last executing test programs: 11m10.31199744s ago: executing program 4 (id=1102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000280)={0x24, 0xc, 0x15, 0x8, 0x2, 0x6, 0x2, 0x103}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)) syz_open_dev$ptys(0xc, 0x3, 0x1) io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0x2df}) syz_io_uring_setup(0x49e, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x44}, 0x50) syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x11, &(0x7f00000007c0)=@framed={{0x18, 0x7}, [@initr0, @exit, @call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 11m8.57421081s ago: executing program 3 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r10, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "256fee7be7cd23f7dae2c6985dc1d3ed"}, 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xadc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0xc6, &(0x7f0000000280)=""/198, 0x41000, 0xa, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6, r7, 0x1, r8, r9, r10], 0x0, 0x10, 0x2}, 0x94) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x4, 0x12, r2, 0x1e72000) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000200000008000600ac14140e08"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 11m8.175217547s ago: executing program 4 (id=1112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20008c81) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11m7.833393305s ago: executing program 3 (id=1115): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20048800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f4"}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x400) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x187, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x151, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x22}, {0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de"}, {0x2, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df2"}]}}}}}}, 0x0) getpid() r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socket$key(0xf, 0x3, 0x2) 11m5.14092714s ago: executing program 2 (id=1122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) write$P9_RWSTAT(r5, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m5.000955097s ago: executing program 4 (id=1124): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./bus\x00', 0x80000103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x80, 0x0}, 0x4004801) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x200000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 11m4.045210804s ago: executing program 4 (id=1128): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x800) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = io_uring_setup(0x80070c5, &(0x7f00000002c0)={0x0, 0xf76f, 0x10, 0x1, 0x154}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000004080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m3.920781452s ago: executing program 2 (id=1130): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="e2040000003b4a09192f8f00000000000620f5f0b138d2efec70a67c00", @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001680)) r10 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f00000001c0)={0x0, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000000)={0x0, r10}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) 11m3.786572141s ago: executing program 3 (id=1132): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000002980)="bc7c913c"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x440d4) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x4, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000", 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='hugepage_update\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) syz_open_dev$evdev(0x0, 0x40002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11m3.646372745s ago: executing program 2 (id=1134): syz_open_dev$evdev(&(0x7f0000000280), 0x8000, 0x111cc2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x4, @mcast2, 0x247}}}, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x0, 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(r2, 0xe, &(0x7f00000001c0)={0x2, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = syz_open_dev$vcsn(0x0, 0x6c90, 0x480c1) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r4, @ANYBLOB="080001000300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap(&(0x7f0000322000/0x4000)=nil, 0x4000, 0xb, 0x31, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 11m2.332287729s ago: executing program 2 (id=1136): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) syz_open_dev$hidraw(0x0, 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) read$ptp(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r3, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x20000810) 10m59.534123449s ago: executing program 2 (id=1140): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905", @ANYRES64], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010200000000000000000300000028000000000a01"], 0x90}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xa4}, 0x0}) 10m59.436872642s ago: executing program 4 (id=1141): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1600000000000000b4"], 0x50) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m59.299617163s ago: executing program 3 (id=1143): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="6726660faeb2a13700003e262e6767660f1edf66b99e0000400f320f060f01c266b91406000066b87e00000066ba000000000f300f353e0f005a0166b8414b01df0f23d00f21f86635300000020f23f8b880068ec8", 0x55}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000d2b000/0x7000)=nil, r4, 0x3, 0x20010, r7, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_DIRTY_TLB(r9, 0x4010aeaa, &(0x7f0000000200)={0x2, 0xd66e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r8, 0x6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r10, 0x5) ioctl$TIOCGPKT(r10, 0x80045438, &(0x7f0000000000)) syz_kvm_assert_syzos_uexit$x86(r8, 0xffffffffffffffff) 10m58.800888324s ago: executing program 3 (id=1144): r0 = socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) keyctl$clear(0x7, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r6, &(0x7f0000001f00)=""/4111, 0x100f) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioprio_set$pid(0x1, r4, 0x6000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100003e8d7e1c9cfbb11afdfd2b7df3c030527bd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="61d9010000000000140012800800010067726500080002800400120008001f0007000000"], 0x3c}}, 0xc080) 10m58.719939208s ago: executing program 4 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x100000000000000}, 0x7, 0x0, 0x0, 0x0, 0x76ca62b3ddbb769e}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r9, 0x0, 0x7ffd, 0xe) 10m56.823409355s ago: executing program 3 (id=1150): r0 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000340)}, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) close_range(r0, r0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol']) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x613}, 0x10}, 0x94) 10m56.795856727s ago: executing program 2 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001500)={0x2, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x40200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) 9m55.775119979s ago: executing program 32 (id=1149): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffea, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x7fffffff, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x3, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r2, r2, 0x0, 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8000000000015) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400f69b000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYRES8=r1, @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42, 0x0, 0xfffffffc, 0xffffffff}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0x2055ea38, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 9m55.517524269s ago: executing program 33 (id=1148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m55.002592749s ago: executing program 34 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001500)={0x2, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x40200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) 9m54.69073948s ago: executing program 35 (id=1150): r0 = dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000340)}, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) close_range(r0, r0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol']) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x613}, 0x10}, 0x94) 9m54.484186113s ago: executing program 36 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x100000000000000}, 0x7, 0x0, 0x0, 0x0, 0x76ca62b3ddbb769e}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r9, 0x0, 0x7ffd, 0xe) 9m43.266177805s ago: executing program 6 (id=1153): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req={0x0, 0x0, 0x8, 0x400}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) io_setup(0x5, &(0x7f00000003c0)=0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff060000000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x3b) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000000)={0x6, 0x6, 0x0, {0xfffffff9, 0xffffff01}, 0x2305, 0x3}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xdf7}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) 9m40.084725397s ago: executing program 6 (id=1157): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xb, 0x0) 9m40.069739377s ago: executing program 6 (id=1158): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1927", 0x3}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@broadcast, @remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 9m37.547374655s ago: executing program 6 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES8=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x24048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) getsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140), &(0x7f0000000180)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r7 = eventfd(0xa) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7, 0xeeee0000, 0x0, r7, 0xd}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_DESTROY(r8, 0x5502) 9m37.546903109s ago: executing program 6 (id=1161): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000002c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) gettid() getpid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 9m37.544664435s ago: executing program 6 (id=1162): r0 = getpid() migrate_pages(r0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 9m37.145550456s ago: executing program 37 (id=1162): r0 = getpid() migrate_pages(r0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 53.417115452s ago: executing program 5 (id=4349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xf1c38fa000000000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xfffffffffffffff2}, 0x18) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x78) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000050000000500000002db76336ca4d600", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.105927221s ago: executing program 5 (id=4358): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(0x0, 0xe6, 0x2602) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503162ed3fc140020004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000280)=[{0x7, 0x0, 0x83}], 0x1, 0x201, 0x0, 0x0, 0x10, 0x78}) 51.772696501s ago: executing program 5 (id=4359): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000040)={0x6, 0x1700, "778d8ce72aa8f35457c8617739b4948e07180be64604d3a5", {0x9, 0x8}, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="370200007d02000005f600000000000005830000000008000000000000000000404100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d94f8b920000003300704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb1403f196a51cd5157adc8103b494e13700cfc36d07c500f04cd85f2a70f5e9930e5e989cd5ef4d51f60da7582c4a05c8f828f68dc1774d5de2e820862381f6686dd1bb8fd70000003e00f8f669fb716dcf315ecaf385409ac65b9408678c3c3b9e1d52c36cde7ba4a400b4b077dc74000000000000000007ec21cabff20f9c0089f90600000000002c01ebbbb9ca18ce8a602300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1372d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) 49.562973675s ago: executing program 5 (id=4369): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 49.439201847s ago: executing program 5 (id=4370): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001780)=@newqdisc={0x86c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7ffffffe, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0xc, 0xd81, 0x400003, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x0, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x401, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0x6bfa, 0x0, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x109, 0x89, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb0c, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x5, 0x81, 0x3, 0x0, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x40, 0x0, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x9a, 0x6, 0x104, 0x62cc, 0x6, 0x7, 0x2eb7, 0x0, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x7, 0x0, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x0, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x6, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x404, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x10, 0x4, 0xb3dd, 0x7, 0x5, 0x8, 0xfffffffc, 0xa3, 0x0, 0x8, 0x8200000, 0x3, 0x7, 0xfffffffe, 0x9a, 0x401, 0x7, 0x9, 0x7ff, 0x3, 0x1, 0x3, 0x9, 0x0, 0x3ff, 0x2, 0x5, 0x2c, 0x9, 0x6d0, 0xffff, 0xfffffffb, 0x9b, 0x5, 0x3, 0x0, 0xb2, 0x80b, 0x79d7, 0x7fff, 0x2, 0x8, 0x6, 0x6, 0x8001, 0x80000001, 0x2, 0xff, 0x5, 0x7, 0x3, 0x6, 0x0, 0x80000000, 0x81, 0x77, 0x6, 0x0, 0x3, 0x4, 0x4, 0x4, 0x5, 0x7, 0x0, 0xffff7fff, 0x9a6, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x9, 0x5, 0x7fff, 0xf396, 0x80, 0x1, 0x3, 0xffffffff, 0xa7e, 0xce8c, 0x6, 0x8578, 0x1, 0x98f, 0x2, 0x6, 0x9, 0xfffffff9, 0x7ff, 0x1, 0x80000001, 0x9, 0x0, 0x4, 0x8, 0x7fffffff, 0x7fffffff, 0x6, 0x3, 0x42, 0x3, 0x80000001, 0x5, 0x0, 0xf26d, 0x2, 0x6, 0xfffffff8, 0x2399d421, 0x8, 0xfff, 0xffffffff, 0x4, 0x8, 0x6, 0x8, 0x1, 0x7, 0x1, 0x7485, 0x10, 0x1000, 0x87, 0x3, 0xf8, 0x8001, 0x7, 0x7, 0x8, 0x8, 0x986d, 0x9, 0x101, 0x1, 0x4, 0x2, 0x1b, 0xfff, 0x3, 0x1ff, 0x0, 0x1, 0xffff, 0x4, 0x7ff, 0x7, 0x98, 0x8, 0x0, 0x5, 0x1, 0x5, 0x8d, 0x2, 0x1, 0x10, 0x9, 0x9, 0x5, 0x0, 0x8, 0x9, 0x0, 0x4, 0xb, 0x5, 0x4, 0xfffffff9, 0x5, 0x7486, 0x9, 0x8, 0x8, 0xb268, 0x0, 0x8, 0x0, 0x8000, 0x10001, 0x3, 0x8, 0x59d, 0x4, 0x1000, 0x2, 0x7, 0x1, 0x3, 0x6, 0x4, 0x10000, 0x5, 0x3, 0xffffffff, 0xfffffffb, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x40, 0x8, 0x0, 0xb9, 0x7, 0x6, 0x10, 0xffff0001, 0x7, 0xfff, 0x4, 0x7, 0x8, 0xcf8, 0x400, 0x0, 0x9286, 0xe, 0x3, 0x100, 0x80000000, 0x3, 0x2, 0x2, 0x8, 0x7fff, 0x9, 0x5, 0x10000, 0x6, 0x7, 0x5, 0x8000, 0x5, 0x1, 0x3, 0x5, 0x3, 0xf37, 0x1, 0x9, 0x38, 0xcdbc, 0x0, 0x1, 0xf, 0x6, 0xc, 0x9, 0xff, 0x2, 0x6698f9ed]}]}}]}, 0x86c}}, 0x20048004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 49.194747666s ago: executing program 5 (id=4373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x863, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x1f7, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50) 34.059490038s ago: executing program 38 (id=4373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x863, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x1f7, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50) 4.558819481s ago: executing program 1 (id=4721): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="23a2", 0x2}], 0x1}, 0x4014) close(r0) 4.502704676s ago: executing program 0 (id=4723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4.413169819s ago: executing program 1 (id=4725): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f000095b000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 4.376111036s ago: executing program 0 (id=4726): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 4.285466097s ago: executing program 1 (id=4728): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x36c2, 0x9, 0x1, 0x0, 0x1}) 4.283736878s ago: executing program 0 (id=4729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', ']}\x00'}, 0x0, 0x0) 4.207335088s ago: executing program 1 (id=4731): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000808}, 0x10) socket$netlink(0x10, 0x3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f00000001c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x78d5b568, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x6}) 4.206699866s ago: executing program 0 (id=4733): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 4.108591969s ago: executing program 0 (id=4735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x4, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x20801, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000280)={&(0x7f00000003c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/78, 0x4e}], 0x2, &(0x7f0000000580)=""/66, 0x42}, 0x41) socket$inet6_mptcp(0xa, 0x1, 0x106) memfd_create(0x0, 0x3f00) clock_adjtime(0x0, &(0x7f0000000300)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x88001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) 2.096963658s ago: executing program 9 (id=4747): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004005}, 0x24000050) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.902991603s ago: executing program 9 (id=4750): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff6f79deefc8bd95368e66016f0800010000000000020000004500003c52663e8b17e4fd00000000008490783fffffffac14c9f1fbfd536c24dc5446561b2e14aa00000000663bd5832af581598862d3555a84fcc242644599bad0f3d8dd26fc6d3774ff7d91cb401e8ee836f8d571f7607ece9a89d4030937e7d328a244e3a663c6e1aa2643f3a1b95ee3dd7c7048542e605e3769a017e26142c786", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014050a00000000000000000008d58838068b91"], 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.866281961s ago: executing program 1 (id=4751): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r2, 0x0, 0x0) 1.684028389s ago: executing program 9 (id=4753): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1.671516959s ago: executing program 0 (id=4754): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000000000000) 1.372705118s ago: executing program 7 (id=4755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x1, 0xffffffff, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 1.368459967s ago: executing program 7 (id=4756): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080001}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000400)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2a5}, &(0x7f0000000440), &(0x7f0000000280)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 844.554603ms ago: executing program 8 (id=4757): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{&(0x7f0000002640)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x4048001) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 820.925412ms ago: executing program 1 (id=4758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ec0)="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", 0x133}], 0x1}}], 0x1, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 437.230715ms ago: executing program 9 (id=4759): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000280)={r1, 0x3, 0x7, 0x7, &(0x7f0000000300)=[{0x4c32, 0x1, 0x9, 0x5}, {0x9715, 0x5, 0x1, 0xf}, {0x8, 0xfa56, 0x8, 0xa}, {0x81, 0xc, 0x7d, 0x3}, {0x1, 0x2, 0x5, 0x7}, {0x4, 0x4, 0x9, 0x21}, {0x9, 0x9, 0x800, 0x2}]}) 434.977555ms ago: executing program 8 (id=4760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r2, 0x8, 0x2, r2}) 365.161567ms ago: executing program 7 (id=4761): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 323.411498ms ago: executing program 9 (id=4762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[], 0x0) 253.34374ms ago: executing program 8 (id=4763): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff6f79deefc8bd95368e66016f0800010000000000020000004500003c52663e8b17e4fd00000000008490783fffffffac14c9f1fbfd536c24dc5446561b2e14aa00000000663bd5832af581598862d3555a84fcc242644599bad0f3d8dd26fc6d3774ff7d91cb401e8ee836f8d571f7607ece9a89d4030937e7d328a244e3a663c6e1aa2643f3a1b95ee3dd7c7048542e605e3769a017e26142c786", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014050a00000000000000000008d58838068b91"], 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 213.199536ms ago: executing program 7 (id=4764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', ']}\x00'}, 0x0, 0x0) 202.57853ms ago: executing program 8 (id=4765): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000710001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040084}, 0x8802) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 201.357133ms ago: executing program 9 (id=4766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x5000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1909841, 0x0) 92.298503ms ago: executing program 7 (id=4767): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 91.597522ms ago: executing program 8 (id=4768): bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 3.700125ms ago: executing program 7 (id=4769): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80140) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040001) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r2, r2) setpgid(0x0, r2) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(r2, 0xf, &(0x7f0000000200)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) alarm(0x8) alarm(0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 0s ago: executing program 8 (id=4770): memfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x70, 0x0, 0x1, 0x2, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) kernel console output (not intermixed with test programs): ng 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1162.415931][T20466] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1162.421865][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.450942][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.471335][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.716739][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 1162.732523][ T10] usbtmc 1-1:16.0: can't read capabilities [ 1163.272533][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3962'. [ 1163.871044][T20520] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1164.509203][ T10] usb 1-1: USB disconnect, device number 27 [ 1164.673099][T20535] netlink: 'syz.5.3971': attribute type 10 has an invalid length. [ 1164.693021][T20535] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1164.743922][T20535] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1164.808608][T20535] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1165.308295][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1165.308313][ T30] audit: type=1326 audit(1767491653.451:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.378680][ T30] audit: type=1326 audit(1767491653.481:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.460934][ T30] audit: type=1326 audit(1767491653.481:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.516282][T20550] loop2: detected capacity change from 0 to 7 [ 1165.550354][ T30] audit: type=1326 audit(1767491653.481:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.554002][T20534] Dev loop2: unable to read RDB block 7 [ 1165.589469][ T30] audit: type=1326 audit(1767491653.481:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.645913][T20534] loop2: unable to read partition table [ 1165.660797][T20534] loop2: partition table beyond EOD, truncated [ 1165.679685][ T30] audit: type=1326 audit(1767491653.481:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.704867][T20550] Dev loop2: unable to read RDB block 7 [ 1165.714426][T20550] loop2: unable to read partition table [ 1165.726714][T20550] loop2: partition table beyond EOD, truncated [ 1165.753782][T20550] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1165.765887][ T30] audit: type=1326 audit(1767491653.491:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.789662][ T30] audit: type=1326 audit(1767491653.491:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.814040][ T30] audit: type=1326 audit(1767491653.491:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1165.843846][ T30] audit: type=1326 audit(1767491653.491:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20544 comm="syz.7.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff57e78f749 code=0x7ffc0000 [ 1166.226501][T20578] random: crng reseeded on system resumption [ 1167.956115][T20611] fuse: Bad value for 'fd' [ 1170.638814][T20643] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4019'. [ 1170.692187][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4019'. [ 1171.746210][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1171.746229][ T30] audit: type=1400 audit(1767491659.881:5206): avc: denied { ioctl } for pid=20651 comm="syz-executor" path="socket:[70667]" dev="sockfs" ino=70667 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1171.748127][T11743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1171.789214][T11743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1171.803014][T11743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1171.827565][T11743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1171.839271][T11743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.859210][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1171.885917][ T30] audit: type=1400 audit(1767491660.021:5207): avc: denied { mounton } for pid=20651 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1172.473102][T20667] input: syz0 as /devices/virtual/input/input166 [ 1172.497325][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4026'. [ 1173.899152][T11743] Bluetooth: hci1: command tx timeout [ 1174.169501][T20651] lo speed is unknown, defaulting to 1000 [ 1174.175302][T20670] loop2: detected capacity change from 0 to 7 [ 1174.200042][T20653] Dev loop2: unable to read RDB block 7 [ 1174.205659][T20653] loop2: unable to read partition table [ 1174.236048][T20653] loop2: partition table beyond EOD, truncated [ 1174.247036][T20670] Dev loop2: unable to read RDB block 7 [ 1174.252835][T20670] loop2: unable to read partition table [ 1174.277326][T20670] loop2: partition table beyond EOD, truncated [ 1174.283619][T20670] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1174.376646][T20676] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.596522][T20682] fuse: Bad value for 'fd' [ 1175.470019][T12105] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.528259][T20692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1175.554485][T20651] chnl_net:caif_netlink_parms(): no params data found [ 1175.602386][T12105] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.725932][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1175.780975][T12105] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.855330][T20651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.863292][T20651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.871007][T20651] bridge_slave_0: entered allmulticast mode [ 1175.879232][T20651] bridge_slave_0: entered promiscuous mode [ 1175.907933][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.916016][ T5931] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1175.935269][ T10] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1175.949950][T12105] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.965847][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.976179][T11743] Bluetooth: hci1: command tx timeout [ 1175.987108][T20651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.996378][T20651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.006558][ T10] usb 10-1: config 0 descriptor?? [ 1176.040549][T20703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1176.052246][T20651] bridge_slave_1: entered allmulticast mode [ 1176.059865][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1176.072367][T20651] bridge_slave_1: entered promiscuous mode [ 1176.075954][ T5931] usb 9-1: Using ep0 maxpacket: 8 [ 1176.090742][ T5931] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.104363][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1176.113641][ T30] audit: type=1326 audit(1767491664.251:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ec978f749 code=0x0 [ 1176.137002][ T5931] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.147402][ T5931] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.157635][ T5931] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.170766][ T5931] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1176.179899][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.218226][T20720] fuse: Unknown parameter 'fd0x0000000000000007' [ 1176.290146][T20651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.317943][T20651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.398488][ T5931] usb 9-1: GET_CAPABILITIES returned 0 [ 1176.404231][ T5931] usbtmc 9-1:16.0: can't read capabilities [ 1176.423379][T20651] team0: Port device team_slave_0 added [ 1176.429505][T12105] gretap0: left allmulticast mode [ 1176.436905][T12105] gretap0: left promiscuous mode [ 1176.442169][T12105] bridge0: port 3(gretap0) entered disabled state [ 1176.451115][T12105] bridge_slave_1: left allmulticast mode [ 1176.457184][T12105] bridge_slave_1: left promiscuous mode [ 1176.462938][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.470835][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1176.478953][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1176.488482][T12105] bridge_slave_0: left allmulticast mode [ 1176.494148][T12105] bridge_slave_0: left promiscuous mode [ 1176.500449][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.507941][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1176.515466][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1176.522893][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1176.530469][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1176.539042][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1176.546822][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1176.558185][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1176.565434][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1176.573483][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1176.581823][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1176.589993][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1176.598010][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1176.605153][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1176.616835][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1176.625585][ T10] pwc: Registered as video103. [ 1176.636207][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input167 [ 1176.689332][ T10] usb 10-1: USB disconnect, device number 41 [ 1177.271837][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.278716][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.416576][ T5931] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1177.432748][T12105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.455253][T12105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.487259][T12105] bond0 (unregistering): Released all slaves [ 1177.524616][T20651] team0: Port device team_slave_1 added [ 1177.565826][ T5931] usb 10-1: Using ep0 maxpacket: 32 [ 1177.576091][ T30] audit: type=1400 audit(1767491665.711:5209): avc: denied { search } for pid=5486 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.633961][ T5931] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1177.645917][ T5931] usb 10-1: config 0 has no interface number 0 [ 1177.652130][ T5931] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1177.668204][ T30] audit: type=1400 audit(1767491665.741:5210): avc: denied { search } for pid=5486 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.701067][ T5931] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1177.745858][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.754269][ T30] audit: type=1400 audit(1767491665.741:5211): avc: denied { search } for pid=5486 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.781033][ T5931] usb 10-1: Product: syz [ 1177.785317][ T5931] usb 10-1: Manufacturer: syz [ 1177.799950][ T5931] usb 10-1: SerialNumber: syz [ 1177.814594][ T5931] usb 10-1: config 0 descriptor?? [ 1177.823283][ T30] audit: type=1400 audit(1767491665.741:5212): avc: denied { read } for pid=5486 comm="dhcpcd" name="n145" dev="tmpfs" ino=9512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1177.850558][ T30] audit: type=1400 audit(1767491665.741:5213): avc: denied { open } for pid=5486 comm="dhcpcd" path="/run/udev/data/n145" dev="tmpfs" ino=9512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1177.908540][ T30] audit: type=1400 audit(1767491665.741:5214): avc: denied { getattr } for pid=5486 comm="dhcpcd" path="/run/udev/data/n145" dev="tmpfs" ino=9512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1177.964924][ T5931] smsc75xx v1.0.0 [ 1177.969765][T12105] tipc: Left network mode [ 1178.055931][T11743] Bluetooth: hci1: command tx timeout [ 1178.115496][T20651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.130797][T20651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.142692][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4056'. [ 1178.168916][T20651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.245413][T20651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.258754][T20651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.314986][T20651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.387525][T12105] hsr_slave_0: left promiscuous mode [ 1178.393430][T12105] hsr_slave_1: left promiscuous mode [ 1178.413780][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.429443][T12105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.437008][ T30] audit: type=1400 audit(1767491666.581:5215): avc: denied { read open } for pid=20756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.479682][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.487705][ T5931] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1178.504346][T12105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.511895][ T5931] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1178.527746][ T30] audit: type=1400 audit(1767491666.611:5216): avc: denied { getattr } for pid=20756 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.575317][T12105] veth1_macvtap: left promiscuous mode [ 1178.583266][T12105] veth0_macvtap: left promiscuous mode [ 1178.593574][T12105] veth1_vlan: left promiscuous mode [ 1178.607942][T12105] veth0_vlan: left promiscuous mode [ 1178.613902][ T5901] usb 9-1: USB disconnect, device number 27 [ 1178.886710][ T30] audit: type=1400 audit(1767491667.021:5217): avc: denied { add_name } for pid=20753 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.960015][ T30] audit: type=1400 audit(1767491667.031:5218): avc: denied { create } for pid=20753 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1179.161874][ T5931] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1179.195623][ T5931] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1179.209638][ T5931] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1179.234493][ T5931] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 1179.261818][ T5931] usb 10-1: USB disconnect, device number 42 [ 1179.262919][T20784] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1180.052533][T12105] team0 (unregistering): Port device team_slave_1 removed [ 1180.117292][T12105] team0 (unregistering): Port device team_slave_0 removed [ 1180.146022][T11743] Bluetooth: hci1: command tx timeout [ 1180.750736][ T5931] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1180.791739][T20651] hsr_slave_0: entered promiscuous mode [ 1180.818589][T20651] hsr_slave_1: entered promiscuous mode [ 1180.939175][ T5931] usb 9-1: Using ep0 maxpacket: 8 [ 1180.951598][ T5931] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1180.974736][ T5931] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1181.017248][T20805] random: crng reseeded on system resumption [ 1181.092518][ T5931] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1181.268915][ T5931] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.443780][ T5931] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.529430][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.000430][ T5931] usb 9-1: GET_CAPABILITIES returned 0 [ 1182.012858][ T5931] usbtmc 9-1:16.0: can't read capabilities [ 1182.247813][T20823] 9p: Bad value for 'wfdno' [ 1182.324416][T20817] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 1182.446403][T20817] SELinux: failed to load policy [ 1182.853486][T20651] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1182.883062][T20651] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1182.897179][T20844] input: syz0 as /devices/virtual/input/input168 [ 1182.929419][T20651] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1182.982136][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1183.008303][T20651] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1183.434448][ T5931] usb 9-1: USB disconnect, device number 28 [ 1183.511415][T20651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.614732][T20651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.640878][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.648127][T12097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.682120][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.689299][T11982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.222140][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1184.222157][ T30] audit: type=1326 audit(1767491672.361:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20873 comm="syz.5.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec978f749 code=0x7ffc0000 [ 1184.315368][ T30] audit: type=1326 audit(1767491672.401:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20873 comm="syz.5.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2ec978f749 code=0x7ffc0000 [ 1184.385969][ T30] audit: type=1326 audit(1767491672.401:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20873 comm="syz.5.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec978f749 code=0x7ffc0000 [ 1184.429282][T20651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.217651][T20904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1185.301653][T20651] veth0_vlan: entered promiscuous mode [ 1185.346387][T20651] veth1_vlan: entered promiscuous mode [ 1185.425111][T20651] veth0_macvtap: entered promiscuous mode [ 1185.478428][T20651] veth1_macvtap: entered promiscuous mode [ 1185.533160][T20651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.566479][T20651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.604624][ T3961] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.667860][ T3961] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.703875][ T3961] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.750269][ T3961] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.798535][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4098'. [ 1186.021846][T11977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.059206][T11977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.179447][T11811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.207501][T11811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.255674][ T30] audit: type=1400 audit(1767491674.391:5299): avc: denied { mounton } for pid=20651 comm="syz-executor" path="/root/syzkaller.5mWc0J/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1186.342927][ T30] audit: type=1400 audit(1767491674.431:5300): avc: denied { mount } for pid=20651 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1186.437500][ T30] audit: type=1400 audit(1767491674.451:5301): avc: denied { mounton } for pid=20651 comm="syz-executor" path="/root/syzkaller.5mWc0J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1186.644349][ T30] audit: type=1400 audit(1767491674.451:5302): avc: denied { mounton } for pid=20651 comm="syz-executor" path="/root/syzkaller.5mWc0J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=71813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1186.672813][ T30] audit: type=1400 audit(1767491674.451:5303): avc: denied { unmount } for pid=20651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1186.702132][ T30] audit: type=1400 audit(1767491674.471:5304): avc: denied { mounton } for pid=20651 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1187.071795][ T30] audit: type=1400 audit(1767491674.471:5305): avc: denied { mount } for pid=20651 comm="syz-executor" name="/" dev="gadgetfs" ino=33921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1187.188708][T20951] veth0_to_team: entered promiscuous mode [ 1187.258663][T20957] 9p: Bad value for 'rfdno' [ 1188.116800][T20970] fuse: Bad value for 'rootmode' [ 1189.090927][T20974] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1189.231899][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1189.694850][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1189.694873][ T30] audit: type=1400 audit(1767491677.801:5308): avc: denied { setopt } for pid=20988 comm="syz.8.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1189.734810][T20991] syzkaller0: entered promiscuous mode [ 1189.765963][T20991] syzkaller0: entered allmulticast mode [ 1189.791346][ T30] audit: type=1400 audit(1767491677.931:5309): avc: denied { write } for pid=20988 comm="syz.8.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1189.847993][ T30] audit: type=1400 audit(1767491677.991:5310): avc: denied { connect } for pid=20988 comm="syz.8.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1189.886787][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1189.908864][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1189.936851][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.944695][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.954670][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1189.975505][ T30] audit: type=1400 audit(1767491678.041:5311): avc: denied { getopt } for pid=20988 comm="syz.8.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1190.477670][T11753] syz_tun (unregistering): left allmulticast mode [ 1190.595630][T20995] lo speed is unknown, defaulting to 1000 [ 1191.136018][ T1099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.183540][ T1099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.657162][ T1099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.689135][ T1099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.833787][T21020] lo speed is unknown, defaulting to 1000 [ 1192.050862][ T1099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1192.056154][T11743] Bluetooth: hci2: command tx timeout [ 1192.111812][ T1099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.782282][T11743] Bluetooth: hci3: command 0x1003 tx timeout [ 1192.789480][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1193.316625][ T1099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.347380][ T1099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.589296][T20995] chnl_net:caif_netlink_parms(): no params data found [ 1194.136657][T11743] Bluetooth: hci2: command tx timeout [ 1194.970137][ T1099] team0: Port device geneve0 removed [ 1195.103088][T21071] fuse: Unknown parameter 'use00000000000000000000' [ 1195.415910][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1196.026102][ T30] audit: type=1326 audit(1767491684.171:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.057644][ T30] audit: type=1326 audit(1767491684.201:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.130219][ T30] audit: type=1326 audit(1767491684.201:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.184243][ T30] audit: type=1326 audit(1767491684.201:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.216391][ T5829] Bluetooth: hci2: command tx timeout [ 1196.233539][ T30] audit: type=1326 audit(1767491684.201:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.257236][ T30] audit: type=1326 audit(1767491684.201:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.284373][ T30] audit: type=1326 audit(1767491684.201:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.310372][ T30] audit: type=1326 audit(1767491684.201:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.337883][ T30] audit: type=1326 audit(1767491684.201:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.364008][ T30] audit: type=1326 audit(1767491684.201:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.7.4134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1196.402413][T21073] SELinux: failed to load policy [ 1196.525092][ T1099] bond0 (unregistering): Released all slaves [ 1196.547302][T21077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4136'. [ 1196.557372][T20995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.564739][T20995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.575257][T20995] bridge_slave_0: entered allmulticast mode [ 1196.583115][T20995] bridge_slave_0: entered promiscuous mode [ 1196.620706][T20995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.629829][T20995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.637190][T20995] bridge_slave_1: entered allmulticast mode [ 1196.644745][T20995] bridge_slave_1: entered promiscuous mode [ 1196.732742][T20995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.749830][T20995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.825262][T20995] team0: Port device team_slave_0 added [ 1196.835329][T20995] team0: Port device team_slave_1 added [ 1196.886435][T20995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.059718][T20995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.094154][T20995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.108694][T20995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.116007][T20995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.301774][T20995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.979315][T20995] hsr_slave_0: entered promiscuous mode [ 1198.001295][T20995] hsr_slave_1: entered promiscuous mode [ 1198.030216][T20995] debugfs: 'hsr0' already exists in 'hsr' [ 1198.060495][T20995] Cannot create hsr debugfs directory [ 1198.251020][ T1099] tipc: Left network mode [ 1198.337332][T11743] Bluetooth: hci2: command tx timeout [ 1198.456427][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1198.900749][T21113] fuse: Unknown parameter 'use00000000000000000000' [ 1199.019749][T21115] input: syz0 as /devices/virtual/input/input169 [ 1199.268923][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4145'. [ 1199.781782][ T1099] hsr_slave_0: left promiscuous mode [ 1199.796175][ T1099] hsr_slave_1: left promiscuous mode [ 1199.862615][ T1099] veth1_macvtap: left promiscuous mode [ 1199.885999][ T1099] veth0_macvtap: left promiscuous mode [ 1199.892062][ T1099] veth1_vlan: left promiscuous mode [ 1199.926833][ T1099] veth0_vlan: left promiscuous mode [ 1200.565984][ T5943] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1200.905916][ T5943] usb 8-1: Using ep0 maxpacket: 32 [ 1200.912947][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.955864][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.975122][ T5943] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1200.999682][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.037353][ T5943] usb 8-1: config 0 descriptor?? [ 1201.057176][ T5943] hub 8-1:0.0: USB hub found [ 1201.254824][ T5943] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1201.682132][ T5943] usbhid 8-1:0.0: can't add hid device: -71 [ 1201.688338][ T5943] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1201.731516][ T5943] usb 8-1: USB disconnect, device number 23 [ 1202.246301][ T5943] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1202.477371][ T5943] usb 8-1: Using ep0 maxpacket: 32 [ 1202.486277][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.497751][ T5943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.521855][ T5943] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1202.535207][ T5943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.556202][ T5943] usb 8-1: config 0 descriptor?? [ 1202.578088][ T5943] hub 8-1:0.0: USB hub found [ 1202.679146][ T1099] IPVS: stop unused estimator thread 0... [ 1202.738427][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4157'. [ 1202.754091][T20995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1202.773215][ T5943] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1202.782511][T20995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1202.801335][T20995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1202.819010][T20995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1202.967224][T20995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.978052][ T5943] usbhid 8-1:0.0: can't add hid device: -71 [ 1202.991940][ T5943] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1203.008697][T20995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.027420][ T5943] usb 8-1: USB disconnect, device number 24 [ 1203.030747][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.040571][T12097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.073515][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.080747][T12097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.176704][T21180] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1203.507956][ T5829] Bluetooth: hci3: command 0x1003 tx timeout [ 1203.515277][T11754] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1203.843482][T20995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.947206][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1203.947226][ T30] audit: type=1326 audit(1767491692.091:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.058473][ T30] audit: type=1326 audit(1767491692.091:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.114153][ T30] audit: type=1326 audit(1767491692.131:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.171071][T21203] input: syz0 as /devices/virtual/input/input170 [ 1204.188671][ T30] audit: type=1326 audit(1767491692.131:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.222043][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4163'. [ 1204.307376][ T30] audit: type=1326 audit(1767491692.131:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.345977][T21212] af_packet: tpacket_rcv: packet too big, clamped from 154 to 4294967286. macoff=82 [ 1204.434836][ T30] audit: type=1326 audit(1767491692.131:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.559644][ T30] audit: type=1326 audit(1767491692.131:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.619618][ T30] audit: type=1326 audit(1767491692.131:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.677412][ T30] audit: type=1326 audit(1767491692.131:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.732751][T20995] veth0_vlan: entered promiscuous mode [ 1204.805165][T20995] veth1_vlan: entered promiscuous mode [ 1204.846612][T20995] veth0_macvtap: entered promiscuous mode [ 1204.857080][T20995] veth1_macvtap: entered promiscuous mode [ 1204.879599][T20995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.905589][T20995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.955612][ T30] audit: type=1326 audit(1767491692.151:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.0.