last executing test programs: 1m58.589558676s ago: executing program 3 (id=286): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) (fail_nth: 4) 1m58.389982863s ago: executing program 3 (id=289): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01f}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)) r3 = memfd_secret(0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) 1m58.389521878s ago: executing program 3 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x44040) 1m58.332379709s ago: executing program 3 (id=291): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000b40)="2bf5cee6", 0x4}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffd, 0xdf}}], 0x20, 0xc054}, 0x2c0408d0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b31c19ff76a008cba4f5bdbc295b2204", 0x10, 0xfffffffffffffffc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0xfffffffffffffffd, 0x0) keyctl$get_keyring_id(0x0, r4, 0xffffffffffffffa0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000b40)="2bf5cee6", 0x4}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffd, 0xdf}}], 0x20, 0xc054}, 0x2c0408d0) (async) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b31c19ff76a008cba4f5bdbc295b2204", 0x10, 0xfffffffffffffffc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0xfffffffffffffffd, 0x0) (async) keyctl$get_keyring_id(0x0, r4, 0xffffffffffffffa0) (async) 1m58.281887388s ago: executing program 3 (id=293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x1, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x0, 0x401, 0x3}, 0x0, 0x3506, 0x2, 0x1, 0x6, 0x50}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'crct10dif\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffffff"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181273f2", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000004c0)="9ced09f77146e0b4eb8d846e64b0483791ece8fb44294842a982c9bbe62ebb545b4dd17673d2d67de068861feccddfa5c87c06c6bb1a0e98039fccec40171788d7876c7939ff7e5e3fc9b688fd7fbede80e61c92236cd2532f460db4400c06fe59d275a632467352a17e702e6e907b12f28cff95df21ae70fa03830d3c41ecba0f1145e529f2711da36908401c2d245e9caa076110632d5c869a4525a11206626bc8bb872e4766e092a1712861340ac9ae4bbea546cede8639ff6be1443c4c036e13253358c52291a79c63ccd55c756d9566aa", 0xd3}, {&(0x7f0000000240)="796ada67a45a9db1995b4763e45da2c112b2e9c1d04a46fe1ef07151d2e98ae708069b05c67f4e0ed43042e7a70b99b50a10fb6cd6c7fda95c4d89dc2d78eb5b0cbf38ec9ad4cc69e4da9c8755d1108391ec7e155ca8", 0x56}], 0x2) r7 = socket(0x2b, 0x803, 0xfffffffe) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x5f3, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000085}, 0x40801) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r8}) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x14, &(0x7f0000001780), 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000a80)="361d17e2530ed4250012aa840972dac3ff4c5170fc71657cdb6de65345582a08c8b6af8da7975126d7c1d2f3b18cf483fb2324865b42f36766ab91b2c1d5c2af81b33c2db16bf9299416dc8a892994c1197aec572f6b", 0x56, 0x24000000, &(0x7f0000000a00)={0x11, 0xd, r10, 0x1, 0x4}, 0x14) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000100)={{r4}, 0x7, 0x7, 0x6}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=ANY=[], 0x14}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000640)={{r4, &(0x7f0000000400)='geneve1\x00', 0x4c8040, &(0x7f0000000440)={@_ha_fsid={[0x7, 0x8]}, {0x0, 0xb, 0x1, 0x3}}, 0x0, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x6d5}, {[0x5e5, 0x401, 0x6, 0x401]}, 0x49, 0x1000, &(0x7f0000001300)=""/4096}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r13, 0x40806685, &(0x7f0000000c40)={0x1, 0x0, 0x1000, 0xa8, &(0x7f0000000b40)="f21d5c62e98900048b1f7b94c49d1e8c9a9e49ee79ac350287385d018b9ee9d82dd7cde1d41cbc6b423401cef42fa5f3550feda7195c74504a120977fb071102b5d317d3a4a1f737a5e551966d595b1da4fd54abfecaee5e04672c0464124c95673b93bfd8f506f895f6d159a9a3fae32c96e9d63878030d6a435abbf527769b11b0d44f6598b893bdfc9fbe7b50fe16d1b0730f80931b7bdf023b78fb969c714a0452c3bfbf9de9", 0x3d, 0x0, &(0x7f0000000c00)="d2addbd3ac0019b9d86776e1c22288e084786555a3b3f868f36f5979e701329418b5c1b53a5a7d44d27039bb98621365b6e76e9e0461cf4f03a90b6d97"}) 1m58.002244703s ago: executing program 3 (id=295): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x500, 0x1000000}) 1m57.972386345s ago: executing program 32 (id=295): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x500, 0x1000000}) 1m31.572031413s ago: executing program 1 (id=791): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) syz_clone(0x4880000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.571891093s ago: executing program 1 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x30000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c0002801400030084001f000000110002000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m31.42144031s ago: executing program 1 (id=793): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.228643742s ago: executing program 1 (id=814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400ddff1900020001000000000000000a1400000003000000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="0600150000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000680)={0xfec00000, 0x30000, 0xb, 0x1, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m29.981323662s ago: executing program 1 (id=822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) openat(r1, &(0x7f0000000040)='./file0\x00', 0x440000, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff5}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xca7, 0x80000000, 0x6, 0x0, 0xe099a5f, 0x8001, 0x6, 0x7, 0xff, 0x3, 0x80000001, 0xb76c, 0x7, 0x3, 0x9, 0x6], 0x33163004, 0x14}) 1m29.431969915s ago: executing program 1 (id=830): syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x83fb, 0x3, 0x29, 0x4, 0x1, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x3, 0x26, 0x2080, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0xfffffffc, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x9, 0x100006, 0xf7fffff7, 0xfffffff8, 0xfffffffe]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x42, 0x0) (async) close(0x3) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aabeaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aafffe4e24009c90780100000004000000497a1d08fd3d0ee0cee42e8530c507022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e41ccf1f3c0aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f68924a44b952814743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d0180000000000000004331d0b7918724"], 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000002dc0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b203678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0xe, 0x8, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, [0x3]}}) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) (async) r7 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) (async) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000280)={0x8837, 0xad, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m29.405058636s ago: executing program 33 (id=830): syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x83fb, 0x3, 0x29, 0x4, 0x1, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x3, 0x26, 0x2080, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0xfffffffc, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x9, 0x100006, 0xf7fffff7, 0xfffffff8, 0xfffffffe]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x42, 0x0) (async) close(0x3) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aabeaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aafffe4e24009c90780100000004000000497a1d08fd3d0ee0cee42e8530c507022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e41ccf1f3c0aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f68924a44b952814743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d0180000000000000004331d0b7918724"], 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000002dc0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b203678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0xe, 0x8, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, [0x3]}}) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) (async) r7 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) (async) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000280)={0x8837, 0xad, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 33.33042608s ago: executing program 4 (id=1474): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) mprotect(&(0x7f0000249000/0x2000)=nil, 0x2000, 0x2000000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 33.271586482s ago: executing program 4 (id=1475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000007c0)={0x40, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000203aff20010000000000000000000000000001ff02000000000000000000000000000187009078fc000000000000000000000000000000000000000e0124fcaa8fc05a163e1fcdb481aba62b9f85a0b33f5f5f492cd2635bd306502849d07f99bf412bfc01ac359e2768d7c5a50abe320c05e96e6c2cf9aaec97f43189db19fec71c270561a36888722ae35dbd62962f985115aeeaca908a98f14b14d5c8a142b6f366622893c60f75d4a570c97791f80855072ef221cc5833c4e8d2fcc3d42c583ccb7a17a83a5214ddf416f4c96d429a86bbce1ae9897a6f"], 0x0) (rerun: 64) 32.440988319s ago: executing program 4 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2048) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 31.53807715s ago: executing program 4 (id=1496): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x1}}], 0x1, 0x0) close(r0) 31.301586849s ago: executing program 4 (id=1499): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x230080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r6, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r7}, './file0\x00'}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000080)={0x8, 0x5}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 31.141604502s ago: executing program 4 (id=1500): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x30}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x4, 0xc, 0x0, 0x401, 0x4, @private0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x1, 0xd35, 0x101}}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000004000002000000000000000000", @ANYRES32=r4, @ANYBLOB="03800000000000020800bc5efdf19305cf364aec6215c0617e60be40f2940dd89ed5e574370fc3f2348992f08ed6d6c7246bfc914ed119758b3341573ca756a93bf54c44da6c23c587fc5151a7a0a68263699456a6745271784e", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24044005}, 0x4054) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000400)='\xa9\xbd\x0f\xd8\xa0\x00') (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='bond0\x00') (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240f5ffffff090002"], 0x54}}, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.775374135s ago: executing program 34 (id=1500): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x30}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x4, 0xc, 0x0, 0x401, 0x4, @private0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x1, 0xd35, 0x101}}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000004000002000000000000000000", @ANYRES32=r4, @ANYBLOB="03800000000000020800bc5efdf19305cf364aec6215c0617e60be40f2940dd89ed5e574370fc3f2348992f08ed6d6c7246bfc914ed119758b3341573ca756a93bf54c44da6c23c587fc5151a7a0a68263699456a6745271784e", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24044005}, 0x4054) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000400)='\xa9\xbd\x0f\xd8\xa0\x00') (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='bond0\x00') (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240f5ffffff090002"], 0x54}}, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.576439181s ago: executing program 6 (id=1757): syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000101907800000000ffffffff2a00907800000000961a5b7973c3c33d2469863a94995f6d35e23ce557941ef3814f55ec66f24c4dde29f5be8d4429c1c87e8bf6070b2331bdccfa6471796d06fc48c7ba9177edc1fb1a6ceae299bc377c7f2dad97c77a31d1b9ae32d634922ac414afb5e1b50c9349efaf031a33b0c5b4963ee8161c38749959756225124b076f121d0591b51f832b140dd7bd58d4cece00956d0ba7fca869f5155173e37a2c22880b1966d0aaa821656c557aa6a1d75fcb0dfacf27c55794f510bbda372d63c806fbb9060000009e0f0432c986a2250c6e37c1d7"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@delqdisc={0xa4, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0xd}, {0x8, 0x2}, {0x5, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x10}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3}, @TCA_FQ_CODEL_ECN={0x8}]}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x80000000, 0x7, 0xfffffff9, 0x2, 0x4, 0x1000, 0x1, 0x6}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffff7f}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20005090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)="1e", 0x1}], 0x1}, 0x4c00c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x800883}, r9}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r9, 0x0, 0x2, 0x4}}, 0x20) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r11 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r11, 0x29, 0x4b, 0x0, 0x4) r12 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.311325245s ago: executing program 6 (id=1761): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="00000f00", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x42743) r7 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x7e, 0x870}}) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000300000000000086dd63269fe000183afffe880000000000000000000000000101ff020000000020000000000000000001880024c35d3931b183d014907803000000fe8000000000000000000000000000aa6f7f84ad7cda33f072bda217c215c9df5bfa4598847e6c4c4f32518197cc85eb49c47eb4c4cf8b63d5018f2a"], 0x0) 4.440287357s ago: executing program 6 (id=1780): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) syz_emit_vhci(&(0x7f0000003200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "83166e68dbd42c43"}}}, 0xe) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil) r2 = memfd_create(&(0x7f0000000a00)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\xe4\x1e\xc0\'\xf1*g\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7f\x8a.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xa8,r\xde+o:S\x81\xd5\xda\x84\x83>\xa5\x96(\xdf\xe3A_\x05XCk\x1d\xc9\xf0ZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x95rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x05\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oZ\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94#\xf81U\x88,\x81\xa1r\xfah\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe30e\x97e\xb5\xa3\xd2\xa2V\xf8\x0e\xa0\x11wJRN\x18\xfc\xd7\xf38%\r\xca+\x1e\x95P[=\x04\x01\xec\xdfw\xe2|\xac\x8e\x8b\x95\xa48\xd3\xb1\xe7\xae\x97\xa5\x1d\xd8\b\xa2\x943\xeb\\\xd7\x95\xdc\x9a\xda\x9e\xdf\xe5?\x16\'H\xe3\x02\xa1K\xc1\xeaZd\x9a\x88\xd4\x12\x14&V\xdfoVt7kS\xf1\xedwL<\x8c\xdf\a\v\xb1\xac\t\xc0fM-/\xb3k\x17\xbd`\xe63|\xf7\x93\x81PVg)#\x9exh\xcf\xccy*\xef/s\xdedrWP\'\x11\x12\xa9\xfcI\x9d.