last executing test programs: 1m17.381135352s ago: executing program 2 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x3b4, 0x3e, 0x200, 0x70bd2c, 0x25dfdbfb, {0xd}, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@private0}, @generic="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", @nested={0x28e, 0x7a, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="a673b93565c288243c0f7ec7b27cea1e94a3862367ad5f9481c7507a13ba01147908f435cfe669b78f740523eaef3a0567b8574585e3eb098aad98d4b4da5fd7693234cad99b1086", @generic="a90ce0846da6276dd668f5292e3921197e46389e4867de630106537df32f8d223ce48a43bc92936a89e8eb7875076916c97986e1e36bc8fa9b80e50c84586973d057c66e1f1ef93d73c9a62b628868f75daca1e81807b443b78515f8af3b2499da36966c04fec166d06152c80828ca7623969ed23b5f70005a6554910699a4bce84551a282cd3a2ed0104fcdd5f9a9afb46dc8673d0a14af52bcd2376a9628fa2b0f7dae7a08526f76c7ee4d8ae20ffb60172be6d24a09f4afd6f9f00395d3c9eec0eff7ce1f7c36f4d99f2345898ef400d7d26bc2d57358e977950b7869a5870d7a0dc1", @nested={0x4, 0x2}, @generic="933db3ce998c5d70038fdcece9efb028fa5b618533f8112e88dd9350e60d0e99c1e88549110d8da097f8b16b3251800347f0f193e88814f83d0cd9e4b2aeb40bf9d547c85592ea202c6e7ba9a24e12064ab4cad187bfcfe19d7d", @generic="1738690d2822fd6f6b0eaa71e2ecb7f3c64955115033986aa9affb4541ec31ca34fd9e996af726a47d1ef4c0a066d9a28563ba1f25cfec452fa4b978514a13a1ecfa1c1cf42060e467162aeab95dc91877e4ebf3e37041adb1b7f07ac28970c4b8abb31e60047d0d60c27177b25facbd0f0210f2c4ba0f5ae84430bb787b01bc871bcbc66f81d1f59836e8430e1e91920140d000efabb87180becfd756bbd1508ac3e017b92e8c9c8333c722324505a25d677b2e19cb5ca1f8f63a2bb1f36332b237569cb491c647bb1c4e3d07a545cdd02ca33d480becf671a20f67e873c5253466f90c3b26c07a5240a46d"]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x240040d1}, 0x4008010) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)='\xff\xff', &(0x7f00000004c0)='\xff\xff', 0x8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, 0x0) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x20}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK={0x14, 0xfe, "c411987f3931407df69284709456a225"}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x84) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x82}, 0x40000) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000bc0)) syz_socket_connect_nvme_tcp() ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000d80)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x401, 0x8c}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r2) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x264c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5c0c0}, 0x4008081) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000001380)={0x1}) syz_open_dev$usbfs(&(0x7f0000003c80), 0x10, 0x4080) 1m17.380257355s ago: executing program 2 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1a8}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1m17.200644332s ago: executing program 2 (id=388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) read$fb(r1, &(0x7f0000000300)=""/134, 0x86) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'ni_at_a2150\x00', [0x100, 0x7ffffffc, 0x2, 0xc, 0xe, 0x5, 0x4, 0x3, 0x3, 0x0, 0x2, 0x1, 0x7, 0xfffffffe, 0x1, 0x3, 0x4, 0x9, 0x4, 0x7fffffff, 0x89, 0x543, 0x0, 0x9, 0xffffffff, 0xf39e, 0x3, 0x7, 0xa6b5, 0x0, 0x10]}) (async) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="77c1", 0x2}], 0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.731417519s ago: executing program 2 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110051"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m16.727391379s ago: executing program 2 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000300)={0x40, 0x4, 0xe910, 0x1, 0xb3e}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000002c0)=0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x64, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x800}, @TCA_CAKE_RTT={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xff}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x8000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180005813a00000000000000000000a67919d800000000009500005b42c40555c1c7c53c000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r11, 0x4140aecd, &(0x7f0000000140)={{0xdddd0000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x44, 0xfa, 0x5}, {0xf000, 0x1000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0x3, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x41000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x2}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0x3, 0x0, 0xcd, 0x5, 0x8, 0xf, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x7f}, {0x100000, 0x5}, {0xffff1000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xf800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) syz_open_dev$hidraw(&(0x7f0000000000), 0x4000000000000, 0x103ec1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fc000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m16.450399844s ago: executing program 2 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000000a1000008d6893f34f9e38ebbebf4ff93a1bdbedcf50a0095e1e632db62984fc17756f8688dec166427f458f5b320d2c8e9eb5fa15b0f817a12d9f6a5027ecf218e69236616348ac3500ce3133063dca80cfe1adc7ae2e84c1cd77eec77cbbe8ddfdb5558bdc24dda2a7450aed16820994a98ace8df418f7234d73ca4d86842f986e74547470f0da834b5d96e428a2a4a3b5854bfb520a5e3563d8afcb93d324129dbf21cb95cc45c73aae961e5f1378ab89516b49e6c853fa7ce028e224d21ef3", @ANYRES32=r2, @ANYBLOB="1c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="08000400ff0f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m16.374017708s ago: executing program 32 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000000a1000008d6893f34f9e38ebbebf4ff93a1bdbedcf50a0095e1e632db62984fc17756f8688dec166427f458f5b320d2c8e9eb5fa15b0f817a12d9f6a5027ecf218e69236616348ac3500ce3133063dca80cfe1adc7ae2e84c1cd77eec77cbbe8ddfdb5558bdc24dda2a7450aed16820994a98ace8df418f7234d73ca4d86842f986e74547470f0da834b5d96e428a2a4a3b5854bfb520a5e3563d8afcb93d324129dbf21cb95cc45c73aae961e5f1378ab89516b49e6c853fa7ce028e224d21ef3", @ANYRES32=r2, @ANYBLOB="1c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="08000400ff0f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 35.549136927s ago: executing program 3 (id=798): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x2d, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081bc13bfa0fcc16934abdaf49106edbb04feaee31"}, &(0x7f0000000140)=0x35) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000820907"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000005c0)=@deltaction={0x154, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4}]}, 0x154}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x800}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(r4, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file1', [{0x20, 'nl80211\x00'}, {0x20, 'mpls\x00'}, {0x20, '.&'}, {0x20, 'gtp\x00'}, {0x20, 'nl80211\x00'}, {0x20, 'skbmod\x00'}, {0x20, 'gtp\x00'}, {0x20, 'lo\x00'}, {0x20, 'fq\x00'}], 0xa, "2c1ed3324c3d1479fa710f321fb123c0dc23d7e1e315b9469da2e8b89dff3d96012792acbe8bf8f2c741c2f2735ba89a04797f98156e92f741b446913d48b1cc8c673108304ef558c7aef8f75d6e92178944c15ece24e9878bfde9930ad012257b3c0e1345650a64cf143fe8d24a6b4a6b62e3"}, 0xb3) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffff2a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x1010, 0x5181e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0xcf49, 0x9, 0xffff, 0x9e02, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) syz_open_pts(r10, 0x200) 34.637533614s ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000140)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0xffffffff, 0x4, 0x12, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x46243, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r3}}]}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4e6202, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4880) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f0000000000)=0x5f) 34.548110299s ago: executing program 3 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "6cb09792b09b4e5b", "ed8dad7fff9479814f61d59fbeed18dc", "966c08c4", "1eb822f1b938a03d"}, 0x28) 34.460492562s ago: executing program 3 (id=820): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x800, 0xff, 0x80, 0x7}, {0x4, 0x9, 0x56, 0x1}, {0x400, 0x82, 0x1, 0x8000}, {0x6, 0x4, 0x1, 0x7}, {0x8, 0x4, 0x80, 0x7fff}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfe, [], [{{0x9, 0x5, 0x12, 0x3, 0x8, 0x29, 0x6, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="93433d22773cd0e65869e27f75855a29153a0d66cd4920c46703733b9272436a13eca9a36d6f4b292299054129383b4f7d9c7344ac40374f798ccc81248437bf67d1ca6dfebbeb3151f41553c3e1c593c72dd358df6d0448bb9ac81cb099068702071ca703223efc7504401b0362e67e57561b880fd342e5244cc4d576204298fceb0e3fbe69744fffc3b69e67aa789c1fc0d718026b4582f70c5041ae105a3e35416219fdf20b2bddb6a63443a6ace300"/192, @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00+'], 0x34}}, 0xc088) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0x81, @vifc_lcl_addr=@local, @multicast2}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) close_range(r5, 0xffffffffffffffff, 0x0) 33.199769814s ago: executing program 3 (id=837): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r0, 0x0, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xd) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000000140)) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0x3, @empty, 0x3}, {0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1, {[0x9, 0x2, 0x2, 0x400, 0x8, 0x1000, 0x0, 0x8]}}, 0x5c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000240)={{0x2, 0x3, 0x1, 0x6, '\x00', 0x1}, 0x1, 0x4, 0x8, r0, 0x5, 0x9, 'syz1\x00', &(0x7f0000000200)=['([\x00', '\x00', '[\x00', '!\x00', '/m\x00'], 0xb}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, 0xffffffffffffffff}, 0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x248000, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0xef, 0x7}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1c0041, 0x0) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000480)=0x1) sendmsg$rds(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/115, 0x73}, {&(0x7f0000000700)=""/151, 0x97}], 0x4, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x93c, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/118, 0x76}, &(0x7f0000000880)}}], 0x48, 0x10}, 0x20000800) close(r5) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, &(0x7f0000000c40)={&(0x7f0000000c00)=[{&(0x7f0000000980)="a0eba34ad45b7e63f19e27876323f91e6f97ac91c6b85797d70bb3f37889d688775c86396adf37e344a0409f570e904d48bf2d99f4a7a6c9c3d0d980957b2d9d04681dccb497bda3b238e7625c2a77063e373efbb65d7b2ad407f487bccf357d90b52e9acc79abc79b40b8ce1b1db93ea12f8ae081f359f8c8e98fec5e3cdd2cee65966e6c9865a1265afd5374102c96bb06821194ac5552df2a57bb6d86d83f96d77621c22b", 0xa6}, {&(0x7f0000000a40)="0a7a4ef2f9c29dc7e1c641fedda0041ebf6f4df7398530ddf797e2b156ff540a0145529116c49ae214794c0f6fa783b8c2620ae185abaf17aae435b5ebbf6d207a1343613fb8a31f6f0de75e5dfd2ebbe6a1a1eec415862677b4e368da45693a8ccf5c849219ca9bc0ceda00f1bfe1f8317aa88a610c7c89c238877682b500e69e3eb6eeb61ddf682aca53d3e25fef7fccde2baecd9fddc9b2b712113fbfacdc21d2d144486e8d27d0b12170b1d6e7d6c83124ec6acf7956cb969a1903b53b80d0367acc2f5fb9c2e853d0d244942a24113b86502b", 0xd5}, {&(0x7f0000000b40)="49940d2d451d0490d4a63769d6f9d5a0df238f0bc928d2313dfe2f9294ee9b8b8cbf2423e5e1bea2b7a894ef39d14c68662c0048acd32928dcb904aae59cd05b9c9a6b7c1c24fbe21200a5d5a999e7f32ecea0f3273cdc5d2b8ff432b0752e9002b0a800d91e614c8f84efe6db0d5b416b396171f8c669e73462f25bcf3db4cdb69cedb4c73c2b26655683efd9f37118326363e460ac56099b", 0x99}], 0x3, 0x6, 0x0, 0x26, 0x101, 0x81, 0x3, 0x10}) r7 = open(&(0x7f0000000cc0)='./file0\x00', 0x22100, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x10, &(0x7f0000000d00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x45}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000d80)='GPL\x00', 0x7f, 0x18, &(0x7f0000000dc0)=""/24, 0x0, 0x10, '\x00', 0x0, @lirc_mode2, r5, 0x8, &(0x7f0000000e00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0xd, 0xc, 0x7}, 0x10, 0x0, r2, 0x6, &(0x7f0000000e80)=[r4, r3], &(0x7f0000000ec0)=[{0x1, 0x2, 0x1, 0xb}, {0x3, 0x4, 0x4, 0xc}, {0x0, 0x1, 0xe, 0xb}, {0x1, 0x1, 0x1, 0xc}, {0x1, 0x2, 0xc}, {0x3, 0x4, 0x9, 0xc}], 0x10, 0x5}, 0x94) r9 = dup3(r1, r6, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001000)={r7, r8, 0x4, r9}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000001040)=0x2, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00'}, 0x18) open_by_handle_at(r7, &(0x7f0000001100)=@orangefs={0x14, 0x1, {"a96935db8875677019a804612bf9a035", 0xffffc805}}, 0x8000) openat$cgroup_type(r3, &(0x7f0000001140), 0x2, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001180)={'erspan0\x00'}) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000011c0)=""/255) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006) 32.967960698s ago: executing program 3 (id=847): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x41, "8ff5463848d6fa4576d76c228df30d74e272dfa14b7895b7078b194ddd09c6618a330fb66b257960b9d42e63006f1f325f8e5afc5f52c9bab1371099b172bcfe88"}, &(0x7f0000000200)=0x65) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x10b001, 0x0) r3 = getpgid(0x0) fcntl$setown(r2, 0x8, r3) 32.886154153s ago: executing program 33 (id=847): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x41, "8ff5463848d6fa4576d76c228df30d74e272dfa14b7895b7078b194ddd09c6618a330fb66b257960b9d42e63006f1f325f8e5afc5f52c9bab1371099b172bcfe88"}, &(0x7f0000000200)=0x65) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x10b001, 0x0) r3 = getpgid(0x0) fcntl$setown(r2, 0x8, r3) 10.009224447s ago: executing program 4 (id=1128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20) ioprio_set$pid(0x2, 0x0, 0x4007) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)=0x1) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r5, 0x0, 0xe, 0x1000f1) sendfile(r5, r5, 0x0, 0x800000a1e) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x402800, 0x0) 9.886402899s ago: executing program 4 (id=1129): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f000001f8c0)='/dev/comedi2\x00', 0x2000, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000380)) exit(0xf) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r2, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'fl512\x00', [0x3c4, 0x7f5, 0x2, 0xa, 0x7, 0x0, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x3, 0x400, 0x2, 0x3, 0x80, 0xffffffa7, 0x7, 0xe0e9, 0x1, 0x3ff, 0x9, 0x200, 0x9, 0xaa14, 0x5, 0x4, 0x0, 0x7, 0xf58, 0x80000001]}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 8.900511192s ago: executing program 4 (id=1132): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x30, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x1c, 0xca, 0x0, 0x1, [@nested={0x15, 0x1, 0x0, 0x1, [@generic="e0c364b6f371cad21b0bfd2f17736c0678"]}]}]}, 0x30}}, 0x0) (async) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r2, &(0x7f0000000580)='bic', 0x28940, &(0x7f0000000100)={@align=0x10, {0x5b3, 0x380, 0x8, 0x254d}}, 0x1, &(0x7f0000000040)={@_ha_fsid}, &(0x7f00000001c0)=0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x15, 0x34, @random="4c605ebb508e2c058376b02fe57a8437e1"}, @NL80211_ATTR_IE={0x1e8, 0x2a, [@ibss={0x6, 0x2, 0x4}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0xf1, @device_a, 0x101, @value=@device_b, 0xfffffffd, 0x1, @device_b, 0xfffffffb}}, @tim={0x5, 0x5a, {0x3a, 0x11, 0x9, "5e4cb728d55334579f74bb8cc78cbf45042d38923c919fd88f94548d240a3d900ed4280944a98ffa6247c841927cebca239081d861c9e7a84cf04393e5858e6fbb8ac349aded6ae89cb02facdfb86ddd87230d577b1c3f"}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xbf, {0x7f, 0xf4, 0x5, "4fa27f21113673a3f902409b4b1085d7f7e762b4ef39f62d46c3878edd7959f34dc2ad67dabd3167897b343c3f9f6e88961f9e48d81389f670d0a4cc3149f51487df56a4d448f5a13ec6daeae760f1ca2b08e8491e77de3f1bb658add7ee0c912b4cea42771db0d31e1a56cbc6b42c8c2edc0e632f7beb4c370aebce865ce11f82b97d4d77533b22e56e52d7e12a661b3c0d65fb047e8d922b7d1c84580d56cd9af0e285a8a3cfdd686c331a37884c1b8664bf0cb6c0328a41d1ba0f"}}, @tim={0x5, 0x78, {0x6, 0x6f, 0x8, "f36bcbcb6c50ad67811d17d09a4edb08b6dcfc890ca9fbb8bff4a606f62c59a7cf424506852be3cfd346523511b8b2b58f6bdfb26e4625f6bf955acff6cbb0b748322d2efe932a4874da5510e6fe6b63ba518805f0dffe9c1b444a8e27179cbeef1824368eb90d7e20065a2bde75e7d5911032e805"}}, @dsss={0x3, 0x1, 0xa5}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x20, 0x2}}, @supported_rates={0x1, 0x5, [{0x9, 0x1}, {0x18}, {0x4}, {0x1b}, {0x60}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8.030584778s ago: executing program 4 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fanotify_mark(r2, 0x1, 0x5000003a, r3, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000004fc0)={0x2020}, 0x2020) 7.15974866s ago: executing program 4 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1], 0xc4}}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c00990009000000320000000800250001010000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0xc0f85403, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000007be0f28d968e9676600008000300", @ANYRES32=r11, @ANYBLOB="14000400726f73653000000000000000000000000800050002000000050053"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000007c0)={&(0x7f0000000440), 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fcdbdf257f00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24014}, 0x4020010) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bddbdf250a0000000c0003800800010001800000000000"], 0x20}}, 0x20048880) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="007b1500", @ANYRES16=r13, @ANYBLOB="00012bbd7000ffdbdf2508000000080004000500000008000500820000000c000280060002004e2100000c000280080007000400000008000500070000001c000280080008000e000000080003000000000008000800ddef00006800038008000500e00000011400020076657468315f6d616376746170000000050008000000000008000500ac1e0001140002006261746164763000000000000000000005000800060000001400060000000000000000000000000000000000060007004e200000040002800400038008000500c7050000"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x14) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r14 