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5422f8f749 code=0x7ffc0000 [ 1204.994625][ T4261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.072396][ T4261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.110779][ T4261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.161416][ T4261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.313133][T12105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.342284][T12105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.578048][T12105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.608922][T12105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.755928][ T5943] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1205.890909][ T5900] hid_parser_main: 22 callbacks suppressed [ 1205.890929][ T5900] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1205.946378][ T5900] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1205.956379][ T5943] usb 8-1: Using ep0 maxpacket: 8 [ 1205.978832][ T5943] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1206.011896][ T5943] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1206.054398][ T5943] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.098312][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.131035][ T5943] usb 8-1: Product: syz [ 1206.143428][ T5943] usb 8-1: Manufacturer: syz [ 1206.168767][ T5943] usb 8-1: SerialNumber: syz [ 1206.175426][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1206.187790][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1206.196819][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1206.204742][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1206.212680][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1206.835467][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4181'. [ 1207.024073][ T3875] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.086183][T21255] chnl_net:caif_netlink_parms(): no params data found [ 1207.227344][ T3875] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.353103][ T3875] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.425281][T21255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.432767][T21255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.446076][T21255] bridge_slave_0: entered allmulticast mode [ 1207.477102][T21255] bridge_slave_0: entered promiscuous mode [ 1207.548341][ T5943] cdc_ncm 8-1:1.0: bind() failure [ 1207.558497][ T5943] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1207.568589][ T3875] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.575619][ T5943] cdc_ncm 8-1:1.1: bind() failure [ 1207.589583][T21255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.597321][T21255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.604658][T21255] bridge_slave_1: entered allmulticast mode [ 1207.607729][ T5943] usb 8-1: USB disconnect, device number 25 [ 1207.613321][T21255] bridge_slave_1: entered promiscuous mode [ 1207.625926][T21287] netlink: 'syz.5.4186': attribute type 4 has an invalid length. [ 1207.681279][T21286] netlink: 'syz.5.4186': attribute type 4 has an invalid length. [ 1207.781345][T21255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.804930][T21255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.296060][ T5829] Bluetooth: hci3: command tx timeout [ 1208.502531][T21306] fuse: Unknown parameter 'user_id00000000000000000000' [ 1209.443741][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 1209.443760][ T30] audit: type=1326 audit(1767491705.594:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.0.4195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x0 [ 1209.613113][ T3875] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1209.631642][ T3875] bond0 (unregistering): Released all slaves [ 1209.651746][T21255] team0: Port device team_slave_0 added [ 1209.712277][T21255] team0: Port device team_slave_1 added [ 1209.732637][ T3875] tipc: Left network mode [ 1209.880090][T21255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.893946][T21255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.943219][T21325] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1209.955402][T21325] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1209.968301][T21255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.055729][T21255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.081871][T21255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.142781][T21255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.381507][ T5829] Bluetooth: hci3: command tx timeout [ 1210.526809][ T3875] hsr_slave_0: left promiscuous mode [ 1210.594001][T21359] fuse: Unknown parameter 'user_id00000000000000000000' [ 1211.497708][ T3875] hsr_slave_1: left promiscuous mode [ 1211.564695][ T3875] veth1_macvtap: left promiscuous mode [ 1211.577011][ T3875] veth0_macvtap: left promiscuous mode [ 1211.582668][ T3875] veth1_vlan: left promiscuous mode [ 1211.591594][ T3875] veth0_vlan: left promiscuous mode [ 1212.445322][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4213'. [ 1212.468919][ T5829] Bluetooth: hci3: command tx timeout [ 1213.824306][T21255] hsr_slave_0: entered promiscuous mode [ 1213.833342][T21255] hsr_slave_1: entered promiscuous mode [ 1213.840243][T21255] debugfs: 'hsr0' already exists in 'hsr' [ 1213.847127][T21255] Cannot create hsr debugfs directory [ 1214.548612][ T5829] Bluetooth: hci3: command tx timeout [ 1214.551163][ T30] audit: type=1326 audit(1767491710.694:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21423 comm="syz.0.4222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x0 [ 1214.830885][T21255] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1214.862582][T21255] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1214.882336][T21255] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1215.013683][T21255] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1215.766661][T21255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.913896][T21255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.947146][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.954304][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.993269][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.000471][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.532453][T21255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.011926][ T30] audit: type=1400 audit(1767491713.144:5698): avc: denied { map } for pid=21487 comm="syz.7.4232" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1217.255084][ T30] audit: type=1400 audit(1767491713.394:5699): avc: denied { mounton } for pid=21498 comm="syz.7.4235" path="/proc/87" dev="proc" ino=74991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1217.315840][ T30] audit: type=1326 audit(1767491713.434:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21494 comm="syz.0.4234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5422f8f749 code=0x0 [ 1217.349189][T21255] veth0_vlan: entered promiscuous mode [ 1217.489844][T21255] veth1_vlan: entered promiscuous mode [ 1217.627542][T21255] veth0_macvtap: entered promiscuous mode [ 1217.649722][T21255] veth1_macvtap: entered promiscuous mode [ 1217.698949][T21255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.731319][T21255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.776968][T11990] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.808851][T11990] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.843749][T11990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.878615][T11990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.057310][T11811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.067663][T11811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.166270][T11811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.174183][T11811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.382052][T21527] syzkaller0: entered promiscuous mode [ 1218.395907][T21527] syzkaller0: entered allmulticast mode [ 1218.604018][ T30] audit: type=1326 audit(1767491714.744:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.641031][ T30] audit: type=1326 audit(1767491714.774:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.729033][ T30] audit: type=1326 audit(1767491714.814:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.801263][ T30] audit: type=1326 audit(1767491714.814:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.844208][ T30] audit: type=1326 audit(1767491714.814:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.870154][ T30] audit: type=1326 audit(1767491714.814:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21536 comm="syz.5.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1218.933736][T21548] futex_wake_op: syz.0.4246 tries to shift op by -1; fix this program [ 1220.228354][ T5900] IPVS: starting estimator thread 0... [ 1220.570734][T21560] IPVS: Error connecting to the multicast addr [ 1220.777439][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1220.777461][ T30] audit: type=1400 audit(1767491716.874:5716): avc: denied { read } for pid=21564 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1220.814176][T21558] IPVS: using max 37 ests per chain, 88800 per kthread [ 1221.019065][ T30] audit: type=1326 audit(1767491717.164:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.9.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1221.095866][ T30] audit: type=1326 audit(1767491717.164:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.9.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1221.205034][ T30] audit: type=1326 audit(1767491717.164:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.9.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1221.229701][ T30] audit: type=1326 audit(1767491717.274:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.9.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1221.341414][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1221.883710][ T30] audit: type=1326 audit(1767491718.024:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1221.910129][T21602] program syz.7.4265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1221.933636][T11754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.961068][T11754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.970266][ T30] audit: type=1326 audit(1767491718.104:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1221.970348][T11754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1222.282604][T11754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1222.302807][T11754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.954016][ T30] audit: type=1326 audit(1767491718.104:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1222.977655][ T30] audit: type=1326 audit(1767491718.104:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1223.001287][ T30] audit: type=1326 audit(1767491718.104:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21595 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe45e18f749 code=0x7ffc0000 [ 1223.355987][T21598] chnl_net:caif_netlink_parms(): no params data found [ 1223.628954][T21598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.636902][T21598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.644173][T21598] bridge_slave_0: entered allmulticast mode [ 1223.652540][T21598] bridge_slave_0: entered promiscuous mode [ 1223.661514][T21598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.674137][T21598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.681887][T21598] bridge_slave_1: entered allmulticast mode [ 1223.690859][T21598] bridge_slave_1: entered promiscuous mode [ 1223.746426][T11726] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1223.864953][ T1147] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.905824][T11726] usb 1-1: Using ep0 maxpacket: 8 [ 1223.933866][T21598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.952290][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1223.971174][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1223.985240][T11726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.997865][T11726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.008444][T11726] usb 1-1: Product: syz [ 1224.012643][T11726] usb 1-1: Manufacturer: syz [ 1224.019591][T11726] usb 1-1: SerialNumber: syz [ 1224.020832][ T1147] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.078870][T21598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.169820][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1224.182519][ T1147] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.207310][T21598] team0: Port device team_slave_0 added [ 1224.219371][T21598] team0: Port device team_slave_1 added [ 1224.274591][T11726] cdc_ncm 1-1:1.0: bind() failure [ 1224.279880][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1224.301284][T11726] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1224.316195][T11726] cdc_ncm 1-1:1.1: bind() failure [ 1224.339716][T11726] usb 1-1: USB disconnect, device number 28 [ 1224.376642][T11754] Bluetooth: hci4: command tx timeout [ 1224.451274][ T1147] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.529606][T21598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.536950][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.564666][T21598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.598582][T21598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.614406][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.659970][T21598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.733307][T21598] hsr_slave_0: entered promiscuous mode [ 1224.740644][T21598] hsr_slave_1: entered promiscuous mode [ 1224.747018][T21598] debugfs: 'hsr0' already exists in 'hsr' [ 1224.752760][T21598] Cannot create hsr debugfs directory [ 1224.944269][ T1147] bridge_slave_1: left allmulticast mode [ 1224.956070][ T1147] bridge_slave_1: left promiscuous mode [ 1224.972252][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.987699][ T1147] bridge_slave_0: left allmulticast mode [ 1225.006309][ T1147] bridge_slave_0: left promiscuous mode [ 1225.012084][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.398138][T21671] hub 2-0:1.0: USB hub found [ 1225.408688][T21671] hub 2-0:1.0: 1 port detected [ 1226.015116][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.030760][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.041633][ T1147] bond0 (unregistering): Released all slaves [ 1226.134535][ T1147] tipc: Left network mode [ 1226.466131][T11754] Bluetooth: hci4: command tx timeout [ 1226.641828][ T1147] hsr_slave_0: left promiscuous mode [ 1226.658906][ T1147] hsr_slave_1: left promiscuous mode [ 1226.670626][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.689363][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.732423][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.746241][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.781934][ T1147] veth1_macvtap: left promiscuous mode [ 1226.803890][ T1147] veth0_macvtap: left promiscuous mode [ 1226.812475][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1226.812494][ T30] audit: type=1400 audit(1767491722.954:5740): avc: denied { create } for pid=21733 comm="syz.0.