\x17o~\xder\x87\x87\xac\xcf\xa1[\xd8\xd5J\x8da\x9av\x0e<\xc0\xf9\x15\x9a9 \xb2\xbe\x18\x15[ow[\xab\xdd\x96\x1fC\xbb^~\x90{#\xf0g\x9bc\x19\xdb\xf7\xc6@\xdb\x0e\xf7V\x93\xa4\xfe\x85\xaeW\x19\x1f\x8d\xd0Q\x12\xc3\xac,\xae\xe4\x97\x1fvv\x85\xa6c\xb8YZ\n\xf5\x15o\xe1\xce|)\x94\xf8W\xd6\xf74#\x83\xf8\x89\xb4F\xd5\xe8z\x8b\x86\xcb\x9fI\x8ao\'\xba\xce\xbd-O\xee\x03\x03b\xb5\xb9{\xc1\x91~\xff\xc43\x13\x89pZ', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 4.359249109s ago: executing program 6 (id=1781): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000002480)=""/4096, &(0x7f0000000100)=0x1000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x5, 0x47a}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f00000056c0), 0x4) chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000200)='./file1\x00', &(0x7f0000000400)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4a21, 0x8, @private1, 0x3}}, [0x5f00, 0x9, 0x7a9c0000000, 0x8, 0x120, 0x30f, 0x3, 0x55, 0x6, 0x6, 0x4, 0x0, 0x2, 0x1, 0x1ff]}, &(0x7f0000000000)=0x100) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000680)={{0x42, 0x5c}, 'port1\x00', 0x0, 0x1b040d, 0xf1, 0x6, 0x5, 0xfffffff9, 0x0, 0x0, 0x4, 0x3}) r6 = socket(0x28, 0xa, 0x804) connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x50) write$binfmt_elf64(r6, 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r5, 0x8}, &(0x7f00000000c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r7, {0x5, 0xffff}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 4.310273009s ago: executing program 6 (id=1782): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2c, 0x1, 0x3fff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 3.780717114s ago: executing program 6 (id=1785): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc9) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000e00)) 3.73369213s ago: executing program 35 (id=1785): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc9) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000e00)) 1.550210779s ago: executing program 0 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200008, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async) r0 = inotify_init1(0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) (async) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x22001, 0x4) mknodat$loop(r1, &(0x7f0000000280)='./file0\x00', 0x8, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) (async) r2 = gettid() (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) (async) write$P9_RREADLINK(r3, &(0x7f0000000200)={0x12, 0x17, 0x1, {0x9, './control'}}, 0x12) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005f580c67d9cdc81fd07e9d044ec0856f083050c38861ee38559948f9fd418b7330d6923250ced5aa3c49d22b801c063e3355a48f4abe966162bd7d5cd15d1ff77741b54acd699292b8d618b35c9e635b483c5d15daf926495d1a947ebf85e49b01edd84062b21a8f19290913a1c9f07620b40dc045d1b57151909b4775c577e20c38505c9818ded36611ad8b23b034736d7aeab3548a5176fe44d283d2bd858e7f706e4faa", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000200"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xffff583b, r5, 0x4}, 0x38) (async) write$cgroup_pid(r3, &(0x7f00000002c0)=r2, 0x12) (async) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa4000950) (async) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x13, '\x00', @data=0x3, 0x9}]}) (async) rmdir(&(0x7f0000000100)='./control\x00') 1.449212585s ago: executing program 0 (id=1815): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000000)=0x2, 0x4) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x17, 0x5, 0x8, 0x81, 0xff, @remote}, 0x10) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x30a, 0x6, 0x6, 0x5, 0x3, @multicast}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1000, 0x9, 0x7fff, 0x3, 0x6}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="028b2b27dbde7e5b9eed3a55c9851ba6b517b8d1657fb64b5b4946cea626b9608c76f6531827c37fe60aeadfcd3a332ab83aecd597055f7af9894b12db1e4c37b5139ce0c58b042639100e1f4f384926d343e829f29f36d88d6dfe8f07fdc4586e99772db8a37c2439ada647ba9ef009a8a31f34e5fbe748c5a0de488ff983ad58e88046ec5fb7f5eb111a730fbdf7d5c4f288364258a60948ca163b94fcee7f477664e20f9a199b0ea1c281ca2f036e3c1cc0d4d5f2f46eb72dd72c5af09db6597b8926a8d5a9d42d61d9ec1055aff12374a3c8b70137", 0xd7) r2 = accept4$alg(r0, 0x0, 0x0, 0x100800) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="3accb368218a5700414166a2f06c435157507d304bdca52600b6a9f3d8ccfef3af0a75017766e400066fcb64867b6589efb721669f9aa4ddeebe16235beea3462c425f39be02f22e49ce5e66a405b3d546cb0a103ff76a4717b11aa3d227", 0x5e}], 0x1, &(0x7f00000002c0)=[@iv={0xd0, 0x117, 0x2, 0xba, "307e9ef473fdb14393bb39c669ce2d8083717c27c58042cb2dccc3023b0c71717028014b7c774b217bf4d744879b0e151be5727630ee046c8445e95e44f73d2afa98392d9f1f4c998dec49ab5dd3b45b50b00f2ae298211678a82c43ffd3cd97d858afa7665b595d9f5b2b70322b8af5e9779acbc696a8d689dffc81adbf18ab3e2f2b089983fa59b908770b04f4956ef9d3b272c51957999da578b52da9df3a1fef3b5ffac774a4ed3d40bf494a5cd1050c6be842ad7e8f34db"}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x64, "e2a60a2a1b7352b5bdfb3d7e77317cdbd9ae77125a24dcde9653938345048047b28728f0e31f2208b53bae261a62c4e92acd0cc729fd53df5b7d5b6171bf28f8c9d0c6cdfc75ec18f679994ca8843126d1b61c367d974d7d9b07009df9e5ba6f46142c24"}], 0x160, 0x400c004}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r3, 0x1) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x0) bind$unix(r4, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x0, 0x9, {{0x26, 0x4, 0x3, 0x1a, 0x98, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @private=0x4, {[@timestamp_prespec={0x44, 0x3c, 0x4, 0x3, 0x2, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x2}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xd4}, {@remote, 0x1}, {@rand_addr=0x64010100, 0x6}, {@loopback, 0xb1c}]}, @end, @timestamp={0x44, 0x18, 0x55, 0x0, 0x8, [0x1, 0x8, 0xf46, 0x3, 0xfd]}, @timestamp={0x44, 0x1c, 0x11, 0x0, 0x7, [0x8, 0x9, 0x6, 0x7, 0x7055, 0x8fa]}, @noop, @rr={0x7, 0xf, 0xd4, [@loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x34}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x700, 0x7, 0x4, 0x7bef, {{0x2d, 0x4, 0x2, 0x1, 0xb4, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010100, {[@noop, @end, @ssrr={0x89, 0x2b, 0x80, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @local, @private=0xa010102, @multicast2]}, @lsrr={0x83, 0xf, 0x98, [@multicast1, @multicast2, @multicast1]}, @generic={0x83, 0x3, "ce"}, @timestamp_addr={0x44, 0x4c, 0x1f, 0x1, 0x0, [{@loopback, 0x60}, {@empty, 0x3}, {@local, 0x4}, {@multicast1, 0x6}, {@loopback, 0xa}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x80000000}, {@empty, 0x78800000}]}, @end, @ssrr={0x89, 0xb, 0xd0, [@multicast2, @broadcast]}, @generic={0x89, 0x6, "63bfe9e8"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x20, 0x80, 0xa6d, 0x6, {{0x1a, 0x4, 0x2, 0x0, 0x68, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @ssrr={0x89, 0x17, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @multicast1, @local]}, @noop, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x9, [{@private=0xa010100, 0x31f}, {@remote, 0xfffffffc}, {@multicast1, 0xff}]}, @lsrr={0x83, 0x13, 0xa7, [@private=0xa010100, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @generic={0x88, 0x9, "9add59b2b9347f"}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb4, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x24020010) fstat(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r11, 0x0) connect$llc(r0, &(0x7f0000000b80)={0x1a, 0x5, 0xb3, 0x6, 0xff, 0x7f, @link_local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000000c00)=0x5, 0x4) recvmmsg(r4, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000c80)={0x0, 0x989680}) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000cc0), 0x319802, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r13) sendmsg$NL80211_CMD_JOIN_IBSS(r13, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, r14, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x13}, {0xc}, {0x9}, {0x7e}, {0x16, 0x1}, {0x1b}, {0x0, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xb94309d9f185dca0, 0x2, 0x5, 0x0, {0x4, 0x11bd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x400, 0x1}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffdb}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x40000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000f80)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000001040)=0x84) 1.258054247s ago: executing program 7 (id=1786): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}, 0x10) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000001d0100001500040000000000000000008b893b21c1f3344a0500000008000e00", @ANYRES32=0x0, @ANYBLOB="0800ff00"], 0x3c}}, 0x0) 1.200136003s ago: executing program 0 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000280)={0x0, &(0x7f0000000300)="883830c806f4c4c42eadd3f808e57bc09dd778949f1ce170c75f5977334bbc26463821ce9ba3a845ffb3a3fed39311abd34c4b5f239a31e6c41b4ed2bf680d7a1f85c7492bd36f6748074699cac69cd57e53ef57b95d2b581a1b8ce3cfdb8675db0ba0121ff34af2ca605cccf3aaaa3487fe4f8f7e3c3b6d0b8587dc20001a6c53b4949411e65ee0e9884c78146eff4fccbfe30568f26343cea3ed734c694e88eee6687ca1f7fe255a8cf05b1232cd190ccf26fe0001abca47cb43c0bceec912d6f18d36c33bcd19ded6", 0xca}) (async, rerun: 64) sendfile(r1, r1, 0x0, 0x3) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (rerun: 64) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="a92e81d0991808e33c3bcf14921387b83adf440d5da2a07461d1b38bf00c44d23c0cf3e552fd95f51e08f534f8ba3f4158ff5006cc5c7c24c9a769f976a54471ba447431050270073e2c73b5a7ec0175210bec9741e45ba4aaf0a8a24636f2363ff97992e71fbc4716ca8f31dc6a0ded2a7ffbce5e3cc659ab5a5c18788d14314c2ad01de92d345b15", 0x89}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b708"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r9 = gettid() (rerun: 32) sigaltstack(&(0x7f0000000000)={0x0, 0x1}, 0x0) (async) rt_sigqueueinfo(r9, 0x21, &(0x7f00000002c0)={0x3d}) recvmmsg(r8, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1}, 0x585}], 0x1, 0x100, 0x0) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) 1.199530266s ago: executing program 7 (id=1823): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fsopen(&(0x7f0000000100)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='\'\\\xe4\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x5}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x4b, "0f0070fafd7763a9d866710236300dacedd6966dca67ecf46fdd129acb2ce6ff9d410764826f798ce80a9ef4b3ce743dd3662f2a84bf34280b2700"/75}, &(0x7f0000000180)=0x53) 1.13074761s ago: executing program 0 (id=1825): r0 = socket(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x4a2c65) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb00002000000000000190780a010102ac1e0001940201011000907800060005"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r5}, {r4, 0x4020}, {r2, 0x8002}, {0xffffffffffffffff, 0x2288}, {0xffffffffffffffff, 0xb2}, {r6, 0x212e}], 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 781.350465ms ago: executing program 5 (id=1832): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}], 0x1c) mmap$xdp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x1010, r1, 0x0) 781.150004ms ago: executing program 5 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x30}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}}, 0x48800) 662.539192ms ago: executing program 5 (id=1834): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30}, 0x30) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000180)=@v2={0x3, 0x2, 0x8, 0x5, 0x1d, "391bc20f533fb67461b4f52d0509e50f76799a4ccfc25200b598ce193a"}, 0x26, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000540)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac21061946db51da73938526fbc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543106f678fd4e3fd54949f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b2390", 0x124, 0x880, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000200)="a5ee82d952e9ebdaf63b6bfb36d415194cae3b5846b3f852cae414af2d8b4e3bf738ae2bd379d7182a4c35252bde8cbc30b9b5fbb05654a21e30951b0e06f1295d6d56409b46fcc0f01586d5bec0049a0b124eb2e43083d4ae96adf8e2", &(0x7f0000000680)="33623c2ceaf443fad9af28bc6a73a7488c40dc947c64f98ed51d41b3b7e2a504a4bb9b6f7938490dd342a31f5efb7097847e33d400642c6e9803bf28b50104511d3726e58f5695a03729671d6b3fa0bcbf489b99c4084455f04623dcdeb747769be4ac0c9ab95eb765aa33a802ff66956fbd7bc49dccc8789d6ae92a8d016600bc922c380ba4cfdb948928d224dcfa16b95f1a1a22b689d0c083123e1eabbbc8fc5331552fc0f07108d5c181fe83d2ff23ff896dc0377e358ee004e3b5c3872e5384efe34c3a650d1d2967161886fb1bbb9d7e329e6321"}}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3f, 0x2, @tid=r8}, &(0x7f00000001c0)) 660.563435ms ago: executing program 5 (id=1835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) syz_emit_ethernet(0x106, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x128, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x203, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf00a}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008080}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x13800}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@deltaction={0x128, 0x31, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 580.919601ms ago: executing program 5 (id=1836): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) 510.94026ms ago: executing program 2 (id=1839): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r2, &(0x7f00000002c0)=""/153, 0x99) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x84000, 0x14) 315.767238ms ago: executing program 2 (id=1840): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xc}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x8, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095006e00000000007a6f005f596135d31c6833bb52305b95f2b64a33618975eadcecdbf444d77755de2b6373e106e80523bb553717ca08a8dcbbb2c09e5810105e13387341b12b316e016e9199c0b00dcde7b012dd58a25fa8946c249c77cf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 315.222053ms ago: executing program 7 (id=1841): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1908e900645600000000000000000000181100003df9ae5b346dfc010597d90dd1f13ea14bd1902bbada92d69ff90ecfe2b0db9e00820f553192daecfd665565cd4b0a625da518a9d7d84b06d7bca79066ff6be82c2776a24c0adc28fa4bb29a9e8928e7390b014a404439fc51f75f0ec2bd63639d2ccb96a0099ea246439bb182300dd89b670f388399a396af3916d5b5c1e1dce7ac3d2c758e2b9653cb", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffe0}, {0xa, 0x3}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3, 0x3, 0xe886, 0x7fffffff, 0x80000001, 0x10, 0x8ff, 0x35}}}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xa}}]}, 0x60}}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x33, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x6}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r0, 0x0, 0x0, @void}, 0xffffff18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="000128000c0003000100"/26], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4400c801) 314.918571ms ago: executing program 2 (id=1842): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x3, 0xf, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffff00, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 0x0, 0x25e8}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @local, [0xff], [], 'lo\x00', 'gre0\x00', {}, {}, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800200601fe800000000000000000000000000023fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800a00009aa448"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010100000000000000000100000a140000001100010000000000000000000300000a9cbe67a8223d283d31ed968cfa92cdeef6bbbf1b7d398912f59331ef680b37a732d797a405d944b8c702940287666901ffe439b60822619059bb16c5dcd3ca49e5dc70"], 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000b40)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a6759372832cb151e17", 0xc5}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f00000002c0)="fb4a738b8fff03179d16d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000f40)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0b524222b402d983bf26f200451ec6bf1c87b9eafb1d5f461d698c1794e3c12", 0xe6}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d2900d1d916b3c", 0xfffffffffffffd3e}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a392ba272cc19f9bd340fe510698d64490ee9abdb8a5be8344574ab87681bc20dc2a2e182248f17c60920ac", 0xab}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1df52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708a65169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d", 0x6f}, {&(0x7f0000000e00)="bf83903af3912b21320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4a8e7796256c92c6de993cbafa1a807e0aec7041984a7f5fa2427ca65c438e1d1cf9bb58e0c1c139d6d28f524a31d8f2494c216560c4d534b4e9007f21064e", 0xa9}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35b149534c9cda294cb32127994d0d1cfab82e10bc4c", 0xea}, {&(0x7f0000000640)="56ad3d7f4565c25d09318f41dad58e8c6f041a06bf111c29f4c3164c0f9f4b63b79014952045d79c05a7121264", 0x2d}, {&(0x7f0000000880)="c2fc1882898307b64beb6bdf026c2cc67cd2a0db9a3c93f3169c0da44bab1f4ecfc9a29fc4e181febf12d6e50e2f1d787c4f6ca046b2f8db28062caac6efcd0e1b381e79fecda250fd2e9f4067638b1ceeab8ea489460d76c824b322073d6befa9cddcbf94b48d9f1572c34cab4da1b075619ec95954e7705a6232d8139a09c683b06fd01728dc", 0x87}, {&(0x7f0000001040)="94fde22e7df16d45904db09d6ecd1c84106b9a325d76b6715b407cc6be29b8b20e548aedae91e881ab02d23baa726f4b89826d60ca1146cbbac085aa09e026eaf4bbf1865db8d50fa4ad78dac5a09943a378013885e593e3cc954e74e706188834f2cdfae219230cecffe9bbaaafd473ab5b0b8418d99c9114a8b7512a05f4125457ac08692cefe4301647ca27dde5ac39674928d4263200864538d1a5226fbb38cc0cf4cd5c770cfb903650dc14cbae0992a52aad56028f4500d1361b0312d03903426af5a653d400200d005409b9ff2e84791d6cae7d7e044abb4e23e040110a9093b067fdc272ea4f158d", 