289ecb7cdaacbdf91ace3a36de6b8101bbd38258399a39fe0221760b5bd1ddc7eae546186fb34aa58293a17f2c4b4fcc1fa7c138c7cbf120c0fdf56bc382172e16442bf090ffcd6ad246c8d50262ec5b01b52b7873ba256e106ac249a9c16cfa3ec1e258a619bf7e529629a40c7da4ebb5adba0357486e37f6895083c1abeddbe12aaeb35b00f903b0f659f9276a2173def14f69fda92e4a13245e86edae67342854de2e744ada730c4b41f78285d03116d3b95ebe9b9e0c3f7e208a9a8afa8d6571b36d752a9c6f8381b647ec78340d45d7d648e1b58aec8a947dd2bdc7dfca688d07c8b80b74c17932346cbdf93083cf5fb7194ff8d75c88a18a80e951b150a9e98802986b1c7b775d33efcca5012590a9ff2b49ce7e1cb36321ce28322931a07c7c1aa674b39c7bf94c05c6c139a02e8ed1f39fb29ff3c5120b0086a6bf7ed3a40daec9c7348789b2e9b07c2059b9dfe205c9b4d5f943d6936a1be02cfe57ea968d8a549a15298c1891c58af976a6b43cdd2436a10dae7410c39c97bf64715e3271fe63a5c5dbbe24cb3a240548dac842404a1dc2aa8f8a81e2d0358f40dd7f5d7dde16409acc9754c9605b469edb2e239b97cdd9c527bcc3ab45bd28fb9c318a6d42287abb7f592c9163a1ef5599fcceff7511ce07fead34560838d2a325bbe3870226ff0caa4fb9b316a6f743c2dfd0cf36bc11e42042c25dabbb8dc10dae9f95450dc577c0f1a61620c4a67e857db68d2a04858b1036521fb6edbbe16af3e75655638b08564549b88e471d33556b893e6c35532430f312febd0664f8ac5ab3e99477189f6bd42bf33432fd11544de6ff77d194482b02a86ba0a05a218258ab5ee06662cf041200da4877712eba2b7cfec7149e88174af223fda768c1519c0a454ce771469042159fffd7d78b84191f6b39ca64d686d9b3808ecc4b335f2ef442e149db2d8cc64356f53321ea5282aac5f1983bbebb2759ae6331b840ddad107c41b18d5827bdd677a7c35204b139fb8dc49a96b2b1f8b9a0530f8fbb36c4ab825a860ac1b8f4f72d8d626a4672170b4d84bb45391fdeae40a0b50e2b7c27be0f43719694e06b94b9d0318bbee7d167fe43e0abd1b73f1220a0abbf33e4072113f25490e51e91ec9a0c3f11b93742ca30381afe6782fac32c764626d79be26351f667aa249d73278fbca636e8b80c11dd398d5e65181d5eacdc95f45dcb3dd5f997d2ee1fbf7836882855a18fc22c47c698aee48f726733def28aa0a2df26a797954bd82af41086f7eabed108ffe06dfdd50f77651bb24d26269687465f3826ce3500feec5049b363fcbf2605134124bdf7b7332ef420306f37123179c4f910352a8bad653ac3c91f296ca86ef50a7a44a2e2cf3bcc4881730f6737d352e3bbe9f17a506260d6c3e3d468486a837914e5902d208a5c3ae7d7631cb347c5df94e963d54611d074a81eabe753d9599fc355dd2d46be41a416da76f93d27f0724eba16ceac1b2ad3c085d29ff15930b2f6a635b05c9f8242f7e4d2dee237751ac9dc572717a8a74cbdd9c36d99f9b77ca19a0e084bca675fc0d33b3a773497479166eaff051f66ce238f71831489cb71caf00e1d6dfe461197fd65e4471c73a982ad3a23a73ac4cc1fb2260fbdf61e686513ccf860091e170f33fe5fa78d63a3da0274fd9ee33937a5816923b7eb944637ae9fd94919fef8a5641456e0a85dbe9005246a86374104fa88d6b840eb9541e7e749b903c4a02cf7b6c6922e09fb0f5fc72c24395f7de1d8714ae6e2bbfc625ef5a46640e73c246742b02f9ba78977cc063f7b5abd50af91dd0a84f705ca70959671af83f1492a130b40643821866a0c05075a756e7c282bceadd90dee51ec001344bd715e03d4842385525b282ddc35512c30821584897075574d25545e70685e87ac603777558d5e9ec1990621657bf51ba4ad3c35fc199114c6f95f160f45d54786d0cc5e78fed42b30b6f880fc85bd449f027c9032bba43c77ad7e5f4dd9cab8288b3a3587e886084ce749e871ba5b7b771d0d8c4596bbea25485f898581039fc352b70097e482275d7173196a3fcf818de908922580ddb9b5d6a2d4a58538b408e9f89e74e3ed03776b10124cd98d2321e3f7e53724e26597ab2dea68fd34c6a3995511cb07ff17d22d41f4232083f69352a120ff885401e624aee8ae25c3bd62aa5edd810ec8ff4bfebc0edaa5c0122f04bec502494c77f8c32d2bf0bebef7c68641a6fd9b2b25d5ac50c21dd5f18d951fe224c7c8689bddccdea132c1d58e5ccaee507c50d3820a84eb23f359cc23ddbe30ac2f643945e2aae295e4cb49125252eee04cd6909a41eee9d154b96c93e391fba02f0ec1741c99e7ab87a2bb7da13e94cf88278e731ebf1289292a30f1cfc13276e361abf39246aec68a1bc863c741846d4d28c1f66169efa72aec6bf2a4d2c975242766053be74cf4d45a3ddcef7c2f1a2a12e6b1f0d25a5c6742bf5c6b43bec4ae3709fcb17d798877509675932b021ef47b13320d250ed1b47b62225586d29cb74c6112cfbdb1982bc1c05d3fbd41a9d6539cbae29e726d88b35a2e3399eb53c809d5814037940de6b1ff7925f3a4ebbcb90fdea5f2ce2c8bc7dad3312604238f6ee6021891a8c311037a67de7c5c068c1a8888277546566d38f140d90a1b8de2596b5879104f5bc989db6ba7def76acf2ab49d7e04214ca1f9c2a387c0cf170c1b7469983040d5d167fe1a1541a5d024528413cf44b7c3e0d8defc0fb6c31e3ffd7edba8731d92e177b1dd61f748880441f07d8ca86804328f276d0103778086de3d88efc07feeecf033e2d3613142740842a6cc3468498a91aedcef6c1c61c5de5f6e6f7f21a82621fad7e7957936ad343f56e40b55fb32d2dc0d92a0a747a5b055488a6cbe8452c81b25851c876a814963ce9442d71bc7eb434e36484f672aa41d5281856327e2b17753183c385047b51d5cec6049d0d773e5116d2dd8ec00af2ea779c3dd3729b08e7e6c8637cf3b8e76b83f5a85cbf3a50a1dba7fad5b9ee01c6ebcd66df48c20f653fb27d7ac9cbb48a747351f2a01899bfa7066a409b41ba2ad50ab30220b60f18929d967cca237315a15f9025eabc2f5933a07666da89cee61e0ade5ea85c6672bc6ee073f6f037f8950839700ecbd9b9f8ba2a367fc3d87d3286f4e5cdf7b9189bfffe3c45717688f67d991d4a859942774cf015041357c6f30b3dfefec461f401b742ba48954516e2d71f84ac25723ba991a1c6ca85937d19d82c1e016fb36a34f171df46067a6c6a26a13d970becab0084e91bb81e74eafa5d137bb7605c832ca6552798a11661e24ebd1da6a921dd296c700d68741a1ceda65e8c1317df9784c6f3ccd5723e12bcc889591a29bd2e4053f12ff0baca14675f0e2a18dc40249cafc2983bf2bab0f0d3f33e6a7d65f39fdd68bafb6723c98dedb3305ebf102c1ee254260b2b3ea48902ed7bbe9d63422bf2dfcf72b883949ebbecc2362163ac41f960df288212515e72704432387073035e27bf988ca5bf899afef608ac829436e830d6282b0cb05e749bbf056921f294a8f06efdfdb7100bfa8af633c9663b9691aaf35a2c5594ba3f877c0c8bb321f06de825b91f82ff9d13b14e9c2843485b1d1a210ae98d6b47a0596f46f3e5837a6c69794d2adf09687125900d9a4919e21398105b3d48e1ad40e1ab25d14e2a79ed6c72847d98fc58d5684080c5579f578000dbe1ac6a895da20511b940d7b8c28f3b6d27dbc6c6b988b1cf869cdc157f08ca994387f6b35995d1cba8cd10248820a634437cc8e3c84705726982f2967762636c354c3cf28f928bc0a79c1026fefc701530fd16b641c7d56017c6854a0a8e6fd3875a24078a4617abfc86c33e543cce19ce2a49fd1ec451b806419db02581d9f08a4d161a32db8d9f0ea26c299aa128cb17e355e2bb1277bb751482b48f2b25bb917112596f9b2075b3632399db0cf8847d2812739f989e30d872fe708fd1e1de16f1181808d784c01a75e13c0285539ae5e367bff23c862667000b818378a9afeac3b2d586018e6f15a6dcc166d3299c23b3033cedeb3fe06f86c64fe1bba7b508c9947ad4775a1566f2010131f846cb607429846189c106816caa0caa336e8274a14730ed5bc549da7248dc9a682383b8b872f1116c11882c05503ccbde473fd559ddab318664ab1c8b5f1c03e770cbe150692998ed1e9ed7863495ecf1c845876e10d37fcb21f089d4f5c69efbbe5f8d516f8c66997030883caa60ee16d4090c88da39d01202bc356b343d8d8e3bd457ae17a407e50beb5e1ece8a0befc734f75687dfe4a88e3659d856ada76ffa98731506b0145b5d5697160f64923cec21068f7970e50fddd06849e502ceb690796bbbb0a2b306cd8c6c9c091824335c7cc5f293c6348efb8b9089f2a02a73e7a6aca2d4bdd011f7c2397be1735310c683c97847be7c75674b6c23a7b6bdcae161d58ac8328e86c6f63daa3b5d1e4b1a51b4eee07124bbf907fa66f0257913adbbac54abafa212ebd2e4248b2af032787fc101991f32f318365a7a2fc92a3750ccbd6e56358099c7e471732ab69c04c252784bd9c6cc9effd7deaf3ef624275fef214d34ca5b319aa78d65ea74ce699501e78305c822386519fe98613280944b1785d46ba381d5846c3e2702ab9ff0fa712193a0a63693a6b2886f44cc877c04f7320d0dc9a7ba08a5fddf23603c164282f2981c90f72c075adc5a5464a06055ba4b508c983537c7e41206f90b83a7a61ac782d5e37d40a5db2ed8c5a4b94dff73601bd44fd9ac49709f123e82cb4f2e7918befb4359f086aa255c15bd804c9443acdcebe7571aa540bd6b9437879ea9f753eda3d0091246e06b1fe63ee272e6ff341caed2adaae1600806e8739e22c3977f5e2932b131820079c0e6f1fd19ce9c32c43d870a71d488bd20ca1185d2ed589551e82baddaaf2ed773745bafe3cf23c6a2d03b4f8da5804489bce92a92aad491687e2225207a7519d54284ddf2ec4db95975173533c1911f4fd52c10c8d42171637f9c29e581a1f79e4406920fbcdcc28bbd399454317e39bc0431be4fc18c6543e08c94c9ab927af2a5c25cfa76cfd36224832a685d8f9786ba427a756a6243258a5daa38f3fc5046448799bf7cfec8de26ddc9882b04fafd63d1938081f7cae8fab9f767e2a349f5c0e5f2c5e7a28f1e6f109eb7471dc035c0a7f96c6d9bd3254dd1f634ea0e8aa36d62ee171814b3048f56d7d69fb37c75370a713eefabf1c8e3e260a93671e9fba612e786c96f3a531cfa43a8f3bb7c5b333902c49d98147a83b9fc72bd40ac64d687db6634c2e35e8476b274d0ecd812d093a7c9358411a713f4f649959fe734af36fcd74d56283d18213410f25e9aa5ff33b65672ad4e5379a80a4d691b0c4e1800646195918fc8990036f1caf3142254e00a556134279c5189d7942c102e78b328581e3fe3da9a0d3bbe2f7038f86466742bf2fc5e53d92a46bb8f825b27f8b93bd7c68cf037aec80b322fa5312452f2e37794319e9269855d70703bb4743ecaea4d9777b404d7b1a273000ddf836d56fdfc3547da3aabaf663ca5122378159961084f27b9ec5fbe8208be18fc1583aff10a9531df9788e70d977db2ce8b4219f05871b24fc7c617bc8faa19d584287e726216ffe12e369676ebca5319179118b486960849740061dad4a2b37bab409c5d25855e87b0862f8d89f8543c0bbe50b3068dc869a1bf7ac19fd8a99da6cfa84d58bf6fccb5526fc952b7116c1f8096fd4c85f2a4728cda841aded6273cd6609ed251ba2ae377f446dae520a166897d03c4da7828d6f7d7a1177c157099ea61ddbb02f3d14b58bc335c38a58a0d3ae94467183fb6b8c9f05f7a7c20a1aafd25c904ace7fe53b74bf2f0b4d19cd0695885f33370f3294fa21ab2a2ee7470796f883a0f24ddf7e564466b1e9287d1292fb3f873041b3c5f2fd9cf9934a9aa325814d673b16bde76bc69bafbbb6943590a49b18693fabebd66b096c382accbef13ac71da687c37c27f0f24714e63cb440d70384ab88e009d46352d32e7144ed8391120f332db6fc1d2570ebfb03d1f19a38a753d99118b40dd066428abd1b143c9c2f1f539ba3284a2db6ad54993984de28fd3222fa920d24db27245728dc753ba99c1e91d071ff546d7f7d71f838b135d3c0506139d8867eea6bbabd2f8b3371c24cdf95e89d0eaecceeaac1cfca448205eb508591b0e6379f1444e973f2f0d6e9f9adac68e0a3171fbade4982cf0c3fd892b993e76c6edb782e4bba7e5bf244963da5568988f7bd979aedeb21ced24a2c8a779f2fe7705212275db578aec389e5aa5f4d158f567a6eb6851f55ca2636e30da6363e91aa781ef995f2de0bb363d82dde3242563431bd720d177f7eb95da6144e98e6d54e964f30f3150d1d021410aa58025f33aaf0483da40565f29e83a426148ad1e3a2d44da1627bbc6c1ce0aad1fa71d309a734d748416f63714cb342133a44500804a40318684abcdbb16bf44a6d3045de0b649387dc55f8a1fdf07402fc933910780cf1a79aa53cac3287083c1638ec424b8f5779f0fe8deb704ea23b2966300494aab8ca6944ac2cc4d96791e24d50f6e7d2dcca855bab6c0c60aba258d7f381ae5b68bda840bd4035062d0dae5c321edbb349268045c0e6f3c280e3d537e3f90671cf0f6c34e4c074e025dcb9a4a3e5634387d5b1a6664c5d57c0572e5ab8922e6c6206889f2a05ac72d72dcc261b7a0659a72a46afcfe4914bb30b64dd64e74055ecd790f46e7705b1e147068c68653b92fcf12a2b922faffd5397daa9c61536a89d31c0fea009282fd10b513b38c94f797fed6d190ff1fcb17bc34b2a1dbee0023e33706c3c2272878a5fb9c207dc2005a64a2d4e77611c987f78f5e6104fb26eb766b64d9ae6259f1273462a4a253dad8ded929e772e366b2e6c15b74190401be59a04be1992180c6dc19eb509684ec261562ef28e20faedd6a9c4dcef6e1bb309f111ae382097b5fcca443949e2e60bcad63f90796e7608d67d7ee834c89dc62ef3e3bfd10468c61f5089cdd4e297d35079c12c0f39528acb76625b659a1d0257cccf25a9671337517df3873b5bb93e2730400b6e2645850580b1a3828a458e87f2d4c50bb22937896851ee566c94e7f0cac2b2b330b1224c68d63663e8b74dca5ab692da55a98597b2e4f0391c8f955f225126c8c6300b2d87419fccd3316e7305e04b14c355d4ef59f58d7051f0ad844b5aefdaf580189bc8e8a0a756627f36a96f3a6b89853d32d77b4529cb400a9c6b7c1c403969d9b5270e181dfd097b4ee0595f0a841ee14d18dde8b0e8c517643709783f56555a2fa805fecd1e1c51dac9a0dbde3f9cff3833da0abaeac2af4ad6471a4036111bc8f96d8d49c1efe7b3557b6c4cbbe58e44fca65b2a7057e5401ff2619b41431af148b6c9c2699d509dc9ce7d48c402ba1cadc3c3424d6cf9ccdd287a81a5d7cee9aa45e718e9a711fbcf70fd5b933c6282b3ecf3c26e4d8ea51838a5abff84ba1b5e9035e76cee53e75d0fb7832820e70f061d8a1bd72c3f237c012cef37ad79ecc60d9d925788f19bd7b17b2c65491738e9ad5d09d33ce888b9a5b02fa60f18d044276a64c0b7dd85153fb966e0b7615fa2555105e2e96f7050c4f15a0b76d8c51d71415a5063ed4c6d6a1c1578594ad5166236d15d767968abf9695107458aa48842fba7a0fb034ad493359aa1dddfa9d97a1dcafd13b29c0818184cfad81c682e19fa5a7d598a15f123e1f075c5339f0f23a7a2876f7dc555f3e29a832713ea5aa3f7fb6a9c3d8f54de0bf3a34db0ec8ffdc032112bfeb6ccbc4c9e43a1d953d18ab3216e0076eaee8b609b295bc4893dd38fd9fee561e83b6ffa6bc1ac12d001ac11cc60246c7288c809ba14b5a41aa52c65288f303eddb8790ee0d5b2ec5d6151732438e9840be2a1aa83f26f0ee7e04d38e95b95a031ebe32fa171ea5e97ea9d2fe75f51b4db6d7eb17258dd887132328dc709a8a8a847d7f2fa2812f3da35d8c949bd30a3ba26f3af46f3911e8bba1dba5de9e5c30f9d9422d2558376d226a62f0a12cbe97f58f71e2ca6dc24e49a15c34da84e7f5e95c47e3b1aca7998928a11743d6c5a5c0b427391c2281ae3e36333b59a77f5f5821d741b6a4f8a6a9d2731a4abf2ae6e2ea4fe76a974643cc84354d0c082007488cd0d62490d6d58f27ecaee4e6306c857a89a8c3b32da1d3dec35adf41d5b5d31f8db96bc3514cde6bb2d51c9d6a8b763a7bca6515fe10f865cc6921455748c64fa534afd3fb6ecd17efeceb5dfcdf89c25c1c2f38fcf9a2134a3c09122b661246d33505bb158b93dd75612806d817fb2d93eb2edd47d1284ee6f8e24ee06cd14032aa10702f8e7017819eaa56d9ff5a80f5b2b1b0f11f9e7cfe4a075fc542fbb53d2d6f47d8dd48947a001e6db81aac118c0982b7cbc607f73b002370b5493250916b43bbfbc691bf48a840585c3849e5f2b6ee28c1a1bfdf380046dacdcab20fc9c8f18aafd286524cd942977c4535fae32fc74a52490ccc4089f1b155b5a6787f5f5bc3418ec7fb3eb05cbd3dcd517ce67bf4028b746c31049b7f1f10f1ed07fe5855447aaf8272836a2f77e334c7113e9416befc423e19e5da4b137abfeab56324fcd654a3ba37e58312e51d4c95a70ee0698be1c36ea91a10ffaa4869ab4e8c40574dce3a114d45601d1081d94ec84f85cac204a968ccda15507f255ccefad45006ef0b47ebe96aacfb281509f951dbd3f66ab1d9e136690992ae43b587eb6e020de075c835b6ae42d89f9f846c165d7d54603656e21c220fb97871d7d8de0ca32727a04a70daf6b0", 0x2000, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) (async) close_range(r0, 0xffffffffffffffff, 0x0) r13 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r13, 0x110, 0x4, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.525350099s ago: executing program 4 (id=2552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) ioctl$KDADDIO(r1, 0x4b34, 0x2) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'team0\x00', &(0x7f0000000f40)=@ethtool_wolinfo={0x3, 0xfffffffc, 0x0, "000000002191"}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r3, 0x7, 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) mq_notify(r3, &(0x7f0000000080)={0x0, 0x29, 0x2, @tid=r4}) 1.198957749s ago: executing program 6 (id=2554): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000100)={0x0}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') close(0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./cgroup\x00', r2, 0x4000, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.111499673s ago: executing program 6 (id=2555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}]}, 0x44}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) (async) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r13, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup=r14, 0x2e, 0x0, 0x6, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 803.63622ms ago: executing program 4 (id=2556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 799.217517ms ago: executing program 5 (id=2557): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000080)='./file1\x00') acct(&(0x7f00000002c0)='./file1\x00') timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/233) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r0) (async) timer_delete(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+10000000}}, 0x0) 798.168486ms ago: executing program 5 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000010000304000000000000039700000000", @ANYRES32=0x0, @ANYBLOB="adffa8880000000008000400e324000008000d0000000000"], 0x30}}, 0x8000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r1, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 715.980345ms ago: executing program 5 (id=2559): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@fwd={0x9}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xdbb}}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/175, 0x51, 0xaf, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) 715.578655ms ago: executing program 5 (id=2560): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x6f669d3e8474caf2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4048085) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000140)=@generic={0xa, "fb20372f623d30e9919d5d4db9351682c23b5ec49e694a5b35efb712bfd82310ab3e93557ad3029f1196227f45be28a54a43c4849cd324c6e7beaef6f9c91e06fe9a1507cd59a970adca0aeeaf39b803a0f4ef523ed81cb7e6aaf557764dab3101a8f49c38f173dd254c8a67324d74f86f5ed3b981aaf27d661205357ad3"}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)="fb6115987e3b880454f02c7cbe00b47487df3563e2007f35bca6283cbd01f88d6d0c991c1b5ce7de1445350e5f17ceac83059097792e91b0ac5603e39238d5a1e11741f0396913a6b1eeaf4dcbb021a157e2dd354735859e4a94dd1e5246cd5068c18aa7bfb38b9009ca34bcac942b329d724eb453b9197faa66f284d247e958b4b23761491e4869e47d1a59761b2da46304115e3d3399cf1007d709eb4027b3e3a3c2aff8e284af4f8d0cc9baca6c16e285c68a2ce0aa", 0xb7}, {&(0x7f0000000280)="36b0949371c87ac5941d3a210ec5fe47", 0x10}, {&(0x7f00000002c0)="0ce63718ca7ed4803026195431a73bbbebecd4d4e803d50de96558fecefa492921aa87bb49ddd0f67fd17eb65f1217410aa05529f7e0e5766a37a7991148120e97213640ec24cbc971aec161b81e2e6195e6e55c39667a171432cdf9fd59f9a0274a8a72ac1e5574b50f47de8c9c1744ab24d782a1f23aad3052b2dc43d3bd0ef4bf46", 0x83}, {&(0x7f0000000380)="e411023cb47687762135db1eb613d1ad7b6f301282a3f9f107ae6b2c0b65c66e7c867f74d397ba8bd33b45b01dbe69c649c516962b557b9b53b33cae3625f295320e65bc41a7163974fd0452cb2742dbb4c48cca40717199ff645b198dfdf45494ed24e2929a12846507e854c998369ab16214c3a03e381a0d844fa80b3de55ab3b78ce794a6f27055d7a344159955fb67651d8e74d2894829fdf749b0723d335f0bfda077", 0xa5}, {&(0x7f0000000440)="0bf567b5ff018e4b7de18ca251c37487b76285ce24f1fc1ba7cc35192da062304e11a9ac280399959478947c9d709a7121cf5685382335551d61c10a8a4346a98bfb491be7c36420fc7ac03f77792b019486a27fde592c9370a0c036882daf2fef89f6acbaa77f0d241f990691a4a3033421ea50a69648348f7bef66ce29cb35ae08a7f99a17ffe389d86d5e8818ccc9eaeb0af233234e013f7757c64282585e2d8b88de8f4e67e3cf9b210b6e2f576305241fa6a9ad047823e94a2a14d44f8fec4632ac824f889b144778b4eb5dcece30f9331af13be6eaee6a7c946d0630bdec556da85cbe7546a4d200f6cc11c14be6", 0xf1}, {&(0x7f0000000540)="a719abb4399affec9e7ba993336a24aa2c5435ed2b4290adf004259facd6617d9784c719785e8bcb7561fa241c4ad44e48e9851956c8dbfb1774423eb45bf7e0c5f3826e15c59f", 0x47}], 0x6, &(0x7f0000000640)=[{0x18, 0x10e, 0x101, "c61a09583e90d2"}, {0x78, 0x88, 0x9823, "cf9975c13d86ab2ceca6cc4bd796ce5b674ac3d265ca07d0addffcc34ba4aebd5fcc83c4d6d553326c463654583fe8b43d15b5e30d9610e175d41588ae70c909a38556156d224acf4804f34bf4d2d8d682f5a57899e143d5b97a5b80e854fccdce0dc6563e57723d"}, {0x20, 0x3a, 0x71c, "76a950d95b022faf0401"}, {0xe0, 0x111, 0x1, "4f54a755098e419de24b3549ebc3d06eeaf55f79c6653f5e0f14a9f78f84b1a721a8c9da4f24234702888aa7942a2a16ce1f797b8c212b09ae7b07a86bf3df8b2e4439d1e3b06fa20ae59816579f0d7a1befe9d33354137f591741d224566c9c9754871660a83d32df494a853a61a5d2657c1e16a21e9d02695e43a6c86e4be9a5f2e1df3ff3060932cac4d3e633d430853c61c36b126ccb01bbe4a1bc4f40f4e2341a240dae3801a5760ebf1ff13af5d06733ce187e5f2e6816496ab015ef3aa26886296fa7513653b5459f63ce"}, {0x100, 0xe4, 0x80000000, "fcd8bacbf69a43745fe5500d54112d47dd8ff24464186ed28d1468dd73285c42a707cb43294148d00ff90792f2353224437715fd70f546505a69916c7e73621949c3f07914ae9f01ef293b06012fbdbc1153040f8015d1b984daaf1c65fcb80ee4f7218f32396b685c16134f9d0174e80bd1d97c816355cb091b9f472725cf2884d320f28f29ec4babf7ce83c0d18580c9a60d9842587ff621e6b7f92a9a7ef47ca26d93fffd8d7a8e7a17b7356fbf48a9ba3a0b7b4b717e20cac7f8c8b2f452276319e33be3d7e9f15de6a9621ced9722eb28b791403649ba65f0c86a96057daf1b567336baac59e891a8"}, {0x28, 0x10d, 0x8001, "f2cb4b90baac4313e8ae3ae940b43ef85ea4a254de"}, {0x30, 0x108, 0x4, "4ab217bd548b658586c5442f5a19fb7c689ef6deb289b00bb2"}, {0x38, 0x107, 0x101, "f61c4d97f2166ddf329d3f4ae7d9f34b6d4590be87da04dd5862674d50be33df50cd9f50b568"}], 0x320}, 0x40804) sendmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="f29a12775fcd989fb6ccec0e311c8548eee9137e02a3d2e4da2fa975a4699b60d0edc9549bcbe2278a4c11cdc74a13fa819ece77417b0436e5815aa2e57aa9902b592adc1560e488d6c0d74113b79cc7867b76983c5225a90d47c98341b7a304f7ca295b97db8abb831c0ac32ee7b41c1fcdb859dd94fd522257dc9264b75693b15407e0a9b671e8d9fe1fc040e9a5d654c0a6b5416f239a1bf4e349c1fd83ea083ee397bf0e871f393bec0c8dbbbe349d052573987063662d7e8d30801a0fda7b59c247c27ec4f618", 0xc9}, {&(0x7f0000000ac0)="18a8fdedb4ce86c8beebf008646487ab4c96c4f02327118759ca4f64c2a96fbb5e7d06116f43120368243b46ef980b9fb0d5a9d36fdd29c94bc1a4ccd499f2", 0x3f}], 0x2}}], 0x1, 0x4040001) r2 = syz_open_dev$mouse(&(0x7f0000000b80), 0x7fffffffffffffff, 0x12801) setns(r2, 0x4000000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000bc0)=0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@fallback=r3, 0x36, 0x1, 0x8000, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d40)={r2, r2, 0x9, 0x0, @val=@netkit={@void, @value=r2, @void, @void, r5}}, 0x1c) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x200002, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@noextend}, {@msize={'msize', 0x3d, 0x9}}, {@noxattr}, {@loose}, {@directio}, {@posixacl}, {@cache_fscache}], [{@euid_lt={'euid<', r7}}]}}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000001080)=0xe8) mount$overlay(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0x40000, &(0x7f0000001140)={[{@index_on}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, r7}}, {@subj_role={'subj_role', 0x3d, '.