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1226.839660][ T1147] veth1_vlan: left promiscuous mode [ 1226.844995][ T1147] veth0_vlan: left promiscuous mode [ 1226.916717][T11726] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1227.055926][T11726] usb 8-1: device descriptor read/64, error -71 [ 1227.261493][ T30] audit: type=1400 audit(1767491723.404:5741): avc: denied { ioctl } for pid=21747 comm="syz.9.4308" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1227.318356][T11726] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1227.455943][T11726] usb 8-1: device descriptor read/64, error -71 [ 1227.578608][T11726] usb usb8-port1: attempt power cycle [ 1227.789330][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 1227.835934][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 1227.923406][T11726] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1227.974006][T11726] usb 8-1: device descriptor read/8, error -71 [ 1228.216179][T11726] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1228.250138][T11726] usb 8-1: device descriptor read/8, error -71 [ 1228.366258][T11726] usb usb8-port1: unable to enumerate USB device [ 1228.535859][T11754] Bluetooth: hci4: command tx timeout [ 1228.629208][ T30] audit: type=1326 audit(1767491724.774:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1228.716302][ T30] audit: type=1326 audit(1767491724.774:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1228.801212][ T30] audit: type=1326 audit(1767491724.774:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1228.861751][T21598] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1228.883468][ T30] audit: type=1326 audit(1767491724.774:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1228.948242][T21598] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1228.961035][ T30] audit: type=1326 audit(1767491724.774:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21778 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1228.993802][T21598] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1229.006406][T21598] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1229.013597][ T30] audit: type=1326 audit(1767491725.124:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21791 comm="syz.9.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1229.043747][ T30] audit: type=1326 audit(1767491725.124:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21791 comm="syz.9.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1229.071921][ T30] audit: type=1326 audit(1767491725.124:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21791 comm="syz.9.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1229.155835][T11726] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1229.220596][T21598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.251496][T21598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.270469][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.277620][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.305858][T11726] usb 1-1: Using ep0 maxpacket: 8 [ 1229.314317][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1229.324877][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.325562][T21792] SELinux: failed to load policy [ 1229.332009][T11998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.355000][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1229.377132][T11726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.389213][T11726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.398857][T11726] usb 1-1: Product: syz [ 1229.403138][T11726] usb 1-1: Manufacturer: syz [ 1229.412394][T11726] usb 1-1: SerialNumber: syz [ 1229.630722][T11726] cdc_ncm 1-1:1.0: bind() failure [ 1229.683233][T11726] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1229.711113][T11726] cdc_ncm 1-1:1.1: bind() failure [ 1229.741788][T11726] usb 1-1: USB disconnect, device number 29 [ 1229.904512][T21598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.961607][T21836] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1230.469674][T21598] veth0_vlan: entered promiscuous mode [ 1230.503974][T21598] veth1_vlan: entered promiscuous mode [ 1230.625994][T11754] Bluetooth: hci4: command tx timeout [ 1230.627786][T21598] veth0_macvtap: entered promiscuous mode [ 1230.691065][T21598] veth1_macvtap: entered promiscuous mode [ 1230.765830][T21598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.901248][T21598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.051625][T11998] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.089694][T11998] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.126933][T11998] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.177429][T11998] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.238396][T21881] netlink: 'syz.9.4343': attribute type 1 has an invalid length. [ 1231.667824][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.675689][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.746916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.771686][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.596783][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1232.647545][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1232.686177][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1232.694118][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1232.703935][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1233.076968][T21904] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1233.148250][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1233.235002][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1233.235020][ T30] audit: type=1400 audit(1767491729.374:5805): avc: denied { mounton } for pid=21922 comm="syz.8.4354" path="/4/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1233.716115][T21936] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1234.188983][T21911] chnl_net:caif_netlink_parms(): no params data found [ 1234.405827][T11726] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1234.487593][ T5901] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1234.556327][T11726] usb 6-1: Using ep0 maxpacket: 8 [ 1234.562935][T11726] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1234.572976][T11726] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1234.598862][T11726] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1234.650251][T11726] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.665831][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 1234.667517][T11726] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1234.672656][ T5901] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1234.680141][T11726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.733920][ T5901] usb 9-1: config 0 has no interface number 0 [ 1234.776527][T11754] Bluetooth: hci5: command tx timeout [ 1234.776593][ T5901] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1234.860331][ T5901] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1234.877470][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.885494][ T5901] usb 9-1: Product: syz [ 1234.905983][ T5901] usb 9-1: Manufacturer: syz [ 1234.925819][ T5901] usb 9-1: SerialNumber: syz [ 1234.943120][T11726] usb 6-1: GET_CAPABILITIES returned 0 [ 1234.943371][ T5901] usb 9-1: config 0 descriptor?? [ 1234.986049][T11726] usbtmc 6-1:16.0: can't read capabilities [ 1235.016830][ T5901] smsc75xx v1.0.0 [ 1235.184453][T11728] usb 6-1: USB disconnect, device number 25 [ 1235.696465][ T5901] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1235.716158][ T5901] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1235.949316][T11998] bond0 (unregistering): Released all slaves [ 1236.099004][T11998] tipc: Left network mode [ 1236.187254][T21911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.199439][T21911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.220588][ T30] audit: type=1326 audit(1767491732.364:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.9.4368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x0 [ 1236.245131][T21911] bridge_slave_0: entered allmulticast mode [ 1236.266971][T21911] bridge_slave_0: entered promiscuous mode [ 1236.318283][T21911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.333102][T21981] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1236.349797][T21911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.357188][T21911] bridge_slave_1: entered allmulticast mode [ 1236.367164][T21911] bridge_slave_1: entered promiscuous mode [ 1236.374676][T21979] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1236.539636][T21911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.550500][ T5901] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1236.572312][ T5901] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1236.585070][ T5901] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1236.598312][ T5901] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1236.608106][T11998] hsr_slave_0: left promiscuous mode [ 1236.620317][T11998] hsr_slave_1: left promiscuous mode [ 1236.642587][ T5901] usb 9-1: USB disconnect, device number 29 [ 1236.856644][T11754] Bluetooth: hci5: command tx timeout [ 1237.515367][ T5900] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1237.695974][ T5900] usb 8-1: Using ep0 maxpacket: 8 [ 1237.731054][ T5900] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.752070][ T5900] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.775861][ T5900] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.799495][ T5900] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.829235][ T5900] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.850692][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.093377][ T5900] usb 8-1: GET_CAPABILITIES returned 0 [ 1238.104684][ T5900] usbtmc 8-1:16.0: can't read capabilities [ 1238.312943][T11728] usb 8-1: USB disconnect, device number 30 [ 1238.726473][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.732933][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.937361][T11754] Bluetooth: hci5: command tx timeout [ 1239.709464][T21911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.805894][ T30] audit: type=1326 audit(1767491735.944:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22026 comm="syz.8.4387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad44d8f749 code=0x0 [ 1239.933862][T22023] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4385'. [ 1239.950628][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4385'. [ 1239.963880][T21911] team0: Port device team_slave_0 added [ 1239.987558][T21911] team0: Port device team_slave_1 added [ 1240.082931][T21911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.104179][T21911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.164891][T21911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.187846][ T5933] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1240.199754][T21911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.215808][T21911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.255720][T21911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.365800][ T5933] usb 10-1: Using ep0 maxpacket: 32 [ 1240.378580][ T5933] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1240.388638][ T5933] usb 10-1: config 0 has no interface number 0 [ 1240.403700][ T5933] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1240.424483][ T5933] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1240.434328][ T5933] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.452920][ T5933] usb 10-1: Product: syz [ 1240.462255][ T5933] usb 10-1: Manufacturer: syz [ 1240.477669][ T5933] usb 10-1: SerialNumber: syz [ 1240.497142][ T5933] usb 10-1: config 0 descriptor?? [ 1240.520487][ T5933] smsc75xx v1.0.0 [ 1240.609571][T21911] hsr_slave_0: entered promiscuous mode [ 1240.654218][T21911] hsr_slave_1: entered promiscuous mode [ 1240.751733][T21911] debugfs: 'hsr0' already exists in 'hsr' [ 1240.884388][T21911] Cannot create hsr debugfs directory [ 1241.015958][T11754] Bluetooth: hci5: command tx timeout [ 1241.081771][T11998] IPVS: stop unused estimator thread 0... [ 1241.330513][ T5933] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1241.390338][ T30] audit: type=1400 audit(1767491737.534:5808): avc: denied { read write } for pid=22054 comm="syz.7.4392" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1241.406413][ T5933] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1241.461668][ T30] audit: type=1400 audit(1767491737.564:5809): avc: denied { open } for pid=22054 comm="syz.7.4392" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1241.505104][ T5958] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1241.685849][ T5958] usb 9-1: Using ep0 maxpacket: 8 [ 1241.702785][ T5958] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.725612][ T5958] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.771521][ T5958] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.795200][ T5958] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.847090][ T5958] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1241.861339][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.101852][ T5958] usb 9-1: GET_CAPABILITIES returned 0 [ 1242.114861][ T5958] usbtmc 9-1:16.0: can't read capabilities [ 1242.185052][T22071] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4397'. [ 1242.271285][ T5933] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1242.306324][ T5933] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1242.331002][ T5872] usb 9-1: USB disconnect, device number 30 [ 1242.352237][ T5933] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1242.395570][ T5933] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1242.433098][T21911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1242.449449][ T5933] usb 10-1: USB disconnect, device number 43 [ 1242.483660][T21911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1242.509964][T21911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1242.549055][T21911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1242.787838][T21911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.854061][T21911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.895471][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.902696][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.983724][T22104] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4402'. [ 1242.984824][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.999908][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.044882][ T30] audit: type=1326 audit(1767491739.184:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.137059][ T30] audit: type=1326 audit(1767491739.184:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.236878][ T30] audit: type=1326 audit(1767491739.184:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.326109][ T30] audit: type=1326 audit(1767491739.184:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.408642][ T30] audit: type=1326 audit(1767491739.184:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.489637][T22127] random: crng reseeded on system resumption [ 1243.496361][ T30] audit: type=1326 audit(1767491739.184:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.537868][ T30] audit: type=1326 audit(1767491739.184:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.7.