0xec}], 0xd, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x4a581) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40042}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=0x0, @ANYRESDEC=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) dup(r0) 234.670835ms ago: executing program 0 (id=1843): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x1, 0x1000, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) r4 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 233.754683ms ago: executing program 7 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 161.286429ms ago: executing program 7 (id=1845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100200000000000000037df00000c00a6000200000000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0xf}, {0xffe0}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xa400000000000000, 0x41000, 0xfffffffffffffffd}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r12, 0xc018620c, &(0x7f0000000280)={0x1}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r14, 0x112, 0x7, 0x0, &(0x7f0000000080)) 73.871293ms ago: executing program 2 (id=1846): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="fe9221d0c6949d07c5db7ff60ec0d3bcc975b2d77f91ca351931e0a0267c1a5a18941f1ce40053f2a641df939ce1f9d93c570d7f39bfa8febe9a6e8e849363c02617f5349a3618647fc26b26c1c234a015ff5b72aeb5c35ae4d2544d583e67c5f55dd9c7bbf04ccbaa258bf6bcd88e82ace8687d97cf761cfd79d38e6882ac", 0x7f}, {&(0x7f0000000100)="b21561eb14c27001fed182de1b0f500d1954b79617ad22278800f9a842ae2bf86f2672090105de03cbf8c34e9121e00501a9739c2f", 0x35}, {&(0x7f0000000180)="9f25e44239c883a7a1a10fac22267059e6fb2815d1aab5be8ed3234404f56d3f3d8bd48256fa436093dae6b31c94b49ee0ca86f9f154c30085b8864554aa2629759d67efd11b93021c38762b944a6e4c60a60dcf065647fb4b18e283e772b77c40e6669959d0871613611d29e3b69bfbb2a9ce1a662af7bed3c1cb2af1fd1beb77bfd2256481abb2ab142b056dd19ad6", 0x90}, {&(0x7f0000000240)="37edaaceb4c915c8103983bad31547a6a169d8aa1820ba0af0bc94d6e781530397ecca5530da771b841d357ff802c6fde2475b85f5da89e0b429382647a43a410655", 0x42}], 0x4}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000002180)="383b6edc849987e3cee2c52b2bf607b4a39078599062f50920bd3987cda4507feaca06a8ce61d271541a223b6322d82312e1f50a5e391da7252d1b22bfcd3d0790d743ed71fb455a2a8795c24ccfee", 0x4f}, {&(0x7f00000003c0)="ff5e0cc29651155e6fd43a6b26cdce6ef0adde4dd25be06136c30263af2ee445f94a3690e10bd4ae8774a0964a0d58c801b3ad8b114b1c81996f8001a8a5fc350869658255", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="23077a5e324d5def9f4cd425d6c6b788a7d01ef2045e744dbf786f77c3765f8c9fa7f6bb83b29275144988b2e8d395d629cea5c77c95ecb8176ac7a5eef714d1ce13ad7e94181a932c465457f90e637ffbdf2c45459514359775e5528ef46ebbe7038589608cf8f6f15fd912069990c8f050500524207c1b0aba7694e25519f4be413de77420fa49c1f551cac94cb61c1c680fec3289466a607afd4b382d528e859a6010edee46a9d2a9f21f1da5fd94b97da4ef50750f92bc8a6ff8cc3a4732ec173559e3a3d4cd6d7a", 0xca}, {&(0x7f00000005c0)="14ec124823ec4551b95bdc9a61a8a5ffba6164f679f2fd69fdbac1f0aad6005f91a70077e611eeaccb07dc16f8248f4f5f5e7f092db6d3fee88808671390d8cf7c9f1f31bd614be64961be0dc92f8ac1d1786057c23649e9c2313618e9696d93afee1e5ec50b7867365ea7a019b7594dbff33a1860bc4f95", 0x78}, {&(0x7f0000000640)="80", 0x1}, {0x0}], 0x4, &(0x7f00000007c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hoplimit={{0x14}}, @dstopts={{0x268, 0x29, 0x37, {0x2f, 0x49, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x7fff, [0x7, 0x8, 0x6, 0x2, 0x100000001]}}, @generic={0x8, 0x65, "8657f040b67bcaba13e7fc0e4a1e154b0c5b40f961ff68337ef22b96b86e22d19ff5bfe55e31ded4630bd62a37e6f9ca5827bb50e99517a88c85b6eeaae640a4aa998c3063f3ceb0d3869dd9217342d9afe56a3887a085d0540fc32f04c0935691311396dc"}, @generic={0x7, 0x7b, "cb5f5872e5ce246698afbe2263e960b51b92ef18a252602f7f1a195670c129cad32f15049c3c7bea370ce2fddd3bd6fd40e93aecc19cb940810917b08f995b3937e4d9b9ac6c201c1b891021af367328976923de192de333ec92abaf6836236e285856eb06bbaf5314f0725d0563ff0846d62bf4ff7e23034893f5"}, @ra={0x5, 0x2, 0x9}, @generic={0x8, 0x60, "108d04556b2f35709ae11f3f39b80f7918133f3deec5a0382d209779736a3964a2c01b746ec49670f2c314066dbf367254fdd13038b41c418f6e816346f537cc6f1f8a9f6be8ec235c764929b7a7c57d9f681690158d1d023bbf10204ab9bdee"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x9, 0x9c, [0xb, 0x3, 0xfc14, 0x1000, 0x673, 0x7, 0x4ed, 0x1000]}}, @jumbo={0xc2, 0x4, 0x48d0}, @generic={0xfb, 0x7e, "734ec82719d3040d74b8d1720acbe92606f61b32dfc1f61207e9372a13c1570dc94de63d73c014616d7b9850cfaeea524506c2fd2c33e62fe7f61390f0cc3899fe6b2e03efa5a259f158fca791979796d813601df523888371bd279c2a5da0475c734822c46c5ef40fb5e40cd3b4604e18eb21cc2c5ae7252bb01f4ac08f"}]}}}], 0x2e8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000b00)="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", 0x7e1}], 0x1}}], 0x4, 0x2008000) 65.033632ms ago: executing program 5 (id=1847): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 63.474588ms ago: executing program 2 (id=1848): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x11d500, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0xef, 0x6, 0x6, 0x8001}, {0x3ff, 0x9, 0x9, 0xa}, {0x3ff, 0x1, 0x4, 0x401}, {0x51a, 0x0, 0x3, 0x4}, {0xd7dd, 0x2, 0x7f, 0x10}, {0x8, 0x5, 0x5, 0x2}]}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010103000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x804) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000200), 0x4) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x200, 0x70bd2f, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0xc084) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x68, r5, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4e, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x60048454}, 0x20048054) 62.817087ms ago: executing program 0 (id=1849): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0xfffffc51) 1.196645ms ago: executing program 2 (id=1850): syz_emit_ethernet(0x1e1, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1d3, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty, "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"}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 0s ago: executing program 7 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) lseek(r0, 0x101, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0xe}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xce}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) getdents64(r0, 0x0, 0x203e17d0) kernel console output (not intermixed with test programs): 07][ T70] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.845999][ T70] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.877085][ T9333] netlink: 'syz.2.969': attribute type 3 has an invalid length. [ 118.907991][ T9335] comedi: valid board names for 8255 driver are: [ 118.910257][ T9335] 8255 [ 118.911211][ T9335] comedi: valid board names for vmk80xx driver are: [ 118.913324][ T9335] vmk80xx [ 118.914332][ T9335] comedi: valid board names for usbduxsigma driver are: [ 118.916485][ T9335] usbduxsigma [ 118.917824][ T9335] comedi: valid board names for usbduxfast driver are: [ 118.919967][ T9335] usbduxfast [ 118.921039][ T9335] comedi: valid board names for usbdux driver are: [ 118.923122][ T9335] usbdux [ 118.924073][ T9335] comedi: valid board names for ni6501 driver are: [ 118.926144][ T9335] ni6501 [ 118.927133][ T9335] comedi: valid board names for dt9812 driver are: [ 118.929313][ T9335] dt9812 [ 118.930368][ T9335] comedi: valid board names for ni_labpc_cs driver are: [ 118.932580][ T9335] ni_labpc_cs [ 118.933702][ T9335] comedi: valid board names for ni_daq_700 driver are: [ 118.935894][ T9335] ni_daq_700 [ 118.936998][ T9335] comedi: valid board names for labpc_pci driver are: [ 118.939254][ T9335] labpc_pci [ 118.940322][ T9335] comedi: valid board names for adl_pci9118 driver are: [ 118.942634][ T9335] pci9118dg [ 118.943705][ T9335] pci9118hg [ 118.944770][ T9335] pci9118hr [ 118.945807][ T9335] comedi: valid board names for 8255_pci driver are: [ 118.948389][ T9335] 8255_pci [ 118.949435][ T9335] comedi: valid board names for s526 driver are: [ 118.951474][ T9335] s526 [ 118.952405][ T9335] comedi: valid board names for multiq3 driver are: [ 118.954511][ T9335] multiq3 [ 118.955530][ T9335] comedi: valid board names for pcmuio driver are: [ 118.957709][ T9335] pcmuio48 [ 118.959288][ T9335] pcmuio96 [ 118.959882][ T9339] 9pnet_fd: p9_fd_create_unix (9339): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 118.960336][ T9335] comedi: valid board names for pcmmio driver are: [ 118.991127][ T9335] pcmmio [ 118.992227][ T9335] comedi: valid board names for pcmda12 driver are: [ 118.994407][ T9335] pcmda12 [ 118.995421][ T9335] comedi: valid board names for pcmad driver are: [ 118.997532][ T9335] pcmad12 [ 118.998548][ T9335] pcmad16 [ 118.999619][ T9335] comedi: valid board names for ni_labpc driver are: [ 119.001790][ T9335] lab-pc-1200 [ 119.002974][ T9335] lab-pc-1200ai [ 119.004216][ T9335] lab-pc+ [ 119.005311][ T9335] comedi: valid board names for atmio16 driver are: [ 119.007490][ T9335] atmio16 [ 119.008476][ T9335] atmio16d [ 119.009588][ T9335] comedi: valid board names for ni_at_ao driver are: [ 119.011781][ T9335] at-ao-6 [ 119.012809][ T9335] at-ao-10 [ 119.013906][ T9335] comedi: valid board names for ni_at_a2150 driver are: [ 119.016172][ T9335] ni_at_a2150 [ 119.017420][ T9335] comedi: valid board names for adq12b driver are: [ 119.019584][ T9335] adq12b [ 119.020577][ T9335] comedi: valid board names for mpc624 driver are: [ 119.022732][ T9335] mpc624 [ 119.023707][ T9335] comedi: valid board names for c6xdigio driver are: [ 119.025894][ T9335] c6xdigio [ 119.027001][ T9335] comedi: valid board names for aio_iiro_16 driver are: [ 119.029310][ T9335] aio_iiro_16 [ 119.030545][ T9335] comedi: valid board names for aio_aio12_8 driver are: [ 119.032803][ T9335] aio_aio12_8 [ 119.033982][ T9335] aio_ai12_8 [ 119.035141][ T9335] aio_ao12_4 [ 119.036269][ T9335] comedi: valid board names for fl512 driver are: [ 119.038377][ T9335] fl512 [ 119.039309][ T9335] comedi: valid board names for dmm32at driver are: [ 119.041392][ T9335] dmm32at [ 119.042504][ T9335] comedi: valid board names for dt282x driver are: [ 119.044670][ T9335] dt2821 [ 119.045650][ T9335] dt2821-f [ 119.046753][ T9335] dt2821-g [ 119.047923][ T9335] dt2823 [ 119.048904][ T9335] dt2824-pgh [ 119.050056][ T9335] dt2824-pgl [ 119.051231][ T9335] dt2825 [ 119.052233][ T9335] dt2827 [ 119.053287][ T9335] dt2828 [ 119.054268][ T9335] dt2829 [ 119.055318][ T9335] dt21-ez [ 119.056335][ T9335] dt23-ez [ 119.057446][ T9335] dt24-ez [ 119.058476][ T9335] dt24-ez-pgl [ 119.059715][ T9335] comedi: valid board names for dt2817 driver are: [ 119.061865][ T9335] dt2817 [ 119.062855][ T9335] comedi: valid board names for dt2815 driver are: [ 119.064990][ T9335] dt2815 [ 119.065967][ T9335] comedi: valid board names for dt2814 driver are: [ 119.067257][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.068187][ T9335] dt2814 [ 119.071569][ T9335] comedi: valid board names for dt2811 driver are: [ 119.073739][ T9335] dt2811-pgh [ 119.074915][ T9335] dt2811-pgl [ 119.076075][ T9335] comedi: valid board names for dt2801 driver are: [ 119.078323][ T9335] dt2801 [ 119.079302][ T9335] comedi: valid board names for das6402 driver are: [ 119.081429][ T9335] das6402-12 [ 119.082640][ T9335] das6402-16 [ 119.083791][ T9335] comedi: valid board names for das1800 driver are: [ 119.085958][ T9335] das-1701st [ 119.087117][ T9335] das-1701st-da [ 119.088382][ T9335] das-1702st [ 119.089536][ T9335] das-1702st-da [ 119.090776][ T9335] das-1702hr [ 119.091969][ T9335] das-1702hr-da [ 119.093204][ T9335] das-1701ao [ 119.094377][ T9335] das-1702ao [ 119.095531][ T9335] das-1801st [ 119.096677][ T9335] das-1801st-da [ 119.097941][ T9335] das-1802st [ 119.099109][ T9335] das-1802st-da [ 119.100344][ T9335] das-1802hr [ 119.101502][ T9335] das-1802hr-da [ 119.102784][ T9335] das-1801hc [ 119.103943][ T9335] das-1802hc [ 119.105109][ T9335] das-1801ao [ 119.106261][ T9335] das-1802ao [ 119.107466][ T9335] comedi: valid board names for das800 driver are: [ 119.109595][ T9335] das-800 [ 119.110623][ T9335] cio-das800 [ 119.111768][ T9335] das-801 [ 119.112852][ T9335] cio-das801 [ 119.114007][ T9335] das-802 [ 119.115040][ T9335] cio-das802 [ 119.116242][ T9335] cio-das802/16 [ 119.117525][ T9335] comedi: valid board names for isa-das08 driver are: [ 119.119718][ T9335] isa-das08 [ 119.120851][ T9335] das08-pgm [ 119.122010][ T9335] das08-pgh [ 119.123164][ T9335] das08-pgl [ 119.124302][ T9335] das08-aoh [ 119.125445][ T9335] das08-aol [ 119.126578][ T9335] das08-aom [ 119.127738][ T9335] das08/jr-ao [ 119.128933][ T9335] das08jr-16-ao [ 119.130166][ T9335] pc104-das08 [ 119.131364][ T9335] das08jr/16 [ 119.132542][ T9335] comedi: valid board names for das16m1 driver are: [ 119.134626][ T9335] das16m1 [ 119.135646][ T9335] comedi: valid board names for dac02 driver are: [ 119.137834][ T9335] dac02 [ 119.138797][ T9335] comedi: valid board names for rti802 driver are: [ 119.140931][ T9335] rti802 [ 119.141943][ T9335] comedi: valid board names for rti800 driver are: [ 119.144088][ T9335] rti800 [ 119.145087][ T9335] rti815 [ 119.146124][ T9335] comedi: valid board names for pcm3724 driver are: [ 119.148392][ T9335] pcm3724 [ 119.149500][ T9335] comedi: valid board names for pcl818 driver are: [ 119.151667][ T9335] pcl818l [ 119.152766][ T9335] pcl818h [ 119.153792][ T9335] pcl818hd [ 119.154903][ T9335] pcl818hg [ 119.156016][ T9335] pcl818 [ 119.156997][ T9335] pcl718 [ 119.158054][ T9335] pcm3718 [ 119.159150][ T9335] comedi: valid board names for pcl816 driver are: [ 119.161319][ T9335] pcl816 [ 119.162324][ T9335] pcl814b [ 119.163418][ T9335] comedi: valid board names for pcl812 driver are: [ 119.165551][ T9335] pcl812 [ 119.166532][ T9335] pcl812pg [ 119.167686][ T9335] acl8112pg [ 119.168819][ T9335] acl8112dg [ 119.169947][ T9335] acl8112hg [ 119.171089][ T9335] a821pgl [ 119.172189][ T9335] a821pglnda [ 119.173353][ T9335] a821pgh [ 119.174374][ T9335] a822pgl [ 119.175443][ T9335] a822pgh [ 119.176516][ T9335] a823pgl [ 119.177628][ T9335] a823pgh [ 119.178653][ T9335] pcl813 [ 119.179678][ T9335] pcl813b [ 119.180706][ T9335] acl8113 [ 119.181796][ T9335] iso813 [ 119.182883][ T9335] acl8216 [ 119.183910][ T9335] a826pg [ 119.184935][ T9335] comedi: valid board names for pcl730 driver are: [ 119.187105][ T9335] pcl730 [ 119.188130][ T9335] iso730 [ 119.189159][ T9335] acl7130 [ 119.190185][ T9335] pcm3730 [ 119.191274][ T9335] pcl725 [ 119.192288][ T9335] p8r8dio [ 119.193370][ T9335] acl7225b [ 119.194482][ T9335] p16r16dio [ 119.195566][ T9335] pcl733 [ 119.196509][ T9335] pcl734 [ 119.197530][ T9335] opmm-1616-xt [ 119.198701][ T9335] pearl-mm-p [ 119.199863][ T9335] ir104-pbf [ 119.200892][ T9335] comedi: valid board names for pcl726 driver are: [ 119.203074][ T9335] pcl726 [ 119.204034][ T9335] pcl727 [ 119.205177][ T9335] pcl728 [ 119.206166][ T9335] acl6126 [ 119.207276][ T9335] acl6128 [ 119.208260][ T9335] comedi: valid board names for pcl724 driver are: [ 119.210379][ T9335] pcl724 [ 119.211335][ T9335] pcl722 [ 119.212361][ T9335] pcl731 [ 119.213324][ T9335] acl7122 [ 119.214403][ T9335] acl7124 [ 119.215434][ T9335] pet48dio [ 119.216590][ T9335] pcmio48 [ 119.217682][ T9335] onyx-mm-dio [ 119.218867][ T9335] comedi: valid board names for pcl711 driver are: [ 119.221020][ T9335] pcl711 [ 119.222029][ T9335] pcl711b [ 119.223123][ T9335] acl8112hg [ 119.224263][ T9335] acl8112dg [ 119.225377][ T9335] comedi: valid board names for amplc_pc263 driver are: [ 119.227664][ T9335] pc263 [ 119.228635][ T9335] comedi: valid board names for amplc_pc236 driver are: [ 119.230926][ T9335] pc36at [ 119.231924][ T9335] comedi: valid board names for amplc_dio200 driver are: [ 119.234247][ T9335] pc212e [ 119.235242][ T9335] pc214e [ 119.236268][ T9335] pc215e [ 119.237333][ T9335] pc218e [ 119.238498][ T9335] pc272e [ 119.238551][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.239499][ T9335] comedi: valid board names for comedi_parport driver are: [ 