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) ioctl$HIDIOCGRAWINFO(r14, 0x80084803, &(0x7f0000000000)=""/157) 6.76618744s ago: executing program 4 (id=1145): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='@^\x00', 0x0) recvfrom(r1, 0x0, 0x0, 0x2020, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x29, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x78f, 0x40, 0x3, 0x9}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0xb, 0x4e22, 0xb, 0xa, 0xa0, 0x0, 0x32, r5, r6}, {0x8, 0x7, 0x0, 0x1, 0x875f, 0xfffffffffffffff2, 0xffffffff, 0x8}, {0x8, 0xa, 0x7, 0xff}, 0xf70, 0x6e6bbd, 0x0, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x3501, 0x1, 0x2, 0xc, 0x318dcc05, 0x8, 0xffffffff}}, 0xe8) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x14, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000c, @loopback, 0xfffff803}, 0x1c) 6.696827814s ago: executing program 34 (id=1145): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='@^\x00', 0x0) recvfrom(r1, 0x0, 0x0, 0x2020, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x29, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x78f, 0x40, 0x3, 0x9}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0xb, 0x4e22, 0xb, 0xa, 0xa0, 0x0, 0x32, r5, r6}, {0x8, 0x7, 0x0, 0x1, 0x875f, 0xfffffffffffffff2, 0xffffffff, 0x8}, {0x8, 0xa, 0x7, 0xff}, 0xf70, 0x6e6bbd, 0x0, 0x1, 0x1, 0x1}, {{@in6=@private1, 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x3501, 0x1, 0x2, 0xc, 0x318dcc05, 0x8, 0xffffffff}}, 0xe8) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x14, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000c, @loopback, 0xfffff803}, 0x1c) 2.169028066s ago: executing program 5 (id=1239): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x2000}], 0x1, 0x1ff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRESOCT=r0], 0x4c}}, 0x0) 1.585110477s ago: executing program 5 (id=1247): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) pwritev(r2, &(0x7f0000000900)=[{&(0x7f0000000640)="7cf4b7fd94db3acf0036dd34a44d5f69c3acdbf16a1b202f0446fc63b7d9771dca3bd1f8e6e7556b344b4551f06c5c88b436db4fd03c1bbe8cf1ed1e0f2526fc17e43906685ef392b6a4c97f8aec0df878be276604bc127522ec9912ddb65ea01f11f4f6a5d1c763e1b5cf519eb42892d108bac77aa19bd761da16067a24e88248a8e811d852fe3f7ca4022913da1404901eea2c19bc889c051fa9a097c5726334a41e2be7b815d02f92beeb656555abced1d7fa6aaad8b18d4acb30094a80a0dc797dda0b4144e6cc964293d17184367a7aacf88942cb5f906d0a9c48795368d6a7b60d6ed9101e6708ba64dff05c2bdaf0634bce6572510df5dfe0cea02b", 0xff}, {&(0x7f0000000740)="b91c0fd021c47ac67e2081f4c1", 0xd}, {&(0x7f0000000780)="aff5b98906f7ef0e74aecd422a492bf8e6e4f9b4abbb2f1f635e3434264510aa9ad248459604033a9559ead6563f2ceccde4fc71c9e3faabf10e2885da666f60bb1bc2b8ce92b3eeba6d46c9361e643400cdef9d43db3fc60eab7a1d8ba1b70a5d726936216563690a7b60bb1f5b16b04954e55e7acfdaebdf25d46e838396413457307c04131262f9ca06792e00228757a092b9f0a51c77434204d6926cf82c7efc1606891b1abe031cc3708e687fb94240cd9e2d6758bf7534", 0xba}, {&(0x7f0000000840)="0c9a7aec08cf4e91c6742fe8bed751f60f6c0ddeb7410a76077ba73325dd62779768bb41f7c1e823a1c058b52a19b536233b182e7ec54e1bcd3137c5e39e6c75ed3aa6e0fc0fa286218dbae400b1cff76ee98ad1d1dfa32b7fc5e7a2db727b091fb29b870b54b7cc701cc1d4e603233701b745", 0x73}, {&(0x7f00000008c0)="ef21bfd16962537ff3d82229553d9b3b286aef23a80dcb16ba84575b265e50f6fc87cec990235ebba633faca3f256ae80fcd48223b2ac684f1", 0x39}], 0x5, 0x1ff, 0x1) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x852c}], 0x1, &(0x7f0000000380)={r5, r6+10000000}, &(0x7f0000000440)={[0x7]}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.529660328s ago: executing program 0 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x1, 0x0, 0x8}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt(r3, 0x111, 0x5, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x44) 1.528168441s ago: executing program 5 (id=1251): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x8000000000000005}, 0x60) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x105, 0x1fa, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r2}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x4844) 1.524119636s ago: executing program 5 (id=1252): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000002e40)={0x16, 0x98, 0xfa00, {&(0x7f0000002d80), 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0xfbb7, 0x10000, {"f313f7e6b224d0c7eeef93f4c1eb1d7d"}, 0x4, 0x893, 0x2f}}}, 0xa0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket(0x2, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) sendto$packet(r1, &(0x7f0000000640)="0596", 0x2, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="288201000000000014003500627269646765300000000000000012c20000"], 0x34}}, 0x10) 1.523543449s ago: executing program 0 (id=1253): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x884, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000180)={{r2, r3+10000000}, {0x0, 0x3938700}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0xac) 1.45909358s ago: executing program 0 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000130a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}, 0x1, 0x0, 0x0, 0x40044}, 0x40840) 1.45699344s ago: executing program 0 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x1}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000140)=0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000840)=0xe8) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$unix(r3, &(0x7f0000000900)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="8b7e4535fb4ea3e39bdf8b220d6734380d3263a4531cd5335fdf25e4513e90a8e3fa55c3931c4cc804445d9687855bfe064acab0bec0ecc2789d86f3084a868c821618b8f3917e7a7cd78be426a455b45959dba819e149663a3bc6e85baa7cec9f75681298600bf9ac7db8403b98fd6b2504be4746ee7fdf99e16c3dc7458329341b1219de00507b17ec69f4cca255af9c8d79577a6874730822038bc440cd0f1bb5ae1cac649b85094542317610f7e9fea456ef27099844d8e2273ccdfbbcc7eba1e9b90cacae17985a", 0xca}, {&(0x7f0000000940)="900b84902cc242f48e39da27e2c3e75624a6ccdb92fb80c2a1eddad568d3399f8ff38ceda5082b463d3d73b1976b590aa0b4b5c603099748b96fe871728893820768e410543dac20f9b984b35cea312b1c110d58d250604aa91efb66e0abb617aa640f0ab9e17126eca42e7705f35f3a0b84cca186a4a66046f16819b7b5f899a84632ee4b757f0caa83", 0x8a}, {&(0x7f00000003c0)="6b58d80c0300382a420aef18dbf26f1e8df48beff14d57081a933a7bc866d02c28000519c521614382236735d6f98b65a64ec72ef4cf596c1dbca55b795b1cb7d4e5c5d141c04efca4053fd54bc98d47b3de5bb6a6e25f26c078c89f2dcbf61361a05ca0103ff26ecbb33d5643ec4c874db6de8d6847d18dd78d6ae5d8e503045be654a56dae9a4370139e4fd6e859b5f11dd8adb7d4937b24d20c173c9483b31f795e35acf4c24b22e79c291179a3f468b7f167ca590f867a73dca4b3", 0xbd}, {&(0x7f0000000480)="789269d9f0513cec5b2047270c727a443c80071fde8bc5cd7818f7be9ea44a611c40c46f71ba5052e8f19b5ecf66a3230ef83f5d4d1b16a86d1af78321181cf758d848c572d2b0348071ceaf8d1fd9ede078c00c4511329bce9626c54c3ad19502df331c98d548acccaeb08644cdab2ec2b0856018cc6b2bf341e353f84e971159af984dbb76e67125104d24d5f633a79cfa891b859a192aa5bde7", 0x9b}, {&(0x7f0000000540)="0454300f89d8a24557c83859d8d499da49ae539c385a0b3644b0b512a1bd36dcceb8c514fc61b69c63e4a7b68eba61f0d16cf92889a9550a3c139beb7c13c2de0a5c40b55da6bcd3894198d037a79c45dac5e4958a561faa99193a4af0356dea5ccb3036b3ad2fb6faf84087208abb4b2f32880222755e817efe2e50af800233543e2b93a4", 0x85}, {&(0x7f0000000600)="1ec04e3bb9e499740d1d9bbbd0b7fb5e5f587d2f2fd9d180fd0e7c1899f312141f1f40b6d3666b928ba58adae0b0a98327eee0a16b8833417bc41e0b95d1199ee483fb194045c1b31b7d4b1a8a972ba38e2a1df39a55b5bbd29f8dfdbb0a2dba5310d25487d4bc11064c09f257df7fa9c25bf131bad11f37b39e0074078d1cbdc55b3495d6c27aaba39249bbfe7b26fa4e725b72d4a03b690672af58b6fe7b6c7ac6d41d4878b7c14174078c42f0310f0981a14d1107167da8", 0xb9}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r1, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r3, r10, r2, r0, r0, r3, r2]}}], 0x70, 0x65}}], 0x1, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r12, r12, 0x0, 0x2000fb) 1.229214852s ago: executing program 5 (id=1258): munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x2, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x6) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) 1.228423574s ago: executing program 5 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000040)=0x3, 0x1b) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x6, 0x0, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8010, 0x10, 0x9, 0xae}}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001c1ead022a000000000000000a000000", @ANYRES32=r3, @ANYBLOB="0200080b0a000200aaaaaaaaaabb0000080004000500000014000100000000000000000000000000000000010c000e800500010080000000"], 0x50}}, 0x10) 579.137675ms ago: executing program 0 (id=1272): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="2400c22a1e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050000000000"], 0x24}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = userfaultfd(0x80001) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x303000, 0x800, 0x0, 0x4}, 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 508.550627ms ago: executing program 6 (id=1275): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) madvise(&(0x7f000041a000/0x1000)=nil, 0x1000, 0x12) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 450.259304ms ago: executing program 1 (id=1276): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) (async) getpeername$packet(r1, 0x0, &(0x7f00000000c0)) (async) unshare(0xa000400) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x82}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x10001, 0x7fff, 0xa, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000340)="5e424403e7598ea98506bb02fb79ac071427a3771053e2928ff731160ec2434559e36fe031a45813253a3ad443a9115faaa2ee66ab2c353050f48e08bc61870d39f505526b37f08341c8af01e79c5ed4c009dc1bbb8f74cb1f64cd75cedbcba0c8fc36d64b4e710e859b737240cc507b4f7b5a99cf94a0f02d3165ca49e8b4fa509da457cf186549b59c35fcf5088f4077e6692ed9dc11fea06c8a30f58acf5dec10c3bcc0f86598b7fcd8dd84c6ebd31e3f4fe1472ef55aa8a555c8d64a65aa2b83cf1316b96d51f46d56b84c1f7ee73196db246de7b01650b7", 0x1, r10}, 0x38) (async) openat$cgroup_ro(r9, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) 449.822952ms ago: executing program 1 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x3b4, 0x3e, 0x200, 0x70bd2c, 0x25dfdbfb, {0xd}, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@private0}, @generic="052e54153ad5c923f22e50681e761e02918c6c3d002e1453415edc3aa5987669be9051b40a4764ff881230e782c17b49dc4bc176c929c73c43b35eccaafea7b6671293d8d58b25664802d6eb3ee9d418250db81cc071fbee0a28bffca1687f0e5984c0951aa86df8497e54b2239a039506c898f0fe6731946b36bfd31bcb2cb7779c637fefc4e7e3c65eebeac94f2871b7a557b9a6a9799a26e6321456c75d15c0b31964091c83b5d85c925af4e4b8102c617598a82d04a457b10e9698d424edcf50b15cf8d72a1f79b11baa124a40b8e3a737cdc72cd4f74f049b00bf96c4fe858f9c92296e653e193860870928c35fec16494310b61f858503", @nested={0x28e, 0x7a, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="a673b93565c288243c0f7ec7b27cea1e94a3862367ad5f9481c7507a13ba01147908f435cfe669b78f740523eaef3a0567b8574585e3eb098aad98d4b4da5fd7693234cad99b1086", @generic="a90ce0846da6276dd668f5292e3921197e46389e4867de630106537df32f8d223ce48a43bc92936a89e8eb7875076916c97986e1e36bc8fa9b80e50c84586973d057c66e1f1ef93d73c9a62b628868f75daca1e81807b443b78515f8af3b2499da36966c04fec166d06152c80828ca7623969ed23b5f70005a6554910699a4bce84551a282cd3a2ed0104fcdd5f9a9afb46dc8673d0a14af52bcd2376a9628fa2b0f7dae7a08526f76c7ee4d8ae20ffb60172be6d24a09f4afd6f9f00395d3c9eec0eff7ce1f7c36f4d99f2345898ef400d7d26bc2d57358e977950b7869a5870d7a0dc1", @nested={0x4, 0x2}, @generic="933db3ce998c5d70038fdcece9efb028fa5b618533f8112e88dd9350e60d0e99c1e88549110d8da097f8b16b3251800347f0f193e88814f83d0cd9e4b2aeb40bf9d547c85592ea202c6e7ba9a24e12064ab4cad187bfcfe19d7d", @generic="1738690d2822fd6f6b0eaa71e2ecb7f3c64955115033986aa9affb4541ec31ca34fd9e996af726a47d1ef4c0a066d9a28563ba1f25cfec452fa4b978514a13a1ecfa1c1cf42060e467162aeab95dc91877e4ebf3e37041adb1b7f07ac28970c4b8abb31e60047d0d60c27177b25facbd0f0210f2c4ba0f5ae84430bb787b01bc871bcbc66f81d1f59836e8430e1e91920140d000efabb87180becfd756bbd1508ac3e017b92e8c9c8333c722324505a25d677b2e19cb5ca1f8f63a2bb1f36332b237569cb491c647bb1c4e3d07a545cdd02ca33d480becf671a20f67e873c5253466f90c3b26c07a5240a46d"]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x240040d1}, 0x4008010) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)='\xff\xff', &(0x7f00000004c0)='\xff\xff', 0x8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x16}, @void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x20}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK={0x14, 0xfe, "c411987f3931407df69284709456a225"}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x84) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x82}, 0x40000) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000bc0)) syz_socket_connect_nvme_tcp() ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000d80)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x401, 0x8c}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r2) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5c0c0}, 0x4008081) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000001380)={0x1}) syz_open_dev$usbfs(&(0x7f0000003c80), 0x10, 0x4080) 389.105751ms ago: executing program 1 (id=1278): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20", @ANYBLOB="8e2a335ce90c6e5a63e8c4f62c90f8e918ef206456603fcf51498a17be9746b2a1592c6696b71afbd81ea7bfa188531e33cf94fabe7ccb"], 0x4b) 385.77743ms ago: executing program 0 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) 385.590339ms ago: executing program 6 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) close(0x3) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000040)={[{@quota}, {@huge_advise}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65, 0x65, 0x78, 0x78]}}, {@usrquota_inode_hardlimit}, {@nr_blocks={'nr_blocks', 0x3d, [0x38]}}, {@huge_never}, {@huge_within_size}], [{@audit}]}) 310.304732ms ago: executing program 1 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000800000000800000001ffffff00000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\x00\x00\x00\x00'], 0x50) 309.041602ms ago: executing program 1 (id=1282): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0xdee, 0xc000, 0x2, 0xa0002f5}) (rerun: 64) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1001, 0xd, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) r1 = getpid() (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) (async) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) (async) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(r2, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x101002, 0x1d3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) (async, rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getpeername(r4, 0x0, &(0x7f00000003c0)) r5 = syz_open_pts(r3, 0x80) dup3(r5, r3, 0x80000) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266757491a2", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) close_range(r6, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/pids.max\x00', 0x226040, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)) (rerun: 64) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 209.392585ms ago: executing program 6 (id=1283): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) brk(0x200000ffc000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async) r3 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r3, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/17, 0x11}], 0x1, 0x80000000, 0x4) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], r4, 0x0, '\x00', 0x0, 0x1}) (async) r5 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='context', &(0x7f0000000080)='ramfs\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x500, 0x0, &(0x7f00000001c0), &(0x7f00000001c0)=[0x5, 0x1], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0], &(0x7f00000001c0), 0x0, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000b0000003f0000000900000008100100", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000000000000050000000132024202ede4d75b8e4f6d20e8b5080000007cebb7b8ae776913", @ANYRES32=r7, @ANYBLOB], 0x50) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffcf, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 139.002163ms ago: executing program 6 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0xe369fd4a4bb08517, 0x70bd2c, 0x6, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40001) close(r2) 70.276029ms ago: executing program 6 (id=1285): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="340000001900150030bd7000fddbdf250a0000000202000000000000180009800c00", @ANYRES32], 0x34}], 0x1}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0xf211, 0x1, 0x7fff, 0x5}, &(0x7f00000000c0)=0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10000000020200001c0012800b726964676500000c000280080003000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 242.379µs ago: executing program 6 (id=1286): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0xffff, 0xb}, {0x2, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff0}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}]}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x5c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000040)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x5) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100e8d81c00000000000000000200000a2c0000000b0a01040000000000000000260000070c00104000000000e9ffff000c000b4000000000000000001400000011000100b9fb368f76b6f4560600000a"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x140040c5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0x560c89bb) r9 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r6) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000005c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r9, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4880}, 0x40011) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r5, 0x0, r12, 0x0, 0x8000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_POLICE={0x5c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x3, 