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1243.570081][T22127] Restarting kernel threads ... [ 1243.596834][T22127] Done restarting kernel threads. [ 1243.663242][T21911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.787633][T21911] veth0_vlan: entered promiscuous mode [ 1243.822030][T21911] veth1_vlan: entered promiscuous mode [ 1243.882880][T21911] veth0_macvtap: entered promiscuous mode [ 1243.909402][T21911] veth1_macvtap: entered promiscuous mode [ 1243.948998][T21911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.105832][ T5900] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1244.118288][T21911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.148273][T22140] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1244.261619][T11982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.305513][T11982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.327594][ T5900] usb 8-1: Using ep0 maxpacket: 32 [ 1244.334228][T11982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.337603][ T5900] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1244.374773][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.387616][ T5900] usb 8-1: config 0 has no interface number 0 [ 1244.393998][ T5900] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1244.438050][ T5900] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1244.464370][T12105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.466740][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.504103][T12105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.506292][ T5900] usb 8-1: Product: syz [ 1244.533929][ T5900] usb 8-1: Manufacturer: syz [ 1244.541941][ T5900] usb 8-1: SerialNumber: syz [ 1244.559473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.569833][ T5900] usb 8-1: config 0 descriptor?? [ 1244.584024][ T5900] smsc75xx v1.0.0 [ 1244.584924][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.832644][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1244.832662][ T30] audit: type=1326 audit(1767491740.974:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1244.893929][ T30] audit: type=1326 audit(1767491740.974:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1244.947236][ T30] audit: type=1326 audit(1767491740.974:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.000123][ T30] audit: type=1326 audit(1767491740.974:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.059865][ T30] audit: type=1326 audit(1767491740.974:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.086994][ T30] audit: type=1326 audit(1767491740.974:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.113249][ T30] audit: type=1326 audit(1767491740.974:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.140895][ T30] audit: type=1326 audit(1767491740.974:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.171563][ T30] audit: type=1326 audit(1767491740.974:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.198156][ T30] audit: type=1326 audit(1767491740.974:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1245.221955][ T5900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1245.233310][ T5900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1245.481777][T22180] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1245.990161][T22197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4438'. [ 1246.018965][T22197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22197 comm=syz.0.4438 [ 1246.048416][ T5900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1246.080574][ T5900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1246.116325][ T5900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1246.132977][ T5900] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1246.168109][ T5900] usb 8-1: USB disconnect, device number 31 [ 1248.236163][ T5872] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1248.415802][ T5872] usb 10-1: Using ep0 maxpacket: 8 [ 1248.427088][ T5872] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1248.447883][ T5872] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1248.550472][T22240] SELinux: failed to load policy [ 1248.579069][ T5872] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.596142][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.626189][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4456'. [ 1248.644379][ T5872] usb 10-1: Product: syz [ 1248.659080][ T5872] usb 10-1: Manufacturer: syz [ 1248.669468][ T5872] usb 10-1: SerialNumber: syz [ 1248.855266][T22246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1248.921293][ T5872] cdc_ncm 10-1:1.0: bind() failure [ 1248.952751][ T5872] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1248.972336][ T5872] cdc_ncm 10-1:1.1: bind() failure [ 1249.013737][ T5872] usb 10-1: USB disconnect, device number 44 [ 1249.017063][T11754] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1249.020305][ T5829] Bluetooth: hci0: command 0x1003 tx timeout [ 1249.345200][T22254] bridge_slave_0: left allmulticast mode [ 1249.375030][T22254] bridge_slave_0: left promiscuous mode [ 1249.403407][T22254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.524248][T22254] bridge_slave_1: left allmulticast mode [ 1249.545921][T22254] bridge_slave_1: left promiscuous mode [ 1249.567814][T22254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.655384][T22254] bond0: (slave bond_slave_0): Releasing backup interface [ 1249.743695][T22254] bond0: (slave bond_slave_1): Releasing backup interface [ 1249.807884][T22254] team0: Port device team_slave_0 removed [ 1249.841337][T22254] team0: Port device team_slave_1 removed [ 1249.858799][T22254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.871228][T22254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.900542][T22254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.926544][T22254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.976599][T22254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1251.390016][T22299] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1251.890566][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1251.909945][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1251.919733][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1251.930386][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1251.963754][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1252.945165][T22303] chnl_net:caif_netlink_parms(): no params data found [ 1254.138176][ T5829] Bluetooth: hci0: command tx timeout [ 1254.389001][T22316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.404221][T22328] Bluetooth: MGMT ver 1.23 [ 1254.414634][T22327] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4487'. [ 1254.442948][T22322] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4484'. [ 1254.569007][T22316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.691767][T22303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.700373][T22303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.710140][T22303] bridge_slave_0: entered allmulticast mode [ 1254.723785][T22303] bridge_slave_0: entered promiscuous mode [ 1254.765565][ T30] kauditd_printk_skb: 316 callbacks suppressed [ 1254.765581][ T30] audit: type=1326 audit(1767491750.904:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1254.797280][T22316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.840623][T22303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.860522][T22303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.871150][T22303] bridge_slave_1: entered allmulticast mode [ 1254.884914][T22303] bridge_slave_1: entered promiscuous mode [ 1254.896164][ T30] audit: type=1326 audit(1767491750.914:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1255.084115][ T30] audit: type=1326 audit(1767491750.914:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1255.245204][T22316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.306395][ T30] audit: type=1326 audit(1767491750.914:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1255.326076][T22303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.394816][T22303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.588510][T22303] team0: Port device team_slave_0 added [ 1255.703024][T22303] team0: Port device team_slave_1 added [ 1256.215893][ T5829] Bluetooth: hci0: command tx timeout [ 1256.978701][ T30] audit: type=1326 audit(1767491753.124:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.088568][ T30] audit: type=1326 audit(1767491753.124:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.132184][T22303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.166505][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.204934][ T30] audit: type=1326 audit(1767491753.124:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.279622][T22303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.295104][ T30] audit: type=1326 audit(1767491753.124:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.309419][T22373] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1257.344134][T22367] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4501'. [ 1257.364657][T22303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.382041][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.412423][T22373] ksmbd: Unknown IPC event: 1, ignore. [ 1257.424416][ T30] audit: type=1326 audit(1767491753.124:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.9.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.581612][T22303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.613151][ T30] audit: type=1326 audit(1767491753.754:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.9.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bbb8f749 code=0x7ffc0000 [ 1257.637891][T22316] bridge_slave_1: left allmulticast mode [ 1257.664808][T22316] bridge_slave_1: left promiscuous mode [ 1257.691134][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.751862][T22316] bridge_slave_0: left allmulticast mode [ 1257.781675][T22316] bridge_slave_0: left promiscuous mode [ 1257.796417][T22316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.866698][T22389] program syz.0.4509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1258.157135][T22382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22382 comm=syz.8.4507 [ 1258.303375][ T5829] Bluetooth: hci0: command tx timeout [ 1258.790669][T22421] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4516'. [ 1258.803473][T22421] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4516'. [ 1258.928221][T22316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.939270][T22316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.952367][T22316] bond0 (unregistering): Released all slaves [ 1259.203419][T22430] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4521'. [ 1259.227732][T22303] hsr_slave_0: entered promiscuous mode [ 1259.236899][T22303] hsr_slave_1: entered promiscuous mode [ 1259.252526][T22303] debugfs: 'hsr0' already exists in 'hsr' [ 1259.252551][T22303] Cannot create hsr debugfs directory [ 1259.455884][T22438] syzkaller0: entered promiscuous mode [ 1259.462293][T22438] syzkaller0: entered allmulticast mode [ 1259.538833][T22316] hsr_slave_0: left promiscuous mode [ 1259.569413][T22316] hsr_slave_1: left promiscuous mode [ 1259.586709][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.610225][T22316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.652599][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.664677][T22316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.700326][T22316] veth1_macvtap: left promiscuous mode [ 1259.716587][T22316] veth0_macvtap: left promiscuous mode [ 1259.722264][T22316] veth1_vlan: left promiscuous mode [ 1259.732196][T22316] veth0_vlan: left promiscuous mode [ 1259.958926][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1259.958943][ T30] audit: type=1400 audit(1767491756.104:6308): avc: denied { read write } for pid=22465 comm="syz.8.4534" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1260.006491][ T30] audit: type=1400 audit(1767491756.134:6309): avc: denied { open } for pid=22465 comm="syz.8.4534" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1260.031810][ T30] audit: type=1400 audit(1767491756.134:6310): avc: denied { ioctl } for pid=22465 comm="syz.8.4534" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1260.216634][T22468] netlink: 14 bytes leftover after parsing attributes in process `ÿ'. [ 1260.377675][ T5829] Bluetooth: hci0: command tx timeout [ 1260.580707][T22316] team0 (unregistering): Port device team_slave_1 removed [ 1260.629542][T22316] team0 (unregistering): Port device team_slave_0 removed [ 1261.112163][T22452] lo speed is unknown, defaulting to 1000 [ 1261.135342][T22468] hsr_slave_0: left promiscuous mode [ 1261.146865][T22468] hsr_slave_1: left promiscuous mode [ 1261.218169][T22452] lo speed is unknown, defaulting to 1000 [ 1261.286146][T22452] lo speed is unknown, defaulting to 1000 [ 1261.383401][T22452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1261.526868][T22487] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1261.562867][T22452] lo speed is unknown, defaulting to 1000 [ 1261.643885][T22452] lo speed is unknown, defaulting to 1000 [ 1261.819963][T22452] lo speed is unknown, defaulting to 1000 [ 1261.967925][T22452] lo speed is unknown, defaulting to 1000 [ 1262.042392][ T30] audit: type=1400 audit(1767491758.184:6311): avc: denied { map } for pid=22506 comm="syz.7.4546" path="socket:[79854]" dev="sockfs" ino=79854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1262.070296][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4544'. [ 1262.100664][T22452] lo speed is unknown, defaulting to 1000 [ 1262.111186][ T30] audit: type=1400 audit(1767491758.214:6312): avc: denied { read } for pid=22506 comm="syz.7.4546" path="socket:[79854]" dev="sockfs" ino=79854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1262.145253][ T30] audit: type=1400 audit(1767491758.214:6313): avc: denied { accept } for pid=22506 comm="syz.7.4546" path="socket:[79854]" dev="sockfs" ino=79854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1262.173489][T22507] IPv6: NLM_F_CREATE should be specified when creating new route [ 1262.226112][T22452] lo speed is unknown, defaulting to 1000 [ 1262.528657][T22303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1262.539107][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1262.561315][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1262.581000][T22303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1262.604874][T22517] lo speed is unknown, defaulting to 1000 [ 1262.611669][T22303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1262.628882][ T30] audit: type=1326 audit(1767491758.774:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22526 comm="syz.8.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad44d8f749 code=0x7ffc0000 [ 1262.691109][T22303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1262.699882][ T30] audit: type=1326 audit(1767491758.804:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22526 comm="syz.8.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad44d8f749 code=0x7ffc0000 [ 1262.760420][ T30] audit: type=1326 audit(1767491758.804:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22526 comm="syz.8.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad44d8f749 code=0x7ffc0000 [ 1262.793655][ T30] audit: type=1326 audit(1767491758.804:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22526 comm="syz.8.