119.243098][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.245319][ T9335] comedi_parport [ 119.248569][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.249697][ T9335] comedi: valid board names for comedi_test driver are: [ 119.253749][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.253763][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.255050][ T10] usb 5-1: config 0 descriptor?? [ 119.256089][ T9335] comedi_test [ 119.264554][ T9335] comedi: valid board names for comedi_bond driver are: [ 119.266750][ T9335] comedi_bond [ 119.392686][ T9346] syzkaller0: entered promiscuous mode [ 119.394561][ T9346] syzkaller0: entered allmulticast mode [ 119.678674][ T9330] qnx6: unable to set blocksize [ 119.719170][ T5935] net_ratelimit: 268 callbacks suppressed [ 119.719214][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.751444][ T9348] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 119.903015][ T59] tipc: Node number set to 2886997028 [ 119.909638][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.913499][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.939024][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 119.942479][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.962083][ T10] usb 5-1: USB disconnect, device number 6 [ 120.003233][ T9362] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 120.006729][ T9362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.289255][ T5939] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 120.292924][ T5939] Bluetooth: hci1: Injecting HCI hardware error event [ 120.296245][ T5939] Bluetooth: hci1: hardware error 0x00 [ 120.758242][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.559952][ T1464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.807455][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.357866][ T5939] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 122.600572][ T9352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.744105][ T9409] __nla_validate_parse: 14 callbacks suppressed [ 122.744122][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 122.782407][ T9409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9409 comm=syz.0.987 [ 122.842620][ T41] kauditd_printk_skb: 15 callbacks suppressed [ 122.842638][ T41] audit: type=1400 audit(2000000015.839:619): avc: denied { getopt } for pid=9404 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.856278][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.918126][ T9414] tmpfs: Bad value for 'mpol' [ 122.945022][ T9414] syzkaller0: entered promiscuous mode [ 122.947099][ T9414] syzkaller0: entered allmulticast mode [ 122.987719][ T41] audit: type=1400 audit(2000000015.989:620): avc: denied { bind } for pid=9425 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.994985][ T9429] netlink: 'syz.5.992': attribute type 3 has an invalid length. [ 123.054995][ T9435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.066184][ T41] audit: type=1400 audit(2000000016.059:621): avc: denied { shutdown } for pid=9425 comm="syz.4.991" laddr=fe80::11 lport=58 faddr=ff02::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.101335][ T9439] kvm: user requested TSC rate below hardware speed [ 123.203557][ T41] audit: type=1400 audit(2000000016.199:622): avc: denied { map } for pid=9442 comm="syz.2.996" path="/dev/ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 123.877917][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.124642][ T9455] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 124.129166][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 124.132343][ T9455] netlink: 'syz.4.999': attribute type 26 has an invalid length. [ 124.183587][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.275244][ T9477] fuse: Bad value for 'group_id' [ 124.276985][ T9477] fuse: Bad value for 'group_id' [ 124.290235][ T9472] bond10: option xmit_hash_policy: invalid value (6) [ 124.293267][ T9472] bond10 (unregistering): Released all slaves [ 124.305329][ T9481] Unsupported ieee802154 address type: 0 [ 124.313438][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 124.316322][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 124.344911][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'. [ 124.532400][ T41] audit: type=1800 audit(2000000017.529:623): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1017" name="file0" dev="tmpfs" ino=1288 res=0 errno=0 [ 124.541399][ T41] audit: type=1804 audit(2000000017.529:624): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1017" name="/newroot/241/file0" dev="tmpfs" ino=1288 res=1 errno=0 [ 124.555984][ T9513] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1016'. [ 124.563964][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 124.600001][ T9523] fuse: Invalid rootmode [ 124.630945][ T9525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9525 comm=syz.5.1020 [ 124.694764][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'. [ 124.697850][ T9534] [U]  [ 124.737567][ T9536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.774735][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1025'. [ 124.787524][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 124.836499][ T9543] netlink: 'syz.5.1026': attribute type 10 has an invalid length. [ 124.839313][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1026'. [ 124.842341][ T9543] team0: entered promiscuous mode [ 124.843985][ T9543] team_slave_0: entered promiscuous mode [ 124.845923][ T9543] team_slave_1: entered promiscuous mode [ 124.847913][ T9543] team0: entered allmulticast mode [ 124.849580][ T9543] team_slave_0: entered allmulticast mode [ 124.851410][ T9543] team_slave_1: entered allmulticast mode [ 124.853751][ T9543] bridge0: port 3(team0) entered blocking state [ 124.855867][ T9543] bridge0: port 3(team0) entered disabled state [ 124.859615][ T9543] bridge0: port 3(team0) entered blocking state [ 124.861680][ T9543] bridge0: port 3(team0) entered forwarding state [ 124.937758][ T9] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 124.943350][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.946806][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.951094][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.954343][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.958400][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.961693][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.965400][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.969863][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.973682][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.976950][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.980921][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.984214][ T9557] ieee802154 phy1 wpan1: encryption failed: -22 [ 124.985338][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 124.992561][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.996952][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 125.003201][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.007743][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 125.012539][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.015685][ T9] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.018612][ T9] usb 9-1: Product: syz [ 125.020038][ T9] usb 9-1: Manufacturer: syz [ 125.021549][ T9] usb 9-1: SerialNumber: syz [ 125.024723][ T9] usb 9-1: config 0 descriptor?? [ 125.054327][ T9557] can0: slcan on ttyS3. [ 125.118088][ T9556] can0 (unregistered): slcan off ttyS3. [ 125.156408][ T9560] tmpfs: Bad value for 'size' [ 125.291530][ T1464] usb 9-1: USB disconnect, device number 4 [ 125.630529][ T9574] tc_dump_action: action bad kind [ 125.714266][ T9580] ipvlan2: entered allmulticast mode [ 125.716194][ T9580] batadv_slave_1: entered allmulticast mode [ 125.745707][ T9585] tmpfs: Too few inodes for current use [ 125.762772][ T41] audit: type=1400 audit(2000000018.759:625): avc: denied { append } for pid=9587 comm="syz.2.1041" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.835239][ T9592] kvm: pic: single mode not supported [ 125.835363][ T9592] kvm: pic: level sensitive irq not supported [ 125.839856][ T9592] kvm: pic: non byte write [ 125.844822][ T9592] kvm: pic: non byte write [ 125.943779][ T41] audit: type=1400 audit(2000000018.939:626): avc: denied { ioctl } for pid=9599 comm="syz.4.1043" path="net:[4026533539]" dev="nsfs" ino=4026533539 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.994279][ T9604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.071807][ T41] audit: type=1400 audit(2000000019.069:627): avc: denied { getopt } for pid=9608 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.109847][ T9609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.131568][ T9610] 9pnet_virtio: no channels available for device syz [ 126.147981][ T9609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.158010][ T9610] netfs: Couldn't get user pages (rc=-14) [ 126.160596][ T9610] netfs: Zero-sized read [R=a] [ 126.163488][ T9614] netfs: Couldn't get user pages (rc=-14) [ 126.165395][ T9614] netfs: Zero-sized read [R=b] [ 126.191578][ T9609] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 126.226918][ T9609] bond0 (unregistering): Released all slaves [ 126.419247][ T9626] batman_adv: batadv0: Adding interface: ipvlan2 [ 126.422103][ T9626] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.432498][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.436861][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.441011][ T9626] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 126.569864][ T9634] block nbd4: shutting down sockets [ 126.902552][ T41] audit: type=1400 audit(2000000019.899:628): avc: denied { read } for pid=9652 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.953496][ T9658] TCP: TCP_TX_DELAY enabled [ 126.958553][ T9658] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 137.722113][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.893742][ T9667] QAT: Invalid ioctl -2114415556 [ 141.895220][ T9670] netlink: 'syz.4.1064': attribute type 15 has an invalid length. [ 141.895774][ T9667] QAT: Invalid ioctl -805268418 [ 141.898332][ T9670] __nla_validate_parse: 11 callbacks suppressed [ 141.898342][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 141.902444][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 141.906984][ T9667] QAT: Invalid ioctl -2114415556 [ 141.908439][ T9670] netlink: 'syz.4.1064': attribute type 15 has an invalid length. [ 141.910326][ T9667] QAT: Invalid ioctl -2114415556 [ 141.912742][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 141.915158][ T9667] QAT: Invalid ioctl -805268418 [ 141.917405][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 141.919322][ T9667] QAT: Invalid ioctl -805268419 [ 141.921616][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 141.923643][ T9667] QAT: Invalid ioctl -2114415556 [ 141.926153][ T9673] tipc: Started in network mode [ 141.929320][ T9673] tipc: Node identity 4, cluster identity 4711 [ 141.931295][ T9673] tipc: Node number set to 4 [ 141.933033][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 141.938418][ T9667] QAT: Invalid ioctl -805268419 [ 141.940114][ T9667] QAT: Invalid ioctl -2114415556 [ 141.941945][ T9667] QAT: Invalid ioctl -805268419 [ 141.946230][ T9667] trusted_key: encrypted_key: insufficient parameters specified [ 141.981052][ T9682] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1067'. [ 142.183420][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1077'. [ 142.186855][ T41] audit: type=1400 audit(2000000035.179:629): avc: denied { checkpoint_restore } for pid=9698 comm="syz.2.1074" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.228916][ T9713] fuse: Bad value for 'fd' [ 142.231406][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1079'. [ 142.234320][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'. [ 142.257406][ T9] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 142.292129][ T41] audit: type=1400 audit(2000000035.289:630): avc: denied { setopt } for pid=9721 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.353466][ T9730] netlink: 'syz.5.1084': attribute type 9 has an invalid length. [ 142.356039][ T9730] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1084'. [ 142.419434][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 142.433419][ T9] usb 9-1: config 64 has an invalid interface number: 4 but max is 3 [ 142.436227][ T9] usb 9-1: config 64 has an invalid interface number: 230 but max is 3 [ 142.439160][ T9] usb 9-1: config 64 has an invalid interface number: 29 but max is 3 [ 142.441739][ T9] usb 9-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 142.444568][ T9] usb 9-1: config 64 has an invalid interface number: 236 but max is 3 [ 142.444582][ T9] usb 9-1: config 64 has no interface number 0 [ 142.444591][ T9] usb 9-1: config 64 has no interface number 1 [ 142.451596][ T9] usb 9-1: config 64 has no interface number 2 [ 142.453606][ T9] usb 9-1: config 64 has no interface number 3 [ 142.455642][ T9] usb 9-1: config 64 interface 4 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 142.459493][ T9] usb 9-1: config 64 interface 4 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 142.462999][ T9] usb 9-1: config 64 interface 4 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 142.466413][ T9] usb 9-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 142.469882][ T9] usb 9-1: config 64 interface 4 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 142.473297][ T9] usb 9-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 142.476696][ T9] usb 9-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 142.480317][ T9] usb 9-1: config 64 interface 4 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 142.484635][ T9] usb 9-1: config 64 interface 4 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 142.486094][ T9741] sctp: [Deprecated]: syz.2.1087 (pid 9741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.486094][ T9741] Use struct sctp_sack_info instead [ 142.488405][ T9] usb 9-1: config 64 interface 230 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 142.497629][ T9] usb 9-1: config 64 interface 29 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 142.501071][ T9] usb 9-1: config 64 interface 29 altsetting 127 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 142.504608][ T9] usb 9-1: config 64 interface 29 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 142.508094][ T9] usb 9-1: config 64 interface 29 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 142.511556][ T9] usb 9-1: config 64 interface 29 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 142.515244][ T9] usb 9-1: config 64 interface 29 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 142.518774][ T9] usb 9-1: config 64 interface 29 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 142.522279][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 142.526057][ T9] usb 9-1: config 64 interface 236 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 142.529798][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 142.533227][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 142.538905][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 142.543359][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 142.546792][ T9] usb 9-1: config 64 interface 236 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 142.550381][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 142.553726][ T9] usb 9-1: config 64 interface 236 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 142.557153][ T9] usb 9-1: config 64 interface 236 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 142.561462][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 142.564882][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 142.568769][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 142.572318][ T9] usb 9-1: config 64 interface 236 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 142.576663][ T9] usb 9-1: config 64 interface 4 has no altsetting 0 [ 142.579265][ T9] usb 9-1: config 64 interface 230 has no altsetting 0 [ 142.581482][ T9] usb 9-1: config 64 interface 29 has no altsetting 0 [ 142.583680][ T9] usb 9-1: config 64 interface 236 has no altsetting 0 [ 142.589583][ T9] usb 9-1: New USB device