\\}){(['}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@obj_role={'obj_role', 0x3d, ',(&^#@\\-&'}}, {@obj_user={'obj_user', 0x3d, '*@\xec'}}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(r2, &(0x7f0000001200)='./file0\x00', 0x81000002) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001240)={0x5, 0x8, 0x4, 0x0, 0x0, [{{r3}, 0x6}, {}, {{r9}, 0x5}, {{r3}, 0x7}]}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000001300)={0x1f, 0x0, 0x1}, 0x6) socket$netlink(0x10, 0x3, 0xf) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001340)={0x1, 0x8200, 0x6f1, 0x69d0, 0x0}, &(0x7f0000001380)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000013c0)=r11, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001400)={r2, r8, 0x25, 0x3, @val=@netfilter={0xa, 0xc4dd70aecc558f32, 0x1, 0x1}}, 0x20) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x28402, 0x0) ioctl$BLKRAGET(r12, 0x1263, &(0x7f0000001480)) mount$9p_fd(0x0, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x480, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}], [{@obj_type={'obj_type', 0x3d, '%@($[%%[#'}}, {@obj_type={'obj_type', 0x3d, 'noxattr'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x33, 0x37, 0x62, 0x1, 0x63, 0x39], 0x2d, [0x35, 0xf, 0x32, 0x31], 0x2d, [0x63, 0x61, 0x64, 0x37], 0x2d, [0x39, 0x32, 0x65, 0x34], 0x2d, [0x0, 0x66, 0x61, 0x0, 0x64, 0x30, 0x53, 0x38]}}}, {@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@dont_appraise}]}}) write$binfmt_misc(r4, &(0x7f0000001640)="472bada56222d98e7ef4c74e09cc7046b08dad659fe2edf0b9d90594a435194f3a468d285f5c184990ad94983ecacb3bcfd5ebd1a1d4e47d05071e5344bc867a59", 0x41) symlinkat(&(0x7f00000016c0)='./file0\x00', r1, &(0x7f0000001700)='./file0\x00') 713.802599ms ago: executing program 6 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10010, 0xf, 0x0, 0x3}}]}}]}, 0x44}}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x2d, 0xcb, r8}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x80d0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x101}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r10, &(0x7f0000001300)='7', 0x1) write$char_usb(r10, &(0x7f00000000c0)='V', 0x1) syz_usb_disconnect(r9) r11 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b346fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000240)=[@iv={0x20, 0x117, 0x2, 0x6, "e39f18a9cd08"}], 0x20}], 0x1, 0x8001) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0f2, 0xc574450d1af3d4b4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4004050) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0xd, 0x10, [0x9, 0x6, 0x2, 0xf8f7], &(0x7f00000000c0)=[0x0, 0x0]}) 589.707466ms ago: executing program 5 (id=2562): mkdir(&(0x7f0000000940)='./file0\x00', 0x45) (async) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)=""/184, 0xb8) (async) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='sockfs\x00', 0x200000, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x7fffffff, 0x20000) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x60000, 0x18e}, 0x18) fanotify_mark(r0, 0x10, 0x0, r1, &(0x7f0000000280)='./cgroup\x00') (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "2679a9ecf23e11a469efea56b0369ac5109b3a6a7760c1aeebc38fb78c358a3c"}) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) socket(0x10, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) sendto$unix(r3, &(0x7f0000000300)="9c34820e182a9f9b596e0be71d01b993872c0073b7a54d5ddf3f26", 0x1b, 0x40000, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) socket$inet(0x2, 0x1, 0x0) (async, rerun: 64) syz_io_uring_setup(0x10a, &(0x7f0000000640)={0x0, 0x8b7d, 0x10, 0x1, 0x80022, 0x0, r5}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) recvfrom(0xffffffffffffffff, &(0x7f0000000440)=""/206, 0xce, 0x2, &(0x7f0000000540)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) (async) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r5, 0x2219, 0x7721, 0x14, 0x0, 0x0) (async, rerun: 64) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (rerun: 64) 525.470887ms ago: executing program 4 (id=2563): fchmod(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x130b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfb8d14993e11c6ae}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="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"], 0x138}}, 0xc980) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) 407.802928ms ago: executing program 5 (id=2564): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x8}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000011000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x98}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0xe8}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x80, 0x3, 0x7ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf4, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8bb67"}, {0x5, 0x24, 0x0, 0xcc94}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x7, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0xfffb, 0xc06245002bb9dd04}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfb, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x3c, 0x4, 0x50, 0x4}, 0xbb, &(0x7f0000000280)={0x5, 0xf, 0xbb, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x36e92a1, 0x11f0f, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x5, 0xf00f, 0x96, [0xf, 0xc0f0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0xf0f, 0xb2, [0xffc0cf, 0x5f0f]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0x780, 0x5}, @generic={0x73, 0x10, 0x6, "5de02aeab7b3ba05658821bb1b08dd0c5ae44cee0e8cca970ada8ca53b1768b15ee76704842c9ad2436013af1c8a6e0333a55a1d46063479efd3f5f6d54d0187103c18a4126eb0fb26c71aabe532eb49899ab0a67691934ff109a09538f3ac17069c6695f66f438c1e05c3cd055325b4"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x429}}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) prctl$PR_SET_NAME(0x53564d41, 0x0) sendmmsg$sock(r1, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x240088c0) 407.256279ms ago: executing program 0 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0xc591, 0x5, 0x8, 0x1, 0x100, 0x80000004000000, 0x1a], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) pwritev(r5, &(0x7f0000000840)=[{&(0x7f0000000700)="b01ddc29cd805a6281d6a0ac9f521c46a8bb8b6bf7da71673139cbe5cf4adbe3f1672fddc6c39397", 0x28}, {&(0x7f0000000740)="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", 0xfa}], 0x2, 0x5, 0x7f) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="0e0080007599d82bd3f578b6700e1646d3feb87d77442711c6d1be087e7b5cd0fe67bed6cf67199faa98aa20826b786325755fa693928cd81d5a02dc384e9ad0fb906a534d416222d5f8ac02475a8a1116654eb2630ee5ca7718df944c029582de8e34fa440ea5648640ec608028fb009e8771bba69f484ae666fba70094e7c45babb22da91ea01d3da7664b61574f29567761a0575103ef639043a8176c0e20f7b65e537e80354e7b81cbd7b83704511838f9be8034e6529051278633ba6ac557686b121452a4ad3a19071119a4cea1f5a7d4272137cd0bf26424deb4c8dfbc44ac", @ANYRESHEX, @ANYBLOB="000827bd7000fedbdf252c0000000c009900030000007b000000"], 0x20}}, 0x4048000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000640)={r7}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="402a7ea855900000001000010400"/25, @ANYRES32=0x0, @ANYBLOB="3f00000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r7, @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000200)=""/19, 0x13}], 0x5, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0xe0) 405.619808ms ago: executing program 4 (id=2566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2f, &(0x7f0000000040)=0x79b, 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 193.531875ms ago: executing program 4 (id=2567): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socket(0x18, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) 65.997052ms ago: executing program 0 (id=2568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) (async) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x34}}, 0x4000) (async) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x34}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r5, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x2000c804) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff3, 0xffff}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x94e}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x4c}}, 0x8000) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0xd8000) (async) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0xd8000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)='dW'}) r11 = signalfd4(r9, &(0x7f0000000380)={[0x101]}, 0x8, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000400)={0x5, r11, 0x80000}) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000300), 0x181002, 0x0) (async) r13 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000300), 0x181002, 0x0) preadv(r13, &(0x7f0000000040), 0x0, 0x33, 0x0) (async) preadv(r13, &(0x7f0000000040), 0x0, 0x33, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r12, 0xc0106418, &(0x7f00000002c0)={0x26, 0x9, 0x7, 0x5a, 0x8, 0xca6}) 1.615894ms ago: executing program 0 (id=2569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x200}, r2, 0x9}}, 0x48) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='affs\x00', 0x23030, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0xb}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xdee, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, @in6={0xa, 0x4e21, 0x7, @empty, 0x1}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0xe0}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e23, 0x5eb7e178, @empty}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x4e21, @empty}], 0xcc) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000780)=@deltaction={0x18c, 0x31, 0x710, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19c0}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaa}}, {0xc, 0x200b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44}, 0x48000) 0s ago: executing program 0 (id=2570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, 0x0}, 0x20) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r1, 0x1, 0xfffffffe, 0x2000000, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) kernel console output (not intermixed with test programs): [ 134.926732][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.931514][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.935437][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.941024][ T61] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.944579][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.949408][ T61] usb 9-1: config 0 descriptor?? [ 135.032144][ T7320] bond0 (unregistering): left promiscuous mode [ 135.034866][ T7320] bond0 (unregistering): Released all slaves [ 135.103777][ T7320] bond1 (unregistering): Released all slaves [ 135.109814][T10017] ªªªªªª speed is unknown, defaulting to 1000 [ 135.203851][ T7320] tipc: Left network mode [ 135.254798][ T7320] IPVS: stopping master sync thread 8342 ... [ 135.361798][ T61] hid_parser_main: 8 callbacks suppressed [ 135.361811][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.366186][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.368591][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.387501][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.389831][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.392941][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.395124][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.397404][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.399862][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.403070][ T61] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 135.424011][T10055] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 135.427052][T10056] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 135.429418][ T61] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.471561][T10017] chnl_net:caif_netlink_parms(): no params data found [ 135.510193][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 135.650109][ T10] usb 7-1: device descriptor read/64, error -71 [ 135.652121][T10031] xfrm1: entered allmulticast mode [ 135.665084][ T61] usb 9-1: USB disconnect, device number 7 [ 135.730111][T10075] syzkaller0: entered promiscuous mode [ 135.732482][T10075] syzkaller0: entered allmulticast mode [ 135.736799][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.739184][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.744398][T10017] bridge_slave_0: entered allmulticast mode [ 135.747242][T10017] bridge_slave_0: entered promiscuous mode [ 135.756482][ T7320] batadv0: left promiscuous mode [ 135.761187][ T7320] hsr_slave_0: left promiscuous mode [ 135.763528][ T7320] hsr_slave_1: left promiscuous mode [ 135.890063][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 136.030749][ T10] usb 7-1: device descriptor read/64, error -71 [ 136.140841][ T10] usb usb7-port1: attempt power cycle [ 136.318996][T10085] kAFS: unable to lookup cell 'syz1' [ 136.380238][ T5930] Bluetooth: hci0: command tx timeout [ 136.480074][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 136.489193][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.491997][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.494406][T10017] bridge_slave_1: entered allmulticast mode [ 136.497116][T10017] bridge_slave_1: entered promiscuous mode [ 136.510481][ T10] usb 7-1: device descriptor read/8, error -71 [ 136.513912][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.520159][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.597649][T10017] team0: Port device team_slave_0 added [ 136.602923][T10017] team0: Port device team_slave_1 added [ 136.622786][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.625141][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.633848][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.639656][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.642358][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.643931][T10097] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 136.653526][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.693118][T10017] hsr_slave_0: entered promiscuous mode [ 136.696126][T10017] hsr_slave_1: entered promiscuous mode [ 136.700963][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 136.703330][T10017] Cannot create hsr debugfs directory [ 136.770058][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 136.791267][ T10] usb 7-1: device descriptor read/8, error -71 [ 136.876548][T10017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.900509][ T10] usb usb7-port1: unable to enumerate USB device [ 136.903672][T10123] pim6reg: entered allmulticast mode [ 136.905914][T10017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.918753][T10017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.933276][T10017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.993268][T10017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.001210][ T40] audit: type=1400 audit(2000000026.911:1428): avc: denied { accept } for pid=10137 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.026403][T10017] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.043445][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.046535][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.054856][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.057838][ T7316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.089997][ T40] audit: type=1400 audit(2000000026.991:1429): avc: denied { bind } for pid=10142 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.125126][T10147] loop2: detected capacity change from 0 to 7 [ 137.128433][ T8529] loop2: [ 137.129656][ T8529] loop2: partition table partially beyond EOD, truncated [ 137.142860][T10147] loop2: [ 137.143873][T10147] loop2: partition table partially beyond EOD, truncated [ 137.264500][T10163] openvswitch: netlink: IP tunnel dst address not specified [ 137.268913][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.292706][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 137.335806][T10169] SELinux: syz.4.1265 (10169) set checkreqprot to 1. This is no longer supported. [ 137.348863][ T40] audit: type=1400 audit(2000000027.241:1430): avc: denied { setcheckreqprot } for pid=10162 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.364548][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 137.371287][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'. [ 137.378327][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 137.425814][T10017] veth0_vlan: entered promiscuous mode [ 137.429063][T10177] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.434864][T10017] veth1_vlan: entered promiscuous mode [ 137.442962][T10177] overlayfs: missing 'lowerdir' [ 137.467746][T10017] veth0_macvtap: entered promiscuous mode [ 137.474311][T10017] veth1_macvtap: entered promiscuous mode [ 137.488212][T10017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.493172][T10017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.507231][ T7320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.513411][ T7320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.518429][ T7320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.524319][ T7320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.581444][ T7317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.584168][ T7317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.604974][T10181] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 137.608304][ T7309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.613003][ T7309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.654917][ T40] audit: type=1400 audit(2000000027.561:1431): avc: denied { mounton } for pid=10017 comm="syz-executor" path="/syzkaller.nJ5g4G/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 137.662820][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.664148][T10181] gretap3: entered promiscuous mode [ 137.666806][T10181] bond5: (slave gretap3): making interface the new active one [ 137.670204][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.675431][T10181] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 137.688417][T10181] macvlan2: entered promiscuous mode [ 137.691010][T10181] macvlan2: entered allmulticast mode [ 137.695221][T10181] bond5: entered promiscuous mode [ 137.698082][T10181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.701321][T10181] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 137.702416][T10185] loop2: detected capacity change from 0 to 7 [ 137.707667][T10181] bond5: left promiscuous mode [ 137.710364][T10185] loop2: [ 137.712474][T10185] loop2: partition table partially beyond EOD, truncated [ 137.830277][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1273'. [ 137.838795][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1273'. [ 137.897999][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1274'. [ 137.909999][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1274'. [ 138.099984][ T5971] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 138.249961][ T5971] usb 9-1: Using ep0 maxpacket: 16 [ 138.254139][ T5971] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 138.258661][ T5971] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 138.262859][ T5971] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.268345][ T5971] usb 9-1: config 1 interface 0 has no altsetting 0 [ 138.278228][ T5971] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.281652][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.289930][ T5971] usb 9-1: Product: syz [ 138.291287][ T5971] usb 9-1: Manufacturer: â Š [ 138.292798][ T5971] usb 9-1: SerialNumber: syz [ 138.299462][T10208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.302975][T10208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.308004][T10224] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.313501][T10224] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 138.460101][ T5930] Bluetooth: hci0: command tx timeout [ 138.513671][ T5971] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 138.518758][ T5971] usb 9-1: USB disconnect, device number 8 [ 138.700069][ T40] audit: type=1326 audit(2000000028.601:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10242 comm="syz.0.1285" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae459acb9 code=0x0 [ 138.830937][ T40] audit: type=1400 audit(2000000028.741:1433): avc: denied { write } for pid=10253 comm="syz.2.1288" path="socket:[33448]" dev="sockfs" ino=33448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.940599][T10267] __nla_validate_parse: 1 callbacks suppressed [ 138.940619][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'. [ 139.081777][T10279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10279 comm=syz.4.1293 [ 139.092040][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 139.142640][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 139.238157][T10297] loop2: detected capacity change from 0 to 7 [ 139.242646][T10297] loop2: [ 139.243869][T10297] loop2: partition table partially beyond EOD, truncated [ 139.319228][T10310] SET target dimension over the limit! [ 139.323442][T10310] SET target dimension over the limit! [ 139.326729][T10310] SET target dimension over the limit! [ 139.328593][T10310] SET target dimension over the limit! [ 139.335718][T10310] SET target dimension over the limit! [ 139.449893][ T5997] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.610773][ T5997] usb 7-1: Using ep0 maxpacket: 8 [ 139.617300][ T5997] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.621008][ T5997] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.624537][ T5997] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.627740][ T5997] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.635323][ T5997] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.638555][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.797854][T10345] openvswitch: netlink: IP tunnel dst address not specified [ 139.845768][ T5997] usb 7-1: GET_CAPABILITIES returned 0 [ 139.848277][ T5997] usbtmc 7-1:16.0: can't read capabilities [ 140.051425][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.056230][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.060099][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.063972][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.067834][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.073470][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.076901][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.079956][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.082829][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.085834][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.088809][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.091763][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.094769][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.097656][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.101976][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.105271][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 140.112830][ T53] usb 7-1: USB disconnect, device number 14 [ 140.204768][ T40] audit: type=1400 audit(2000000030.111:1434): avc: denied { getopt } for pid=10355 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.219686][T10356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 140.223323][T10356] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 140.228260][T10356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 140.537401][T10370] loop2: detected capacity change from 0 to 7 [ 140.540536][ T8529] loop2: [ 140.541531][ T8529] loop2: partition table partially beyond EOD, truncated [ 140.546113][T10370] loop2: [ 140.547163][T10370] loop2: partition table partially beyond EOD, truncated [ 140.550342][ T5930] Bluetooth: hci0: command tx timeout [ 140.662469][T10383] random: crng reseeded on system resumption [ 140.670892][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 140.672994][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 140.718156][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 140.720892][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 140.931421][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 140.934516][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 140.980212][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 140.982654][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 141.352294][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1326'. [ 141.444520][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 141.446661][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 141.468018][T10414] loop2: detected capacity change from 0 to 7 [ 141.471632][ T8529] loop2: [ 141.472639][ T8529] loop2: partition table partially beyond EOD, truncated [ 141.473296][ T40] audit: type=1326 audit(2000000031.381:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.485959][ T40] audit: type=1326 audit(2000000031.381:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.490661][T10414] loop2: [ 141.494470][T10380] ceph: No mds server is up or the cluster is laggy [ 141.494673][T10414] loop2: partition table partially beyond EOD, truncated [ 141.496919][T10392] ceph: No mds server is up or the cluster is laggy [ 141.499927][ T40] audit: type=1326 audit(2000000031.391:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.501597][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 141.508436][ T40] audit: type=1326 audit(2000000031.391:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.518435][ T40] audit: type=1326 audit(2000000031.391:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.524467][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 141.527326][ T40] audit: type=1326 audit(2000000031.391:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.538365][ T40] audit: type=1326 audit(2000000031.391:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.4.1331" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7ffc0000 [ 141.671853][T10435] delete_channel: no stack [ 141.909691][T10465] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 141.919649][T10476] netlink: 'syz.4.1349': attribute type 13 has an invalid length. [ 141.992138][T10480] loop2: detected capacity change from 0 to 7 [ 141.994665][T10480] loop2: [ 141.995657][T10480] loop2: partition table partially beyond EOD, truncated [ 142.038029][T10484] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 142.043156][T10484] exFAT-fs (nullb0): invalid boot record signature [ 142.045543][T10484] exFAT-fs (nullb0): failed to read boot sector [ 142.047581][T10484] exFAT-fs (nullb0): failed to recognize exfat type [ 142.117165][T10467] ªªªªªª speed is unknown, defaulting to 1000 [ 142.196476][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1358'. [ 142.223585][T10502] XFS (nbd2): SB validate failed with error -5. [ 142.314446][T10517] loop5: detected capacity change from 0 to 7 [ 142.319554][ T8529] Dev loop5: unable to read RDB block 7 [ 142.321552][ T8529] loop5: AHDI p1 [ 142.322901][ T8529] loop5: partition table partially beyond EOD, truncated [ 142.332973][T10517] Dev loop5: unable to read RDB block 7 [ 142.334848][T10517] loop5: AHDI p1 [ 142.336040][T10517] loop5: partition table partially beyond EOD, truncated [ 142.496483][T10525] /dev/sr0: Can't open blockdev [ 142.610615][T10554] syz_tun: entered allmulticast mode [ 142.626168][T10554] dvmrp8: entered allmulticast mode [ 142.632661][T10553] syz_tun: left allmulticast mode [ 142.661337][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 142.693660][ T5930] Bluetooth: hci0: command tx timeout [ 142.719849][T10565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1377'. [ 142.846800][ T53] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.849608][ T53] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.852840][ T53] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.855922][ T53] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.859306][ T53] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.873482][ T53] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.876688][ T53] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.880475][ T53] usb 10-1: Product: syz [ 142.883174][ T53] usb 10-1: Manufacturer: syz [ 142.896382][ T53] cdc_wdm 10-1:1.0: skipping garbage [ 142.898207][ T53] cdc_wdm 10-1:1.0: skipping garbage [ 142.903500][ T53] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 142.905578][ T53] cdc_wdm 10-1:1.0: Unknown control protocol [ 143.113028][T10527] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 143.117057][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'. [ 143.231277][ T5935] usb 10-1: USB disconnect, device number 2 [ 143.232946][T10581] sit0: entered promiscuous mode [ 143.239072][T10581] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 143.241706][T10581] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1382'. [ 143.268070][T10588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1384'. [ 143.271278][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 143.277770][T10588] xt_l2tp: missing protocol rule (udp|l2tpip) [ 143.427104][T10603] syz.2.1390: attempt to access beyond end of device [ 143.427104][T10603] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 143.434004][T10603] gfs2: error -5 reading superblock [ 143.439472][T10603] fuse: Unknown parameter 'euid<00000000000000060928' [ 143.649923][T10618] netlink: 'syz.0.1394': attribute type 20 has an invalid length. [ 143.650826][T10620] CIFS mount error: No usable UNC path provided in device string! [ 143.650826][T10620] [ 143.657116][T10620] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 143.841900][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.853335][T10646] tipc: Enabling of bearer rejected, failed to enable media [ 143.902197][T10650] overlayfs: failed to clone upperpath [ 143.923869][T10659] geneve2: entered promiscuous mode [ 143.925534][T10659] geneve2: entered allmulticast mode [ 143.929073][ T7317] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.932102][ T7317] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.936061][ T7317] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 143.938902][ T7317] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 144.167664][T10675] netlink: 'syz.2.1411': attribute type 3 has an invalid length. [ 144.171726][T10675] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 144.213361][T10678] loop2: detected capacity change from 0 to 7 [ 144.216256][ T8529] loop2: [ 144.217197][ T8529] loop2: partition table partially beyond EOD, truncated [ 144.221287][T10678] loop2: [ 144.222635][T10678] loop2: partition table partially beyond EOD, truncated [ 144.266698][T10681] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 144.269900][T10681] netlink: 'syz.4.1413': attribute type 3 has an invalid length. [ 144.274160][T10681] __nla_validate_parse: 8 callbacks suppressed [ 144.274173][T10681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1413'. [ 144.361634][T10689] netlink: 'syz.5.1416': attribute type 9 has an invalid length. [ 144.362445][T10688] netlink: 'syz.5.1416': attribute type 9 has an invalid length. [ 144.364948][T10689] netlink: 'syz.5.1416': attribute type 11 has an invalid length. [ 144.364969][T10689] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1416'. [ 144.373619][T10688] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1416'. [ 144.396763][T10691] Cannot find add_set index 46338 as target [ 144.425095][T10695] syz_tun: entered allmulticast mode [ 144.431851][T10695] dvmrp8: entered allmulticast mode [ 144.437126][T10694] syz_tun: left allmulticast mode [ 144.487175][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 144.494639][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 144.575206][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 144.575218][ T40] audit: type=1400 audit(2000000034.277:1479): avc: denied { accept } for pid=10710 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 144.660813][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 144.714539][ T5997] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 144.734778][ T40] audit: type=1400 audit(2000000034.427:1480): avc: denied { listen } for pid=10725 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.886687][ T5997] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.889495][ T5997] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.892665][ T5997] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.895686][ T5997] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.899308][ T5997] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.904090][ T5997] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.907439][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.909990][ T5997] usb 9-1: Product: syz [ 144.911333][ T5997] usb 9-1: Manufacturer: syz [ 144.919352][ T5997] cdc_wdm 9-1:1.0: skipping garbage [ 144.921078][ T5997] cdc_wdm 9-1:1.0: skipping garbage [ 144.923951][ T5997] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 144.925839][ T5997] cdc_wdm 9-1:1.0: Unknown control protocol [ 145.134446][T10697] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 145.167470][T10697] siw: device registration error -23 [ 145.171145][ T5997] usb 9-1: USB disconnect, device number 9 [ 160.750685][T10792] nft_compat: unsupported protocol 0 [ 160.789456][T10794] veth0_to_bond: entered allmulticast mode [ 160.848067][T10803] validate_nla: 3 callbacks suppressed [ 160.848080][T10803] netlink: 'syz.5.1442': attribute type 2 has an invalid length. [ 160.853804][T10803] netlink: 'syz.5.1442': attribute type 1 has an invalid length. [ 160.856609][T10803] netlink: 'syz.5.1442': attribute type 1 has an invalid length. [ 160.886050][ T40] audit: type=1400 audit(2000000049.541:1481): avc: denied { setattr } for pid=10804 comm="syz.5.1443" name="XDP" dev="sockfs" ino=36517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.180337][T10820] ªªªªªª speed is unknown, defaulting to 1000 [ 161.212469][T10829] nbd0: detected capacity change from 0 to 127 [ 161.221243][ T5930] block nbd0: Receive control failed (result -104) [ 161.356616][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 161.401189][T10845] netlink: 'syz.5.1456': attribute type 1 has an invalid length. [ 161.430463][T10845] bond1: (slave geneve2): making interface the new active one [ 161.433302][T10845] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 161.436076][ T7317] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.439014][ T7317] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.441826][ T7317] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.444580][ T7317] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.584141][T10856] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1459'. [ 161.606469][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 161.652962][T10861] MTD: Couldn't look up './bus': -15 [ 161.655281][ T40] audit: type=1400 audit(2000000050.261:1482): avc: denied { mounton } for pid=10860 comm="syz.0.1461" path="/339/bus" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 161.699209][ T40] audit: type=1400 audit(2000000050.299:1483): avc: denied { nlmsg_read } for pid=10863 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 161.742671][ T5935] Process accounting resumed [ 161.783192][T10870] Process accounting resumed [ 161.783419][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 161.798758][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 161.830699][T10849] ªªªªªª speed is unknown, defaulting to 1000 [ 161.840778][T10879] openvswitch: netlink: Tunnel attr 58 out of range max 16 [ 161.873361][ T40] audit: type=1400 audit(2000000050.458:1484): avc: denied { create } for pid=10882 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 162.116458][T10902] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 162.161570][T10894] [U] J"—E:ÀÆ" [ 162.233456][T10909] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 162.263740][T10914] loop2: detected capacity change from 0 to 7 [ 162.266543][T10832] loop2: [ 162.267536][T10832] loop2: partition table partially beyond EOD, truncated [ 162.271199][T10914] loop2: [ 162.272253][T10914] loop2: partition table partially beyond EOD, truncated [ 162.303126][ T40] audit: type=1400 audit(2000000050.869:1485): avc: denied { mount } for pid=10915 comm="syz.2.1480" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.312377][ T40] audit: type=1400 audit(2000000050.869:1486): avc: denied { remount } for pid=10915 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.474205][T10927] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1482'. [ 162.511677][ T40] audit: type=1400 audit(2000000051.056:1487): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.635428][T10939] netlink: 'syz.5.1487': attribute type 1 has an invalid length. [ 162.647114][T10941] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1488'. [ 162.670386][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'. [ 162.684109][T10939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.727750][T10948] netlink: 'syz.5.1491': attribute type 1 has an invalid length. [ 162.731241][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 162.735060][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'. [ 162.756726][T10948] bond3: entered promiscuous mode [ 162.758663][T10948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.898010][T10952] ªªªªªª speed is unknown, defaulting to 1000 [ 163.005487][T10962] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 163.012321][ T40] audit: type=1400 audit(2000000051.533:1488): avc: denied { relabelto } for pid=10961 comm="syz.5.1496" name="63" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 163.030820][ T40] audit: type=1400 audit(2000000051.533:1489): avc: denied { associate } for pid=10961 comm="syz.5.1496" name="63" dev="tmpfs" ino=350 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 163.104069][T10974] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20000 [ 163.132872][ T40] audit: type=1400 audit(2000000051.627:1490): avc: denied { remove_name } for pid=10017 comm="syz-executor" name="binderfs" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 163.274296][T10991] netlink: 'syz.5.1504': attribute type 1 has an invalid length. [ 163.280093][T10990] geneve1: entered allmulticast mode [ 163.320481][T10997] sctp: [Deprecated]: syz.0.1507 (pid 10997) Use of int in maxseg socket option. [ 163.320481][T10997] Use struct sctp_assoc_value instead [ 163.374820][T11008] fuse: Bad value for 'fd' [ 163.412346][T11006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.419222][T11006] block device autoloading is deprecated and will be removed. [ 163.472755][T11017] bridge1: entered allmulticast mode [ 163.491311][T10993] md: could not open device unknown-block(0,0). [ 163.494714][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.494743][T10993] md: md_import_device returned -6 [ 163.499766][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.634138][T11042] loop2: detected capacity change from 0 to 7 [ 163.637361][T11042] loop2: [ 163.641024][T11042] loop2: partition table partially beyond EOD, truncated [ 163.649066][T11048] netlink: 'syz.5.1520': attribute type 3 has an invalid length. [ 163.727883][T11055] overlayfs: failed to resolve './file1': -2 [ 163.852509][ T10] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 163.953639][T11084] JFS: discard option not supported on device [ 163.960144][T11084] Mount JFS Failure: -5 [ 164.037059][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 29352, setting to 64 [ 164.040915][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 164.056166][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.059055][ T10] usb 9-1: New USB device strings: Mfr=49, Product=228, SerialNumber=2 [ 164.061756][ T10] usb 9-1: Product: syz [ 164.063175][ T10] usb 9-1: Manufacturer: syz [ 164.070583][ T10] usb 9-1: SerialNumber: syz [ 164.076594][ T10] usb 9-1: config 0 descriptor?? [ 164.083615][ T10] usb 9-1: selecting invalid altsetting 0 [ 164.193612][T11124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=11124 comm=syz.5.1542 [ 164.301797][ T5935] usb 9-1: USB disconnect, device number 10 [ 164.566456][T11149] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.633635][T11152] syzkaller0: entered promiscuous mode [ 164.635934][T11152] syzkaller0: entered allmulticast mode [ 165.181664][T11168] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 165.508897][T11190] fuse: Bad value for 'fd' [ 165.640555][T11200] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 165.780566][T11208] binder: 11207:11208 ioctl 4018f514 2000000003c0 returned -22 [ 165.799006][T11208] SELinux: Context Ü is not valid (left unmapped). [ 165.846205][T11213] sp0: Synchronizing with TNC [ 166.014212][T11125] ªªªªªª speed is unknown, defaulting to 1000 [ 166.124318][T11229] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1271408910 (2542817820 ns) > initial count (2415425524 ns). Using initial count to start timer. [ 166.557475][ T6296] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 166.726715][T11250] __nla_validate_parse: 9 callbacks suppressed [ 166.726734][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1584'. [ 166.733261][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1584'. [ 166.743625][ T6296] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 166.746525][ T6296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 166.749181][ T6296] usb 9-1: Product: syz [ 166.751598][ T6296] usb 9-1: Manufacturer: syz [ 166.753135][ T6296] usb 9-1: SerialNumber: syz [ 166.755844][ T6296] usb 9-1: config 0 descriptor?? [ 166.759866][ T6296] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 166.765160][ T6296] dvb-usb: bulk message failed: -22 (2/0) [ 166.769530][ T6296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.774066][ T6296] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 166.777380][ T6296] usb 9-1: media controller created [ 166.791396][ T6296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.828743][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 166.828754][ T40] audit: type=1400 audit(2000000055.097:1499): avc: denied { lock } for pid=11267 comm="syz.0.1590" path="socket:[39278]" dev="sockfs" ino=39278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 166.893775][T11278] netlink: 'syz.5.1593': attribute type 29 has an invalid length. [ 166.896377][T11275] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1592' resets device [ 166.912329][T11275] EXT4-fs (nbd2): unable to read superblock [ 166.933023][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 166.979033][T11239] cxusb: i2c wr: len=112 is too big! [ 166.979033][T11239] [ 167.003859][ T6296] cxusb: set interface failed [ 167.008225][ T6296] dvb-usb: bulk message failed: -22 (1/0) [ 167.051947][ T6296] DVB: Unable to find symbol mt352_attach() [ 167.054580][ T6296] dvb-usb: bulk message failed: -22 (5/0) [ 167.057064][ T6296] zl10353_read_register: readreg error (reg=127, ret==-121) [ 167.059558][ T6296] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 167.137418][ T6296] rc_core: IR keymap rc-dvico-mce not found [ 167.139835][ T6296] Registered IR keymap rc-empty [ 167.142732][ T6296] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 167.153503][ T6296] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input19 [ 167.155172][T11322] netlink: 'syz.2.1605': attribute type 2 has an invalid length. [ 167.160263][ T6296] dvb-usb: schedule remote query interval to 100 msecs. [ 167.164032][ T6296] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 167.164060][T11322] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1605'. [ 167.172079][ T6296] usb 9-1: USB disconnect, device number 11 [ 167.184238][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 167.251451][ T6296] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 167.317876][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 167.320734][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1611'. [ 167.393799][T11360] netlink: 'syz.5.1614': attribute type 1 has an invalid length. [ 167.560056][T11380] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 167.563639][T11380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 167.568309][T11380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 167.573250][ T40] audit: type=1400 audit(2000000055.789:1500): avc: denied { firmware_load } for pid=11379 comm="syz.5.1621" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 167.653851][T11395] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.840063][T11402] ªªªªªª speed is unknown, defaulting to 1000 [ 168.047755][ T6296] IPVS: starting estimator thread 0... [ 168.048911][T11427] netlink: 'syz.5.1635': attribute type 3 has an invalid length. [ 168.083793][T11431] bridge_slave_0: left allmulticast mode [ 168.085627][T11431] bridge_slave_0: left promiscuous mode [ 168.095792][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.101833][T11436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.101892][T11431] bridge_slave_1: left allmulticast mode [ 168.106824][T11431] bridge_slave_1: left promiscuous mode [ 168.109957][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.116550][T11431] bond0: (slave bond_slave_0): Releasing backup interface [ 168.128834][T11431] bond0: (slave bond_slave_1): Releasing backup interface [ 168.137090][T11431] team0: Port device team_slave_0 removed [ 168.139815][T11428] IPVS: using max 47 ests per chain, 112800 per kthread [ 168.147847][T11431] team0: Port device team_slave_1 removed [ 168.151593][T11431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.154714][T11431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.159156][T11431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.163202][T11431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.168074][T11431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.191421][T11432] team0: Mode changed to "broadcast" [ 168.205893][T11438] vlan0: entered promiscuous mode [ 168.226870][T11438] team0: Port device vlan0 added [ 168.556830][T11500] fuse: Bad value for 'fd' [ 168.573085][T11503] netlink: 'syz.0.1654': attribute type 2 has an invalid length. [ 168.575663][T11503] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1654'. [ 168.741089][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 168.742573][T11516] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 168.743919][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 168.809389][ T40] audit: type=1400 audit(2000000056.949:1501): avc: denied { accept } for pid=11526 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 168.895745][T11533] netlink: 'syz.4.1667': attribute type 10 has an invalid length. [ 168.899667][T11533] team0: Device ipvlan1 failed to register rx_handler [ 169.005842][T11533] syz.4.1667 (11533): drop_caches: 2 [ 169.107576][T11550] hpfs: Bad magic ... probably not HPFS [ 169.118106][T11550] fuse: Bad value for 'group_id' [ 169.120306][T11550] fuse: Bad value for 'group_id' [ 169.714496][ T7318] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.718565][ T7318] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.723232][ T7318] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.726955][ T7318] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.776443][T11581] IPVS: Error connecting to the multicast addr [ 169.805519][T11586] cgroup2: Unknown parameter 'memory_locaÂð7ô ' [ 169.905880][T11588] netlink: 'syz.5.1686': attribute type 2 has an invalid length. [ 169.985160][T11597] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 170.151032][T11615] netlink: 'syz.4.1695': attribute type 21 has an invalid length. [ 170.334193][T11633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.449967][T11640] IPVS: Unknown mcast interface: vcan0 [ 170.495982][ T40] audit: type=1800 audit(2000000058.529:1502): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1706" name="nullb0" dev="tmpfs" ino=524 res=0 errno=0 [ 170.527590][T11647] openvswitch: netlink: Missing key (keys=40, expected=100) [ 170.916397][T11651] sctp: [Deprecated]: syz.2.1708 (pid 11651) Use of int in maxseg socket option. [ 170.916397][T11651] Use struct sctp_assoc_value instead [ 170.955630][ T40] audit: type=1804 audit(2000000058.960:1503): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1709" name="/newroot/437/file0" dev="tmpfs" ino=2351 res=1 errno=0 [ 171.113651][T11659] ptrace attach of "/syz-executor exec"[5926] was attempted by ""[11659] [ 171.171116][T11661] bond5: Removing last arp target with arp_interval on [ 171.276871][ T40] audit: type=1400 audit(2000000059.259:1504): avc: denied { create } for pid=11663 comm="syz.2.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.294246][ T40] audit: type=1400 audit(2000000059.259:1505): avc: denied { write } for pid=11663 comm="syz.2.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.418776][T11676] program syz.2.1715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.474676][T11679] sock: sock_set_timeout: `syz.4.1717' (pid 11679) tries to set negative timeout [ 171.526183][T11684] overlay: ./file0 is not a directory [ 171.543809][T11684] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.852553][T11710] bond4: option arp_validate: invalid value (2048) [ 171.856683][T11710] bond4 (unregistering): Released all slaves [ 171.869015][T11713] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 171.900013][T11714] macvlan0: entered promiscuous mode [ 171.902652][T11714] macvlan0: entered allmulticast mode [ 171.907159][T11714] veth1_vlan: entered allmulticast mode [ 171.994206][T11725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11725 comm=syz.5.1733 [ 172.030549][T11718] tipc: Enabling of bearer rejected, failed to enable media [ 172.035995][T11718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11718 comm=syz.2.1731 [ 172.107623][T11740] __nla_validate_parse: 15 callbacks suppressed [ 172.107641][T11740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'. [ 172.113774][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 172.196229][T11750] loop2: detected capacity change from 0 to 7 [ 172.199940][T11118] loop2: [ 172.201248][T11118] loop2: partition table partially beyond EOD, truncated [ 172.206353][T11750] loop2: [ 172.207614][T11750] loop2: partition table partially beyond EOD, truncated [ 172.533844][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1745'. [ 172.538703][T11765] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1745'. [ 173.153263][T11769] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1747'. [ 173.220834][ T40] audit: type=1400 audit(2000000061.083:1506): avc: denied { listen } for pid=11772 comm="syz.0.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.230073][ T40] audit: type=1400 audit(2000000061.083:1507): avc: denied { accept } for pid=11772 comm="syz.0.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.288997][T11776] tmpfs: Unknown parameter '_hardlimit' [ 173.441475][T11795] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1756'. [ 173.599717][T11809] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 173.618777][ T40] audit: type=1400 audit(2000000061.447:1508): avc: denied { rename } for pid=11794 comm="syz.2.1756" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 173.725815][T11827] loop2: detected capacity change from 0 to 7 [ 173.728748][T11827] loop2: [ 173.729830][T11827] loop2: partition table partially beyond EOD, truncated [ 173.797148][T11834] /dev/nullb0: Can't lookup blockdev [ 173.799208][T11842] /dev/nullb0: Can't lookup blockdev [ 173.811358][T11846] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 173.814113][T11846] batadv0: left allmulticast mode [ 173.816197][T11846] batadv0: left promiscuous mode [ 173.818516][T11846] bridge0: port 3(batadv0) entered disabled state [ 173.823411][T11846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.826789][T11846] : (slave batadv0): Enslaving as an active interface with an up link [ 173.831347][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1769'. [ 173.835460][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1769'. [ 173.862872][T11831] ªªªªªª speed is unknown, defaulting to 1000 [ 174.040477][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1776'. [ 174.189746][T11876] overlay: Unknown parameter 'dont_measure' [ 174.193652][T11876] overlayfs: failed to clone upperpath [ 174.263823][ T40] audit: type=1400 audit(2000000062.046:1509): avc: denied { append } for pid=11881 comm="syz.2.1782" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.297002][T11885] : entered promiscuous mode [ 174.365157][T11882] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1782'. [ 174.393148][T11891] netlink: 'syz.0.1784': attribute type 10 has an invalid length. [ 174.396655][T11891] ªªªªªª: entered promiscuous mode [ 174.404541][ T53] ªªªªªª speed is unknown, defaulting to 1000 [ 174.407449][ T53] sz1: Port: 1 Link ACTIVE [ 174.410566][ T53] ªªªªªª speed is unknown, defaulting to 1000 [ 174.443530][T11887] bond0: (slave wg0): Error: Device can not be enslaved while up [ 174.528349][T11907] geneve3: entered promiscuous mode [ 174.531064][ T7307] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.535233][ T7307] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.538716][ T7307] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.541688][ T7307] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.584756][T11913] futex_wake_op: syz.2.1793 tries to shift op by 32; fix this program [ 174.691763][T11924] cgroup2: Unknown parameter 'euid' [ 175.000468][T11957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27160 sclass=netlink_route_socket pid=11957 comm=syz.0.1807 [ 175.066268][ T40] audit: type=1400 audit(2000000062.804:1510): avc: denied { bind } for pid=11958 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.877957][ T40] audit: type=1400 audit(2000000063.561:1511): avc: denied { execute_no_trans } for pid=11991 comm="syz.2.1816" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=43211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.019552][T11995] macsec1: entered promiscuous mode [ 176.021860][T11995] macsec1: entered allmulticast mode [ 176.023663][T11995] veth1_macvtap: entered allmulticast mode [ 176.026945][T11995] veth1_macvtap: left allmulticast mode [ 176.084222][T11997] macsec1: entered promiscuous mode [ 176.086037][T11997] macsec1: entered allmulticast mode [ 176.087803][T11997] veth1_macvtap: entered allmulticast mode [ 176.091044][T11997] veth1_macvtap: left allmulticast mode [ 176.478325][ T40] audit: type=1400 audit(2000000064.122:1512): avc: denied { ioctl } for pid=12032 comm="syz.4.1829" path="socket:[42361]" dev="sockfs" ino=42361 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.517047][ T40] audit: type=1400 audit(2000000064.160:1513): avc: denied { accept } for pid=12035 comm="syz.4.