0x800, 0x6d4, {0x7, 0x1, 0x8, 0x7, 0x8, 0x8}, {0x5, 0x0, 0x9, 0x0, 0xc, 0x6}, 0x4, 0x3, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x90}}, 0x14) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 1 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) kernel console output (not intermixed with test programs): 80211: failed to load regulatory.db [ 86.830635][ T7425] netlink: 56 bytes leftover after parsing attributes in process `syz.1.451'. [ 86.955482][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 87.105323][ T7436] lo speed is unknown, defaulting to 1000 [ 87.107626][ T7436] lo speed is unknown, defaulting to 1000 [ 87.113001][ T7436] lo speed is unknown, defaulting to 1000 [ 87.116095][ T7436] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 87.120788][ T7436] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 87.129575][ T7436] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 87.139133][ T7436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.145237][ T7436] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.177492][ T7436] lo speed is unknown, defaulting to 1000 [ 87.182082][ T7436] lo speed is unknown, defaulting to 1000 [ 87.185838][ T7436] lo speed is unknown, defaulting to 1000 [ 87.188359][ T7436] lo speed is unknown, defaulting to 1000 [ 87.262782][ T5747] Bluetooth: hci1: command tx timeout [ 87.267716][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'. [ 87.271915][ T7454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.461'. [ 87.426519][ T7477] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 87.526566][ T7479] random: crng reseeded on system resumption [ 87.642425][ T7487] netlink: 80 bytes leftover after parsing attributes in process `syz.4.467'. [ 87.655776][ T7489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.471'. [ 87.711166][ T7495] netlink: 56 bytes leftover after parsing attributes in process `syz.1.472'. [ 87.814179][ T7507] loop4: detected capacity change from 0 to 7 [ 87.817234][ T7507] buffer_io_error: 5 callbacks suppressed [ 87.817244][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.822105][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.825669][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.828311][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.830828][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.833650][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.837153][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.839702][ T7507] ldm_validate_partition_table(): Disk read failed. [ 87.841912][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.845867][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.848553][ T7507] Buffer I/O error on dev loop4, logical block 0, async page read [ 87.851081][ T7507] Dev loop4: unable to read RDB block 0 [ 87.853236][ T7507] loop4: unable to read partition table [ 87.855160][ T7507] loop4: partition table beyond EOD, truncated [ 87.859854][ T7507] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 88.006303][ T7534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.483'. [ 88.012205][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 88.012216][ T40] audit: type=1400 audit(1777295218.259:480): avc: denied { accept } for pid=7535 comm="syz.1.484" path="/116/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.012405][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 88.024691][ T7536] openvswitch: netlink: Flow actions attr not present in new flow. [ 88.068036][ T40] audit: type=1400 audit(1777295218.319:481): avc: denied { create } for pid=7539 comm="syz.3.486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.075412][ T40] audit: type=1400 audit(1777295218.329:482): avc: denied { read write } for pid=7539 comm="syz.3.486" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.082537][ T40] audit: type=1400 audit(1777295218.329:483): avc: denied { open } for pid=7539 comm="syz.3.486" path="/116/file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.099280][ T7544] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 88.103727][ T7544] bond2 (unregistering): Released all slaves [ 88.146293][ T40] audit: type=1400 audit(1777295218.399:484): avc: denied { unlink } for pid=5740 comm="syz-executor" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.246410][ T40] audit: type=1400 audit(1777295218.499:485): avc: denied { bind } for pid=7554 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.252933][ T40] audit: type=1400 audit(1777295218.499:486): avc: denied { read } for pid=7554 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.302776][ T5838] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 88.467706][ T5838] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.472773][ T5838] usb 6-1: config 0 has no interface number 0 [ 88.475588][ T5838] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.479789][ T5838] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 88.484266][ T5838] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.488771][ T5838] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 88.493207][ T5838] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 88.497309][ T5838] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.500816][ T7568] nbd: must specify at least one socket [ 88.502462][ T5838] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 88.502482][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.514337][ T5838] usb 6-1: config 0 descriptor?? [ 88.517583][ T7542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.527139][ T7542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.535767][ T5838] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 88.572170][ T40] audit: type=1400 audit(1777295218.819:487): avc: denied { write } for pid=7574 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.786937][ T7598] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 88.846808][ T7602] netlink: 'syz.3.508': attribute type 2 has an invalid length. [ 88.850024][ T7602] syzkaller1: entered promiscuous mode [ 88.851816][ T7602] syzkaller1: entered allmulticast mode [ 88.865166][ T7604] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.269879][ T40] audit: type=1400 audit(1777295219.519:488): avc: denied { read } for pid=7614 comm="syz.3.512" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 89.342870][ T5747] Bluetooth: hci1: command tx timeout [ 89.360836][ T40] audit: type=1400 audit(1777295219.609:489): avc: denied { attach_queue } for pid=7614 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.618796][ T7627] binfmt_misc: register: failed to install interpreter file ./file0 [ 89.630079][ T7627] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.641007][ T7627] ucma_write: process 32 (syz.4.515) changed security contexts after opening file descriptor, this is not allowed. [ 89.759842][ T1041] usb 6-1: USB disconnect, device number 3 [ 89.771271][ T1041] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 89.900159][ T7643] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 89.911025][ T7643] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 89.943780][ T7645] tmpfs: Group quota block hardlimit too large. [ 89.972462][ T7647] __nla_validate_parse: 9 callbacks suppressed [ 89.972477][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 89.978148][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 89.990220][ T106] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.990316][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 89.994625][ T106] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.998589][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 89.999882][ T106] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.007186][ T106] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.027105][ T7649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.525'. [ 90.172394][ T7667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 90.179278][ T7667] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 90.392357][ T7670] xt_hashlimit: size too large, truncated to 1048576 [ 90.392739][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.547201][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.551580][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.556887][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.561282][ T5828] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.566532][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.571669][ T5828] usb 6-1: config 0 descriptor?? [ 90.607730][ T7685] netlink: 'syz.3.534': attribute type 19 has an invalid length. [ 90.664935][ T7685] tipc: Enabling of bearer rejected, failed to enable media [ 90.676893][ T7685] gfs2: error -5 reading superblock [ 90.714840][ T7687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.535'. [ 90.779710][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 90.790677][ T7691] hsr_slave_1 (unregistering): left promiscuous mode [ 90.990533][ T5828] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.000809][ T7693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.026097][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 91.211305][ T7713] bond2: entered promiscuous mode [ 91.213130][ T7713] bond2: entered allmulticast mode [ 91.280015][ T7721] netlink: 56 bytes leftover after parsing attributes in process `syz.3.545'. [ 91.433232][ T5747] Bluetooth: hci1: command tx timeout [ 91.543278][ T7738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 91.750881][ T5838] usb 6-1: USB disconnect, device number 4 [ 91.854323][ T7742] syzkaller0: entered promiscuous mode [ 91.856879][ T7742] syzkaller0: entered allmulticast mode [ 92.009926][ T7746] vxcan0: tx address claim with dlc 0 [ 92.169518][ T7759] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.291409][ T7762] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.294555][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.299866][ T7762] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 92.305343][ T7764] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 92.313013][ T7763] iommufd_mock iommufd_mock3: Adding to iommu group 12 [ 92.453963][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.457812][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.461510][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.465100][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.469248][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.472219][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.483501][ T34] usb 6-1: config 0 descriptor?? [ 92.486158][ T7750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.814004][ T7779] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 92.891849][ T34] hid_parser_main: 5 callbacks suppressed [ 92.891861][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.896670][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.899057][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.901412][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.906258][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.908970][ T34] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 92.914590][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 93.035395][ T7793] vivid-000: ================= START STATUS ================= [ 93.038064][ T7793] vivid-000: Generate PTS: true [ 93.039803][ T7793] vivid-000: Generate SCR: true [ 93.042419][ T7793] tpg source WxH: 320x240 (Y'CbCr) [ 93.044184][ T7793] tpg field: 1 [ 93.045516][ T7793] tpg crop: (0,0)/320x240 [ 93.046889][ T7793] tpg compose: (0,0)/320x240 [ 93.048357][ T7793] tpg colorspace: 8 [ 93.049605][ T7793] tpg transfer function: 0/0 [ 93.051102][ T7793] tpg Y'CbCr encoding: 0/0 [ 93.052586][ T7793] tpg quantization: 0/0 [ 93.054417][ T7793] tpg RGB range: 0/2 [ 93.055682][ T7793] vivid-000: ================== END STATUS ================== [ 93.163423][ T5828] usb 6-1: USB disconnect, device number 5 [ 93.616238][ T7822] exFAT-fs (nbd0): unable to read boot sector [ 93.618369][ T7822] exFAT-fs (nbd0): failed to read boot sector [ 93.622120][ T7822] exFAT-fs (nbd0): failed to recognize exfat type [ 93.726691][ T7825] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 93.778478][ T7831] ip6gretap0: entered promiscuous mode [ 93.799151][ T7841] binder: 7839:7841 ioctl 4138ae84 200000000340 returned -22 [ 93.801207][ T7842] bridge1: entered promiscuous mode [ 93.834900][ T7846] 9p: Bad value for 'version' [ 93.979993][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 93.980005][ T40] audit: type=1400 audit(1777295224.229:501): avc: denied { connect } for pid=7858 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.069809][ T7867] ubi31: attaching mtd1 [ 94.075679][ T7867] ubi31: scanning is finished [ 94.077279][ T7867] ubi31: empty MTD device detected [ 94.079091][ T7867] ubi31 error: ubi_early_get_peb: no free eraseblocks [ 94.122192][ T40] audit: type=1400 audit(1777295224.369:502): avc: denied { mount } for pid=7866 comm="syz.3.590" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.129975][ T40] audit: type=1400 audit(1777295224.379:503): avc: denied { search } for pid=7866 comm="syz.3.590" name="/" dev="configfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.142465][ T7869] tipc: Cannot configure node identity twice [ 94.301886][ T7867] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 94.355472][ T7878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8210 sclass=netlink_route_socket pid=7878 comm=syz.4.594 [ 94.656704][ T40] audit: type=1400 audit(1777295224.909:504): avc: denied { remount } for pid=7890 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.658515][ T7894] comedi comedi3: dt2814: I/O base address or length out of range [ 94.708588][ T7893] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 94.713586][ T7893] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 94.717084][ T7893] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 94.721049][ T7893] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 94.735814][ T7893] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 94.741313][ T7893] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 94.744784][ T7893] kvm: requested 168457 ns i8254 timer period limited to 200000 ns [ 94.755913][ T7893] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 94.759389][ T7893] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 94.762893][ T7893] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 94.819551][ T7900] 9p: Bad value for 'version' [ 94.915847][ T7902] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 94.918114][ T7902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.923687][ T7902] vhci_hcd vhci_hcd.0: Device attached [ 94.927579][ T7904] vhci_hcd: connection closed [ 94.928687][ T46] vhci_hcd vhci_hcd.4: stop threads [ 94.932372][ T46] vhci_hcd vhci_hcd.4: release socket [ 94.935672][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 95.207399][ T7908] gfs2: not a GFS2 filesystem [ 95.253428][ T7915] __nla_validate_parse: 11 callbacks suppressed [ 95.253440][ T7915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.604'. [ 95.336207][ T40] audit: type=1400 audit(1777295225.589:505): avc: denied { connect } for pid=7926 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.380323][ T7931] netlink: 92 bytes leftover after parsing attributes in process `syz.1.608'. [ 95.389008][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 95.389441][ T7932] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 95.395417][ T7932] ALSA: mixer_oss: invalid index 1374389 [ 95.476146][ T40] audit: type=1400 audit(1777295225.729:506): avc: denied { map } for pid=7938 comm="syz.4.611" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.584508][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 95.590636][ T5747] Bluetooth: hci2: adv larger than maximum supported [ 95.590695][ T5747] Bluetooth: hci2: Malformed LE Event: 0x0d [ 95.602829][ T2327] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 95.774457][ T2327] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.777980][ T2327] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.780869][ T2327] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.783942][ T2327] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.788811][ T2327] usb 8-1: config 0 descriptor?? [ 95.793653][ T2327] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.796198][ T2327] dvb-usb: bulk message failed: -22 (3/0) [ 95.800530][ T2327] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.804005][ T2327] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.806369][ T2327] usb 8-1: media controller created [ 95.808705][ T2327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.813392][ T2327] dvb-usb: bulk message failed: -22 (6/0) [ 95.815381][ T2327] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.819714][ T2327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input12 [ 95.825908][ T2327] dvb-usb: schedule remote query interval to 150 msecs. [ 95.828944][ T2327] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.834272][ T40] audit: type=1400 audit(1777295226.079:507): avc: denied { read } for pid=5126 comm="acpid" name="event4" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.852806][ T40] audit: type=1400 audit(1777295226.079:508): avc: denied { open } for pid=5126 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2952 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.861027][ T40] audit: type=1400 audit(1777295226.079:509): avc: denied { ioctl } for pid=5126 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2952 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.948408][ T7958] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 95.951642][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.984516][ T2327] dvb-usb: bulk message failed: -22 (1/0) [ 95.988813][ T2327] dvb-usb: error while querying for an remote control event. [ 96.003255][ T34] usb 8-1: USB disconnect, device number 4 [ 96.026216][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 96.029501][ T7965] 9p: Bad value for 'version' [ 96.075659][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 