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad44d8f749 code=0x7ffc0000 [ 1262.982251][T22547] netlink: 'ÿ': attribute type 1 has an invalid length. [ 1263.086359][T22547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1263.336206][T22303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.345004][T22528] SELinux: failed to load policy [ 1263.380451][T22303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.404788][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.411989][T12105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.459842][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.467044][T12105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.061944][T22303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.137047][T22587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4567'. [ 1264.164172][T22587] netem: change failed [ 1264.258324][T22303] veth0_vlan: entered promiscuous mode [ 1264.308657][T22303] veth1_vlan: entered promiscuous mode [ 1264.445157][T22303] veth0_macvtap: entered promiscuous mode [ 1264.481318][T22303] veth1_macvtap: entered promiscuous mode [ 1264.536554][T22602] pimreg: entered allmulticast mode [ 1264.548942][T22608] pimreg: left allmulticast mode [ 1264.611620][T22611] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4574'. [ 1264.651408][T22303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.694629][T22303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.716008][T10172] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1264.748748][T11977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.787895][T11977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.815536][T11977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.837394][T11977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.910634][T10172] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1264.936558][T10172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.945127][T10172] usb 8-1: Product: syz [ 1264.989460][T10172] usb 8-1: Manufacturer: syz [ 1264.994128][T10172] usb 8-1: SerialNumber: syz [ 1265.068753][ T4799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.094972][ T4799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.171844][T22634] bridge_slave_0: left allmulticast mode [ 1265.177662][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4583'. [ 1265.188633][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1265.212508][T22634] bridge_slave_0: left promiscuous mode [ 1265.226141][T22634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.249700][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4583'. [ 1265.250457][T22634] bridge_slave_1: left allmulticast mode [ 1265.281045][T22634] bridge_slave_1: left promiscuous mode [ 1265.287658][ T30] kauditd_printk_skb: 357 callbacks suppressed [ 1265.287674][ T30] audit: type=1326 audit(1767491761.434:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.293790][T22634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.297923][ T30] audit: type=1326 audit(1767491761.434:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.367650][ T30] audit: type=1326 audit(1767491761.514:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.392291][ T30] audit: type=1326 audit(1767491761.514:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.417842][ T30] audit: type=1326 audit(1767491761.514:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.421117][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4583'. [ 1265.442280][ T30] audit: type=1326 audit(1767491761.514:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.474850][ T30] audit: type=1326 audit(1767491761.514:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.487555][T22634] bond0: (slave bond_slave_0): Releasing backup interface [ 1265.528450][T22634] bond0: (slave bond_slave_1): Releasing backup interface [ 1265.553786][ T30] audit: type=1326 audit(1767491761.514:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.598439][T22634] team0: Port device team_slave_0 removed [ 1265.610499][T22634] team0: Port device team_slave_1 removed [ 1265.623663][T22634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.632927][T22634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.666863][T22634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.676139][ T30] audit: type=1326 audit(1767491761.514:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.716024][T22634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.727266][T22634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1265.749475][ T30] audit: type=1326 audit(1767491761.514:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.0.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5914b8f749 code=0x7ffc0000 [ 1265.808102][ T5943] lo speed is unknown, defaulting to 1000 [ 1265.891726][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.928323][T10172] rtl8150 8-1:1.0: couldn't reset the device [ 1265.949247][T10172] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 1265.952622][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.989419][T10172] usb 8-1: USB disconnect, device number 32 [ 1266.123198][T22672] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4589'. [ 1266.153625][T22672] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4589'. [ 1266.260814][T22662] SELinux: failed to load policy [ 1266.268849][T22671] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1266.326718][T22671] SELinux: failed to load policy [ 1266.422211][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1266.462726][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1266.662248][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1266.716100][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1266.782403][T22702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1267.164090][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1267.180835][T22683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1267.470895][T22717] batman_adv: batadv0: Adding interface: dummy0 [ 1267.477419][T22717] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.568419][T22717] batman_adv: batadv0: Interface activated: dummy0 [ 1267.628758][T22719] batadv0: mtu less than device minimum [ 1267.636256][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.648566][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.659968][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.671468][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.682780][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.694133][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1267.705119][T22719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1268.202810][T22757] bridge_slave_0: left allmulticast mode [ 1268.214089][T22757] bridge_slave_0: left promiscuous mode [ 1268.263539][T22757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.292371][T22757] bridge_slave_1: left allmulticast mode [ 1268.303886][T22757] bridge_slave_1: left promiscuous mode [ 1268.310459][T22757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.355331][T22757] bond0: (slave bond_slave_0): Releasing backup interface [ 1268.382372][T22757] bond0: (slave bond_slave_1): Releasing backup interface [ 1268.419081][T22757] team0: Port device team_slave_0 removed [ 1268.441330][T22757] team0: Port device team_slave_1 removed [ 1268.454033][T22757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.466393][T22757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.475685][T22757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.485688][T22757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.597524][T11726] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1269.787351][T11726] usb 1-1: Using ep0 maxpacket: 8 [ 1269.794427][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1269.822150][T11726] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1269.865635][T11726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.899838][T11726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.916747][T11726] usb 1-1: Product: syz [ 1269.922789][T11726] usb 1-1: Manufacturer: syz [ 1269.937710][T11726] usb 1-1: SerialNumber: syz [ 1269.989484][T22822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1270.027502][T22825] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1270.034069][T22825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1270.111176][T22825] vhci_hcd vhci_hcd.0: Device attached [ 1270.385872][T10172] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1270.414986][T22826] vhci_hcd: connection closed [ 1270.414986][T22827] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1270.431667][T12105] vhci_hcd vhci_hcd.7: stop threads [ 1270.436996][T12105] vhci_hcd vhci_hcd.7: release socket [ 1270.445221][T12105] vhci_hcd vhci_hcd.7: disconnect device [ 1271.215242][T11726] cdc_ncm 1-1:1.0: bind() failure [ 1271.224700][T11726] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1271.281781][T11726] cdc_ncm 1-1:1.1: bind() failure [ 1271.327007][T11726] usb 1-1: USB disconnect, device number 30 [ 1271.932876][T22866] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1271.956403][T22866] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1272.269852][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 1272.269874][ T30] audit: type=1400 audit(1767491768.414:6809): avc: denied { recv } for pid=5943 comm="kworker/0:6" saddr=10.128.0.169 src=30006 daddr=10.128.1.224 dest=47558 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1273.327461][T22889] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1273.334044][T22889] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1273.402921][T22889] vhci_hcd vhci_hcd.0: Device attached [ 1273.646273][T22890] vhci_hcd: connection closed [ 1273.646460][T12049] vhci_hcd vhci_hcd.8: stop threads [ 1273.663434][T12049] vhci_hcd vhci_hcd.8: release socket [ 1273.688211][T12049] vhci_hcd vhci_hcd.8: disconnect device [ 1274.047339][T22899] lo speed is unknown, defaulting to 1000 [ 1274.084741][T22919] tipc: Started in network mode [ 1274.092290][T22919] tipc: Node identity 0a0000000000000002, cluster identity 4711 [ 1274.332269][ T30] audit: type=1326 audit(1767491770.474:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.380009][ T30] audit: type=1326 audit(1767491770.504:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.409734][ T30] audit: type=1326 audit(1767491770.504:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.443629][ T30] audit: type=1326 audit(1767491770.504:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.469112][ T30] audit: type=1326 audit(1767491770.504:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.498507][ T30] audit: type=1326 audit(1767491770.504:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.538007][ T30] audit: type=1326 audit(1767491770.504:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.606685][T22934] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.642493][ T30] audit: type=1326 audit(1767491770.504:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.669772][ T30] audit: type=1326 audit(1767491770.504:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22933 comm="syz.7.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefaf8f749 code=0x7ffc0000 [ 1274.853071][T22934] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.904823][T22947] 9pnet_virtio: no channels available for device syz [ 1274.933428][T22948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.944831][T22948] block device autoloading is deprecated and will be removed. [ 1274.988255][T22934] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.083041][T22953] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1275.123907][T22934] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.937103][T10172] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1277.017972][T22970] comedi comedi0: Minor 47 could not be opened [ 1277.620336][ T3554] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.629034][T22977] bridge0: port 3(syz_tun) entered blocking state [ 1277.643553][T22977] bridge0: port 3(syz_tun) entered disabled state [ 1277.659794][T22977] syz_tun: entered allmulticast mode [ 1277.666544][T22978] __nla_validate_parse: 3 callbacks suppressed [ 1277.666560][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4699'. [ 1277.683807][T22977] syz_tun: entered promiscuous mode [ 1277.696857][T22977] bridge0: port 3(syz_tun) entered blocking state [ 1277.703493][T22977] bridge0: port 3(syz_tun) entered forwarding state [ 1277.725151][T22978] bridge0: port 3(syz_tun) entered disabled state [ 1277.764148][T22978] syz_tun (unregistering): left allmulticast mode [ 1277.771848][T22978] syz_tun (unregistering): left promiscuous mode [ 1277.780410][T22978] bridge0: port 3(syz_tun) entered disabled state [ 1277.808818][ T3500] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.839753][ T3500] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.862843][ T3500] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.976691][T22982] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.057615][T22982] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.140001][T22982] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.221182][T22982] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.301742][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1278.301761][ T30] audit: type=1400 audit(1767491774.444:6849): avc: denied { write } for pid=22992 comm="syz.0.4705" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1278.316019][T10172] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1278.333089][ T30] audit: type=1400 audit(1767491774.444:6850): avc: denied { open } for pid=22992 comm="syz.0.4705" path="/59/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 6[ 1278.488156][ T30] audit: type=1326 audit(1767491774.634:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.488348][T10172] usb 10-1: Using ep0 maxpacket: 8 [ 1278.520014][T10172] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.520208][ T30] audit: type=1326 audit(1767491774.654:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.531218][T10172] usb 10-1: config 0 has no interfaces? [ 1278.554336][ T30] audit: type=1326 audit(1767491774.654:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.567644][T10172] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1278.584731][ T30] audit: type=1326 audit(1767491774.654:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.595429][T10172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.629035][T10172] usb 10-1: Product: syz [ 1278.633435][T10172] usb 10-1: Manufacturer: syz [ 1278.638727][T10172] usb 10-1: SerialNumber: syz [ 1278.650140][T10172] usb 10-1: config 0 descriptor?? [ 1278.715896][ T30] audit: type=1326 audit(1767491774.654:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.755823][ T30] audit: type=1326 audit(1767491774.664:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.760638][T23003] SELinux: failed to load policy [ 1278.779378][ T30] audit: type=1326 audit(1767491774.664:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1278.779426][ T30] audit: type=1326 audit(1767491774.664:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23002 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f054678f749 code=0x7ffc0000 [ 1280.634803][T23022] input: syz0 as /devices/virtual/input/input171 [ 1280.681476][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4716'. [ 1280.727905][T10172] usb 10-1: USB disconnect, device number 45 [ 1280.962350][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1280.991258][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1281.548760][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4732'. [ 1281.582498][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4732'. [ 1281.620163][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4732'. [ 1281.910623][T23072] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1281.917183][T23072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1282.149965][T23079] 9pnet_virtio: no channels available for device syz [ 1282.521320][T23080] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1282.527856][T23080] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1282.777014][T23072] vhci_hcd vhci_hcd.0: Device attached [ 1282.880191][T23080] vhci_hcd vhci_hcd.0: Device attached [ 1282.922016][T23074] vhci_hcd: connection closed [ 1282.924319][T22711] vhci_hcd vhci_hcd.1: stop threads [ 1282.942939][T22711] vhci_hcd vhci_hcd.1: release socket [ 1282.948566][T22711] vhci_hcd vhci_hcd.1: disconnect device [ 1283.156695][T10172] usb 34-1: SetAddress Request (2) to port 0 [ 1283.163491][T10172] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1283.221561][T11811] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.349538][T23081] vhci_hcd: connection reset by peer [ 1283.356862][T11811] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.380256][T12105] vhci_hcd vhci_hcd.0: stop threads [ 1283.385511][T12105] vhci_hcd vhci_hcd.0: release socket [ 1283.412847][T12105] vhci_hcd vhci_hcd.0: disconnect device [ 1283.452171][T12105] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.530379][T12105] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.623839][T23100] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4747'. [ 1283.648224][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4747'. [ 1283.697944][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4747'. [ 1283.849936][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1283.849954][ T30] audit: type=1400 audit(1767492035.990:6914): avc: denied { recv } for pid=23108 comm="syz.1.4751" saddr=10.128.0.169 src=33298 daddr=10.128.1.224 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1284.160207][T23119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1285.001959][ T30] audit: type=1400 audit(1767492037.140:6915): avc: denied { mounton } for pid=23125 comm="syz.8.4757" path="/91/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1285.813475][ T30] audit: type=1400 audit(1767492037.950:6916): avc: denied { mount } for pid=23153 comm="syz.7.4769" name="/" dev="autofs" ino=82732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1285.983944][T23156] [ 1285.986323][T23156] ====================================================== [ 1285.993343][T23156] WARNING: possible circular locking dependency detected [ 1286.000380][T23156] syzkaller #0 Tainted: G L [ 1286.006362][T23156] ------------------------------------------------------ [ 1286.013403][T23156] syz.7.4769/23156 is trying to acquire lock: [ 1286.019456][T23156] ffff88807b2a6468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 1286.028523][T23156] [ 1286.028523][T23156] but task is already holding lock: [ 1286.035869][T23156] ffff888078b8e948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1286.045603][T23156] [ 1286.045603][T23156] which lock already depends on the new lock. [ 1286.045603][T23156] [ 1286.056595][T23156] [ 1286.056595][T23156] the existing dependency chain (in reverse order) is: [ 1286.065592][T23156] [ 1286.065592][T23156] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1286.073308][T23156] __mutex_lock+0x1aa/0x1ca0 [ 1286.078415][T23156] autofs_notify_daemon+0x4a6/0xd60 [ 1286.084127][T23156] autofs_wait+0x10f3/0x1ac0 [ 1286.089224][T23156] autofs_mount_wait+0x132/0x3c0 [ 1286.094669][T23156] autofs_d_automount+0x4b2/0x960 [ 1286.100204][T23156] __traverse_mounts+0x1b9/0x830 [ 1286.105679][T23156] step_into_slowpath+0x772/0xf50 [ 1286.111220][T23156] path_lookupat+0x627/0xc40 [ 1286.116318][T23156] filename_lookup+0x224/0x5f0 [ 1286.121592][T23156] kern_path+0x35/0x50 [ 1286.126168][T23156] lookup_bdev+0xd8/0x280 [ 1286.131010][T23156] resume_store+0x1d6/0x490 [ 1286.136027][T23156] kobj_attr_store+0x58/0x80 [ 1286.141133][T23156] sysfs_kf_write+0xf2/0x150 [ 1286.146230][T23156] kernfs_fop_write_iter+0x3af/0x570 [ 1286.152032][T23156] vfs_write+0x7d3/0x11d0 [ 1286.156873][T23156] ksys_write+0x12a/0x250 [ 1286.161706][T23156] do_syscall_64+0xcd/0xf80 [ 1286.166722][T23156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.173122][T23156] [ 1286.173122][T23156] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1286.180317][T23156] __mutex_lock+0x1aa/0x1ca0 [ 1286.185419][T23156] kernfs_fop_write_iter+0x28f/0x570 [ 1286.191222][T23156] iter_file_splice_write+0xa24/0x12b0 [ 1286.197199][T23156] do_splice+0x1478/0x1fc0 [ 1286.202135][T23156] __do_splice+0x32a/0x360 [ 1286.207065][T23156] __x64_sys_splice+0x187/0x250 [ 1286.212431][T23156] do_syscall_64+0xcd/0xf80 [ 1286.217449][T23156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.223855][T23156] [ 1286.223855][T23156] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1286.231234][T23156] __lock_acquire+0x1669/0x2890 [ 1286.236609][T23156] lock_acquire+0x179/0x330 [ 1286.241622][T23156] __mutex_lock+0x1aa/0x1ca0 [ 1286.246726][T23156] anon_pipe_write+0x15d/0x1bd0 [ 1286.252087][T23156] __kernel_write_iter+0x720/0xb10 [ 1286.257706][T23156] __kernel_write+0xf5/0x140 [ 1286.262826][T23156] autofs_notify_daemon+0x4db/0xd60 [ 1286.268534][T23156] autofs_wait+0x10f3/0x1ac0 [ 1286.273631][T23156] autofs_mount_wait+0x132/0x3c0 [ 1286.279080][T23156] autofs_d_automount+0x4b2/0x960 [ 1286.284618][T23156] __traverse_mounts+0x1b9/0x830 [ 1286.290070][T23156] step_into_slowpath+0x772/0xf50 [ 1286.295620][T23156] path_lookupat+0x627/0xc40 [ 1286.300717][T23156] filename_lookup+0x224/0x5f0 [ 1286.305992][T23156] kern_path+0x35/0x50 [ 1286.310666][T23156] lookup_bdev+0xd8/0x280 [ 1286.315511][T23156] resume_store+0x1d6/0x490 [ 1286.320530][T23156] kobj_attr_store+0x58/0x80 [ 1286.325629][T23156] sysfs_kf_write+0xf2/0x150 [ 1286.330724][T23156] kernfs_fop_write_iter+0x3af/0x570 [ 1286.336526][T23156] vfs_write+0x7d3/0x11d0 [ 1286.341364][T23156] ksys_write+0x12a/0x250 [ 1286.346210][T23156] do_syscall_64+0xcd/0xf80 [ 1286.351231][T23156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.357637][T23156] [ 1286.357637][T23156] other info that might help us debug this: [ 1286.357637][T23156] [ 1286.367848][T23156] Chain exists of: [ 1286.367848][T23156] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 1286.367848][T23156] [ 1286.380258][T23156] Possible unsafe locking scenario: [ 1286.380258][T23156] [ 1286.387688][T23156] CPU0 CPU1 [ 1286.393041][T23156] ---- ---- [ 1286.398393][T23156] lock(&sbi->pipe_mutex); [ 1286.402897][T23156] lock(&of->mutex); [ 1286.409403][T23156] lock(&sbi->pipe_mutex); [ 1286.416410][T23156] lock(&pipe->mutex); [ 1286.420551][T23156] [ 1286.420551][T23156] *** DEADLOCK *** [ 1286.420551][T23156] [ 1286.428680][T23156] 5 locks held by syz.7.4769/23156: [ 1286.433858][T23156] #0: ffff888079c6d5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1286.442917][T23156] #1: ffff8880338da420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1286.451874][T23156] #2: ffff888057a0e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1286.461608][T23156] #3: ffff88801d29d4b8 (kn->active#63){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1286.471610][T23156] #4: ffff888078b8e948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1286.481789][T23156] [ 1286.481789][T23156] stack backtrace: [ 1286.487663][T23156] CPU: 0 UID: 0 PID: 23156 Comm: syz.7.4769 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.487689][T23156] Tainted: [L]=SOFTLOCKUP [ 1286.487695][T23156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1286.487707][T23156] Call Trace: [ 1286.487714][T23156] [ 1286.487721][T23156] dump_stack_lvl+0x116/0x1f0 [ 1286.487746][T23156] print_circular_bug+0x275/0x340 [ 1286.487767][T23156] check_noncircular+0x146/0x160 [ 1286.487788][T23156] __lock_acquire+0x1669/0x2890 [ 1286.487811][T23156] lock_acquire+0x179/0x330 [ 1286.487829][T23156] ? anon_pipe_write+0x15d/0x1bd0 [ 1286.487854][T23156] ? __pfx___might_resched+0x10/0x10 [ 1286.487872][T23156] __mutex_lock+0x1aa/0x1ca0 [ 1286.487894][T23156] ? anon_pipe_write+0x15d/0x1bd0 [ 1286.487916][T23156] ? __pfx___schedule+0x10/0x10 [ 1286.487935][T23156] ? anon_pipe_write+0x15d/0x1bd0 [ 1286.487959][T23156] ? __pfx___mutex_lock+0x10/0x10 [ 1286.487980][T23156] ? irqentry_exit+0x1dd/0x8c0 [ 1286.488007][T23156] ? anon_pipe_write+0x15d/0x1bd0 [ 1286.488029][T23156] anon_pipe_write+0x15d/0x1bd0 [ 1286.488057][T23156] ? irqentry_exit+0x1dd/0x8c0 [ 1286.488077][T23156] ? lockdep_hardirqs_on+0x7c/0x110 [ 1286.488099][T23156] ? __pfx_anon_pipe_write+0x10/0x10 [ 1286.488124][T23156] ? __kernel_write_iter+0xeb/0xb10 [ 1286.488146][T23156] ? __pfx_anon_pipe_write+0x10/0x10 [ 1286.488168][T23156] __kernel_write_iter+0x720/0xb10 [ 1286.488189][T23156] ? __pfx___kernel_write_iter+0x10/0x10 [ 1286.488209][T23156] ? __mutex_lock+0x669/0x1ca0 [ 1286.488232][T23156] ? irqentry_exit+0x1dd/0x8c0 [ 1286.488254][T23156] __kernel_write+0xf5/0x140 [ 1286.488274][T23156] ? __pfx___kernel_write+0x10/0x10 [ 1286.488299][T23156] autofs_notify_daemon+0x4db/0xd60 [ 1286.488320][T23156] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1286.488349][T23156] ? autofs_wait+0xd09/0x1ac0 [ 1286.488369][T23156] autofs_wait+0x10f3/0x1ac0 [ 1286.488390][T23156] ? __pfx_autofs_wait+0x10/0x10 [ 1286.488409][T23156] ? __pfx___schedule+0x10/0x10 [ 1286.488427][T23156] ? find_held_lock+0x2b/0x80 [ 1286.488452][T23156] ? path_has_submounts+0xcf/0x120 [ 1286.488471][T23156] ? preempt_schedule_thunk+0x16/0x30 [ 1286.488488][T23156] ? preempt_schedule_common+0x44/0xc0 [ 1286.488510][T23156] autofs_mount_wait+0x132/0x3c0 [ 1286.488529][T23156] autofs_d_automount+0x4b2/0x960 [ 1286.488548][T23156] __traverse_mounts+0x1b9/0x830 [ 1286.488576][T23156] step_into_slowpath+0x772/0xf50 [ 1286.488597][T23156] ? __up_read+0x2d1/0x700 [ 1286.488618][T23156] ? __pfx_step_into_slowpath+0x10/0x10 [ 1286.488637][T23156] ? __lookup_slow+0x440/0x460 [ 1286.488656][T23156] path_lookupat+0x627/0xc40 [ 1286.488677][T23156] filename_lookup+0x224/0x5f0 [ 1286.488698][T23156] ? __pfx_filename_lookup+0x10/0x10 [ 1286.488725][T23156] ? getname_kernel+0x52/0x370 [ 1286.488751][T23156] ? __asan_memcpy+0x3c/0x60 [ 1286.488770][T23156] kern_path+0x35/0x50 [ 1286.488790][T23156] lookup_bdev+0xd8/0x280 [ 1286.488813][T23156] ? __pfx_lookup_bdev+0x10/0x10 [ 1286.488836][T23156] ? __asan_memcpy+0x3c/0x60 [ 1286.488853][T23156] resume_store+0x1d6/0x490 [ 1286.488877][T23156] ? __pfx_resume_store+0x10/0x10 [ 1286.488902][T23156] ? find_held_lock+0x2b/0x80 [ 1286.488927][T23156] ? __pfx_resume_store+0x10/0x10 [ 1286.488950][T23156] kobj_attr_store+0x58/0x80 [ 1286.488973][T23156] ? __pfx_kobj_attr_store+0x10/0x10 [ 1286.488994][T23156] sysfs_kf_write+0xf2/0x150 [ 1286.489011][T23156] kernfs_fop_write_iter+0x3af/0x570 [ 1286.489040][T23156] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1286.489058][T23156] vfs_write+0x7d3/0x11d0 [ 1286.489078][T23156] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1286.489104][T23156] ? __pfx_vfs_write+0x10/0x10 [ 1286.489129][T23156] ksys_write+0x12a/0x250 [ 1286.489149][T23156] ? __pfx_ksys_write+0x10/0x10 [ 1286.489172][T23156] do_syscall_64+0xcd/0xf80 [ 1286.489193][T23156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.489211][T23156] RIP: 0033:0x7fdefaf8f749 [ 1286.489226][T23156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.489242][T23156] RSP: 002b:00007fdefbdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1286.489258][T23156] RAX: ffffffffffffffda RBX: 00007fdefb1e6090 RCX: 00007fdefaf8f749 [ 1286.489269][T23156] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 1286.489280][T23156] RBP: 00007fdefb013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1286.489290][T23156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.489300][T23156] R13: 00007fdefb1e6128 R14: 00007fdefb1e6090 R15: 00007ffe0fa5fb48 [ 1286.489316][T23156] [ 1286.935707][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1287.130983][ T30] audit: type=1400 audit(1767492039.191:6917): avc: denied { write } for pid=5804 comm="syz-executor" path="pipe:[5321]" dev="pipefs" ino=5321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1287.303245][T23156] PM: Image not found (code -22) [ 1287.720414][T22316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.828216][T22316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.928241][T22316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.979252][T22316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.225515][T10172] usb 34-1: device descriptor read/8, error -110 [ 1288.277317][T22316] bond0 (unregistering): Released all slaves [ 1288.345338][T22316] tipc: Left network mode [ 1288.481017][T22316] hsr_slave_0: left promiscuous mode [ 1288.486956][T22316] hsr_slave_1: left promiscuous mode [ 1288.492508][T22316] batman_adv: batadv0: Interface deactivated: dummy0 [ 1288.499218][T22316] batman_adv: batadv0: Removing interface: dummy0 [ 1288.508156][T22316] veth1_macvtap: left promiscuous mode [ 1288.513679][T22316] veth0_macvtap: left promiscuous mode [ 1288.519352][T22316] veth1_vlan: left promiscuous mode [ 1288.524588][T22316] veth0_vlan: left promiscuous mode [ 1288.622241][T10172] usb usb34-port1: attempt power cycle [ 1289.180729][T22316] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.195872][T10172] usb usb34-port1: unable to enumerate USB device [ 1289.247651][T22316] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.297168][T22316] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.358263][T22316] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.422267][T22316] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.478144][T22316] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.528610][T22316] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.607893][T22316] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.691621][T22316] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.738030][T22316] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.788137][T22316] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.847744][T22316] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.913744][T22316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.948801][T22316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.019210][T22316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.088323][T22316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.153849][T22316] bridge_slave_1: left allmulticast mode [ 1290.159671][T22316] bridge_slave_1: left promiscuous mode [ 1290.165734][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.173502][T22316] bridge_slave_0: left allmulticast mode [ 1290.179978][T22316] bridge_slave_0: left promiscuous mode [ 1290.185638][T22316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.194348][T22316] bridge_slave_1: left allmulticast mode [ 1290.200115][T22316] bridge_slave_1: left promiscuous mode [ 1290.205923][T22316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.213912][T22316] bridge_slave_0: left allmulticast mode [ 1290.220084][T22316] bridge_slave_0: left promiscuous mode [ 1290.226407][T22316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.479757][T22316] bond0 (unregistering): Released all slaves [ 1290.661682][T22316] bond0 (unregistering): Released all slaves [ 1290.783079][T22316] bond1 (unregistering): Released all slaves [ 1290.878084][T22316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.887623][T22316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.896840][T22316] bond0 (unregistering): Released all slaves [ 1290.971151][T22316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.980605][T22316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.989876][T22316] bond0 (unregistering): Released all slaves [ 1291.084301][T22316] IPVS: stopping master sync thread 21981 ... [ 1291.502382][T22316] hsr_slave_0: left promiscuous mode [ 1291.508003][T22316] hsr_slave_1: left promiscuous mode [ 1291.515376][T22316] hsr_slave_0: left promiscuous mode [ 1291.521365][T22316] hsr_slave_1: left promiscuous mode [ 1291.528401][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.537327][T22316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.544891][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.552254][T22316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.561270][T22316] hsr_slave_0: left promiscuous mode [ 1291.566950][T22316] hsr_slave_1: left promiscuous mode [ 1291.572484][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.579935][T22316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.587473][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.594893][T22316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.608116][T22316] veth1_macvtap: left promiscuous mode [ 1291.613602][T22316] veth0_macvtap: left promiscuous mode [ 1291.619675][T22316] veth1_vlan: left promiscuous mode [ 1291.624958][T22316] veth0_vlan: left promiscuous mode [ 1291.630558][T22316] veth1_macvtap: left promiscuous mode [ 1291.636160][T22316] veth0_macvtap: left promiscuous mode [ 1291.641695][T22316] veth1_vlan: left promiscuous mode [ 1291.647441][T22316] veth0_vlan: left promiscuous mode [ 1291.653043][T22316] veth1_macvtap: left promiscuous mode [ 1291.658554][T22316] veth0_macvtap: left promiscuous mode [ 1291.664069][T22316] veth1_vlan: left promiscuous mode [ 1291.669455][T22316] veth0_vlan: left promiscuous mode [ 1291.675289][T22316] veth1_macvtap: left promiscuous mode [ 1291.680752][T22316] veth0_macvtap: left promiscuous mode [ 1291.686376][T22316] veth1_vlan: left promiscuous mode [ 1291.691593][T22316] veth0_vlan: left promiscuous mode [ 1292.549853][T22316] team0 (unregistering): Port device team_slave_1 removed [ 1292.573404][T22316] team0 (unregistering): Port device team_slave_0 removed [ 1292.717922][T22316] team0 (unregistering): Port device team_slave_1 removed [ 1292.739570][T22316] team0 (unregistering): Port device team_slave_0 removed [ 1292.788867][ T5901] lo speed is unknown, defaulting to 1000 [ 1292.794604][ T5901] infiniband syz2: ib_query_port failed (-19) [ 1293.665938][T22316] IPVS: stop unused estimator thread 0...