found, idVendor=19d2, idProduct=0021, bcdDevice=94.cc [ 142.592516][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.595025][ T9] usb 9-1: Product: syz [ 142.596347][ T9] usb 9-1: Manufacturer: ᰃ깁莢㡟び穿੅䄶௵팛ᐏ⾟꼕턎婈鼛㑁观먔穂堔ʧ滵谈䖯蹛緱ۉ辚滒韁ꬲ䙏꾂飔㪪毪⿬횤靕⒖㎊迹⓷섌⎪暮쬎澦잓㚕䚯ገ黿镗銕氠雥񺻬ꕴ쏵ŝ㜯뙲섞鲂Ꚕ푬ワ芿䗒痾⁦꺓磂螺祖醣 [ 142.604871][ T9] usb 9-1: SerialNumber: syz [ 142.710793][ T9761] QAT: Stopping all acceleration devices. [ 142.792744][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 142.824102][ T9] usb-storage 9-1:64.236: USB Mass Storage device detected [ 142.893066][ T9] usb 9-1: USB disconnect, device number 5 [ 143.604690][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 143.608662][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 143.619113][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.728960][ T9804] tipc: MTU too low for tipc bearer [ 143.839978][ T9810] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 143.856670][ T9810] bond1: entered promiscuous mode [ 143.858724][ T9810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.948106][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.236293][ T9844] openvswitch: netlink: Key type 70 is out of range max 32 [ 144.270322][ T9846] Sensor A: ================= START STATUS ================= [ 144.272922][ T9846] Sensor A: Test Pattern: 75% Colorbar [ 144.274971][ T9846] Sensor A: Show Information: All [ 144.276636][ T9846] Sensor A: Vertical Flip: false [ 144.281128][ T9846] Sensor A: Horizontal Flip: false [ 144.282854][ T9846] Sensor A: Brightness: 128 [ 144.284441][ T9846] Sensor A: Contrast: 128 [ 144.285861][ T9846] Sensor A: Hue: 0 [ 144.287164][ T9846] Sensor A: Saturation: 128 [ 144.291042][ T9846] Sensor A: ================== END STATUS ================== [ 144.429138][ T41] audit: type=1400 audit(2000000002.029:631): avc: denied { link } for pid=9854 comm="syz.0.1120" name="file0" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.677424][ T5622] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.757533][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.797356][ T6116] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 144.840187][ T5622] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 144.843610][ T5622] usb 5-1: config 1 has no interface number 0 [ 144.846244][ T5622] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 144.853100][ T9881] No source specified [ 144.857430][ T5622] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 144.861720][ T5622] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.870138][ T5622] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 144.873463][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.876908][ T5622] usb 5-1: Product: syz [ 144.887380][ T5622] usb 5-1: Manufacturer: syz [ 144.889502][ T5622] usb 5-1: SerialNumber: syz [ 144.896045][ T9862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.949832][ T6116] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 144.953471][ T6116] usb 9-1: config 0 has no interface number 0 [ 144.969767][ T6116] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 144.972855][ T6116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.975604][ T6116] usb 9-1: Product: syz [ 144.977034][ T6116] usb 9-1: Manufacturer: syz [ 144.978740][ T6116] usb 9-1: SerialNumber: syz [ 144.982643][ T9894] netlink: 'syz.5.1132': attribute type 12 has an invalid length. [ 144.982991][ T6116] usb 9-1: config 0 descriptor?? [ 144.988765][ T6116] hub 9-1:0.132: bad descriptor, ignoring hub [ 144.990876][ T6116] hub 9-1:0.132: probe with driver hub failed with error -5 [ 144.995662][ T6116] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input16 [ 145.060941][ T41] audit: type=1400 audit(2000000002.659:632): avc: denied { connect } for pid=9897 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 145.145485][ T9902] IPv6: syztnl0: Disabled Multicast RS [ 145.248222][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.251606][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.450615][ T9864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.461460][ T9908] syzkaller0: entered promiscuous mode [ 145.463164][ T9908] syzkaller0: entered allmulticast mode [ 145.658605][ T5622] usb 5-1: Incompatible driver and firmware versions [ 146.038193][ T9928] netlink: 'syz.5.1143': attribute type 32 has an invalid length. [ 146.049593][ T9928] bond2: Setting coupled_control to off (0) [ 146.350242][ T41] audit: type=1400 audit(2000000003.949:633): avc: denied { ioctl } for pid=9937 comm="syz.4.1147" path="socket:[35242]" dev="sockfs" ino=35242 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.554749][ T9946] new mount options do not match the existing superblock, will be ignored [ 146.642717][ T9950] netlink: 'syz.2.1150': attribute type 4 has an invalid length. [ 146.691373][ T9954] fuse: Bad value for 'fd' [ 146.694448][ T9955] veth0_to_bridge: mtu less than device minimum [ 146.729227][ T41] audit: type=1400 audit(2000000004.329:634): avc: denied { mounton } for pid=9958 comm="syz.4.1153" path="/210/file3" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 146.735978][ T9959] cgroup: Invalid name [ 146.791618][ T9973] batadv_slave_1: entered promiscuous mode [ 146.803777][ T9973] batadv_slave_1: left promiscuous mode [ 146.902256][ T41] audit: type=1400 audit(2000000004.499:635): avc: denied { listen } for pid=9979 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.941147][ T9982] __nla_validate_parse: 7 callbacks suppressed [ 146.941165][ T9982] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1159'. [ 147.177440][ T5998] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 147.348568][ T5998] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.351382][ T5998] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.354738][ T5998] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.357731][ T5998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.361208][ T5998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.365090][ T9992] macvtap1: entered promiscuous mode [ 147.366011][ T5998] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.368401][ T9992] macvtap1: entered allmulticast mode [ 147.370457][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.372859][ T9992] veth1_vlan: entered allmulticast mode [ 147.375603][ T5998] usb 7-1: Product: syz [ 147.379727][ T5998] usb 7-1: Manufacturer: syz [ 147.384642][ T5998] cdc_wdm 7-1:1.0: skipping garbage [ 147.386486][ T5998] cdc_wdm 7-1:1.0: skipping garbage [ 147.389045][ T5998] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 147.391268][ T5998] cdc_wdm 7-1:1.0: Unknown control protocol [ 147.423531][ T9994] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 147.429781][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9994 comm=syz.4.1164 [ 147.434752][ T6928] usb 5-1: USB disconnect, device number 8 [ 147.435158][ T41] audit: type=1400 audit(2000000005.029:636): avc: denied { remove_name } for pid=9993 comm="syz.4.1164" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.445395][ T41] audit: type=1400 audit(2000000005.029:637): avc: denied { unlink } for pid=9993 comm="syz.4.1164" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.578257][T10007] SET target dimension over the limit! [ 147.723277][T10021] comedi comedi0: comedi_config --init_data is deprecated [ 147.810729][ T41] audit: type=1400 audit(2000000005.409:638): avc: denied { bind } for pid=10028 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.881335][T10030] tipc: Enabled bearer , priority 0 [ 147.883789][T10040] tipc: Enabling of bearer rejected, already enabled [ 147.911302][T10044] netlink: 117 bytes leftover after parsing attributes in process `syz.5.1178'. [ 147.948580][T10047] nvme_fabrics: missing parameter 'transport=%s' [ 147.950959][T10047] nvme_fabrics: missing parameter 'nqn=%s' [ 148.019257][ T41] audit: type=1400 audit(2000000005.609:639): avc: denied { mount } for pid=10060 comm="syz.0.1183" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.029319][ T41] audit: type=1400 audit(2000000005.609:640): avc: denied { remount } for pid=10060 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.035882][ T41] audit: type=1400 audit(2000000005.629:641): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.059230][ T41] audit: type=1400 audit(2000000005.659:642): avc: denied { rename } for pid=10063 comm="syz.0.1185" name="#15" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.145221][T10079] netlink: 'syz.0.1190': attribute type 3 has an invalid length. [ 148.260527][ T5998] usb 7-1: USB disconnect, device number 11 [ 148.270197][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1193'. [ 148.409521][T10094] hugetlbfs: Bad value '$' for mount option 'size' [ 148.409521][T10094] [ 148.489496][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 148.506618][T10103] fuse: Bad value for 'fd' [ 148.684784][ T41] audit: type=1400 audit(2000000006.279:643): avc: denied { ioctl } for pid=10117 comm="syz.0.1202" path="socket:[37447]" dev="sockfs" ino=37447 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.743966][T10029] tipc: Disabling bearer [ 148.844854][T10136] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.853757][ T41] audit: type=1400 audit(2000000006.449:644): avc: denied { relabelfrom } for pid=10135 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.860470][ T41] audit: type=1400 audit(2000000006.449:645): avc: denied { relabelto } for pid=10135 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.910432][ T9] usb 9-1: USB disconnect, device number 6 [ 149.191056][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 150.383957][T10201] sit0: entered promiscuous mode [ 150.387757][T10201] netlink: 'syz.5.1226': attribute type 1 has an invalid length. [ 150.390335][T10201] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1226'. [ 150.686703][T10218] fuse: Bad value for 'fd' [ 150.837820][T10229] netlink: 'syz.2.1236': attribute type 3 has an invalid length. [ 151.689975][T10248] netlink: 'syz.2.1243': attribute type 13 has an invalid length. [ 151.692812][T10248] syz_tun: refused to change device tx_queue_len [ 151.894630][T10266] cgroup: noprefix used incorrectly [ 151.942717][ T211] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.945925][ T211] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.949000][ T211] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.014862][T10276] gretap0: entered promiscuous mode [ 152.023849][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 152.028446][T10276] gretap0: left promiscuous mode [ 152.300107][T10299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.423364][T10304] xt_TCPMSS: Only works on TCP SYN packets [ 152.454450][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 152.462459][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 152.792380][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 152.794993][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 152.846007][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 152.850126][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 152.886751][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 152.886764][ T41] audit: type=1400 audit(2000000010.469:651): avc: denied { read } for pid=10347 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.940446][T10358] trusted_key: syz.0.1279 sent an empty control message without MSG_MORE. [ 152.944199][ T41] audit: type=1400 audit(2000000010.539:652): avc: denied { ioctl } for pid=10357 comm="syz.0.1279" path="socket:[38928]" dev="sockfs" ino=38928 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.959707][T10358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1279'. [ 152.978056][T10359] sp0: Synchronizing with TNC [ 153.057969][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 153.060235][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 153.107530][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 153.110230][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 153.514985][T10371] bond10 (unregistering): Released all slaves [ 153.568152][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 153.571104][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 153.613806][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 153.614892][T10337] ceph: No mds server is up or the cluster is laggy [ 153.620044][ T1464] libceph: connect (1)[c::]:6789 error -101 [ 153.622622][T10342] ceph: No mds server is up or the cluster is laggy [ 153.625595][ T1464] libceph: mon0 (1)[c::]:6789 connect error [ 153.735856][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 153.901567][T10395] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 153.912543][T10395] bridge_slave_0 (unregistering): left allmulticast mode [ 153.915618][T10395] bridge_slave_0 (unregistering): left promiscuous mode [ 153.919517][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.927612][ T41] audit: type=1400 audit(2000000011.532:653): avc: denied { read write } for pid=10394 comm="syz.0.1291" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 153.927888][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1292'. [ 153.937946][ T41] audit: type=1400 audit(2000000011.532:654): avc: denied { open } for pid=10394 comm="syz.0.1291" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.016093][T10407] gfs2: error -5 reading superblock [ 154.023612][T10408] gfs2: error -5 reading superblock [ 154.111348][ T41] audit: type=1400 audit(2000000011.712:655): avc: denied { read } for pid=10416 comm="syz.4.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.140343][ T41] audit: type=1400 audit(2000000011.742:656): avc: denied { shutdown } for pid=10420 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.405151][T10430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.571494][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 154.706378][ T41] audit: type=1400 audit(2000000012.302:657): avc: denied { watch } for pid=10450 comm="syz.4.1308" path="/247/file0" dev="tmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.711353][T10451] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 154.715551][ T41] audit: type=1400 audit(2000000012.302:658): avc: denied { watch_sb } for pid=10450 comm="syz.4.1308" path="/247/file0" dev="tmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.760895][ T41] audit: type=1400 audit(2000000012.362:659): avc: denied { read } for pid=10446 comm="syz.5.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.768659][ T41] audit: type=1400 audit(2000000012.362:660): avc: denied { write } for pid=10446 comm="syz.5.