96.480790][ T40] audit: type=1400 audit(1777295226.729:510): avc: denied { mounton } for pid=7982 comm="syz.1.618" path="/139/file0" dev="autofs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 96.500209][ T7985] cgroup: name respecified [ 96.591171][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 96.595638][ T8004] 9p: Bad value for 'version' [ 96.681260][ T8018] input: syz0 as /devices/virtual/input/input13 [ 96.785598][ T8034] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.067338][ T5747] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 97.081294][ T8052] can0: slcan on ttyS3. [ 97.138429][ T8058] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 97.177164][ T8072] netlink: 'syz.1.637': attribute type 2 has an invalid length. [ 97.193597][ T5828] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 97.198730][ T8072] !: entered promiscuous mode [ 97.209111][ T8074] lo speed is unknown, defaulting to 1000 [ 97.345494][ T5828] usb 5-1: not running at top speed; connect to a high speed hub [ 97.349545][ T5828] usb 5-1: config 118 has an invalid interface number: 78 but max is 1 [ 97.359439][ T5828] usb 5-1: config 118 has an invalid interface number: 213 but max is 1 [ 97.367548][ T5828] usb 5-1: config 118 contains an unexpected descriptor of type 0x1, skipping [ 97.374508][ T5828] usb 5-1: config 118 has no interface number 0 [ 97.377086][ T5828] usb 5-1: config 118 has no interface number 1 [ 97.379117][ T5828] usb 5-1: config 118 interface 78 altsetting 6 endpoint 0x2 has invalid maxpacket 951, setting to 64 [ 97.382634][ T5828] usb 5-1: config 118 interface 78 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 97.387592][ T5828] usb 5-1: config 118 interface 213 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 97.392162][ T5828] usb 5-1: config 118 interface 213 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 97.397599][ T5828] usb 5-1: config 118 interface 213 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 97.402881][ T5828] usb 5-1: config 118 interface 78 has no altsetting 0 [ 97.405304][ T5828] usb 5-1: config 118 interface 213 has no altsetting 0 [ 97.417359][ T5828] usb 5-1: New USB device found, idVendor=14b2, idProduct=3c11, bcdDevice=c7.ab [ 97.420454][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.423409][ T5828] usb 5-1: Product: syz [ 97.424881][ T5828] usb 5-1: Manufacturer: ꇟ↼೿塄펺槻8ᵙ刢꾭⥡平≾订卶㐪畕쯃욙쌚韏庱歛㲱ᒂ荺썒␚ᡖꖖ뗜꽩춗咘걳ᕿ㜨䴅䕋졌쀨ɔ瀤㛫Ώ烵ᐒ蛵澯畤☷왟◗≜嫣ㅎ겍䌸戴戰୔酴쬲쑺ꖈ䓞၂㸅₎鵣⧤㖲㔙鐸Ŝ놄岶㢮䴝䡀錑胷 [ 97.434667][ T5828] usb 5-1: SerialNumber: syz [ 97.442176][ T8046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.959776][ T5828] usb 5-1: USB disconnect, device number 2 [ 99.986452][ T8041] can0 (unregistered): slcan off ttyS3. [ 110.611210][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 110.611226][ T40] audit: type=1400 audit(110.548:516): avc: denied { watch } for pid=8121 comm="syz.4.646" path="/52/file0/file0" dev="9p" ino=82837521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.627806][ T40] audit: type=1400 audit(110.568:517): avc: denied { getattr } for pid=8121 comm="syz.4.646" name="/" dev="9p" ino=82837519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.630369][ T8126] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 110.743050][ T8134] evm: overlay not supported [ 111.018624][ T40] audit: type=1400 audit(110.958:518): avc: denied { getopt } for pid=8138 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.113163][ T40] audit: type=1326 audit(111.058:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.4.651" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb01b9cdd9 code=0x0 [ 111.416144][ T8141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.652'. [ 111.452386][ T8143] sctp: [Deprecated]: syz.1.653 (pid 8143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.452386][ T8143] Use struct sctp_sack_info instead [ 111.558827][ T8146] netlink: 'syz.3.654': attribute type 3 has an invalid length. [ 111.709643][ T8152] fuse: Bad value for 'fd' [ 111.737770][ T40] audit: type=1400 audit(111.678:520): avc: denied { ioctl } for pid=8154 comm="syz.0.658" path="socket:[23194]" dev="sockfs" ino=23194 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.801009][ T8158] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.658'. [ 111.893389][ T8164] EXT4-fs (nbd3): unable to read superblock [ 112.207094][ T8185] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 112.210371][ T8185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.219123][ T8185] netlink: 184 bytes leftover after parsing attributes in process `syz.3.666'. [ 112.222424][ T8185] xt_socket: unknown flags 0xd0 [ 112.270428][ T8193] tmpfs: Unknown parameter 'usrquota_block_har[limit' [ 112.380003][ T8204] bond1: (slave bond_slave_1): Device is not our slave [ 112.382341][ T8204] bond1: option active_slave: invalid value (bond_slave_1) [ 112.389344][ T8204] bond1 (unregistering): Released all slaves [ 112.481452][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 112.484440][ T40] audit: type=1400 audit(112.418:521): avc: denied { map } for pid=8212 comm="syz.1.672" path="socket:[22485]" dev="sockfs" ino=22485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.485993][ T8213] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 112.497915][ T8213] overlayfs: missing 'lowerdir' [ 112.550894][ T8215] ipvlan3: entered allmulticast mode [ 112.554036][ T8154] ALSA: mixer_oss: invalid OSS volume ';' [ 112.561324][ T8215] veth0_to_bridge: entered allmulticast mode [ 112.591338][ T8217] No such timeout policy "syz1" [ 112.631834][ T8230] erspan0: entered promiscuous mode [ 112.645067][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 112.672465][ T8233] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.701933][ T8235] openvswitch: netlink: Flow actions attr not present in new flow. [ 112.760767][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 112.936494][ T40] audit: type=1400 audit(112.878:522): avc: denied { associate } for pid=8240 comm="syz.1.683" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.978560][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.687'. [ 113.004547][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 113.007615][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 113.345300][ T40] audit: type=1400 audit(113.288:523): avc: denied { read } for pid=8283 comm="syz.0.696" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.368981][ T40] audit: type=1400 audit(113.288:524): avc: denied { open } for pid=8283 comm="syz.0.696" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.393655][ T8289] lo: Caught tx_queue_len zero misconfig [ 113.727829][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'. [ 113.830615][ T8310] bond2: option downdelay: invalid value (18446744073709551615) [ 113.833631][ T8310] bond2: option downdelay: allowed values 0 - 2147483647 [ 113.836935][ T8310] bond2 (unregistering): Released all slaves [ 114.063174][ T2327] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 114.245151][ T5827] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 114.245323][ T2327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.258586][ T2327] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 114.265370][ T2327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 114.275462][ T2327] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 114.278409][ T2327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.281018][ T2327] usb 6-1: Product: syz [ 114.282359][ T2327] usb 6-1: Manufacturer: syz [ 114.284299][ T2327] usb 6-1: SerialNumber: syz [ 114.289737][ T2327] usb 6-1: config 0 descriptor?? [ 114.294753][ T2327] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 114.311261][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.316670][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 114.334349][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.344023][ T8110] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.348882][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.367102][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.376115][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.384811][ T5126] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.425036][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.430199][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.436551][ T5827] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.440853][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.446150][ T5827] usb 5-1: config 0 descriptor?? [ 114.450222][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.452588][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 114.458035][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.461480][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.464497][ T5827] usb 5-1: media controller created [ 114.467310][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.477859][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 114.481583][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.486796][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input15 [ 114.492398][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 114.494776][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.495600][ T8311] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 114.504533][ T5838] usb 6-1: USB disconnect, device number 6 [ 114.657272][ T854] dvb-usb: bulk message failed: -22 (1/0) [ 114.660139][ T5827] usb 5-1: USB disconnect, device number 3 [ 114.664236][ T854] dvb-usb: error while querying for an remote control event. [ 114.714397][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 114.920335][ T8362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.174313][ T40] audit: type=1400 audit(115.118:525): avc: denied { module_request } for pid=8380 comm="syz.3.725" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 115.565021][ T2327] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 115.714666][ T2327] usb 5-1: not running at top speed; connect to a high speed hub [ 115.719760][ T2327] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 115.725271][ T2327] usb 5-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.731114][ T2327] usb 5-1: config 1 interface 0 has no altsetting 0 [ 115.736590][ T2327] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.40 [ 115.740893][ T2327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.744638][ T2327] usb 5-1: Product: syz [ 115.746529][ T2327] usb 5-1: Manufacturer: syz [ 115.748644][ T2327] usb 5-1: SerialNumber: syz [ 115.756715][ T8397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.761843][ T8397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.169108][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.173222][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.177381][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.183809][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.188468][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.192436][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.202803][ T2327] usbhid 5-1:1.0: can't add hid device: -71 [ 116.206435][ T2327] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 116.212957][ T2327] usb 5-1: USB disconnect, device number 4 [ 116.780501][ T8405] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 117.810030][ T8417] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.840301][ T8362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.946120][ T8431] snd_dummy snd_dummy.0: control 4:0:128:syz1:8200 is already present [ 118.080096][ T8432] __nla_validate_parse: 2 callbacks suppressed [ 118.080108][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 118.165525][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 118.165536][ T40] audit: type=1400 audit(118.108:530): avc: denied { map } for pid=8438 comm="syz.0.740" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.176031][ T40] audit: type=1400 audit(118.108:531): avc: denied { execute } for pid=8438 comm="syz.0.740" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.192830][ T5827] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 118.292082][ T8449] netlink: 277 bytes leftover after parsing attributes in process `syz.3.742'. [ 118.344403][ T5827] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.349503][ T5827] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.352404][ T5827] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.356201][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.361982][ T5827] usb 9-1: config 0 descriptor?? [ 118.370054][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.377006][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 118.389429][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.393929][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.397030][ T5827] usb 9-1: media controller created [ 118.400814][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.410059][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 118.411926][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.416277][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input16 [ 118.435824][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 118.438782][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 118.567283][ T5828] usb 9-1: USB disconnect, device number 2 [ 118.592803][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 118.598615][ T5828] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 118.762775][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 118.766122][ T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.770052][ T24] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.774363][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.777227][ T24] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 118.780974][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.788285][ T24] usb 8-1: config 0 descriptor?? [ 119.252801][ T5828] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.277190][ T40] audit: type=1400 audit(119.218:532): avc: denied { bind } for pid=8468 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.426751][ T5828] usb 6-1: config 0 has no interfaces? [ 119.431000][ T5828] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 119.436940][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.440471][ T5828] usb 6-1: Product: syz [ 119.442305][ T5828] usb 6-1: Manufacturer: syz [ 119.444740][ T5828] usb 6-1: SerialNumber: syz [ 119.450695][ T5828] usb 6-1: config 0 descriptor?? [ 119.494224][ T8452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.505080][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 119.507612][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 119.518243][ T24] usb 8-1: USB disconnect, device number 5 [ 119.592921][ T5838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 119.752877][ T5838] usb 9-1: Using ep0 maxpacket: 16 [ 119.756267][ T5838] usb 9-1: config 0 has no interfaces? [ 119.758691][ T5838] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.761708][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.764792][ T5838] usb 9-1: SerialNumber: syz [ 119.769672][ T5838] usb 9-1: config 0 descriptor?? [ 119.977203][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.981529][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.988771][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.750'. [ 119.992137][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.750'. [ 119.995504][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.750'. [ 119.999715][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.750'. [ 120.003279][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.750'. [ 120.006566][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.750'. [ 120.010918][ T5838] usb 9-1: USB disconnect, device number 3 [ 120.224324][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'. [ 120.452757][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 120.463007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.612886][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 120.616098][ T24] usb 9-1: config 0 has no interfaces? [ 120.619560][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.623154][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.626338][ T24] usb 9-1: SerialNumber: syz [ 120.634644][ T24] usb 9-1: config 0 descriptor?? [ 121.331353][ T40] audit: type=1400 audit(121.268:533): avc: denied { read } for pid=8494 comm="syz.3.756" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.339716][ T40] audit: type=1400 audit(121.268:534): avc: denied { open } for pid=8494 comm="syz.3.756" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.368989][ T40] audit: type=1400 audit(121.308:535): avc: denied { bind } for pid=8496 comm="syz.3.757" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.377310][ T40] audit: type=1400 audit(121.308:536): avc: denied { name_bind } for pid=8496 comm="syz.3.757" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 121.384326][ T8497] dvmrp0: entered allmulticast mode [ 121.385781][ T40] audit: type=1400 audit(121.308:537): avc: denied { node_bind } for pid=8496 comm="syz.3.757" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 121.614972][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 121.835027][ T8516] netlink: get zone limit has 4 unknown bytes [ 121.839672][ T8516] loop5: detected capacity change from 0 to 7 [ 121.852635][ T8516] Dev loop5: unable to read RDB block 7 [ 121.855034][ T8516] loop5: unable to read partition table [ 121.857706][ T8516] loop5: partition table beyond EOD, truncated [ 121.863652][ T8516] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 121.905857][ T5141] Dev loop5: unable to read RDB block 7 [ 121.908294][ T5141] loop5: unable to read partition table [ 121.910945][ T5141] loop5: partition table beyond EOD, truncated [ 122.012756][ T40] audit: type=1400 audit(121.948:538): avc: denied { getopt } for pid=8524 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.046593][ T24] usb 6-1: USB disconnect, device number 7 [ 122.141225][ T40] audit: type=1400 audit(122.078:539): avc: denied { create } for pid=8534 