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 176.552350][T12041] No source specified [ 176.589737][T12043] fuse: Bad value for 'fd' [ 176.597651][T12044] fuse: Bad value for 'fd' [ 176.621539][T12039] infiniband : set down [ 176.625277][T12039] infiniband : added ipvlan0 [ 176.648851][T12039] RDS/IB: : added [ 176.650189][T12039] smc: adding ib device  with port count 1 [ 176.656296][T12039] smc: ib device  port 1 has no pnetid [ 177.087251][ T40] audit: type=1400 audit(2000000064.693:1514): avc: denied { bind } for pid=12068 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.147768][ T40] audit: type=1400 audit(2000000064.740:1515): avc: denied { setopt } for pid=12075 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.165557][T12078] Invalid source name [ 177.166931][T12078] UBIFS error (pid: 12078): cannot open "/dev/rnullb0", error -22 [ 177.194219][T12081] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 177.224798][T12083] loop2: detected capacity change from 0 to 7 [ 177.227572][T12083] loop2: [ 177.229543][T12083] loop2: partition table partially beyond EOD, truncated [ 177.302083][T12094] openvswitch: netlink: Flow key attr not present in new flow. [ 177.495319][T12103] team_slave_0: entered allmulticast mode [ 177.501389][T12103] team_slave_0: entered promiscuous mode [ 177.505983][T12103] veth1_macvtap: left promiscuous mode [ 177.507796][T12103] macsec0: entered promiscuous mode [ 177.509451][T12103] macsec0: entered allmulticast mode [ 177.616716][T12120] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 177.621604][T12120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37912 sclass=netlink_route_socket pid=12120 comm=syz.4.1858 [ 177.624732][ T7307] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.632871][T12120] __nla_validate_parse: 13 callbacks suppressed [ 177.632887][T12120] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1858'. [ 177.700915][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1859'. [ 177.822584][ T53] IPVS: starting estimator thread 0... [ 177.827290][T12134] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 177.829744][ C2] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 177.923709][T12135] IPVS: using max 46 ests per chain, 110400 per kthread [ 178.049173][T12149] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1869'. [ 178.085965][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1870'. [ 178.245906][T12157] can: request_module (can-proto-5) failed. [ 178.341831][T12174] netlink: 'syz.5.1877': attribute type 12 has an invalid length. [ 178.344545][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 178.348146][T12174] netlink: 'syz.5.1877': attribute type 12 has an invalid length. [ 178.350625][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1877'. [ 178.506811][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 178.506991][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 178.622625][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'. [ 178.632625][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1894'. [ 178.635494][T12223] netlink: 'syz.5.1894': attribute type 14 has an invalid length. [ 178.668582][T12229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.725887][T12236] kAFS: unparsable volume name [ 178.811158][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 178.811174][ T40] audit: type=1400 audit(2000000066.311:1520): avc: denied { ioctl } for pid=12242 comm="syz.5.1900" path="socket:[42655]" dev="sockfs" ino=42655 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.144770][T12254] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.147701][T12255] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.181641][T12257] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.552684][T12287] 8021q: adding VLAN 0 to HW filter on device bond9 [ 179.580555][T12292] vcan0: entered allmulticast mode [ 179.815799][ T5930] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 179.816054][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 180.527733][T12314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12314 comm=syz.2.1924 [ 180.533809][ T40] audit: type=1400 audit(2000000067.920:1521): avc: denied { write } for pid=12313 comm="syz.2.1924" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 180.619745][T12324] tipc: New replicast peer: 255.255.255.255 [ 180.622099][T12324] tipc: Enabled bearer , priority 10 [ 180.629323][T12324] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.632785][T12324] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.685315][T12324] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.688511][T12324] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.805590][T12324] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.808848][T12324] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.868046][T12324] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.871039][T12324] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.949107][ T7318] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.952525][ T7318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.965470][ T7318] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.968301][ T7318] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.978298][ T7318] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.981180][ T7318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.988817][ T7318] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.991979][ T7318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.403241][ T40] audit: type=1400 audit(2000000068.733:1522): avc: denied { map } for pid=12368 comm="syz.5.1936" path="socket:[45160]" dev="sockfs" ino=45160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.693738][T12399] geneve3: entered promiscuous mode [ 181.696001][T12399] geneve3: entered allmulticast mode [ 181.700989][ T7307] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 181.705103][ T7307] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 181.708279][ T7307] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 181.711410][ T7307] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 181.768997][T12402] bridge0: port 1(ipvlan2) entered blocking state [ 181.771353][T12402] bridge0: port 1(ipvlan2) entered disabled state [ 181.775353][T12402] ipvlan2: entered allmulticast mode [ 181.777296][T12402] bridge0: entered allmulticast mode [ 181.780195][T12402] ipvlan2: left allmulticast mode [ 181.781983][T12402] bridge0: left allmulticast mode [ 181.840813][ T40] audit: type=1400 audit(2000000069.136:1523): avc: denied { write } for pid=12409 comm="syz.2.1947" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.856762][T12411] netlink: 'syz.2.1947': attribute type 7 has an invalid length. [ 181.861099][T12411] netlink: 'syz.2.1947': attribute type 8 has an invalid length. [ 181.898065][T12413] program syz.4.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.964845][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 181.967239][ T1115] ata1.00: irq_stat 0x40000000 [ 181.971670][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 181.982603][ T40] audit: type=1400 audit(2000000069.257:1524): avc: denied { setopt } for pid=12417 comm="syz.5.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 181.994241][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 19 [ 181.994241][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 182.001602][ T1115] ata1.00: status: { DRDY ERR } [ 182.003667][ T1115] ata1.00: error: { ABRT } [ 182.005613][ T1115] ata1.00: device reported invalid CHS sector 0 [ 182.115476][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 182.118787][ T1115] ata1: failed to read log page 10h (errno=-5) [ 182.121630][ T1115] ata1.00: exception Emask 0x1 SAct 0x8000 SErr 0x0 action 0x0 [ 182.126525][ T1115] ata1.00: irq_stat 0x40000000 [ 182.128792][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 182.131587][ T1115] ata1.00: cmd 61/18:78:66:0a:10/00:00:00:00:00/40 tag 15 ncq dma 12288 out [ 182.131587][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 182.140030][ T1115] ata1.00: status: { DRDY } [ 182.142092][ T1115] ata1.00: error: { ABRT } [ 182.147343][ T1115] ata1.00: configured for UDMA/100 [ 182.149343][ T1115] ata1: EH complete [ 182.392954][T12432] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.411751][T12432] kvm: MONITOR instruction emulated as NOP! [ 182.667670][T12445] sysfs: Unknown parameter 'xino' [ 182.667669][ T40] audit: type=1400 audit(2000000069.912:1525): avc: denied { remount } for pid=12444 comm="syz.4.1961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 182.794997][T12461] nfs: Unknown parameter '/dev/ttynull' [ 182.859457][T12468] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 182.872768][T12468] bond10: entered promiscuous mode [ 182.876819][T12468] bond10: entered allmulticast mode [ 182.878835][T12468] 8021q: adding VLAN 0 to HW filter on device bond10 [ 182.890954][T12468] erspan1: entered allmulticast mode [ 182.892561][T12471] loop2: detected capacity change from 0 to 7 [ 182.896617][T12468] bond10: (slave erspan1): making interface the new active one [ 182.899202][T11118] loop2: [ 182.900180][T11118] loop2: partition table partially beyond EOD, truncated [ 182.903375][T12468] erspan1: entered promiscuous mode [ 182.909711][T12468] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 182.910176][T12471] loop2: [ 182.913806][T12471] loop2: partition table partially beyond EOD, truncated [ 182.946075][T12473] netlink: 'syz.0.1971': attribute type 5 has an invalid length. [ 183.150721][T12493] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 183.212001][T12497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=12497 comm=syz.0.1978 [ 183.460397][ T40] audit: type=1400 audit(2000000070.651:1526): avc: denied { ioctl } for pid=12514 comm="syz.4.1984" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 183.536591][T12525] fuse: Bad value for 'fd' [ 183.840440][T12551] __nla_validate_parse: 9 callbacks suppressed [ 183.840453][T12551] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1997'. [ 183.845647][T12551] netlink: Unknown conntrack attr (0) [ 183.906775][T12555] loop2: detected capacity change from 0 to 7 [ 183.909354][T12555] loop2: [ 183.911686][T12555] loop2: partition table partially beyond EOD, truncated [ 184.020262][T12566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.022897][T12566] IPv6: NLM_F_CREATE should be set when creating new route [ 184.025235][T12566] IPv6: NLM_F_CREATE should be set when creating new route [ 184.074931][T12559] ªªªªªª speed is unknown, defaulting to 1000 [ 184.076225][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 184.194792][T12580] bond11: invalid ARP target 0.0.0.0 specified for addition [ 184.197155][T12580] bond11: option arp_ip_target: invalid value (0) [ 184.201839][T12580] bond11 (unregistering): Released all slaves [ 184.361336][T12586] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2008'. [ 184.381281][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 184.384553][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2008'. [ 184.791521][T12605] openvswitch: netlink: IP tunnel dst address not specified [ 184.860101][T12613] IPVS: set_ctl: invalid protocol: 43 172.20.20.37:20003 [ 185.119803][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 185.134885][T12637] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2024'. [ 185.222368][ T40] audit: type=1804 audit(2000000072.297:1527): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2026" name="file0" dev="hugetlbfs" ino=43806 res=1 errno=0 [ 185.231133][ T40] audit: type=1400 audit(2000000072.306:1528): avc: denied { connect } for pid=12640 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.246887][ T40] audit: type=1400 audit(2000000072.334:1529): avc: denied { read } for pid=12640 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.302014][T12645] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 185.369530][T12661] f2fs: Unknown parameter 'usrquota000000000000000' [ 185.400187][T12666] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2033'. [ 185.465196][ T40] audit: type=1326 audit(2000000072.531:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12657 comm="syz.4.2030" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0xffff0000 [ 185.482352][ T40] audit: type=1326 audit(2000000072.531:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12657 comm="syz.4.2030" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02f9acb9 code=0x7fc00000 [ 185.551906][T12662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2032'. [ 185.556081][T12662] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2032'. [ 185.562987][T12662] netlink: 'syz.0.2032': attribute type 5 has an invalid length. [ 185.567143][T12662] netlink: 'syz.0.2032': attribute type 6 has an invalid length. [ 185.573141][T12662] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2032'. [ 185.647205][T12687] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.650138][T12687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.752216][T12687] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.755950][T12687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.868800][T12687] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.872380][T12687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.958522][T12687] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.961612][T12687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.063556][ T40] audit: type=1400 audit(2000000073.092:1532): avc: denied { getopt } for pid=12714 comm="syz.5.2049" lport=41864 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 186.070749][T12715] fuse: Bad value for 'fd' [ 186.322876][ T7315] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.325879][ T7315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.337893][ T7315] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.341343][ T7315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.354491][ T7311] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.357936][ T7311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.369708][ T5935] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 186.373446][ T7311] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.376526][ T7311] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.542455][ T5935] usb 9-1: Using ep0 maxpacket: 8 [ 186.546487][ T5935] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 186.549480][ T5935] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.553132][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.556161][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.559933][ T5935] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.565277][ T5935] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.568227][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.792055][ T5935] usb 9-1: usb_control_msg returned -32 [ 186.794554][ T5935] usbtmc 9-1:16.0: can't read capabilities [ 187.181015][T12749] usbtmc 9-1:16.0: INDICATOR_PULSE returned 0 [ 187.473200][ T5935] usb 9-1: USB disconnect, device number 12 [ 187.541414][ T40] audit: type=1400 audit(2000000074.467:1533): avc: denied { name_connect } for pid=12754 comm="syz.0.2061" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 187.573411][T12755] ªªªªªª speed is unknown, defaulting to 1000 [ 187.678045][T12756] ªªªªªª speed is unknown, defaulting to 1000 [ 188.114389][T12777] netlink: 'syz.5.2066': attribute type 29 has an invalid length. [ 188.136179][T12777] netlink: 'syz.5.2066': attribute type 29 has an invalid length. [ 188.721778][ T61] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 188.801693][T12796] fuse: Bad value for 'fd' [ 188.883305][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.886886][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 188.890292][ T61] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 188.903280][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.907255][ T61] usb 9-1: config 0 descriptor?? [ 188.909325][T12791] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.128058][ T61] usbhid 9-1:0.0: can't add hid device: -71 [ 189.130041][ T61] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 189.136714][ T61] usb 9-1: USB disconnect, device number 13 [ 189.198488][ T40] audit: type=1400 audit(2000000076.019:1534): avc: denied { setopt } for pid=12812 comm="syz.5.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.255793][T12819] __nla_validate_parse: 3 callbacks suppressed [ 189.255804][T12819] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2082'. [ 189.294218][T12825] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2083'. [ 189.301496][T12825] overlayfs: failed to clone upperpath [ 189.495623][ T40] audit: type=1400 audit(2000000076.300:1535): avc: denied { associate } for pid=12838 comm="syz.0.2088" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 189.847748][T12846] tmpfs: Unknown parameter 'mp2¥ol' [ 189.847752][T12847] tmpfs: Unknown parameter 'mp2¥ol' [ 190.185144][T12867] : entered promiscuous mode [ 190.556921][T12881] fuse: Bad value for 'fd' [ 190.591372][ T40] audit: type=1400 audit(2000000077.319:1536): avc: denied { getopt } for pid=12883 comm="syz.5.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.622770][ T40] audit: type=1400 audit(2000000077.348:1537): avc: denied { accept } for pid=12885 comm="syz.5.