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.971107][T10462] Option ''MO' to dns_resolver key: bad/missing value [ 155.318742][T10471] dummy0: entered allmulticast mode [ 155.340946][T10470] SELinux: ebitmap: truncated map [ 155.360237][T10470] SELinux: failed to load policy [ 155.463600][T10479] syzkaller0: entered promiscuous mode [ 155.465416][T10479] syzkaller0: entered allmulticast mode [ 155.470150][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'. [ 155.672334][T10409] Set syz1 is full, maxelem 65536 reached [ 155.679416][T10489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.815249][T10498] ceph: Path missing in source [ 155.815387][T10499] ceph: Path missing in source [ 156.379400][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 156.412037][T10511] xt_recent: Unsupported userspace flags (000000b2) [ 156.423916][T10511] syzkaller0: entered promiscuous mode [ 156.426448][T10511] syzkaller0: entered allmulticast mode [ 156.466172][T10516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.488235][T10510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.539681][T10523] netlink: 'syz.5.1330': attribute type 3 has an invalid length. [ 156.543918][T10523] netlink: 'syz.5.1330': attribute type 30 has an invalid length. [ 156.907491][ T8497] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 157.068915][ T8497] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 157.072298][ T8497] usb 9-1: config 1 has no interface number 0 [ 157.074941][ T8497] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 157.079322][ T8497] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 157.083558][ T8497] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 157.089734][ T8497] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 157.093521][ T8497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.096584][ T8497] usb 9-1: Product: syz [ 157.098668][ T8497] usb 9-1: Manufacturer: syz [ 157.100390][ T8497] usb 9-1: SerialNumber: syz [ 157.104077][T10526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.106432][T10526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.112349][ T8497] usb 9-1: Error in usbnet_get_endpoints (-22) [ 157.200810][T10559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 157.296941][T10570] ./file1: Can't lookup blockdev [ 157.329678][T10571] bond10: Removing last ns target with arp_interval on [ 157.469890][T10576] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1341'. [ 158.165564][T10573] syz.2.1343 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 158.172572][T10573] CPU: 3 UID: 0 PID: 10573 Comm: syz.2.1343 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.172591][T10573] Tainted: [L]=SOFTLOCKUP [ 158.172594][T10573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.172601][T10573] Call Trace: [ 158.172605][T10573] [ 158.172610][T10573] dump_stack_lvl+0x100/0x190 [ 158.172670][T10573] dump_header+0xfb/0x606 [ 158.172698][T10573] oom_kill_process.cold+0xd/0x330 [ 158.172711][T10573] out_of_memory+0x340/0x14f0 [ 158.172751][T10573] ? __pfx_out_of_memory+0x10/0x10 [ 158.172770][T10573] mem_cgroup_out_of_memory+0xc6/0x130 [ 158.172808][T10573] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 158.172821][T10573] ? find_held_lock+0x2b/0x80 [ 158.172851][T10573] ? do_raw_spin_unlock+0x145/0x1e0 [ 158.172863][T10573] ? _raw_spin_unlock+0x28/0x50 [ 158.172887][T10573] try_charge_memcg+0x652/0xc90 [ 158.172901][T10573] ? __pfx_try_charge_memcg+0x10/0x10 [ 158.172914][T10573] ? find_held_lock+0x2b/0x80 [ 158.172927][T10573] ? rcu_read_unlock+0x17/0x60 [ 158.172938][T10573] ? rcu_read_unlock+0x17/0x60 [ 158.172950][T10573] charge_memcg+0xa6/0x280 [ 158.172960][T10573] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 158.172975][T10573] __swap_cache_prepare_and_add+0x528/0x9e0 [ 158.173008][T10573] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 158.173022][T10573] ? __pfx_swap_entry_swapped+0x10/0x10 [ 158.173044][T10573] swap_cache_alloc_folio+0x1cb/0x300 [ 158.173060][T10573] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 158.173076][T10573] ? lockdep_hardirqs_on+0x78/0x100 [ 158.173088][T10573] ? finish_task_switch.isra.0+0x205/0xb80 [ 158.173106][T10573] swap_cluster_readahead+0x411/0x770 [ 158.173124][T10573] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 158.173147][T10573] ? update_cfs_rq_load_avg+0x51/0x550 [ 158.173168][T10573] ? get_vma_policy+0x23f/0x3b0 [ 158.173182][T10573] swapin_readahead+0x160/0x12c0 [ 158.173201][T10573] ? __pfx_swapin_readahead+0x10/0x10 [ 158.173215][T10573] ? find_held_lock+0x2b/0x80 [ 158.173229][T10573] ? swap_table_get+0x103/0x2c0 [ 158.173241][T10573] ? swap_table_get+0x103/0x2c0 [ 158.173257][T10573] ? swap_table_get+0x10d/0x2c0 [ 158.173270][T10573] ? swap_cache_get_folio+0x1ae/0x600 [ 158.173285][T10573] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 158.173298][T10573] ? __pfx_get_swap_device+0x10/0x10 [ 158.173323][T10573] ? do_swap_page+0xb2e/0x68e0 [ 158.173337][T10573] do_swap_page+0xb2e/0x68e0 [ 158.173357][T10573] ? __pfx_do_swap_page+0x10/0x10 [ 158.173371][T10573] ? __free_object+0x2a8/0x400 [ 158.173387][T10573] ? lockdep_hardirqs_on+0x78/0x100 [ 158.173400][T10573] ? rcu_is_watching+0x12/0xc0 [ 158.173426][T10573] ? __pte_offset_map+0x179/0x310 [ 158.173445][T10573] __handle_mm_fault+0x18c1/0x2b60 [ 158.173462][T10573] ? reacquire_held_locks+0xce/0x1e0 [ 158.173480][T10573] ? __pfx___handle_mm_fault+0x10/0x10 [ 158.173497][T10573] ? lock_vma_under_rcu+0x17c/0x590 [ 158.173519][T10573] handle_mm_fault+0x36d/0xa20 [ 158.173536][T10573] do_user_addr_fault+0x5a3/0x12f0 [ 158.173583][T10573] exc_page_fault+0x6f/0xd0 [ 158.173595][T10573] asm_exc_page_fault+0x26/0x30 [ 158.173606][T10573] RIP: 0033:0x7f328666a14c [ 158.173616][T10573] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 158.173627][T10573] RSP: 002b:00007ffcd3b75590 EFLAGS: 00010206 [ 158.173636][T10573] RAX: 0000000000000000 RBX: 00007f3286a15fa0 RCX: 000055556d371808 [ 158.173642][T10573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.173649][T10573] RBP: 00007f3286a17da0 R08: 0000000000000000 R09: 0000000000000000 [ 158.173655][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000026961 [ 158.173661][T10573] R13: 00007f3286a1618c R14: 00000000000266c9 R15: 00007ffcd3b75690 [ 158.173676][T10573] [ 158.174455][T10573] memory: usage 307200kB, limit 307200kB, failcnt 4530 [ 158.202691][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 158.205029][T10573] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 158.246250][T10585] syz_tun: entered allmulticast mode [ 158.247846][T10573] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 158.254249][T10584] syz_tun: left allmulticast mode [ 158.255103][T10573] Memory cgroup stats for /syz2: [ 158.313106][T10573] cache 0 [ 158.315959][T10573] rss 0 [ 158.316909][T10573] rss_huge 0 [ 158.318070][T10573] shmem 0 [ 158.319561][T10573] mapped_file 0 [ 158.320759][T10573] dirty 0 [ 158.321767][T10573] writeback 0 [ 158.322878][T10573] workingset_refault_anon 29 [ 158.324422][T10573] workingset_refault_file 420 [ 158.325965][T10573] swap 258048 [ 158.327079][T10573] swapcached 5603328 [ 158.328520][T10573] pgpgin 93063 [ 158.329894][T10573] pgpgout 93589 [ 158.331249][T10573] pgfault 191879 [ 158.332426][T10573] pgmajfault 131 [ 158.333588][T10573] inactive_anon 8192 [ 158.334869][T10573] active_anon 4096 [ 158.336079][T10573] inactive_file 0 [ 158.338933][T10573] active_file 0 [ 158.340326][T10573] unevictable 0 [ 158.341689][T10573] hierarchical_memory_limit 314572800 [ 158.343637][T10573] hierarchical_memsw_limit 9223372036854771712 [ 158.346158][T10573] total_cache 0 [ 158.348416][T10573] total_rss 0 [ 158.349551][T10573] total_rss_huge 0 [ 158.350814][T10573] total_shmem 0 [ 158.351999][T10573] total_mapped_file 0 [ 158.353309][T10573] total_dirty 0 [ 158.354481][T10573] total_writeback 0 [ 158.355749][T10573] total_workingset_refault_anon 29 [ 158.357550][T10573] total_workingset_refault_file 420 [ 158.359268][T10573] total_swap 258048 [ 158.360533][T10573] total_swapcached 5603328 [ 158.362053][T10573] total_pgpgin 93063 [ 158.363350][T10573] total_pgpgout 93589 [ 158.364666][T10573] total_pgfault 191879 [ 158.366013][T10573] total_pgmajfault 131 [ 158.367573][T10573] total_inactive_anon 8192 [ 158.369060][T10573] total_active_anon 4096 [ 158.370456][T10573] total_inactive_file 0 [ 158.371843][T10573] total_active_file 0 [ 158.373342][T10573] total_unevictable 0 [ 158.374689][T10573] anon_cost 0 [ 158.375802][T10573] file_cost 0 [ 158.376917][T10573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1343,pid=10573,uid=0 [ 158.383327][T10573] Memory cgroup out of memory: Killed process 10573 (syz.2.1343) total-vm:102488kB, anon-rss:664kB, file-rss:23128kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 158.595051][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 158.595062][ T41] audit: type=1800 audit(2000000016.192:666): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1353" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 158.627478][ T5622] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 158.778084][ T5622] usb 5-1: device descriptor read/64, error -71 [ 158.905360][ T41] audit: type=1400 audit(2000000016.502:667): avc: denied { setopt } for pid=10646 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 158.979510][T10643] mkiss: ax0: crc mode is auto. [ 159.027294][ T5622] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 159.071183][T10651] fuse: Bad value for 'fd' [ 159.133854][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 159.167488][ T5622] usb 5-1: device descriptor read/64, error -71 [ 159.221559][ T41] audit: type=1400 audit(2000000016.822:668): avc: denied { map } for pid=10663 comm="syz.2.1369" path="socket:[36534]" dev="sockfs" ino=36534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.251308][ T41] audit: type=1400 audit(2000000016.852:669): avc: denied { create } for pid=10667 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 159.277482][ T5622] usb usb5-port1: attempt power cycle [ 159.520462][ T41] audit: type=1400 audit(2000000017.122:670): avc: denied { read } for pid=10674 comm="syz.2.1372" dev="sockfs" ino=36574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.525490][T10675] misc userio: The device must be registered before sending interrupts [ 159.560973][ T41] audit: type=1400 audit(2000000017.162:671): avc: denied { ioctl } for pid=10679 comm="syz.2.1373" path="socket:[36582]" dev="sockfs" ino=36582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.577589][ T39] usb 9-1: USB disconnect, device number 7 [ 159.617587][ T5622] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 159.636881][T10687] syz.2.1376 (10687): attempted to duplicate a private mapping with mremap. This is not supported. [ 159.637896][ T5622] usb 5-1: device descriptor read/8, error -71 [ 159.642690][T10687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=10687 comm=syz.2.1376 [ 159.889973][ T5622] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 159.918089][ T5622] usb 5-1: device descriptor read/8, error -71 [ 160.027976][ T5622] usb usb5-port1: unable to enumerate USB device [ 160.443638][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 160.448937][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 160.468983][ T41] audit: type=1400 audit(2000000018.072:672): avc: denied { ioctl } for pid=10730 comm="syz.2.1391" path="socket:[36670]" dev="sockfs" ino=36670 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.563266][ T41] audit: type=1400 audit(2000000018.162:673): avc: denied { name_bind } for pid=10738 comm="syz.4.1395" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 160.598915][ T41] audit: type=1400 audit(2000000018.192:674): avc: denied { mount } for pid=10742 comm="syz.4.1396" name="/" dev="configfs" ino=3134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 160.616707][T10743] : renamed from vlan0 (while UP) [ 160.719286][T10753] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1398' resets device [ 160.753678][T10755] fuse: Bad value for 'fd' [ 160.755598][T10756] overlay: Unknown parameter 'fsmagic' [ 160.800064][T10760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=10760 comm=syz.5.1400 [ 160.889058][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 160.892159][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 160.924040][ T41] audit: type=1400 audit(2000000018.522:675): avc: denied { getopt } for pid=10767 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 160.955327][T10773] netlink: 'syz.5.1406': attribute type 10 has an invalid length. [ 160.966454][T10773] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.081782][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 161.150467][T10798] tmpfs: Cannot enable quota on remount [ 161.152464][T10797] tmpfs: Cannot enable quota on remount [ 161.413687][T10816] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.505322][T10826] program syz.4.1421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.511084][T10826] netlink: 'syz.4.1421': attribute type 11 has an invalid length. [ 161.547763][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'. [ 161.668690][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 161.825910][T10860] 9p: Could not find request transport: xen [ 162.612982][T10892] tipc: Enabled bearer , priority 10 [ 162.785715][T10908] fuse: Bad value for 'fd' [ 162.899588][T10915] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.090353][T10926] netlink: 'syz.5.1453': attribute type 10 has an invalid length. [ 163.096882][T10926] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 163.100490][T10926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 163.104522][T10926] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 163.107944][T10926] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.111212][T10926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.114210][T10926] IPv6: NLM_F_CREATE should be set when creating new route [ 163.117285][T10927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.225705][T10941] /dev/nullb0: Can't lookup blockdev [ 163.434888][T10958] netlink: 'syz.2.1462': attribute type 29 has an invalid length. [ 163.437602][T10958] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1462'. [ 163.597854][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 163.597905][ T41] audit: type=1326 audit(2000000021.202:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10968 comm="syz.2.1466" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f328679c799 code=0x0 [ 163.636618][ T41] audit: type=1800 audit(2000000021.232:682): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.1468" name="/newroot/277/file0" dev="tmpfs" ino=1479 res=0 errno=0 [ 163.853933][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 164.115781][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 164.119180][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.124130][ T41] audit: type=1400 audit(2000000021.722:683): avc: denied { execute } for pid=11021 comm="syz.5.1481" path="/proc/612/task/613/net/if_inet6" dev="proc" ino=4026533554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 164.127901][ T6116] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.137277][ T6928] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 164.144645][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.184405][ T41] audit: type=1400 audit(2000000021.782:684): avc: denied { getopt } for pid=11023 comm="syz.5.1482" laddr=fe80::10 lport=33285 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 164.308421][ T6116] usb 5-1: Using ep0 maxpacket: 8 [ 164.311648][ T6116] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.311990][ T6928] usb 9-1: Using ep0 maxpacket: 8 [ 164.314440][ T6116] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.318156][ T6928] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 164.319871][ T6116] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.323494][ T6928] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.326464][ T6116] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.326480][ T6116] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.326505][ T6116] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.332466][ T6928] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.333911][ T6116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.339994][ T6928] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.352328][ T6928] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.356509][ T6928] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.359673][ T6928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.423856][T11031] tmpfs: Unknown parameter 'grqquota_inode_hardlimit' [ 164.546495][ T6116] usb 5-1: usb_control_msg returned -71 [ 164.548397][ T6116] usbtmc 5-1:16.0: can't read capabilities [ 164.556075][ T6116] usb 5-1: USB disconnect, device number 13 [ 164.567716][ T6928] usb 9-1: usb_control_msg returned -32 [ 164.570751][ T6928] usbtmc 9-1:16.0: can't read capabilities [ 164.582583][ T6928] usb 9-1: USB disconnect, device number 8 [ 164.667628][ T5288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.671996][ T5288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.675148][ T5288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.678378][ T5288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.681011][ T5288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.703681][T11037] wg1 speed is unknown, defaulting to 1000 [ 164.808878][T11041] xt_policy: too many policy elements [ 164.855236][T11037] chnl_net:caif_netlink_parms(): no params data found [ 164.902375][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.904807][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.907176][T11037] bridge_slave_0: entered allmulticast mode [ 164.909971][T11037] bridge_slave_0: entered promiscuous mode [ 164.913147][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.915620][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.918395][T11037] bridge_slave_1: entered allmulticast mode [ 