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.198257][ T8540] netlink: 'syz.1.772': attribute type 3 has an invalid length. [ 122.277798][ T8543] : entered promiscuous mode [ 122.341169][ T8548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=8548 comm=syz.1.775 [ 122.370061][ T5838] usb 9-1: USB disconnect, device number 4 [ 122.406663][ T8548] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 122.412815][ T8548] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 122.420028][ T8548] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 122.517875][ T8558] raw_sendmsg: syz.3.778 forgot to set AF_INET. Fix it! [ 122.569423][ T8566] overlayfs: missing 'workdir' [ 122.569760][ T8567] nbd: must specify an index to disconnect [ 122.640737][ T8574] sctp: [Deprecated]: syz.3.783 (pid 8574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.640737][ T8574] Use struct sctp_sack_info instead [ 122.684821][ T8578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.695296][ T8578] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 122.758067][ T8580] fuse: Unknown parameter 'grou~íu' [ 123.009172][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.013654][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.075398][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.081822][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.170192][ T106] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.174409][ T106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.177431][ T106] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.180297][ T106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.183484][ T106] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.186358][ T106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.189193][ T106] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.192122][ T106] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.391484][ T8603] xt_hashlimit: size too large, truncated to 1048576 [ 123.738500][ T8621] sit1: entered promiscuous mode [ 123.741076][ T8621] sit1: entered allmulticast mode [ 123.769673][ T8624] __nla_validate_parse: 6 callbacks suppressed [ 123.769690][ T8624] netlink: 104 bytes leftover after parsing attributes in process `syz.3.796'. [ 123.871278][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 123.871290][ T40] audit: type=1400 audit(123.808:542): avc: denied { firmware_load } for pid=8627 comm="syz.4.797" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 123.901816][ T40] audit: type=1400 audit(123.838:543): avc: denied { read } for pid=8636 comm="syz.1.800" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.903518][ T8637] vivid-007: ================= START STATUS ================= [ 123.909224][ T40] audit: type=1400 audit(123.838:544): avc: denied { open } for pid=8636 comm="syz.1.800" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.911427][ T8637] vivid-007: Enable Output Cropping: true [ 123.924211][ T8637] vivid-007: Enable Output Composing: true [ 123.927304][ T8637] vivid-007: Enable Output Scaler: true [ 123.929112][ T8637] vivid-007: Tx RGB Quantization Range: Automatic [ 123.931092][ T8637] vivid-007: Transmit Mode: HDMI [ 123.935777][ T8637] vivid-007: Hotplug Present: 0x00000000 [ 123.940467][ T8637] vivid-007: RxSense Present: 0x00000000 [ 123.942240][ T8637] vivid-007: EDID Present: 0x00000000 [ 123.948246][ T8637] vivid-007: ================== END STATUS ================== [ 123.963138][ T8637] vivid-007: ================= START STATUS ================= [ 123.965900][ T8637] vivid-007: Enable Output Cropping: true [ 123.967950][ T8637] vivid-007: Enable Output Composing: true [ 123.969373][ T40] audit: type=1400 audit(123.908:545): avc: denied { read } for pid=8650 comm="syz.4.803" lport=37266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.970814][ T8637] vivid-007: Enable Output Scaler: true [ 123.980375][ T8652] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 123.980740][ T8637] vivid-007: Tx RGB Quantization Range: Automatic [ 123.985776][ T8637] vivid-007: Transmit Mode: HDMI [ 123.987629][ T8637] vivid-007: Hotplug Present: 0x00000000 [ 123.989507][ T8637] vivid-007: RxSense Present: 0x00000000 [ 123.991428][ T8637] vivid-007: EDID Present: 0x00000000 [ 123.996257][ T8637] vivid-007: ================== END STATUS ================== [ 124.037083][ T40] audit: type=1400 audit(123.978:546): avc: denied { setopt } for pid=8657 comm="syz.4.805" lport=34260 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 124.048252][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.805'. [ 124.057742][ T8661] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 124.062470][ T8661] bond1 (unregistering): Released all slaves [ 124.182814][ T40] audit: type=1400 audit(124.118:547): avc: denied { write } for pid=8668 comm="syz.1.808" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.190845][ T40] audit: type=1400 audit(124.128:548): avc: denied { read write } for pid=8668 comm="syz.1.808" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.206897][ T40] audit: type=1400 audit(124.128:549): avc: denied { open } for pid=8668 comm="syz.1.808" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.215677][ T40] audit: type=1400 audit(124.148:550): avc: denied { read } for pid=8668 comm="syz.1.808" dev="nsfs" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.224859][ T40] audit: type=1400 audit(124.148:551): avc: denied { open } for pid=8668 comm="syz.1.808" path="net:[4026533148]" dev="nsfs" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.264946][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 124.276877][ T8679] block nbd0: Unsupported socket: should be TCP or UNIX. [ 124.680630][ T8693] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.742771][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 124.766916][ T8695] 9p: Unknown uid 00000000004294967295 [ 125.037284][ T8710] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 125.082797][ T5828] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 125.123038][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 125.233878][ T5828] usb 9-1: Using ep0 maxpacket: 8 [ 125.237881][ T5828] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 125.241447][ T5828] usb 9-1: config 0 has no interface number 0 [ 125.245607][ T5828] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.250229][ T5828] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 125.255288][ T5828] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 125.259667][ T5828] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 125.263798][ T5828] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 125.267001][ T5828] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.276203][ T5828] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 125.280119][ T5828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.283798][ T5828] usb 9-1: Product: syz [ 125.285576][ T5828] usb 9-1: Manufacturer: syz [ 125.287624][ T5828] usb 9-1: SerialNumber: syz [ 125.287857][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 125.294067][ T5828] usb 9-1: config 0 descriptor?? [ 125.304729][ T24] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 125.310764][ T24] usb 8-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 125.317930][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.320459][ T24] usb 8-1: Product: syz [ 125.321920][ T24] usb 8-1: Manufacturer: syz [ 125.324117][ T24] usb 8-1: SerialNumber: syz [ 125.341445][ T8736] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 125.505690][ T5828] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 125.566034][ T8743] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 125.598412][ T8758] fuse: Bad value for 'group_id' [ 125.600739][ T8758] fuse: Bad value for 'group_id' [ 125.601840][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.608220][ T24] usb 8-1: MIDIStreaming interface descriptor not found [ 125.661256][ T5747] Bluetooth: hci2: Invalid handle: 0x8000 > 0x0eff [ 125.662062][ T24] usb 8-1: USB disconnect, device number 6 [ 125.667570][ T8760] netlink: 156 bytes leftover after parsing attributes in process `syz.1.836'. [ 125.670635][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 125.677346][ T8760] vxfs: unable to read disk superblock at 1 [ 125.680812][ T8760] vxfs: unable to read disk superblock at 8 [ 125.683370][ T8760] vxfs: can't find superblock. [ 125.707602][ T8699] iowarrior 9-1:0.186: Error -90 while submitting URB [ 125.713591][ T5828] usb 9-1: USB disconnect, device number 5 [ 126.470247][ T1200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.565815][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.571270][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.577807][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.583651][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.587340][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.593881][ T8794] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.604936][ T8794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.613964][ T5828] lo speed is unknown, defaulting to 1000 [ 126.618156][ T5828] syz0: Port: 1 Link DOWN [ 126.672796][ T1200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.685354][ T8808] netlink: 'syz.1.853': attribute type 3 has an invalid length. [ 126.692477][ T8808] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 126.704057][ T8808] netlink: 216 bytes leftover after parsing attributes in process `syz.1.853'. [ 126.739072][ T8814] fuse: Unknown parameter '0x0000000000000005' [ 126.768905][ T1200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.849932][ T1200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.871674][ T8795] lo speed is unknown, defaulting to 1000 [ 127.097438][ T1200] bridge_slave_1: left allmulticast mode [ 127.099413][ T1200] bridge_slave_1: left promiscuous mode [ 127.101417][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.106458][ T1200] bridge_slave_0: left allmulticast mode [ 127.108262][ T1200] bridge_slave_0: left promiscuous mode [ 127.112206][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.127124][ T1200] dvmrp0: left allmulticast mode [ 127.265054][ T1200] bond1 (unregistering): (slave gretap1): Releasing active interface [ 127.693963][ T1200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.721890][ T1200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.731415][ T1200] bond0 (unregistering): Released all slaves [ 127.736848][ T1200] bond1 (unregistering): Released all slaves [ 127.746840][ T1200] bond2 (unregistering): Released all slaves [ 127.765960][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.768421][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.772922][ T8795] bridge_slave_0: entered allmulticast mode [ 127.776543][ T8795] bridge_slave_0: entered promiscuous mode [ 127.788827][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.795306][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.799039][ T8795] bridge_slave_1: entered allmulticast mode [ 127.808182][ T8795] bridge_slave_1: entered promiscuous mode [ 127.834188][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.887254][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.977733][ T8795] team0: Port device team_slave_0 added [ 127.981194][ T8795] team0: Port device team_slave_1 added [ 128.032175][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.042937][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.062723][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.114895][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.868'. [ 128.123047][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.126919][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.150725][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.177293][ T8870] syzkaller0: entered promiscuous mode [ 128.179676][ T8870] syzkaller0: entered allmulticast mode [ 128.212032][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 128.230356][ T1200] hsr_slave_0: left promiscuous mode [ 128.253915][ T1200] veth1_macvtap: left promiscuous mode [ 128.256221][ T1200] veth0_macvtap: left promiscuous mode [ 128.258286][ T1200] veth1_vlan: left promiscuous mode [ 128.262403][ T1200] veth0_vlan: left promiscuous mode [ 128.499763][ T1200] team0 (unregistering): Port device team_slave_1 removed [ 128.509501][ T1200] team0 (unregistering): Port device team_slave_0 removed [ 128.599371][ T8795] hsr_slave_0: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1f6000) [ 128.621247][ T8795] hsr_slave_1: entered promiscuous mode [ 128.622964][ T5732] Bluetooth: hci3: command tx timeout [ 128.625012][ T8795] debugfs: 'hsr0' already exists in 'hsr' [ 128.627627][ T8795] Cannot create hsr debugfs directory [ 128.760025][ T8905] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.791333][ T8905] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 128.819526][ T8916] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.824569][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 128.913458][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 128.924201][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 128.924217][ T40] audit: type=1400 audit(128.868:724): avc: denied { create } for pid=8923 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.950024][ T40] audit: type=1400 audit(128.888:725): avc: denied { ioctl } for pid=8923 comm="syz.4.879" path="socket:[29230]" dev="sockfs" ino=29230 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.959789][ T40] audit: type=1400 audit(128.888:726): avc: denied { getopt } for pid=8923 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.975257][ T40] audit: type=1400 audit(128.918:727): avc: denied { mount } for pid=8924 comm="syz.0.880" name="/" dev="9p" ino=82837519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.993087][ T40] audit: type=1400 audit(128.928:728): avc: denied { mount } for pid=8924 comm="syz.0.880" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.003370][ T40] audit: type=1400 audit(128.928:729): avc: denied { unmount } for pid=8924 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.006072][ T8926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=8926 comm=syz.0.880 [ 129.015750][ T40] audit: type=1400 audit(128.968:730): avc: denied { write } for pid=8929 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.029268][ T40] audit: type=1400 audit(128.968:731): avc: denied { setopt } for pid=8929 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.036294][ T8926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.880'. [ 129.037699][ T40] audit: type=1400 audit(128.978:732): avc: denied { read } for pid=8924 comm="syz.0.880" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 129.063175][ T8795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.064885][ T40] audit: type=1400 audit(129.008:733): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.085943][ T8795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.089823][ T8795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.098384][ T8795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.101872][ T8795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.118704][ T8795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.121837][ T8795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.125338][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 129.133132][ T8795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.228954][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.240355][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.250390][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.253570][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.268037][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 129.275507][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.278573][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.501386][ T8974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.887'. [ 129.502133][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 129.560689][ T8978] SELinux: syz.4.888 (8978) set checkreqprot to 1. This is no longer supported. [ 129.653031][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.810404][ T8795] veth0_vlan: entered promiscuous mode [ 129.816030][ T8795] veth1_vlan: entered promiscuous mode [ 129.832220][ T8795] veth0_macvtap: entered promiscuous mode [ 129.837340][ T8795] veth1_macvtap: entered promiscuous mode [ 129.848207][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.854270][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.859724][ T501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.867313][ T501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.871310][ T501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.875470][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 129.877463][ T501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.877673][ T1132] ata1: failed to read log page 10h (errno=-5) [ 129.877693][ T1132] ata1.00: NCQ disabled due to excessive errors [ 129.877701][ T1132] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 129.877711][ T1132] ata1.00: irq_stat 0x41000008 [ 129.877720][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 129.893708][ T1132] ata1.00: cmd 60/b0:70:26:35:08/0f:00:00:00:00/40 tag 14 ncq dma 2056192 in [ 129.893708][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 129.899278][ T1132] ata1.00: status: { DRDY } [ 129.900732][ T1132] ata1.00: error: { ABRT } [ 129.906481][ T1132] ata1.00: configured for UDMA/100 [ 129.908445][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=1s [ 129.911610][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 129.914486][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 129.917125][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 35 26 00 0f b0 00 [ 129.919804][ T1132] blk_print_req_error: 5 callbacks suppressed [ 129.919817][ T1132] I/O error, dev sda, sector 537894 op 0x0:(READ) flags 0x80700 phys_seg 33 prio class 2 [ 129.926370][ T1132] ata1: EH complete [ 129.987419][ T501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.990111][ T501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.005188][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.008859][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.104389][ T9004] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 130.104389][ T9004] program syz.5.852 not setting count and/or reply_len properly [ 130.450820][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 130.460244][ T9021] 9pnet_virtio: no channels available for device syz [ 130.607281][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 130.611642][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 130.633111][ T9036] tun0: tun_chr_ioctl cmd 1074025675 [ 130.635466][ T9036] tun0: persist enabled [ 130.642209][ T9036] tun0: tun_chr_ioctl cmd 1074025675 [ 130.644704][ T9036] tun0: persist enabled [ 130.686819][ T9042] binder: 9041:9042 ioctl c0306201 200000000140 returned -22 [ 130.704148][ T5732] Bluetooth: hci3: command tx timeout [ 130.817352][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 131.119958][ T9080] lo speed is unknown, defaulting to 1000 [ 131.402835][ T5876] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.564760][ T5876] usb 6-1: config 0 has no interfaces? [ 131.568143][ T5876] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 131.571023][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.573783][ T5876] usb 6-1: Product: syz [ 131.575291][ T5876] usb 6-1: Manufacturer: syz [ 131.576892][ T5876] usb 6-1: SerialNumber: syz [ 131.579896][ T5876] usb 6-1: config 0 descriptor?? [ 131.602773][ T5828] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 131.753278][ T5828] usb 10-1: Using ep0 maxpacket: 8 [ 131.758250][ T5828] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.762887][ T5828] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.766279][ T5828] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.769070][ T5828] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.772638][ T5828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.778195][ T5828] usb 10-1: config 0 descriptor?? [ 131.790213][ T5876] usb 6-1: USB disconnect, device number 8 [ 131.845110][ T9073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.030992][ T9106] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 132.109109][ T9111] netlink: 'syz.4.922': attribute type 3 has an invalid length. [ 132.147309][ T9113] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.152405][ T9113] netlink: 'syz.4.923': attribute type 29 has an invalid length. [ 132.188788][ T5828] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 132.191159][ T5828] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 132.192897][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.194298][ T5828] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 132.198230][ T5828] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 132.200490][ T5828] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 132.203113][ T5828] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 132.331469][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 132.362766][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 132.368427][ T5827] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.373017][ T5827] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.377336][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.380208][ T5827] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.384557][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.394710][ T5827] usb 5-1: config 0 descriptor?? [ 132.698614][ T9131] overlay: ./file0 is not a directory [ 132.727751][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 132.746282][ T9132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.782859][ T5732] Bluetooth: hci3: command tx timeout [ 132.816132][ T9136] overlayfs: failed to resolve 'lazytime': -2 [ 132.832748][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 132.836735][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.846547][ T5827] usb 5-1: USB disconnect, device number 5 [ 133.212772][ T5827] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.362768][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 133.366725][ T5827] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.370389][ T5827] usb 5-1: config 179 has no interface number 0 [ 133.373772][ T5827] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 133.377774][ T5827] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 133.381592][ T5827] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 133.386852][ T5827] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 133.391578][ T5827] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.396814][ T5827] usb 5-1: config 179 interface 65 has no altsetting 0 [ 133.399180][ T5827] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 133.402335][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.452919][ T5827] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input18 [ 133.486826][ T34] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 133.503367][ T5126] input input18: unable to receive magic message: -110 [ 133.518682][ T5126] input input18: unable to receive magic message: -32 [ 133.535712][ T5126] input input18: unable to receive magic message: -32 [ 133.543619][ T5126] input input18: unable to receive magic message: -32 [ 133.558508][ T5126] input input18: unable to receive magic message: -32 [ 133.564613][ T5126] input input18: unable to receive magic message: -32 [ 133.610625][ T5126] input input18: unable to receive magic message: -32 [ 133.623782][ T5126] input input18: unable to receive magic message: -32 [ 133.639196][ T5969] usb 5-1: USB disconnect, device number 6 [ 133.639307][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.727478][ T9147] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 133.750706][ T9147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.759359][ T9149] futex_wake_op: syz.1.934 tries to shift op by -1; fix this program [ 133.790052][ T9147] bond1: (slave veth3): Enslaving as an active interface with a down link [ 133.883132][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.885541][ T9151] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 133.917538][ T9157] sctp: [Deprecated]: syz.1.937 (pid 9157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.917538][ T9157] Use struct sctp_sack_info instead [ 133.927032][ T9157] netem: change failed [ 134.011392][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 134.011403][ T40] audit: type=1400 audit(133.948:836): avc: denied { create } for pid=9161 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.039142][ T40] audit: type=1400 audit(133.978:837): avc: denied { create } for pid=9161 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.051975][ T40] audit: type=1400 audit(133.978:838): avc: denied { write } for pid=9161 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.070749][ T40] audit: type=1400 audit(133.978:839): avc: denied { setopt } for pid=9161 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.076685][ T40] audit: type=1400 audit(133.978:840): avc: denied { write } for pid=9161 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.085416][ T40] audit: type=1400 audit(134.028:841): avc: denied { mount } for pid=9163 comm="syz.4.939" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 134.106168][ T40] audit: type=1400 audit(134.048:842): avc: denied { unmount } for pid=7207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 134.135130][ T40] audit: type=1400 audit(134.078:843): avc: denied { sqpoll } for pid=9166 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.141031][ T40] audit: type=1400 audit(134.078:844): avc: denied { create } for pid=9166 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.171917][ T40] audit: type=1400 audit(134.108:845): avc: denied { create } for pid=9171 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.200883][ T9175] netlink: 'syz.0.942': attribute type 33 has an invalid length. [ 134.204250][ T9175] __nla_validate_parse: 5 callbacks suppressed [ 134.204259][ T9175] netlink: 152 bytes leftover after parsing attributes in process `syz.0.942'. [ 134.213701][ T9175] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 134.229410][ T9181] openvswitch: netlink: Missing key (keys=40, expected=100) [ 134.325599][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 134.481166][ T9197] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32533 sclass=netlink_xfrm_socket pid=9197 comm=syz.5.946 [ 134.857017][ T9219] 9pnet_fd: p9_fd_create_unix (9219): problem connecting socket: ./file0: -111 [ 134.871886][ T9219] syzkaller0: entered promiscuous mode [ 134.873805][ T5732] Bluetooth: hci3: command tx timeout [ 134.875944][ T9219] syzkaller0: entered allmulticast mode [ 135.059270][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.955'. [ 135.076924][ T9221] team0: Port device team_slave_0 removed [ 135.147074][ T5828] usb 10-1: USB disconnect, device number 2 [ 135.437590][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.441452][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.445276][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.449710][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.455110][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.460521][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.469338][ T9239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 135.569634][ T5838] IPVS: starting estimator thread 0... [ 135.664850][ T9255] IPVS: using max 45 ests per chain, 108000 per kthread [ 135.813085][ T9264] netlink: 'syz.4.965': attribute type 12 has an invalid length. [ 135.818457][ T9264] netlink: 'syz.4.965': attribute type 12 has an invalid length. [ 136.052500][ T9291] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.220412][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.253724][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.257258][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.259995][ T9306] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 136.265724][ T9306] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 136.271869][ T9306] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 136.280037][ T9306] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.290516][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.296244][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.299035][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.301690][ T9306] xfrm0 speed is unknown, defaulting to 1000 [ 136.558741][ T9326] lo speed is unknown, defaulting to 1000 [ 136.561600][ T9326] xfrm0 speed is unknown, defaulting to 1000 [ 136.824882][ T9326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.294221][ T24] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 137.309438][ T9345] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 137.309438][ T9345] The task syz.1.986 (9345) triggered the difference, watch for misbehavior. [ 137.446950][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 137.450576][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 137.453420][ T24] usb 9-1: can't read configurations, error -71 [ 137.542836][ T5828] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 137.712812][ T5828] usb 10-1: Using ep0 maxpacket: 32 [ 137.717770][ T5828] usb 10-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.721938][ T5828] usb 10-1: config 1 interface 0 has no altsetting 0 [ 137.727572][ T5828] usb 10-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 137.730525][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.733164][ T5828] usb 10-1: Product: 䠊 [ 137.734520][ T5828] usb 10-1: Manufacturer: 毉ﻲ긔逹‖驊溜㈅ዃ恻䜹䪎中⛑鼈봙.셽쯋즫ꒃ笐誢㔃箉갳叨﷈됰鼺⒩㙐赤䨭ㅫㄋ壅⣏到ٍ匃⣒尨埞疢짲岙훁檴켃溕褦ҡɴ韡鐠뇾殂 [ 137.740718][ T5828] usb 10-1: SerialNumber: Ж [ 137.755635][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.757700][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.950807][ T5828] usbhid 10-1:1.0: can't add hid device: -71 [ 137.952941][ T5828] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 137.956765][ T5828] usb 10-1: USB disconnect, device number 3 [ 138.410187][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.712554][ T9363] vlan2: entered promiscuous mode [ 138.715164][ T9363] bridge0: entered promiscuous mode [ 139.014756][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 139.014773][ T40] audit: type=1400 audit(138.958:947): avc: denied { read } for pid=9386 comm="syz.5.999" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.033574][ T40] audit: type=1400 audit(138.958:948): avc: denied { open } for pid=9386 comm="syz.5.999" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 139.054694][ T40] audit: type=1400 audit(138.968:949): avc: denied { connect } for pid=9386 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.073251][ T40] audit: type=1400 audit(138.978:950): avc: denied { mount } for pid=9388 comm="syz.4.1000" name="/" dev="hugetlbfs" ino=30938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 139.088328][ T40] audit: type=1400 audit(138.988:951): avc: denied { remount } for pid=9386 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.108226][ T9397] tc_dump_action: action bad kind [ 139.114018][ T40] audit: type=1400 audit(139.058:952): avc: denied { load_policy } for pid=9388 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.114134][ T9389] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 139.127349][ T9389] SELinux: failed to load policy [ 139.188579][ T40] audit: type=1400 audit(139.128:953): avc: denied { write } for pid=9406 comm="syz.5.1006" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 139.209013][ T40] audit: type=1400 audit(139.128:954): avc: denied { open } for pid=9406 comm="syz.5.1006" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 139.217331][ T40] audit: type=1400 audit(139.128:955): avc: denied { ioctl } for pid=9406 comm="syz.5.1006" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 139.226454][ T40] audit: type=1400 audit(139.128:956): avc: denied { setopt } for pid=9408 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.228733][ T9413] __nla_validate_parse: 13 callbacks suppressed [ 139.228744][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 139.369500][ T9421] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1011'. [ 139.405622][ T9425] syzkaller1: entered promiscuous mode [ 139.407507][ T9425] syzkaller1: entered allmulticast mode [ 139.410917][ T9425] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 139.415694][ T9425] loop5: detected capacity change from 0 to 7 [ 139.418339][ T9425] Dev loop5: unable to read RDB block 7 [ 139.420215][ T9425] loop5: unable to read partition table [ 139.422180][ T9425] loop5: partition table beyond EOD, truncated [ 139.425723][ T9425] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 139.945147][ T9456] netlink: 'syz.4.1016': attribute type 13 has an invalid length. [ 139.954416][ T9456] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 140.153963][ T9474] netlink: 'syz.4.1018': attribute type 2 has an invalid length. [ 140.274173][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 140.280936][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 140.554618][ T9496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.558962][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.563117][ T9496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.567109][ T9496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.570113][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.573818][ T9496] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1026'. [ 140.884297][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.887088][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.266301][ T9523] Bluetooth: hci4: Frame reassembly failed (-84) [ 141.284614][ T106] Bluetooth: hci4: Frame reassembly failed (-84) [ 141.662860][ T8947] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 141.817360][ T8947] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.820342][ T8947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.823309][ T8947] usb 10-1: Product: syz [ 141.825069][ T8947] usb 10-1: Manufacturer: syz [ 141.826957][ T8947] usb 10-1: SerialNumber: syz [ 141.837847][ T8947] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.888330][ T24] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.969877][ T9531] tmpfs: Bad value for 'mpol' [ 141.975601][ T9532] syzkaller1: entered promiscuous mode [ 141.977422][ T9532] syzkaller1: entered allmulticast mode [ 142.229195][ T9537] /dev/nullb0: Can't open blockdev [ 142.232502][ T9539] /dev/nullb0: Can't open blockdev [ 142.236753][ T9537] /dev/nullb0: Can't open blockdev [ 142.258497][ T9538] program syz.1.