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.697763][T12896] xt_hashlimit: size too large, truncated to 1048576 [ 190.705461][T12898] pimreg: entered allmulticast mode [ 190.709316][ T40] audit: type=1400 audit(2000000077.432:1538): avc: denied { ioctl } for pid=12897 comm="syz.5.2108" path="socket:[45740]" dev="sockfs" ino=45740 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.771633][ T40] audit: type=1326 audit(2000000077.488:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12897 comm="syz.5.2108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858f9acb9 code=0x7fc00000 [ 190.836193][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 190.844135][ T40] audit: type=1800 audit(2000000077.563:1540): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2112" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 190.894416][ T40] audit: type=1400 audit(2000000077.609:1541): avc: denied { load_policy } for pid=12917 comm="syz.4.2115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.900826][T12918] SELinux: policydb version -965563479 does not match my version range 15-35 [ 190.904460][T12918] SELinux: failed to load policy [ 190.988693][T12931] input: syz0 as /devices/virtual/input/input20 [ 191.059557][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 191.122051][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 191.124244][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 191.137285][T12943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12943 comm=syz.0.2125 [ 191.395123][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 191.397322][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 191.472741][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2132'. [ 191.476479][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2132'. [ 191.540263][T12983] fuse: Bad value for 'fd' [ 191.941851][ T10] libceph: connect (1)[c::]:6789 error -101 [ 191.943986][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 191.950292][T12941] ceph: No mds server is up or the cluster is laggy [ 192.014023][ T5930] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 192.034877][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2144'. [ 192.082619][ T5930] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 192.085236][ T5930] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 192.087748][ T5930] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 192.293011][ T6040] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 192.301368][T13037] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 192.334787][T13037] MTD: Couldn't look up '/dev/nullb0': -15 [ 192.337638][T13037] /dev/nullb0: Can't lookup blockdev [ 192.431663][ T6040] usb 9-1: device descriptor read/64, error -71 [ 192.479426][T13053] overlayfs: failed to clone upperpath [ 192.482523][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 192.485760][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 192.488562][T13053] netlink: 'syz.0.2160': attribute type 20 has an invalid length. [ 192.491450][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 192.494268][T13053] netlink: 'syz.0.2160': attribute type 20 has an invalid length. [ 192.507995][T13053] overlayfs: missing 'lowerdir' [ 192.688297][ T6040] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 192.837929][ T6040] usb 9-1: device descriptor read/64, error -71 [ 192.955807][ T6040] usb usb9-port1: attempt power cycle [ 193.329697][ T6040] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 193.353396][ T6040] usb 9-1: device descriptor read/8, error -71 [ 193.512968][ T63] block nbd0: Possible stuck request ffff888028de0000: control (read@0,1024B). Runtime 30 seconds [ 193.518305][ T63] block nbd0: Possible stuck request ffff888028de0200: control (read@1024,1024B). Runtime 30 seconds [ 193.522800][ T63] block nbd0: Possible stuck request ffff888028de0400: control (read@2048,1024B). Runtime 30 seconds [ 193.526578][ T63] block nbd0: Possible stuck request ffff888028de0600: control (read@3072,1024B). Runtime 30 seconds [ 193.620545][ T6040] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 193.640292][ T6040] usb 9-1: device descriptor read/8, error -71 [ 193.760355][ T6040] usb usb9-port1: unable to enumerate USB device [ 194.467126][T13083] cgroup: fork rejected by pids controller in /syz5 [ 195.058569][T13145] afs: Unknown parameter 'Æ [ 195.058569][T13145] ¨.µ÷' [ 195.247381][ T40] audit: type=1400 audit(2000000081.678:1542): avc: denied { read } for pid=13159 comm="syz.4.2180" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.255528][T13162] team0: Device gtp0 failed to enter team mode [ 195.255801][ T40] audit: type=1400 audit(2000000081.678:1543): avc: denied { open } for pid=13159 comm="syz.4.2180" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.258176][T13162] team0: Device gtp0 failed to enter team mode [ 195.273126][ T40] audit: type=1400 audit(2000000081.687:1544): avc: denied { ioctl } for pid=13159 comm="syz.4.2180" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.367718][T13174] SELinux: syz.4.2185 (13174) set checkreqprot to 1. This is no longer supported. [ 195.378219][T13175] SELinux: syz.4.2185 (13175) set checkreqprot to 1. This is no longer supported. [ 195.520155][ T40] audit: type=1326 audit(2000000081.930:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.5.2186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858f9acb9 code=0x7fc00000 [ 195.855627][T13215] netlink: 'syz.0.2195': attribute type 58 has an invalid length. [ 195.883992][T13224] /dev/nullb0: Can't lookup blockdev [ 195.940654][T13231] __nla_validate_parse: 1 callbacks suppressed [ 195.940667][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2201'. [ 196.001196][ T40] audit: type=1326 audit(2000000082.379:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13225 comm="syz.5.2199" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4858f9acb9 code=0x0 [ 196.276370][T13234] tipc: Enabled bearer , priority 10 [ 196.314142][ T40] audit: type=1400 audit(2000000082.679:1547): avc: denied { read } for pid=13235 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.348409][T13238] loop2: detected capacity change from 0 to 7 [ 196.352167][T13238] loop2: [ 196.353376][T13238] loop2: partition table partially beyond EOD, truncated [ 196.405891][T13240] sp0: Synchronizing with TNC [ 196.412418][T13240] IPVS: Unknown mcast interface: nicvf0 [ 196.415156][T13240] binder: 13239:13240 ioctl 400c620e 200000000000 returned -22 [ 196.438857][T13245] [U] è [ 196.570323][T13247] fuse: root generation should be zero [ 196.660285][T13256] netlink: 'syz.0.2209': attribute type 8 has an invalid length. [ 196.660298][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 196.663183][T13256] bond0: entered promiscuous mode [ 196.663916][T13256] gretap0: entered promiscuous mode [ 196.664582][T13256] bond0: left promiscuous mode [ 196.665339][T13256] gretap0: left promiscuous mode [ 196.715726][T13258] netlink: 'syz.0.2209': attribute type 8 has an invalid length. [ 196.718287][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 196.724377][T13258] bond0: entered promiscuous mode [ 196.726977][T13258] gretap0: entered promiscuous mode [ 196.730147][T13258] bond0: left promiscuous mode [ 196.732773][T13258] gretap0: left promiscuous mode [ 196.905927][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2210'. [ 196.918914][T13263] bond11: option lacp_rate: invalid value (255) [ 196.923453][T13263] bond11 (unregistering): Released all slaves [ 197.148025][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2214'. [ 197.148080][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2214'. [ 197.270524][ T40] audit: type=1400 audit(2000000083.567:1548): avc: denied { ioctl } for pid=13274 comm="syz.5.2215" path="socket:[47028]" dev="sockfs" ino=47028 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.364725][T13275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=13275 comm=syz.5.2215 [ 197.437158][T13280] bpf: Bad value for 'gid' [ 197.598043][T13285] loop2: detected capacity change from 0 to 7 [ 197.600705][T13285] loop2: [ 197.601664][T13285] loop2: partition table partially beyond EOD, truncated [ 197.663726][T13289] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2221'. [ 197.790873][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 197.806044][T13297] 8021q: adding VLAN 0 to HW filter on device bond11 [ 197.940856][ T40] audit: type=1400 audit(2000000084.203:1549): avc: denied { read } for pid=13304 comm="syz.0.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 197.948722][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 198.033406][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.040570][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.045345][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.054004][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2231'. [ 198.057547][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.060560][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.108941][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 198.121271][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 198.124284][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.127729][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.138748][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.142406][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.147020][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.150613][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.202229][T13311] ªªªªªª speed is unknown, defaulting to 1000 [ 198.263211][ T40] audit: type=1400 audit(2000000084.503:1550): avc: denied { mount } for pid=13338 comm="syz.5.2238" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 198.271461][ T40] audit: type=1400 audit(2000000084.503:1551): avc: denied { search } for pid=13338 comm="syz.5.2238" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.279118][ T40] audit: type=1400 audit(2000000084.503:1552): avc: denied { setattr } for pid=13338 comm="syz.5.2238" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.320646][T13343] fuse: Bad value for 'fd' [ 198.362116][ T40] audit: type=1804 audit(2000000084.587:1553): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2240" name="file0" dev="tmpfs" ino=2048 res=1 errno=0 [ 198.396637][ T10] usb 9-1: usb_control_msg returned -32 [ 198.398852][ T10] usbtmc 9-1:16.0: can't read capabilities [ 198.473199][T13311] chnl_net:caif_netlink_parms(): no params data found [ 198.530847][T13311] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.533931][T13311] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.537324][T13311] bridge_slave_0: entered allmulticast mode [ 198.541290][T13311] bridge_slave_0: entered promiscuous mode [ 198.545961][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.549883][T13311] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.553012][T13311] bridge_slave_1: entered allmulticast mode [ 198.556941][T13311] bridge_slave_1: entered promiscuous mode [ 198.573147][T13311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.578107][T13311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.582993][T13375] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 198.586022][T13375] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 198.593628][T13311] team0: Port device team_slave_0 added [ 198.596747][T13311] team0: Port device team_slave_1 added [ 198.612871][T13311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.615117][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.623763][T13311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.628041][T13311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.630239][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.638163][T13311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.719599][ T7311] smc: removing ib device  [ 198.806338][T13311] hsr_slave_0: entered promiscuous mode [ 198.808805][T13311] hsr_slave_1: entered promiscuous mode [ 198.811063][T13311] debugfs: 'hsr0' already exists in 'hsr' [ 198.812977][T13311] Cannot create hsr debugfs directory [ 199.010667][T13311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.018821][T13311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.030436][T13311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.037102][T13311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.119545][T13311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.139792][T13311] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.145530][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.148615][ T7310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.158631][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.160959][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.269733][T13311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.416614][T13311] veth0_vlan: entered promiscuous mode [ 199.422841][T13311] veth1_vlan: entered promiscuous mode [ 199.440350][T13311] veth0_macvtap: entered promiscuous mode [ 199.448046][T13311] veth1_macvtap: entered promiscuous mode [ 199.454523][T13413] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 199.459374][T13311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.464264][T13311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.473969][ T7314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.476806][ T7314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.489076][ T7314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.492287][ T7314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.559066][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.564000][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.582672][ T7311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.585294][ T7311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.592891][ T40] audit: type=1400 audit(2000000085.737:1554): avc: denied { mount } for pid=13311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.617566][ T40] audit: type=1400 audit(2000000085.765:1555): avc: denied { audit_read } for pid=13429 comm="syz.5.2259" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.649834][T13441] PM: Enabling pm_trace changes system date and time during resume. [ 199.649834][T13441] PM: Correct system time has to be restored manually after resume. [ 199.678197][ T53] libceph: connect (1)[c::]:6789 error -101 [ 199.680302][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 199.686180][T13447] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 199.704681][T13442] ceph: No mds server is up or the cluster is laggy [ 199.758619][T13461] batadv_slave_1: entered promiscuous mode [ 199.772036][T13461] batadv_slave_1: left promiscuous mode [ 200.146244][T13495] netlink: 'syz.6.2274': attribute type 12 has an invalid length. [ 200.148803][T13495] netlink: 'syz.6.2274': attribute type 29 has an invalid length. [ 200.151523][T13495] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2274'. [ 200.154447][T13495] netlink: 'syz.6.2274': attribute type 1 has an invalid length. [ 200.258422][ T5930] Bluetooth: hci4: command tx timeout [ 200.917067][ T53] usb 9-1: USB disconnect, device number 18 [ 201.050369][T13536] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 201.096825][T13546] loop2: detected capacity change from 0 to 7 [ 201.099348][T13546] loop2: [ 201.100395][T13546] loop2: partition table partially beyond EOD, truncated [ 201.216232][T13555] xt_hashlimit: overflow, rate too high: 0 [ 201.259611][T13560] program syz.4.2299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.540483][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 201.540496][ T40] audit: type=1326 audit(2000000087.561:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.5.2304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858f9acb9 code=0x7fc00000 [ 201.553284][ T40] audit: type=1326 audit(2000000087.561:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.5.2304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858f9acb9 code=0x7fc00000 [ 201.588606][ T40] audit: type=1326 audit(2000000087.608:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13597 comm="syz.0.2310" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae459acb9 code=0x0 [ 201.614369][T13601] 8021q: VLANs not supported on lo [ 201.623539][T13601] __nla_validate_parse: 3 callbacks suppressed [ 201.623656][T13601] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2311'. [ 201.729869][T13611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.837472][ T40] audit: type=1400 audit(2000000087.842:1562): avc: denied { ioctl } for pid=13618 comm="syz.5.2317" path="socket:[49842]" dev="sockfs" ino=49842 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.983740][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2320'. [ 202.064176][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 202.119533][ T40] audit: type=1400 audit(2000000088.113:1563): avc: denied { create } for pid=13637 comm="syz.6.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 202.163803][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 202.167462][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 202.171880][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 202.172326][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 202.188637][T13634] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 202.188669][T13643] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 202.204700][T13634] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 202.214702][T13643] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 202.480440][T13653] loop2: detected capacity change from 0 to 7 [ 202.485873][T11118] loop2: [ 202.487109][T11118] loop2: partition table partially beyond EOD, truncated [ 202.492660][ T5930] Bluetooth: hci4: command tx timeout [ 202.494089][T13653] loop2: [ 202.496418][T13653] loop2: partition table partially beyond EOD, truncated [ 202.602586][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 202.626982][T13663] erspan1: entered promiscuous mode [ 202.753717][ T40] audit: type=1400 audit(2000000088.702:1564): avc: denied { read } for pid=13675 comm="syz.6.2337" path="socket:[47790]" dev="sockfs" ino=47790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.778997][ T40] audit: type=1400 audit(2000000088.721:1565): avc: denied { lock } for pid=13681 comm="syz.0.2339" path="socket:[48695]" dev="sockfs" ino=48695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 203.083431][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.086884][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.200835][T13811] SET target dimension over the limit! [ 203.246263][T13822] overlayfs: missing 'workdir' [ 203.284871][T13825] loop2: detected capacity change from 0 to 7 [ 203.291753][T13825] loop2: [ 203.292843][T13825] loop2: partition table partially beyond EOD, truncated [ 203.354663][T13834] netlink: 'syz.6.2362': attribute type 12 has an invalid length. [ 203.406660][T13838] netlink: 'syz.6.2363': attribute type 1 has an invalid length. [ 203.409212][T13838] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2363'. [ 203.419633][ T40] audit: type=1400 audit(2000000089.319:1566): avc: denied { connect } for pid=13840 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.590363][T13854] program syz.4.2368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.860669][T13909] lo: entered allmulticast mode [ 203.864112][T13908] lo: left allmulticast mode [ 203.898493][T13910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.901499][T13910] block device autoloading is deprecated and will be removed. [ 203.905621][T13896] md: md2 stopped. [ 203.916882][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 203.996372][ T40] audit: type=1400 audit(2000000089.862:1567): avc: denied { mounton } for pid=13924 comm="syz.4.2387" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 204.006242][T13925] affs: No valid root block on device nullb0 [ 204.013785][T13925] tmpfs: Group quota block hardlimit too large. [ 204.017259][ T5930] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 204.041640][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.046196][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.048960][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.052641][T13929] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 204.061489][T13929] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.096318][T13931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.098883][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.101885][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.104701][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.107751][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.110426][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.113078][T13929] xfrm0 speed is unknown, defaulting to 1000 [ 204.297053][ T40] audit: type=1400 audit(2000000090.142:1568): avc: denied { ioctl } for pid=13952 comm="syz.6.2399" path="socket:[48974]" dev="sockfs" ino=48974 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 204.369142][T13970] ªªªªªª: left promiscuous mode [ 204.370735][T13970] ªªªªªª: entered allmulticast mode [ 204.373262][T13970] tunl0: entered allmulticast mode [ 204.376051][T13970] gre0: entered allmulticast mode [ 204.376507][T13971] binder_alloc: 13967: pid 13967 spamming oneway? 