164.921270][T11037] bridge_slave_1: entered promiscuous mode [ 164.938705][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.943552][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.959036][T11037] team0: Port device team_slave_0 added [ 164.962401][T11037] team0: Port device team_slave_1 added [ 164.978203][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.980400][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.988492][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.992701][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.994929][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.003216][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.028783][T11037] hsr_slave_0: entered promiscuous mode [ 165.031134][T11037] hsr_slave_1: entered promiscuous mode [ 165.033335][T11037] debugfs: 'hsr0' already exists in 'hsr' [ 165.035214][T11037] Cannot create hsr debugfs directory [ 165.123454][T11037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.126986][T11037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.131167][T11037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.139809][ T41] audit: type=1400 audit(2000000022.742:685): avc: denied { write } for pid=11050 comm="syz.0.1490" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 165.223842][T11037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.228396][T11037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.232404][T11037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.309707][T11037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.313091][T11037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.316335][T11037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.407549][ T5622] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.410708][T11059] fuse: Bad value for 'fd' [ 165.414838][T11059] netlink: 'syz.5.1494': attribute type 9 has an invalid length. [ 165.537599][ T5622] usb 5-1: device descriptor read/64, error -71 [ 165.547094][T11061] Bluetooth: MGMT ver 1.23 [ 165.619078][T11037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.623475][T11037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.628528][T11037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.634788][T11037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.697919][T11037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.706520][T11037] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.711588][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.713968][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.720562][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.722915][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.787482][ T5622] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.828026][T11037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.839673][ T41] audit: type=1400 audit(2000000023.442:686): avc: denied { read } for pid=11086 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.848889][T11037] veth0_vlan: entered promiscuous mode [ 165.853982][T11037] veth1_vlan: entered promiscuous mode [ 165.874700][T11037] veth0_macvtap: entered promiscuous mode [ 165.880789][T11037] veth1_macvtap: entered promiscuous mode [ 165.889601][T11037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.895595][T11037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.901647][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.904758][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.910171][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.913072][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.918059][ T5622] usb 5-1: device descriptor read/64, error -71 [ 165.948001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.951235][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.954474][ T41] audit: type=1400 audit(2000000023.552:687): avc: denied { mounton } for pid=11086 comm="syz.4.1499" path="/284/file0/file0" dev="autofs" ino=42328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 165.971881][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.975484][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.985286][ T41] audit: type=1400 audit(2000000023.582:688): avc: denied { mounton } for pid=11037 comm="syz-executor" path="/syzkaller.JBbsLF/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 166.027405][ T5622] usb usb5-port1: attempt power cycle [ 166.051519][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 166.174250][T11092] netlink: 'syz.2.1501': attribute type 3 has an invalid length. [ 166.367320][ T5622] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.387910][ T5622] usb 5-1: device descriptor read/8, error -71 [ 166.554772][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.558194][T11105] bridge_slave_1: left allmulticast mode [ 166.560619][T11105] bridge_slave_1: left promiscuous mode [ 166.563329][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.572442][T11105] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 166.628293][ T5622] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.648873][ T5622] usb 5-1: device descriptor read/8, error -71 [ 166.757342][ T5288] Bluetooth: hci1: command tx timeout [ 166.757718][ T5622] usb usb5-port1: unable to enumerate USB device [ 166.940771][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1513'. [ 167.190707][T11130] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1515'. [ 167.341027][T11132] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1516'. [ 167.449162][T11140] wg1 speed is unknown, defaulting to 1000 [ 167.557387][ T5288] Bluetooth: hci3: command 0x0406 tx timeout [ 167.615720][T11143] netlink: 'syz.2.1519': attribute type 1 has an invalid length. [ 167.619158][T11143] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 167.908446][ T41] audit: type=1400 audit(2000000025.512:689): avc: denied { bind } for pid=11153 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 167.943333][T11156] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1523'. [ 168.028291][ T41] audit: type=1400 audit(2000000025.632:690): avc: denied { map } for pid=11155 comm="syz.5.1523" path="socket:[43277]" dev="sockfs" ino=43277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.322672][T11171] netlink: 'syz.5.1529': attribute type 1 has an invalid length. [ 168.330035][T11169] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 168.347816][T11171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.365609][T11169] 8021q: adding VLAN 0 to HW filter on device bond12 [ 168.369970][T11171] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 168.392267][T11171] bond3: entered allmulticast mode [ 168.477933][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 168.553905][T11190] fuse: Bad value for 'fd' [ 168.598853][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 168.602847][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 168.663636][T11195] binder: 11194:11195 ioctl c0306201 200000000580 returned -14 [ 168.757752][T11184] dvmrp0: entered allmulticast mode [ 168.797488][T11204] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 168.799278][T11204] dvmrp1: persist disabled [ 168.837328][ T5939] Bluetooth: hci1: command tx timeout [ 168.926985][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 168.926998][ T41] audit: type=1400 audit(2000000026.522:693): avc: denied { create } for pid=11213 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.938384][T11214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.941463][T11214] team0: Port device bond1 added [ 169.020844][ T41] audit: type=1400 audit(2000000026.622:694): avc: denied { search } for pid=11220 comm="syz.0.1544" name="/" dev="configfs" ino=3134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.238414][T11223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.277378][ T39] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 169.302962][T11230] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1546'. [ 169.307039][T11230] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1546'. [ 169.312624][ T41] audit: type=1400 audit(2000000026.912:695): avc: denied { setcheckreqprot } for pid=11229 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.312648][T11231] SELinux: syz.2.1546 (11231) set checkreqprot to 1. This is no longer supported. [ 169.380166][ T41] audit: type=1400 audit(2000000026.982:696): avc: denied { setopt } for pid=11233 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.437296][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 169.441369][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.444731][ T39] usb 5-1: config 0 has no interfaces? [ 169.450146][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 169.453718][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.456497][ T39] usb 5-1: Product: syz [ 169.460262][ T39] usb 5-1: Manufacturer: syz [ 169.462387][ T39] usb 5-1: SerialNumber: syz [ 169.466784][ T39] usb 5-1: config 0 descriptor?? [ 169.674691][ T41] audit: type=1400 audit(2000000027.272:697): avc: denied { setattr } for pid=11220 comm="syz.0.1544" name="/" dev="configfs" ino=3134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.677145][ T39] usb 5-1: USB disconnect, device number 18 [ 169.753123][T11244] netlink: 'syz.5.1549': attribute type 3 has an invalid length. [ 169.856466][ T41] audit: type=1400 audit(2000000027.452:698): avc: denied { accept } for pid=11248 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.922685][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1553'. [ 169.933762][T11253] bond4: entered promiscuous mode [ 169.935655][T11253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.090061][T11256] IPVS: length: 18 != 8 [ 170.109910][T11256] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 170.208674][T11261] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1555'. [ 170.212390][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1555'. [ 170.295131][T11268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11268 comm=syz.0.1558 [ 170.346263][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1559'. [ 170.468016][ T41] audit: type=1400 audit(2000000028.072:699): avc: denied { accept } for pid=11286 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 170.638694][T11298] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.917379][ T5939] Bluetooth: hci1: command tx timeout [ 170.983542][T11312] wg1 speed is unknown, defaulting to 1000 [ 171.043544][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1575'. [ 171.173945][ T41] audit: type=1400 audit(2000000028.772:700): avc: denied { shutdown } for pid=11318 comm="syz.5.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.299560][ T39] IPVS: starting estimator thread 0... [ 171.398383][T11333] IPVS: using max 43 ests per chain, 103200 per kthread [ 171.422781][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 171.795952][ T41] audit: type=1400 audit(2000000029.392:701): avc: denied { setopt } for pid=11364 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.179133][T11374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11374 comm=syz.2.1594 [ 172.183361][T11374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=11374 comm=syz.2.1594 [ 172.187978][T11374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11374 comm=syz.2.1594 [ 172.193760][T11374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=11374 comm=syz.2.1594 [ 172.199640][T11374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=11374 comm=syz.2.1594 [ 172.213072][T11374] bridge0: entered promiscuous mode [ 172.215193][T11374] macsec1: entered allmulticast mode [ 172.217000][T11374] bridge0: entered allmulticast mode [ 172.219591][T11374] bridge0: port 3(macsec1) entered blocking state [ 172.222295][T11374] bridge0: port 3(macsec1) entered disabled state [ 172.227806][T11374] bridge0: left allmulticast mode [ 172.230054][T11374] bridge0: left promiscuous mode [ 172.555250][T11405] can0: slcan on pty20. [ 172.562427][T11394] mmap: syz.0.1601 (11394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.628574][T11405] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 172.949746][T11393] can0 (unregistered): slcan off pty20. [ 173.150774][T11435] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 173.263814][T11444] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 173.359368][T11447] netlink: 'syz.5.1612': attribute type 1 has an invalid length. [ 173.362838][T11447] netlink: 'syz.5.1612': attribute type 7 has an invalid length. [ 173.368303][T11447] netlink: 'syz.5.1612': attribute type 8 has an invalid length. [ 174.008012][T11466] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 174.011367][T11466] __nla_validate_parse: 6 callbacks suppressed [ 174.011380][T11466] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1616'. [ 174.018341][T11466] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1616'. [ 174.022220][T11466] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 174.025642][T11466] netlink: 634 bytes leftover after parsing attributes in process `syz.2.1616'. [ 174.031162][T11466] ./cgroup: Can't lookup blockdev [ 174.057863][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 174.061678][ T41] audit: type=1400 audit(2000000031.662:702): avc: denied { read } for pid=11467 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.205878][T11493] fuse: Unknown parameter '0x0000000000000003' [ 174.217259][ T41] audit: type=1400 audit(2000000031.812:703): avc: denied { getopt } for pid=11494 comm="syz.0.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.218910][T11485] wg1 speed is unknown, defaulting to 1000 [ 174.313362][T11502] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1622'. [ 174.316709][ T41] audit: type=1804 audit(2000000031.912:704): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1628" name="/newroot/53/file1" dev="tmpfs" ino=312 res=1 errno=0 [ 174.333799][T11506] macsec1: entered promiscuous mode [ 174.335480][T11506] macsec1: entered allmulticast mode [ 174.409846][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1631'. [ 174.412788][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1631'. [ 174.449143][T11512] 9p: Bad value for 'rfdno' [ 174.468892][ T5939] Bluetooth: hci3: Unknown advertising packet type: 0x30 [ 174.468930][ T5939] Bluetooth: hci3: Malformed LE Event: 0x0d [ 174.565401][T11525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 174.698656][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 174.732693][ T41] audit: type=1400 audit(2000000032.332:705): avc: denied { append } for pid=11541 comm="syz.2.1640" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 175.041646][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1644'. [ 175.053122][T11565] netlink: 'syz.0.1645': attribute type 2 has an invalid length. [ 175.082566][T11568] loop9: detected capacity change from 0 to 7 [ 175.091037][T11571] 9pnet_virtio: no channels available for device syz [ 175.095039][ T9771] Dev loop9: unable to read RDB block 7 [ 175.097845][ T9771] loop9: unable to read partition table [ 175.099773][ T9771] loop9: partition table beyond EOD, truncated [ 175.110367][T11568] Dev loop9: unable to read RDB block 7 [ 175.112230][T11568] loop9: unable to read partition table [ 175.114157][T11568] loop9: partition table beyond EOD, truncated [ 175.118320][T11568] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 175.197280][ T6928] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 175.368459][ T6928] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.371657][ T6928] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.376071][ T6928] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.379907][ T6928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.585302][ T6928] usb 7-1: usb_control_msg returned -32 [ 175.587926][ T6928] usbtmc 7-1:16.0: can't read capabilities [ 175.953301][ T59] usb 7-1: USB disconnect, device number 12 [ 182.508712][ T211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 182.512193][ T211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.599335][ T211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 182.603747][ T211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.679002][ T211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 182.683531][ T211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.778354][ T211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 