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.261499][ T9538] ata1.00: invalid transfer count 0 [ 142.297760][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.301588][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.381004][ T9542] tmpfs: Bad value for 'mpol' [ 142.384016][ T9542] openvswitch: netlink: Flow key attr not present in new flow. [ 142.482855][ T34] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 142.644308][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.648800][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.653807][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.658429][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 142.663028][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.670255][ T34] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 142.674135][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.677523][ T34] usb 5-1: Product: syz [ 142.679318][ T34] usb 5-1: Manufacturer: syz [ 142.681296][ T34] usb 5-1: SerialNumber: syz [ 142.685651][ T34] usb 5-1: config 0 descriptor?? [ 142.689379][ T9536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.696886][ T34] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input19 [ 142.942876][ T24] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 142.947229][ T24] ath9k_htc: Failed to initialize the device [ 142.963708][ T8947] usb 5-1: USB disconnect, device number 7 [ 143.012458][ T24] usb 10-1: ath9k_htc: USB layer deinitialized [ 143.238757][ T34] usb 10-1: USB disconnect, device number 4 [ 143.345146][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 143.345932][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.963381][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 144.023151][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 144.023169][ T40] audit: type=1400 audit(143.968:1019): avc: denied { getopt } for pid=9586 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.062459][ T40] audit: type=1400 audit(143.998:1020): avc: denied { ioctl } for pid=9586 comm="syz.0.1053" path="socket:[34441]" dev="sockfs" ino=34441 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.170583][ T40] audit: type=1400 audit(144.108:1021): avc: denied { ioctl } for pid=9588 comm="syz.0.1054" path="socket:[32324]" dev="sockfs" ino=32324 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.213157][ T9591] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.328689][ T40] audit: type=1400 audit(144.268:1022): avc: denied { mount } for pid=9593 comm="syz.5.1056" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 144.340520][ T40] audit: type=1400 audit(144.278:1023): avc: denied { ioctl } for pid=9593 comm="syz.5.1056" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35944 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.374815][ T9596] binder: 9595:9596 ioctl c400941b 200000003440 returned -22 [ 144.486585][ T40] audit: type=1400 audit(144.428:1024): avc: denied { unmount } for pid=8795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 144.520366][ T40] audit: type=1400 audit(144.458:1025): avc: denied { setopt } for pid=9600 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.579466][ T40] audit: type=1400 audit(144.518:1026): avc: denied { setopt } for pid=9600 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.587455][ T40] audit: type=1400 audit(144.528:1027): avc: denied { setattr } for pid=9600 comm="syz.0.1058" path="socket:[35951]" dev="sockfs" ino=35951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.958193][ T5732] Bluetooth: hci2: Malformed Event: 0x02 [ 144.970059][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.977223][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.981214][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.986862][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.990239][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.993637][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.997161][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.000156][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.003813][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.004920][ T9615] __nla_validate_parse: 3 callbacks suppressed [ 145.004933][ T9615] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1061'. [ 145.008206][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.161428][ T40] audit: type=1400 audit(145.098:1028): avc: denied { create } for pid=9627 comm="syz.5.1064" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.432884][ T9553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.516758][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 146.519820][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 146.563880][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 146.579207][ T34] IPVS: starting estimator thread 0... [ 146.579479][ T9644] gfs2: path_lookup on c::: returned error -2 [ 146.611086][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 146.614417][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 146.631278][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.635528][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.639552][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.644623][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.672841][ T9649] IPVS: using max 45 ests per chain, 108000 per kthread [ 146.789410][ T9670] xt_hashlimit: size too large, truncated to 1048576 [ 146.918169][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1077'. [ 146.922991][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 146.927137][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'. [ 147.438059][ T9734] No such timeout policy "syz1" [ 147.580095][ T9753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.586602][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.785459][ T9755] sctp: [Deprecated]: syz.1.1099 (pid 9755) Use of int in maxseg socket option. [ 147.785459][ T9755] Use struct sctp_assoc_value instead [ 148.161901][ T9764] fuse: Bad value for 'group_id' [ 148.163722][ T9764] fuse: Bad value for 'group_id' [ 148.254142][ T9769] netlink: 'syz.0.1103': attribute type 39 has an invalid length. [ 148.313403][ T9772] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 148.319785][ T9772] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 148.329406][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 148.460750][ T9791] fuse: fd is not a fuse device [ 148.464166][ T5828] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 148.591174][ T9803] tipc: Started in network mode [ 148.593360][ T9803] tipc: Node identity fabcd5d4857a, cluster identity 4711 [ 148.595898][ T9803] tipc: Enabled bearer , priority 0 [ 148.598469][ T9803] syzkaller0: entered promiscuous mode [ 148.600276][ T9803] syzkaller0: entered allmulticast mode [ 148.625643][ T5828] usb 10-1: Using ep0 maxpacket: 16 [ 148.633316][ T5828] usb 10-1: config index 0 descriptor too short (expected 12324, got 36) [ 148.635651][ T9803] tipc: Resetting bearer [ 148.636973][ T5828] usb 10-1: config 55 has too many interfaces: 49, using maximum allowed: 32 [ 148.643349][ T5828] usb 10-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 148.643428][ T9802] tipc: Resetting bearer [ 148.647584][ T5828] usb 10-1: config 55 has 0 interfaces, different from the descriptor's value: 49 [ 148.654460][ T5828] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 148.658365][ T5828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.674164][ T9802] tipc: Disabling bearer [ 148.738368][ T34] IPVS: starting estimator thread 0... [ 148.802953][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 148.822896][ T9807] IPVS: using max 27 ests per chain, 64800 per kthread [ 148.874849][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.880135][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.946808][ T9823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9823 comm=syz.1.1120 [ 148.952452][ T9823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9823 comm=syz.1.1120 [ 148.961640][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.971124][ T9823] overlayfs: failed to clone upperpath [ 148.973625][ T58] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.980840][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.985388][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.996594][ T9801] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 149.013081][ T58] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.018527][ T9825] loop7: detected capacity change from 0 to 7 [ 149.027027][ T9825] Dev loop7: unable to read RDB block 7 [ 149.029587][ T9825] loop7: unable to read partition table [ 149.033712][ T9825] loop7: partition table beyond EOD, truncated [ 149.035903][ T9825] loop_reread_partitions: partition scan of loop7 (被x0<) failed (rc=-5) [ 149.205626][ T9801] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.210057][ T58] usb 5-1: USB disconnect, device number 8 [ 149.319838][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 149.319849][ T40] audit: type=1326 audit(149.258:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.331040][ T40] audit: type=1326 audit(149.268:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.338198][ T40] audit: type=1326 audit(149.268:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.346724][ T40] audit: type=1326 audit(149.268:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.354330][ T40] audit: type=1326 audit(149.268:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.362897][ T40] audit: type=1326 audit(149.268:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.372016][ T40] audit: type=1326 audit(149.268:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.379223][ T40] audit: type=1326 audit(149.268:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.385846][ T40] audit: type=1326 audit(149.268:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.392947][ T40] audit: type=1326 audit(149.268:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466159cdd9 code=0x50000 [ 149.416672][ T9801] xt_policy: output policy not valid in PREROUTING and INPUT [ 151.210217][ T5828] usb 10-1: string descriptor 0 read error: -71 [ 151.218901][ T5828] usb 10-1: USB disconnect, device number 5 [ 151.369086][ T9871] Cannot find add_set index 0 as target [ 152.268615][ T9879] __nla_validate_parse: 6 callbacks suppressed [ 152.268627][ T9879] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1139'. [ 152.422439][ T9889] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1140'. [ 152.427897][ T9891] fuse: fd is not a fuse device [ 152.561613][ T9893] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1144'. [ 152.760300][ T5444] veth0_macvtap: left promiscuous mode [ 152.948451][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.956079][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.959647][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.979673][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.986703][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.077783][ T9943] syzkaller0: entered promiscuous mode [ 153.082552][ T9943] syzkaller0: entered allmulticast mode [ 153.111903][ T106] bridge_slave_1: left allmulticast mode [ 153.114542][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.135294][ T9943] kvm: kvm [9942]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 153.138610][ T106] bridge_slave_0: left allmulticast mode [ 153.140591][ T106] bridge_slave_0: left promiscuous mode [ 153.144132][ T9943] kvm: kvm [9942]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 153.146111][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.287241][ T46] smbdirect: ib_dev[syz1] removed [ 153.498632][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.503159][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.506851][ T106] bond0 (unregistering): Released all slaves [ 153.514392][ T106] bond1 (unregistering): (slave veth3): Releasing active interface [ 153.518601][ T106] bond1 (unregistering): Released all slaves [ 153.547267][ T9969] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1165'. [ 153.610860][ T106] tipc: Left network mode [ 153.730740][ T9932] lo speed is unknown, defaulting to 1000 [ 153.762111][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 153.936465][ T106] hsr_slave_0: left promiscuous mode [ 153.945630][ T106] hsr_slave_1: left promiscuous mode [ 153.948577][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.953903][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.972845][ T58] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 154.122359][ T106] team0 (unregistering): Port device team_slave_1 removed [ 154.132763][ T58] usb 10-1: Using ep0 maxpacket: 8 [ 154.136528][ T58] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.140383][ T106] team0 (unregistering): Port device team_slave_0 removed [ 154.141627][ T58] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 154.145804][ T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.148383][ T58] usb 10-1: Product: ᰉ [ 154.149768][ T58] usb 10-1: Manufacturer: ⑳젛ﾺ㔎ᬛ拊梏荋⛸慤貭団괣턏ἳ挀ჽኯ義⫲㝶ꬕㆎ椙舔퇒齴⏢࢝⻏叟 [ 154.155168][ T58] usb 10-1: SerialNumber: 갼㖟규마Ꜵ [ 154.270274][T10026] bond2: entered promiscuous mode [ 154.275707][T10026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.281023][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 154.364302][ T40] kauditd_printk_skb: 34203 callbacks suppressed [ 154.364316][ T40] audit: type=1400 audit(154.308:35283): avc: denied { create } for pid=10034 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 154.368112][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.380930][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.391551][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.396088][ T58] usb 10-1: BAAD SPEAKERPHONE c_chmask mismatch [ 154.399248][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.404139][ T9932] bridge_slave_0: entered allmulticast mode [ 154.407241][ T9932] bridge_slave_0: entered promiscuous mode [ 154.410652][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.413683][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.416170][ T9932] bridge_slave_1: entered allmulticast mode [ 154.419105][ T9932] bridge_slave_1: entered promiscuous mode [ 154.447704][ T58] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 154.449397][ T9932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.455329][ T9932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.458342][ T58] usb 10-1: USB disconnect, device number 6 [ 154.479938][ T8156] udevd[8156]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.500549][ T9932] team0: Port device team_slave_0 added [ 154.505525][ T9932] team0: Port device team_slave_1 added [ 154.520922][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.524573][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.532960][ T9932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.537230][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.539479][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.548048][ T9932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.585231][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 154.616930][ T9932] hsr_slave_0: entered promiscuous mode [ 154.620146][ T9932] hsr_slave_1: entered promiscuous mode [ 154.623228][ T9932] debugfs: 'hsr0' already exists in 'hsr' [ 154.627307][ T9932] Cannot create hsr debugfs directory [ 154.681813][ T106] IPVS: stop unused estimator thread 0... [ 154.684068][T10066] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 154.685838][T10066] fuse: Unknown parameter './file0' [ 154.707525][ T40] audit: type=1400 audit(154.648:35284): avc: denied { setopt } for pid=10065 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.713748][T10066] MTD: Couldn't look up './bus': -15 [ 154.754993][ T9932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.759938][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.764123][ T9932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.768689][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.772455][ T9932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.776902][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.780383][ T9932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.791164][ T9932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.794571][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 154.841415][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.852725][ T9932] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.858382][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.860728][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.869636][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.871985][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.936984][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 154.941811][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 155.022815][ T5747] Bluetooth: hci1: command tx timeout [ 155.097869][T10112] fuse: Bad value for 'fd' [ 155.149079][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.154602][ T40] audit: type=1400 audit(155.098:35285): avc: denied { nlmsg_read } for pid=10117 comm="syz.5.