1 buffers allocated for a total size of 4096 [ 204.378053][T13970] gretap0: entered allmulticast mode [ 204.384402][T13970] erspan0: entered allmulticast mode [ 204.386961][T13970] ip_vti0: entered allmulticast mode [ 204.388977][T13970] ip6_vti0: entered allmulticast mode [ 204.390997][T13970] sit0: entered allmulticast mode [ 204.392959][T13970] ip6tnl0: left promiscuous mode [ 204.394518][T13970] ip6tnl0: entered allmulticast mode [ 204.396985][T13970] ip6gre0: entered allmulticast mode [ 204.401152][T13970] syz_tun: entered allmulticast mode [ 204.403234][T13970] ip6gretap0: entered allmulticast mode [ 204.405427][T13970] bridge0: entered allmulticast mode [ 204.408238][T13970] bond0: entered allmulticast mode [ 204.410278][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.413215][T13970] dummy0: entered allmulticast mode [ 204.415532][T13970] nlmon0: entered allmulticast mode [ 204.418958][T13970] caif0: entered allmulticast mode [ 204.420606][T13970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.494469][T13980] vxfs: WRONG superblock magic 00000000 at 1 [ 204.496884][T13980] vxfs: WRONG superblock magic 00000000 at 8 [ 204.498840][T13980] vxfs: can't find superblock. [ 204.510595][T13984] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 204.532543][T13988] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 204.571192][T13992] fuse: Bad value for 'rootmode' [ 204.590143][T13992] overlay: ./file0 is not a directory [ 204.706856][ T5930] Bluetooth: hci4: command tx timeout [ 204.747709][T14008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14008 comm=syz.6.2417 [ 204.918538][T14013] netlink: 'syz.4.2419': attribute type 1 has an invalid length. [ 204.979079][T14023] netlink: 'syz.6.2420': attribute type 1 has an invalid length. [ 205.070524][T14024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 205.417440][T14044] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 205.431286][T14044] bond2: entered promiscuous mode [ 205.433451][T14044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.451722][T14044] bond2: (slave bridge5): making interface the new active one [ 205.454515][T14044] bridge5: entered promiscuous mode [ 205.458265][T14044] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 205.466594][T14049] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 205.842983][T14067] fuse: Bad value for 'fd' [ 206.112643][T14076] could not allocate digest TFM handle cryptd(blake2b-160) [ 206.445038][T14105] input: syz0 as /devices/virtual/input/input21 [ 206.759381][T14116] lo: entered promiscuous mode [ 206.771337][T14116] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 206.884966][T14125] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 206.887104][ T40] kauditd_printk_skb: 15473 callbacks suppressed [ 206.887119][ T40] audit: type=1326 audit(2000000092.574:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae459acb9 code=0x50000 [ 206.905527][ T40] audit: type=1326 audit(2000000092.583:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.906576][T14125] bond5 (unregistering): Released all slaves [ 206.914488][ T40] audit: type=1326 audit(2000000092.583:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.925256][ T40] audit: type=1326 audit(2000000092.583:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.929716][ T5930] Bluetooth: hci4: command tx timeout [ 206.933088][ T40] audit: type=1326 audit(2000000092.583:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.942246][T14130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61629 sclass=netlink_route_socket pid=14130 comm=syz.5.2450 [ 206.946911][ T40] audit: type=1326 audit(2000000092.583:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.957714][ T40] audit: type=1326 audit(2000000092.583:17048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.972670][ T40] audit: type=1326 audit(2000000092.583:17049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 206.997901][ T40] audit: type=1326 audit(2000000092.583:17050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 207.033468][ T40] audit: type=1326 audit(2000000092.583:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.0.2412" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feae455b58e code=0x50000 [ 207.076130][T14139] __nla_validate_parse: 16 callbacks suppressed [ 207.076141][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 207.091211][T14139] Bluetooth: MGMT ver 1.23 [ 207.093035][T14139] IPv6: NLM_F_REPLACE set, but no existing node found! [ 207.108449][T14140] Can't find a SQUASHFS superblock on nullb0 [ 208.306639][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2464'. [ 208.374662][T14196] dns_resolver: Unsupported server list version (0) [ 208.425452][T14200] hugetlbfs: syz.0.2468 (14200): Using mlock ulimits for SHM_HUGETLB is obsolete [ 208.509453][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 208.513513][T14210] xt_l2tp: v2 doesn't support IP mode [ 208.514792][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.524566][T14210] geneve4: entered promiscuous mode [ 208.526383][T14210] geneve4: entered allmulticast mode [ 208.565141][T14212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 208.567684][T14212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.812486][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 208.863405][ T5971] xfrm0 speed is unknown, defaulting to 1000 [ 208.866534][ T5971] infiniband syz1: ib_query_port failed (-19) [ 209.071218][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.075959][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.081001][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.086017][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.088651][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.214616][T14235] loop2: detected capacity change from 0 to 7 [ 209.225259][T14235] loop2: [ 209.226457][T14235] loop2: partition table partially beyond EOD, truncated [ 209.301586][T14237] pimreg: entered allmulticast mode [ 209.309605][ T5940] hid (null): global environment stack underflow [ 209.314835][ T5940] hid (null): report_id 0 is invalid [ 209.317401][ T5940] hid (null): unknown global tag 0xc [ 209.319707][ T5940] hid (null): invalid report_count -8663622 [ 209.322162][ T5940] hid (null): report_id 2451136428 is invalid [ 209.328582][T14226] ªªªªªª speed is unknown, defaulting to 1000 [ 209.330443][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2481'. [ 209.341591][ T5940] hid-generic FFFF:FFFF9EA9:0009.0005: global environment stack underflow [ 209.344304][ T5940] hid-generic FFFF:FFFF9EA9:0009.0005: item 0 1 1 11 parsing failed [ 209.347350][ T5940] hid-generic FFFF:FFFF9EA9:0009.0005: probe with driver hid-generic failed with error -22 [ 209.360659][ T7319] bridge_slave_1: left allmulticast mode [ 209.362551][ T7319] bridge_slave_1: left promiscuous mode [ 209.366334][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.385943][ T7319] bridge_slave_0: left allmulticast mode [ 209.388240][ T7319] bridge_slave_0: left promiscuous mode [ 209.390741][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.424547][ T5940] SELinux: failure in sel_netif_sid_slow(), invalid network interface (105) [ 209.544407][ T7319] dvmrp8 (unregistering): left allmulticast mode [ 209.710037][ T5940] SELinux: failure in sel_netif_sid_slow(), invalid network interface (105) [ 209.742615][ T7319] bond2 (unregistering): (slave bridge1): Releasing active interface [ 209.831201][ T7315] smc: removing ib device syz0 [ 209.835584][ T7319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.840292][ T7319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.845586][ T7319] bond0 (unregistering): Released all slaves [ 209.850761][ T7319] bond1 (unregistering): Released all slaves [ 209.857638][ T7319] bond2 (unregistering): Released all slaves [ 209.868966][T14254] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2487'. [ 209.871949][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 209.874749][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 210.140100][T14226] chnl_net:caif_netlink_parms(): no params data found [ 210.322419][T14226] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.325202][T14226] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.327631][T14226] bridge_slave_0: entered allmulticast mode [ 210.330922][T14226] bridge_slave_0: entered promiscuous mode [ 210.334686][T14226] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.337100][T14226] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.339719][T14226] bridge_slave_1: entered allmulticast mode [ 210.363723][T14226] bridge_slave_1: entered promiscuous mode [ 210.415452][T14298] libceph: resolve '0' (ret=-3): failed [ 210.429096][T14226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.445123][T14226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.483888][T14298] cdrom: dropping to single frame dma [ 210.514223][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2498'. [ 210.518410][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2498'. [ 210.518784][T14226] team0: Port device team_slave_0 added [ 210.535633][T14226] team0: Port device team_slave_1 added [ 210.537523][ T7311] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.540516][ T7311] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.543590][ T7311] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.581810][ T7311] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.599547][T14226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.602058][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.622373][T14226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.628167][T14226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.633031][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.651025][T14226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.717606][T14226] hsr_slave_0: entered promiscuous mode [ 210.720273][T14226] hsr_slave_1: entered promiscuous mode [ 210.722597][T14226] debugfs: 'hsr0' already exists in 'hsr' [ 210.724429][T14226] Cannot create hsr debugfs directory [ 210.896335][T14226] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.900755][T14226] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.061115][T14226] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.064543][T14226] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.137460][T14226] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.140703][T14226] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.260427][T14226] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.264718][T14226] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.288461][ T7319] hsr_slave_0: left promiscuous mode [ 211.290984][ T7319] hsr_slave_1: left promiscuous mode [ 211.292529][ T5930] Bluetooth: hci2: command tx timeout [ 211.295244][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.303419][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.320306][ T7319] pim6reg (unregistering): left allmulticast mode [ 211.527802][T14360] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 211.632381][T14365] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 211.759830][ T7319] team0 (unregistering): Port device team_slave_1 removed [ 211.801382][ T7319] team0 (unregistering): Port device team_slave_0 removed [ 212.156346][T14352] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 212.177234][T14356] vlan0: left promiscuous mode [ 212.180755][T14356] macvlan0: left promiscuous mode [ 212.185693][T14356] bond3: left promiscuous mode [ 212.188085][T14356] geneve3: left promiscuous mode [ 212.273032][T14226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.280566][T14226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.310614][T14226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.345488][T14226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.421891][T14226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.449931][T14396] syzkaller0: entered promiscuous mode [ 212.451815][T14396] syzkaller0: entered allmulticast mode [ 212.455255][T14226] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.460761][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.463195][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.486844][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.489263][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.558354][ T40] kauditd_printk_skb: 5716 callbacks suppressed [ 212.558369][ T40] audit: type=1400 audit(2000000097.868:22768): avc: denied { map } for pid=14402 comm="syz.4.2519" path="socket:[54733]" dev="sockfs" ino=54733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.643878][T14226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.695293][T14226] veth0_vlan: entered promiscuous mode [ 212.706726][T14226] veth1_vlan: entered promiscuous mode [ 212.888343][ T7319] erspan0 (unregistering): left promiscuous mode [ 212.902812][ T7319] bond10 (unregistering): (slave erspan1): Releasing active interface [ 212.906286][ T7319] erspan1 (unregistering): left promiscuous mode [ 212.932994][ T7319] bond1 (unregistering): (slave gretap1): Releasing active interface [ 212.946217][ T7319] bond5 (unregistering): (slave gretap3): Releasing active interface [ 213.008353][ T7319] dvmrp8 (unregistering): left allmulticast mode [ 213.087804][ T40] audit: type=1400 audit(2000000098.364:22769): avc: denied { bind } for pid=14419 comm="syz.4.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 213.397928][ T7319] bond0 (unregistering): Released all slaves [ 213.489687][ T7319] bond1 (unregistering): Released all slaves [ 213.500400][ T7319] bond2 (unregistering): Released all slaves [ 213.510652][ T7319] bond3 (unregistering): Released all slaves [ 213.516040][ T5930] Bluetooth: hci2: command tx timeout [ 213.521369][ T7319] bond4 (unregistering): Released all slaves [ 213.529633][ T7319] bond5 (unregistering): Released all slaves [ 213.537291][ T7319] bond6 (unregistering): Released all slaves [ 213.544752][ T7319] bond7 (unregistering): Released all slaves [ 213.552370][ T7319] bond8 (unregistering): Released all slaves [ 213.651214][ T7319] bond9 (unregistering): Released all slaves [ 213.756090][ T7319] bond10 (unregistering): Released all slaves [ 213.835054][ T7319] bond11 (unregistering): Released all slaves [ 213.851217][T14226] veth0_macvtap: entered promiscuous mode [ 213.855663][T14226] veth1_macvtap: entered promiscuous mode [ 213.875995][T14226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.883403][T14226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.883772][T14437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14437 comm=syz.4.2526 [ 213.891907][T14437] netlink: 'syz.4.2526': attribute type 12 has an invalid length. [ 213.942712][ T7307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.951903][ T7307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.958856][T14439] __nla_validate_parse: 5 callbacks suppressed [ 213.958867][T14439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2528'. [ 213.968162][T14439] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 213.972852][T14439] exFAT-fs (nullb0): invalid boot record signature [ 213.975388][T14439] exFAT-fs (nullb0): failed to read boot sector [ 213.984627][ T7307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.988838][T14439] exFAT-fs (nullb0): failed to recognize exfat type [ 214.001134][ T7319] : left promiscuous mode [ 214.008424][ T7314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.010982][ T7314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.039134][T14444] loop2: detected capacity change from 0 to 7 [ 214.045555][T14444] loop2: [ 214.046666][T14444] loop2: partition table partially beyond EOD, truncated [ 214.057736][ T7307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.072745][T14441] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 214.096099][ T7314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.096708][T14441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=14441 comm=syz.6.2527 [ 214.099180][ T7314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.108075][T14441] overlayfs: failed to resolve './file2': -2 [ 214.120414][ T7319] tipc: Disabling bearer [ 214.130664][ T7319] tipc: Left network mode [ 214.251432][T14456] Cannot find add_set index 46338 as target [ 214.305833][T14461] ªªªªªª speed is unknown, defaulting to 1000 [ 214.428984][T14478] netlink: 'syz.5.2540': attribute type 1 has an invalid length. [ 214.485728][T14478] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2540'. [ 214.489771][T14478] netlink: 'syz.5.2540': attribute type 10 has an invalid length. [ 214.492553][T14479] netlink: 'syz.5.2540': attribute type 10 has an invalid length. [ 214.500254][T14479] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 214.644680][T14499] ªªªªªª speed is unknown, defaulting to 1000 [ 214.688147][ T40] audit: type=1400 audit(2000000099.860:22770): avc: denied { name_bind 0x1000000 } for pid=14505 comm="syz.4.2548" path="socket:[54836]" dev="sockfs" ino=54836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.899854][ T7319] veth0_to_team: left promiscuous mode [ 214.903727][ T7319] hsr_slave_0: left promiscuous mode [ 214.917827][ T7319] hsr_slave_1: left promiscuous mode [ 214.938019][ T5996] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 215.108935][ T5996] usb 5-1: Using ep0 maxpacket: 8 [ 215.111791][ T5996] usb 5-1: config 0 has no interfaces? [ 215.113654][ T5996] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.116451][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.124165][ T5996] usb 5-1: config 0 descriptor?? [ 215.369234][T14499] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2546'. [ 215.372303][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 215.377820][ T832] usb 5-1: USB disconnect, device number 23 [ 215.511268][ T7315] smc: removing ib device sz1 [ 215.518777][ T5997] ªªªªªª speed is unknown, defaulting to 1000 [ 215.520792][ T5997] sz1: Port: 1 Link DOWN [ 215.562385][ T5997] Process accounting resumed [ 215.577942][T14540] Process accounting resumed [ 215.739970][ T5930] Bluetooth: hci2: command tx timeout [ 215.846881][T14556] bond3: Unable to set down delay as MII monitoring is disabled [ 215.852435][T14556] bond3 (unregistering): Released all slaves [ 215.964406][ T5940] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 216.125373][ T5940] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 216.135821][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.139007][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.142563][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.145505][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.148401][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.151876][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.154947][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.157966][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.159887][T14572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.161389][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.162503][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.170340][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.173901][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.179710][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.182930][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.186313][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.191385][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.194283][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.197739][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.203453][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.208135][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.212665][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.217069][ T5940] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.219976][ T7319] IPVS: stop unused estimator thread 0... [ 216.220710][ T5940] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.228077][ T5940] usb 11-1: config 0 interface 0 has no altsetting 0 [ 216.232688][ T5940] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.235608][ T5940] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.238262][ T5940] usb 11-1: Product: syz [ 216.239836][ T5940] usb 11-1: Manufacturer: syz [ 216.241365][ T5940] usb 11-1: SerialNumber: syz [ 216.244865][ T5940] usb 11-1: config 0 descriptor?? [ 216.249996][ T5940] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.364303][T14578] ntfs3(sr0): Primary boot signature is not NTFS. [ 216.366731][T14578] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 216.372706][ T40] audit: type=1400 audit(2000000101.441:22771): avc: denied { remount } for pid=14577 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 216.579261][ T5997] usb 11-1: USB disconnect, device number 2 [ 216.583969][ C0] usb 11-1: yurex_control_callback - control failed: -71 [ 216.591422][T14581] yurex 11-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 216.603389][ T5997] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 216.638752][T14580] [ 216.639740][T14580] ====================================================== [ 216.641990][T14580] WARNING: possible circular locking dependency detected [ 216.644259][T14580] syzkaller #0 Tainted: G L [ 216.646432][T14580] ------------------------------------------------------ [ 216.648562][T14580] syz.0.2570/14580 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.650502][T14580] ffffffff8e768668 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xed8/0x1b70 [ 216.653745][T14580] [ 216.653745][T14580] but task is already holding lock: [ 216.656011][T14580] ffff88802879cca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 216.656076][ T40] audit: type=1400 audit(2000000101.693:22772): avc: denied { write } for pid=5837 comm="syz-executor" path="pipe:[7188]" dev="pipefs" ino=7188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 216.659325][T14580] [ 216.659325][T14580] which lock already depends on the new lock. [ 216.659325][T14580] [ 216.659337][T14580] [ 216.659337][T14580] the existing dependency chain (in reverse order) is: [ 216.659343][T14580] [ 216.659343][T14580] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 216.659367][T14580] blk_alloc_queue+0x610/0x750 [ 216.678886][T14580] blk_mq_alloc_queue+0x174/0x290 [ 216.680645][T14580] __blk_mq_alloc_disk+0x29/0x120 [ 216.682510][T14580] nbd_dev_add+0x492/0xb10 [ 216.684039][T14580] nbd_init+0x291/0x2b0 [ 216.685558][T14580] do_one_initcall+0x11d/0x690 [ 216.687197][T14580] kernel_init_freeable+0x6e5/0x790 [ 216.688945][T14580] kernel_init+0x1f/0x1e0 [ 216.690607][T14580] ret_from_fork+0x754/0xaf0 [ 216.692283][T14580] ret_from_fork_asm+0x1a/0x30 [ 216.694033][T14580] [ 216.694033][T14580] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 216.696462][T14580] fs_reclaim_acquire+0xc4/0x100 [ 216.698349][T14580] prepare_alloc_pages+0x166/0x5f0 [ 216.700147][T14580] __alloc_frozen_pages_noprof+0x193/0x2410 [ 216.702286][T14580] __alloc_pages_noprof+0xb/0x1b0 [ 216.704072][T14580] pcpu_populate_chunk+0x118/0x990 [ 216.705852][T14580] pcpu_alloc_noprof+0x731/0x1b70 [ 216.707545][T14580] iommu_dma_init_fq+0x1da/0x7e0 [ 216.709325][T14580] iommu_setup_dma_ops+0x1258/0x1630 [ 216.711136][T14580] bus_iommu_probe+0x23e/0x530 [ 216.712847][T14580] iommu_device_register+0x1af/0x280 [ 216.714632][T14580] intel_iommu_init+0x2020/0x2970 [ 216.716299][T14580] pci_iommu_init+0x3c/0x80 [ 216.717960][T14580] do_one_initcall+0x11d/0x690 [ 216.719648][T14580] kernel_init_freeable+0x6e5/0x790 [ 216.721492][T14580] kernel_init+0x1f/0x1e0 [ 216.723120][T14580] ret_from_fork+0x754/0xaf0 [ 216.724799][T14580] ret_from_fork_asm+0x1a/0x30 [ 216.726421][T14580] [ 216.726421][T14580] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 216.728769][T14580] __lock_acquire+0x14b8/0x2630 [ 216.730475][T14580] lock_acquire+0x17c/0x330 [ 216.732077][T14580] __mutex_lock+0x1a2/0x1b90 [ 216.733640][T14580] pcpu_alloc_noprof+0xed8/0x1b70 [ 216.735286][T14580] sbitmap_init_node+0x2ff/0x720 [ 216.736935][T14580] sbitmap_queue_init_node+0x40/0x4a0 [ 216.738780][T14580] blk_mq_init_tags+0x184/0x300 [ 216.740477][T14580] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 216.742390][T14580] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 216.744294][T14580] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 216.746262][T14580] nbd_start_device+0x1a6/0xbd0 [ 216.747901][T14580] nbd_genl_connect+0xff2/0x1a40 [ 216.749651][T14580] genl_family_rcv_msg_doit+0x214/0x300 [ 216.751597][T14580] genl_rcv_msg+0x560/0x800 [ 216.753224][T14580] netlink_rcv_skb+0x159/0x420 [ 216.754840][T14580] genl_rcv+0x28/0x40 [ 216.756221][T14580] netlink_unicast+0x5aa/0x870 [ 216.757877][T14580] netlink_sendmsg+0x8b0/0xda0 [ 216.759565][T14580] ____sys_sendmsg+0xa54/0xc30 [ 216.761171][T14580] ___sys_sendmsg+0x190/0x1e0 [ 216.762846][T14580] __sys_sendmsg+0x170/0x220 [ 216.764494][T14580] do_syscall_64+0xc9/0xf80 [ 216.766080][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.768026][T14580] [ 216.768026][T14580] other info that might help us debug this: [ 216.768026][T14580] [ 216.771181][T14580] Chain exists of: [ 216.771181][T14580] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 216.771181][T14580] [ 216.775454][T14580] Possible unsafe locking scenario: [ 216.775454][T14580] [ 216.777681][T14580] CPU0 CPU1 [ 216.779352][T14580] ---- ---- [ 216.781152][T14580] lock(&q->q_usage_counter(io)#50); [ 216.782916][T14580] lock(fs_reclaim); [ 216.784900][T14580] lock(&q->q_usage_counter(io)#50); [ 216.787358][T14580] lock(pcpu_alloc_mutex); [ 216.788753][T14580] [ 216.788753][T14580] *** DEADLOCK *** [ 216.788753][T14580] [ 216.791263][T14580] 6 locks held by syz.0.2570/14580: [ 216.792889][T14580] #0: ffffffff904a0210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 216.795419][T14580] #1: ffffffff904a02c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 216.798157][T14580] #2: ffff888028d049d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x91/0x1190 [ 216.801855][T14580] #3: ffff888028d048d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa4/0x1190 [ 216.805177][T14580] #4: ffff88802879cca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 216.808741][T14580] #5: ffff88802879ccd8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x88e/0x1190 [ 216.812568][T14580] [ 216.812568][T14580] stack backtrace: [ 216.814485][T14580] CPU: 0 UID: 0 PID: 14580 Comm: syz.0.2570 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.814502][T14580] Tainted: [L]=SOFTLOCKUP [ 216.814506][T14580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.814512][T14580] Call Trace: [ 216.814517][T14580] [ 216.814522][T14580] dump_stack_lvl+0x100/0x190 [ 216.814539][T14580] print_circular_bug.cold+0x178/0x1c7 [ 216.814556][T14580] check_noncircular+0x146/0x160 [ 216.814575][T14580] __lock_acquire+0x14b8/0x2630 [ 216.814586][T14580] ? kernel_text_address+0x8d/0x100 [ 216.814600][T14580] lock_acquire+0x17c/0x330 [ 216.814610][T14580] ? pcpu_alloc_noprof+0xed8/0x1b70 [ 216.814623][T14580] ? __pfx___might_resched+0x10/0x10 [ 216.814637][T14580] __mutex_lock+0x1a2/0x1b90 [ 216.814649][T14580] ? pcpu_alloc_noprof+0xed8/0x1b70 [ 216.814661][T14580] ? pcpu_alloc_noprof+0xed8/0x1b70 [ 216.814674][T14580] ? __pfx___mutex_lock+0x10/0x10 [ 216.814685][T14580] ? kasan_save_track+0x14/0x30 [ 216.814697][T14580] ? __kasan_kmalloc+0xaa/0xb0 [ 216.814709][T14580] ? blk_mq_init_tags+0x8c/0x300 [ 216.814721][T14580] ? blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 216.814733][T14580] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 216.814744][T14580] ? blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 216.814756][T14580] ? nbd_start_device+0x1a6/0xbd0 [ 216.814768][T14580] ? genl_rcv_msg+0x560/0x800 [ 216.814777][T14580] ? netlink_rcv_skb+0x159/0x420 [ 216.814792][T14580] ? __sys_sendmsg+0x170/0x220 [ 216.814805][T14580] ? do_syscall_64+0xc9/0xf80 [ 216.814817][T14580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.814829][T14580] ? pcpu_alloc_noprof+0xed8/0x1b70 [ 216.814840][T14580] pcpu_alloc_noprof+0xed8/0x1b70 [ 216.814854][T14580] sbitmap_init_node+0x2ff/0x720 [ 216.814866][T14580] sbitmap_queue_init_node+0x40/0x4a0 [ 216.814877][T14580] blk_mq_init_tags+0x184/0x300 [ 216.814891][T14580] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 216.814904][T14580] ? kfree+0x1c7/0x690 [ 216.814914][T14580] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 216.814927][T14580] blk_mq_update_nr_hw_queues+0xaba/0x1190 [ 216.814940][T14580] ? __mutex_unlock_slowpath+0x15c/0x790 [ 216.814952][T14580] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 216.814967][T14580] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 216.814984][T14580] nbd_start_device+0x1a6/0xbd0 [ 216.814997][T14580] nbd_genl_connect+0xff2/0x1a40 [ 216.815009][T14580] ? __pfx_nbd_genl_connect+0x10/0x10 [ 216.815022][T14580] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 216.815040][T14580] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 216.815060][T14580] genl_family_rcv_msg_doit+0x214/0x300 [ 216.815070][T14580] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 216.815088][T14580] ? genl_get_cmd+0x3ef/0x720 [ 216.815106][T14580] ? __sys_sendmsg+0x170/0x220 [ 216.815118][T14580] ? do_syscall_64+0xc9/0xf80 [ 216.815129][T14580] ? __radix_tree_lookup+0x217/0x2b0 [ 216.815146][T14580] genl_rcv_msg+0x560/0x800 [ 216.815157][T14580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.815166][T14580] ? __pfx_nbd_genl_connect+0x10/0x10 [ 216.815179][T14580] ? __lock_acquire+0x4a5/0x2630 [ 216.815189][T14580] netlink_rcv_skb+0x159/0x420 [ 216.815209][T14580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.815219][T14580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.815236][T14580] ? netlink_deliver_tap+0x1ae/0xcc0 [ 216.815252][T14580] genl_rcv+0x28/0x40 [ 216.815267][T14580] netlink_unicast+0x5aa/0x870 [ 216.815283][T14580] ? __pfx_netlink_unicast+0x10/0x10 [ 216.815301][T14580] netlink_sendmsg+0x8b0/0xda0 [ 216.815317][T14580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.815332][T14580] ? __might_fault+0x70/0x140 [ 216.815346][T14580] ____sys_sendmsg+0xa54/0xc30 [ 216.815356][T14580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.815365][T14580] ? __pfx___futex_wait+0x10/0x10 [ 216.815381][T14580] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.815395][T14580] ___sys_sendmsg+0x190/0x1e0 [ 216.815406][T14580] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.815420][T14580] ? find_held_lock+0x2b/0x80 [ 216.815437][T14580] __sys_sendmsg+0x170/0x220 [ 216.815451][T14580] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.815465][T14580] ? __x64_sys_futex+0x34f/0x4d0 [ 216.815480][T14580] do_syscall_64+0xc9/0xf80 [ 216.815492][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.815503][T14580] RIP: 0033:0x7f711fb9acb9 [ 216.815513][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.815524][T14580] RSP: 002b:00007f7120a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.815534][T14580] RAX: ffffffffffffffda RBX: 00007f711fe15fa0 RCX: 00007f711fb9acb9 [ 216.815542][T14580] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 216.815548][T14580] RBP: 00007f711fc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 216.815554][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.815560][T14580] R13: 00007f711fe16038 R14: 00007f711fe15fa0 R15: 00007ffd362bbd18 [ 216.815570][T14580] [ 217.119197][T14580] nbd1: detected capacity change from 0 to 127 [ 217.592379][ T7310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.596182][ T7310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.700191][ T7310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.704620][ T7310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.816666][ T7310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.819954][ T7310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.877135][ T7310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.881182][ T7310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.910786][ T5930] block nbd1: Receive control failed (result -104) [ 217.910805][ T5936] block nbd1: Receive control failed (result -32) [ 217.976518][ T7310] bridge_slave_1: left allmulticast mode [ 217.978283][ T7310] bridge_slave_1: left promiscuous mode [ 217.980192][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.983582][ T7310] bridge_slave_0: left allmulticast mode [ 217.985419][ T7310] bridge_slave_0: left promiscuous mode [ 217.987461][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.256656][ T7310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.260798][ T7310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.264670][ T7310] bond0 (unregistering): Released all slaves [ 218.366156][ T7310] bond1 (unregistering): Released all slaves [ 218.739877][ T7310] hsr_slave_0: left promiscuous mode [ 218.742402][ T7310] hsr_slave_1: left promiscuous mode [ 218.746685][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.749664][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.753567][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.756821][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.762464][ T7310] veth1_macvtap: left promiscuous mode [ 218.764736][ T7310] veth0_macvtap: left promiscuous mode [ 218.767196][ T7310] veth1_vlan: left promiscuous mode [ 218.769417][ T7310] veth0_vlan: left promiscuous mode [ 218.922504][ T7310] team0 (unregistering): Port device team_slave_1 removed [ 218.944342][ T7310] team0 (unregistering): Port device team_slave_0 removed [ 223.625267][ T7314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.628553][ T7314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.631779][ T7314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.635381][ T7314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 223.676003][ T7314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.679298][ T7314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.682506][ T7314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.686212][ T7314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 223.750416][ T7314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.753701][ T7314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.756964][ T7314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.760335][ T7314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 223.826054][ T7314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.829247][ T7314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.832445][ T7314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.835797][ T7314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 223.957768][ T7314] dvmrp8 (unregistering): left allmulticast mode [ 223.965938][ T7314] bond1 (unregistering): (slave geneve2): Releasing active interface [ 224.377286][ T7314] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 224.381871][ T7314] bond0 (unregistering): Released all slaves [ 224.386363][ T7314] bond1 (unregistering): Released all slaves [ 224.487096][ T7314] bond2 (unregistering): Released all slaves [ 224.573408][ T7314] bond3 (unregistering): Released all slaves [ 224.577687][ T7314] bond4 (unregistering): Released all slaves [ 224.661805][ T7314] : left promiscuous mode [ 225.005289][ T7314] hsr_slave_0: left promiscuous mode [ 225.007731][ T7314] hsr_slave_1: left promiscuous mode [ 225.010850][ T7314] veth1_macvtap: left promiscuous mode [ 225.012926][ T7314] veth0_macvtap: left promiscuous mode [ 225.014995][ T7314] veth1_vlan: left allmulticast mode [ 225.016769][ T7314] veth1_vlan: left promiscuous mode [ 225.018598][ T7314] veth0_vlan: left promiscuous mode [ 225.043680][ T7314] pimreg (unregistering): left allmulticast mode [ 225.085699][ T7314] team0 (unregistering): Port device vlan0 removed [ 225.644524][ T7314] IPVS: stop unused estimator thread 0... [ 225.662081][ T63] block nbd0: Possible stuck request ffff888028de0000: control (read@0,1024B). Runtime 60 seconds [ 225.666337][ T63] block nbd0: Possible stuck request ffff888028de0200: control (read@1024,1024B). Runtime 60 seconds [ 225.670721][ T63] block nbd0: Possible stuck request ffff888028de0400: control (read@2048,1024B). Runtime 60 seconds [ 225.675356][ T63] block nbd0: Possible stuck request ffff888028de0600: control (read@3072,1024B). Runtime 60 seconds