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.156676][T10118] tmpfs: Bad value for 'mpol' [ 155.162296][ T40] audit: type=1400 audit(155.098:35286): avc: denied { mounton } for pid=10117 comm="syz.5.1194" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 155.179236][ T40] audit: type=1400 audit(155.108:35287): avc: denied { read } for pid=10117 comm="syz.5.1194" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 155.189130][ T40] audit: type=1400 audit(155.108:35288): avc: denied { open } for pid=10117 comm="syz.5.1194" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 155.277726][ T40] audit: type=1400 audit(155.218:35289): avc: denied { ioctl } for pid=10130 comm="syz.5.1196" path="mnt:[4026532869]" dev="nsfs" ino=4026532869 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 155.311353][ T9932] veth0_vlan: entered promiscuous mode [ 155.318600][ T9932] veth1_vlan: entered promiscuous mode [ 155.333908][ T9932] veth0_macvtap: entered promiscuous mode [ 155.338706][ T9932] veth1_macvtap: entered promiscuous mode [ 155.350302][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.360842][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.367272][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.370397][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.375219][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.379061][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.444203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.449112][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.474691][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.477617][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.484335][ T40] audit: type=1400 audit(155.428:35290): avc: denied { mounton } for pid=9932 comm="syz-executor" path="/syzkaller.0Re5uQ/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 155.493726][ T40] audit: type=1400 audit(155.428:35291): avc: denied { mounton } for pid=9932 comm="syz-executor" path="/syzkaller.0Re5uQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 155.502594][ T40] audit: type=1400 audit(155.438:35292): avc: denied { mounton } for pid=9932 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 155.732758][T10151] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.841977][T10162] overlayfs: failed to clone upperpath [ 156.250338][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 156.310356][T10206] kvm: kvm [10205]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 156.315591][T10206] kvm: kvm [10205]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 156.544727][T10222] kvm: pic: non byte read [ 156.548037][T10222] kvm: pic: non byte read [ 156.551141][T10222] kvm: pic: non byte read [ 156.554740][T10222] kvm: pic: non byte read [ 156.557986][T10222] kvm: pic: level sensitive irq not supported [ 156.558344][T10222] kvm: pic: non byte read [ 156.564614][T10222] kvm: pic: non byte read [ 156.568030][T10222] kvm: pic: non byte read [ 156.571349][T10222] kvm: pic: non byte read [ 156.574285][T10222] kvm: pic: non byte read [ 156.576861][T10222] kvm: pic: non byte read [ 156.580310][T10222] kvm: pic: single mode not supported [ 156.580319][T10222] kvm: pic: level sensitive irq not supported [ 156.583761][T10222] kvm: pic: single mode not supported [ 156.586766][T10222] kvm: pic: single mode not supported [ 156.591079][T10222] kvm: pic: level sensitive irq not supported [ 156.596375][T10222] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 156.723764][T10227] binder: 10226:10227 ioctl 4018620d 0 returned -22 [ 156.727016][T10227] binder: 10226:10227 ioctl c0306201 200000000240 returned -11 [ 156.858519][T10248] netlink: 'syz.5.1231': attribute type 4 has an invalid length. [ 156.859324][T10236] bond1 (unregistering): Released all slaves [ 156.862303][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 156.891858][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1231'. [ 156.933915][T10255] tipc: Trying to set illegal importance in message [ 156.939962][T10255] netlink: 'syz.5.1234': attribute type 3 has an invalid length. [ 156.943697][T10255] netlink: 'syz.5.1234': attribute type 1 has an invalid length. [ 157.027343][T10258] comedi comedi3: comedi_config --init_data is deprecated [ 157.102833][ T5747] Bluetooth: hci1: command tx timeout [ 157.107570][T10267] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 157.244619][T10277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.483416][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.486584][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.489614][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.493301][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.496358][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.499425][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 157.732180][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1247'. [ 157.753069][T10299] bridge1: port 1(erspan0) entered blocking state [ 157.755484][T10299] bridge1: port 1(erspan0) entered disabled state [ 157.757760][T10299] erspan0: entered allmulticast mode [ 157.760369][T10299] erspan0: entered promiscuous mode [ 157.762591][T10299] bridge1: port 1(erspan0) entered blocking state [ 157.764708][T10299] bridge1: port 1(erspan0) entered forwarding state [ 157.780187][T10299] bridge1: port 2(bond1) entered blocking state [ 157.782337][T10299] bridge1: port 2(bond1) entered disabled state [ 157.784727][T10299] bond1: entered allmulticast mode [ 157.787381][T10299] bond1: entered promiscuous mode [ 157.866783][T10316] overlayfs: failed to clone upperpath [ 157.868910][T10313] bridge_slave_1: left allmulticast mode [ 157.871569][T10313] bridge_slave_1: left promiscuous mode [ 157.874825][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.883771][T10313] bridge_slave_0: left allmulticast mode [ 157.887332][T10313] bridge_slave_0: left promiscuous mode [ 157.889460][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.994846][T10326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.007568][T10326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.140081][T10335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=10335 comm=syz.6.1259 [ 158.362822][ T50] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 158.420498][T10347] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1263'. [ 158.423987][T10348] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1263'. [ 158.433806][T10347] netlink: 'syz.6.1263': attribute type 2 has an invalid length. [ 158.436563][T10348] netlink: 'syz.6.1263': attribute type 2 has an invalid length. [ 158.522775][ T50] usb 10-1: Using ep0 maxpacket: 16 [ 158.527996][ T50] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 158.537818][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.543743][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.547207][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 158.551545][ T50] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 158.554866][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.564873][ T50] usb 10-1: config 0 descriptor?? [ 158.653839][T10367] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 158.653843][T10366] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 158.653861][T10366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1269'. [ 158.842564][T10382] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 158.997061][T10407] Invalid source name [ 158.998894][T10407] UBIFS error (pid: 10407): cannot open "/dev/sg0", error -22 [ 159.027746][T10412] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 159.128985][T10415] 9p: Bad value for 'wfdno' [ 159.133025][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.135923][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.138240][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.140607][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.143000][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.147178][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.149756][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.152019][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.154373][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.156774][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.159770][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.162072][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.166260][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.171863][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.174462][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.177404][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.178662][T10337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7708 sclass=netlink_route_socket pid=10337 comm=syz.5.1260 [ 159.179716][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.187330][ T5747] Bluetooth: hci1: command tx timeout [ 159.189727][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.192047][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.194711][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.197243][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.199200][ T50] usbhid 10-1:0.0: can't add hid device: -71 [ 159.199953][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.204935][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.205360][ T50] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 159.207638][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.212213][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.214535][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.217717][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.218566][ T50] usb 10-1: USB disconnect, device number 7 [ 159.220149][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.224269][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.226575][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.228893][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.231182][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.234054][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.236874][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.239212][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.241510][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.243847][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.246133][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.248503][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.250875][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.253314][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.255609][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.258385][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.260808][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.263360][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.265954][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.268731][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.271597][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.274589][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.277456][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.280264][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.283182][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.286916][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.289760][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.292562][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.295379][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.298219][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.301004][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.303957][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.306784][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.309539][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.313315][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.316950][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.319356][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.321721][T10423] nfs4: Unknown parameter './cgroup.net/cgroup.procs' [ 159.360639][ C1] [ 159.361677][ C1] ============================= [ 159.363615][ C1] [ BUG: Invalid wait context ] [ 159.365572][ C1] syzkaller #0 Tainted: G L [ 159.367977][ C1] ----------------------------- [ 159.369908][ C1] syz.1.1287/10441 is trying to lock: [ 159.372038][ C1] ffff88803c1212d0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 159.375771][ C1] other info that might help us debug this: [ 159.378066][ C1] context-{2:2} [ 159.379482][ C1] 1 lock held by syz.1.1287/10441: [ 159.381518][ C1] #0: ffff88803c121850 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 159.385432][ C1] stack backtrace: [ 159.386944][ C1] CPU: 1 UID: 0 PID: 10441 Comm: syz.1.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.386965][ C1] Tainted: [L]=SOFTLOCKUP [ 159.386970][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.386980][ C1] Call Trace: [ 159.386985][ C1] [ 159.386991][ C1] dump_stack_lvl+0x100/0x190 [ 159.387008][ C1] __lock_acquire+0xfa4/0x2630 [ 159.387021][ C1] ? __lock_acquire+0x4a5/0x2630 [ 159.387033][ C1] ? xa_load+0x149/0x2c0 [ 159.387061][ C1] ? xa_load+0x149/0x2c0 [ 159.387073][ C1] lock_acquire+0x1b1/0x370 [ 159.387085][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 159.387097][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 159.387107][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 159.387120][ C1] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 159.387136][ C1] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 159.387152][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 159.387177][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 159.387191][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 159.387210][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 159.387225][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 159.387244][ C1] xen_timer_callback+0x1db/0x2a0 [ 159.387259][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 159.387273][ C1] ? __hrtimer_run_queues+0x383/0xa00 [ 159.387293][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 159.387313][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 159.387329][ C1] __hrtimer_run_queues+0x142/0xa00 [ 159.387353][ C1] hrtimer_interrupt+0x3e5/0x940 [ 159.387366][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 159.387388][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 159.387403][ C1] [ 159.387407][ C1] [ 159.387431][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.387449][ C1] RIP: 0010:copy_process+0x3f22/0x7fa0 [ 159.387472][ C1] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b9 33 00 00 41 8b 4d 2c 48 8b bd f0 fe ff ff 31 c0 48 c1 e1 0c aa 0f 1f 44 00 00 e9 1c c9 ff ff 4c 89 bd f0 fe ff ff 41 89 df [ 159.387486][ C1] RSP: 0018:ffffc90005a7fa58 EFLAGS: 00010206 [ 159.387495][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000880 [ 159.387505][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900055bf780 [ 159.387513][ C1] RBP: ffffc90005a7fbe8 R08: 0000000000000005 R09: 0000000000000000 [ 159.387522][ C1] R10: fffff52000ab7000 R11: 0000000000000000 R12: 00000000003d0f00 [ 159.387532][ C1] R13: ffff888026724100 R14: ffff88802c0e8000 R15: ffffc90005a7fd40 [ 159.387547][ C1] ? copy_process+0x3eb9/0x7fa0 [ 159.387568][ C1] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 159.387584][ C1] ? __pfx_copy_process+0x10/0x10 [ 159.387608][ C1] ? _copy_from_user+0x59/0xd0 [ 159.387628][ C1] kernel_clone+0x12e/0x9c0 [ 159.387641][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.387661][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 159.387672][ C1] ? __lock_acquire+0x4a5/0x2630 [ 159.387691][ C1] __do_sys_clone3+0x214/0x290 [ 159.387704][ C1] ? __pfx___do_sys_clone3+0x10/0x10 [ 159.387722][ C1] ? _copy_to_user+0xaf/0xd0 [ 159.387745][ C1] ? rcu_is_watching+0x12/0xc0 [ 159.387772][ C1] do_syscall_64+0x10b/0xf80 [ 159.387787][ C1] ? clear_bhb_loop+0x40/0x90 [ 159.387804][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.387818][ C1] RIP: 0033:0x7f466159dbc9 [ 159.387830][ C1] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 159.387840][ C1] RSP: 002b:00007ffce202a038 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 159.387853][ C1] RAX: ffffffffffffffda RBX: 00007f4661559160 RCX: 00007f466159dbc9 [ 159.387863][ C1] RDX: 00007f4661559160 RSI: 0000000000000058 RDI: 00007ffce202a090 [ 159.387872][ C1] RBP: 00007f46624046c0 R08: 00007f46624046c0 R09: 00007ffce202a177 [ 159.387882][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 159.387891][ C1] R13: 000000000000000b R14: 00007ffce202a090 R15: 00007ffce202a178 [ 159.387905][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.545575][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 159.545587][ T40] audit: type=1400 audit(159.488:35314): avc: denied { write } for pid=5713 comm="syz-executor" path="pipe:[7452]" dev="pipefs" ino=7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 159.899670][T10429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.076650][T10429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.158111][T10429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.217124][T10429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.344602][T10429] bridge_slave_1: left allmulticast mode [ 160.346532][T10429] bridge_slave_1: left promiscuous mode [ 160.348403][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.351223][T10429] bridge_slave_0: left allmulticast mode [ 160.353293][T10429] bridge_slave_0: left promiscuous mode [ 160.355176][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.436012][T10429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.441236][T10429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.446046][T10429] bond0 (unregistering): Released all slaves [ 160.552483][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 160.665489][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 160.701273][T10429] hsr_slave_0: left promiscuous mode [ 160.704260][T10429] hsr_slave_1: left promiscuous mode [ 160.706912][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.710021][T10429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.713704][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.716910][T10429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.722820][T10429] veth1_macvtap: left promiscuous mode [ 160.725138][T10429] veth0_macvtap: left promiscuous mode [ 160.727496][T10429] veth1_vlan: left promiscuous mode [ 160.729190][T10429] veth0_vlan: left promiscuous mode [ 160.810742][T10429] team0 (unregistering): Port device team_slave_1 removed [ 160.817598][T10429] team0 (unregistering): Port device team_slave_0 removed [ 160.856082][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 160.968102][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 161.355985][T10429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.395445][T10429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.436369][T10429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.516969][T10429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.588413][T10429] bond1: left allmulticast mode [ 161.590495][T10429] bond1: left promiscuous mode [ 161.592622][T10429] bridge1: port 2(bond1) entered disabled state [ 161.596201][T10429] erspan0: left allmulticast mode [ 161.598345][T10429] erspan0: left promiscuous mode [ 161.600486][T10429] bridge1: port 1(erspan0) entered disabled state [ 161.688596][T10429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.694157][T10429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.697737][T10429] bond0 (unregistering): Released all slaves [ 161.700823][T10429] bond1 (unregistering): Released all slaves [ 161.832601][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 161.949809][T10429] hsr_slave_0: left promiscuous mode [ 161.952360][T10429] hsr_slave_1: left promiscuous mode [ 161.955366][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.958317][T10429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.961528][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.964580][T10429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.969729][T10429] veth1_macvtap: left promiscuous mode [ 161.971925][T10429] veth1_vlan: left promiscuous mode [ 161.974231][T10429] veth0_vlan: left promiscuous mode [ 162.038439][T10429] team0 (unregistering): Port device team_slave_1 removed [ 162.064665][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 162.168350][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 162.281745][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 162.814854][T10429] IPVS: stop unused estimator thread 0...