182.782714][ T211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.950769][ T211] bridge0: port 3(team0) entered disabled state [ 182.956180][ T211] bridge_slave_1: left allmulticast mode [ 182.958922][ T211] bridge_slave_1: left promiscuous mode [ 182.961377][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.966037][ T211] bridge_slave_0: left allmulticast mode [ 182.970327][ T211] bridge_slave_0: left promiscuous mode [ 182.973097][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.605936][ T211] tipc: Left network mode [ 184.389016][ T211] hsr_slave_0: left promiscuous mode [ 184.392494][ T211] hsr_slave_1: left promiscuous mode [ 184.395357][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.403171][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.418197][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.420626][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.429226][ T211] veth1_vlan: left allmulticast mode [ 184.431106][ T211] veth1_macvtap: left promiscuous mode [ 184.432875][ T211] veth0_macvtap: left promiscuous mode [ 184.435166][ T211] veth1_vlan: left promiscuous mode [ 184.437567][ T211] veth0_vlan: left promiscuous mode [ 184.499394][ T211] pimreg3 (unregistering): left allmulticast mode [ 184.503500][ T211] pim6reg (unregistering): left allmulticast mode [ 184.613865][ T211] team_slave_1 (unregistering): left promiscuous mode [ 184.616103][ T211] team_slave_1 (unregistering): left allmulticast mode [ 184.618909][ T211] team0 (unregistering): Port device team_slave_1 removed [ 184.624921][ T211] team_slave_0 (unregistering): left promiscuous mode [ 184.627117][ T211] team_slave_0 (unregistering): left allmulticast mode [ 184.633600][ T211] team0 (unregistering): Port device team_slave_0 removed [ 187.413842][T11612] ntfs3(sr0): try to read out of volume at offset 0x0 [ 187.422546][T11614] sp0: Synchronizing with TNC [ 187.435080][T11613] [U] [ 187.460258][ T5288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.464447][ T5288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.468799][ T5288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.473052][ T5288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.476122][ T5288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.502255][T11619] wg1 speed is unknown, defaulting to 1000 [ 187.542434][T11624] ip6tnl0: Caught tx_queue_len zero misconfig [ 187.673567][T11619] chnl_net:caif_netlink_parms(): no params data found [ 187.714052][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.716380][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.719968][T11619] bridge_slave_0: entered allmulticast mode [ 187.722845][T11619] bridge_slave_0: entered promiscuous mode [ 187.724973][ T41] audit: type=1400 audit(2000000045.322:706): avc: denied { connect } for pid=11630 comm="syz.0.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.725987][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.733648][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.735972][T11619] bridge_slave_1: entered allmulticast mode [ 187.738959][T11619] bridge_slave_1: entered promiscuous mode [ 187.755343][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.760233][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.774780][T11619] team0: Port device team_slave_0 added [ 187.778903][T11619] team0: Port device team_slave_1 added [ 187.799071][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1655'. [ 187.801810][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.804250][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.812508][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.816710][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.819111][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.827521][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.871160][T11643] autofs: Bad value for 'fd' [ 187.871545][T11619] hsr_slave_0: entered promiscuous mode [ 187.876022][T11619] hsr_slave_1: entered promiscuous mode [ 187.879221][T11619] debugfs: 'hsr0' already exists in 'hsr' [ 187.881769][T11619] Cannot create hsr debugfs directory [ 188.030594][T11619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.038021][T11619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.044367][T11619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.050798][T11619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.070831][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.073303][T11619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.076571][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.079558][T11619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.113971][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.126587][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.130036][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.140062][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.150315][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.152692][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.158668][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.161082][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.169210][T11652] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 188.279183][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1656'. [ 188.286023][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.451732][T11619] veth0_vlan: entered promiscuous mode [ 188.459796][T11619] veth1_vlan: entered promiscuous mode [ 188.481811][T11619] veth0_macvtap: entered promiscuous mode [ 188.489832][T11619] veth1_macvtap: entered promiscuous mode [ 188.505586][T11681] fuse: Bad value for 'fd' [ 188.514918][T11619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.526539][T11619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.539912][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.543107][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.548594][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.552393][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.651393][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.654392][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.697477][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.700971][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.743113][T11715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11715 comm=syz.0.1670 [ 188.784805][T11718] xt_hashlimit: size too large, truncated to 1048576 [ 188.937954][T11734] Illegal XDP return value 4294967262 on prog (id 269) dev syz_tun, expect packet loss! [ 188.952595][T11742] fuse: Bad value for 'fd' [ 189.004388][T11742] fuse: Bad value for 'fd' [ 189.045445][T11754] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 189.051375][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1682'. [ 189.091258][ T41] audit: type=1400 audit(2000000046.692:707): avc: denied { setopt } for pid=11759 comm="syz.5.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.119026][T11760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11760 comm=syz.5.1686 [ 189.170339][T11765] vxfs: WRONG superblock magic 00000000 at 1 [ 189.174398][T11765] vxfs: WRONG superblock magic 00000000 at 8 [ 189.176419][T11765] vxfs: can't find superblock. [ 189.223358][T11773] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 189.246730][T11773] 8021q: adding VLAN 0 to HW filter on device bond13 [ 189.253211][T11774] program syz.6.1690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.280626][T11773] bond13: (slave geneve3): making interface the new active one [ 189.283693][T11773] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 189.287344][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.291072][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.293164][T11779] netlink: 'syz.6.1692': attribute type 29 has an invalid length. [ 189.293226][T11780] netlink: 'syz.6.1692': attribute type 29 has an invalid length. [ 189.297019][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.312701][ T1143] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.333458][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1693'. [ 189.477288][T11797] x_tables: duplicate underflow at hook 3 [ 189.558300][ T5939] Bluetooth: hci2: command tx timeout [ 189.564931][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 189.569057][T11808] netlink: 'syz.0.1700': attribute type 30 has an invalid length. [ 189.583860][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.586538][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.590745][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.593447][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.648828][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'. [ 189.769861][T11824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.810835][T11826] tmpfs: Invalid uid '0x00000000ffffffff' [ 189.816398][T11826] xfrm1: entered allmulticast mode [ 189.881420][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1709'. [ 189.885901][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1709'. [ 189.887511][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1709'. [ 189.890558][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1709'. [ 189.892334][T11833] netlink: 'syz.6.1709': attribute type 19 has an invalid length. [ 189.895448][T11834] netlink: 'syz.6.1709': attribute type 19 has an invalid length. [ 189.998054][T11845] IPVS: lc: FWM 3 0x00000003 - no destination available [ 190.007255][ T6116] IPVS: starting estimator thread 0... [ 190.049415][T11854] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 190.097663][T11846] IPVS: using max 43 ests per chain, 103200 per kthread [ 190.300419][T11887] netlink: 'syz.0.1723': attribute type 11 has an invalid length. [ 190.308495][T11886] bridge0: port 3(team0) entered disabled state [ 190.312371][T11886] bridge0: port 3(team0) entered disabled state [ 190.320243][T11886] team_slave_0: left promiscuous mode [ 190.322193][T11886] team_slave_0: left allmulticast mode [ 190.327405][T11886] team0 (unregistering): Port device team_slave_0 removed [ 190.329905][T11886] team_slave_1: left promiscuous mode [ 190.331751][T11886] team_slave_1: left allmulticast mode [ 190.336913][T11886] team0 (unregistering): Port device team_slave_1 removed qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2bf000) [ 190.390319][ T41] audit: type=1400 audit(2000000047.992:708): avc: denied { connect } for pid=11893 comm="syz.2.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.439475][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 190.442559][ T1113] ata1: failed to read log page 10h (errno=-5) [ 190.445154][ T1113] ata1.00: NCQ disabled due to excessive errors [ 190.448310][ T1113] ata1.00: exception Emask 0x1 SAct 0x1000000 SErr 0x0 action 0x0 [ 190.451429][ T1113] ata1.00: irq_stat 0x41000000 [ 190.453225][ T1113] ata1.00: failed command: READ FPDMA QUEUED [ 190.455229][ T1113] ata1.00: cmd 60/f8:c0:76:1b:01/15:00:00:00:00/40 tag 24 ncq dma 2879488 in [ 190.455229][ T1113] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 190.464005][ T1113] ata1.00: status: { DRDY } [ 190.466957][ T1113] ata1.00: configured for UDMA/100 [ 190.470238][ T1113] sd 0:0:0:0: [sda] tag#24 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 190.474490][ T1113] sd 0:0:0:0: [sda] tag#24 Sense Key : Aborted Command [current] [ 190.479462][ T1113] sd 0:0:0:0: [sda] tag#24 Add. Sense: No additional sense information [ 190.483070][ T1113] sd 0:0:0:0: [sda] tag#24 CDB: Read(10) 28 00 00 01 1b 76 00 15 f8 00 [ 190.486593][T11905] wg1 speed is unknown, defaulting to 1000 [ 190.486615][ T1113] I/O error, dev sda, sector 72566 op 0x0:(READ) flags 0x80700 phys_seg 140 prio class 2 [ 190.493514][ T1113] ata1: EH complete [ 190.715171][T11934] overlay: filesystem on ./bus not supported as upperdir [ 190.723035][ T41] audit: type=1400 audit(2000000048.322:709): avc: denied { map } for pid=11932 comm="syz.5.1736" path="/289/file0" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.922511][ T41] audit: type=1400 audit(2000000048.522:710): avc: denied { create } for pid=11946 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 190.930160][ T41] audit: type=1400 audit(2000000048.522:711): avc: denied { getopt } for pid=11946 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.100038][ T41] audit: type=1400 audit(2000000048.702:712): avc: denied { mounton } for pid=11954 comm="syz.6.1741" path="/syzcgroup/unified/syz6" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 191.182059][ T41] audit: type=1400 audit(2000000048.782:713): avc: denied { write } for pid=11966 comm="syz.2.1744" path="socket:[48272]" dev="sockfs" ino=48272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 191.509479][T12014] use of bytesused == 0 is deprecated and will be removed in the future, [ 191.512245][T12014] use the actual size instead. [ 191.584940][T12021] syzkaller0: entered promiscuous mode [ 191.586862][T12021] syzkaller0: entered allmulticast mode [ 191.601895][T12021] program syz.6.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.607987][T12019] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 191.637706][ T5939] Bluetooth: hci2: command tx timeout [ 191.639943][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 191.680262][T12026] MINIX-fs: blocksize too small for device [ 191.712825][T12028] can0: slcan on ttynull. [ 191.718794][ T41] audit: type=1400 audit(2000000049.322:714): avc: denied { map } for pid=12027 comm="syz.2.1760" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 191.811008][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 191.815754][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 191.820394][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.824938][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.829267][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.832399][ T9] usb 5-1: Product: syz [ 191.833893][ T9] usb 5-1: Manufacturer: syz [ 191.835688][ T9] usb 5-1: SerialNumber: syz [ 191.839358][ T9] usb 5-1: config 0 descriptor?? [ 191.844028][ T9] usb 5-1: selecting invalid altsetting 0 [ 191.877425][T12027] can0 (unregistered): slcan off ttynull. [ 192.047523][ T6116] usb 5-1: USB disconnect, device number 19 [ 192.123011][ T41] audit: type=1400 audit(2000000049.722:715): avc: denied { execmod } for pid=12057 comm="syz.5.1766" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 192.188719][ T7155] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 192.251827][T12066] overlayfs: failed to resolve './bus': -2 [ 192.277521][T12070] fuse: Bad value for 'fd' [ 192.327311][ T7155] usb 7-1: device descriptor read/64, error -71 [ 192.577358][ T7155] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 192.669956][ T5939] Bluetooth: hci0: Malformed LE Event: 0x0b [ 192.697103][T12094] netlink: 'syz.0.1779': attribute type 1 has an invalid length. [ 192.717275][ T7155] usb 7-1: device descriptor read/64, error -71 [ 192.730051][T12094] tipc: Enabling of bearer rejected, already enabled [ 192.732905][T12094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12094 comm=syz.0.1779 [ 192.762514][T12094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.827830][ T7155] usb usb7-port1: attempt power cycle [ 192.863230][T12103] syz.0.1783: vmalloc error: size 4127592448, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.868912][T12103] CPU: 3 UID: 0 PID: 12103 Comm: syz.0.1783 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.868930][T12103] Tainted: [L]=SOFTLOCKUP [ 192.868934][T12103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.868942][T12103] Call Trace: [ 192.868946][T12103] [ 192.868951][T12103] dump_stack_lvl+0x100/0x190 [ 192.869002][T12103] warn_alloc.cold+0x95/0x1c1 [ 192.869037][T12103] ? __pfx_warn_alloc+0x10/0x10 [ 192.869064][T12103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.869076][T12103] ? lockdep_hardirqs_on+0x78/0x100 [ 192.869087][T12103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.869101][T12103] ? kasan_save_stack+0x3f/0x50 [ 192.869129][T12103] ? kasan_save_stack+0x30/0x50 [ 192.869144][T12103] ? kasan_save_track+0x14/0x30 [ 192.869161][T12103] ? vb2_vmalloc_alloc+0x135/0x410 [ 192.869177][T12103] __vmalloc_node_range_noprof+0x1252/0x1530 [ 192.869193][T12103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.869208][T12103] ? vb2_vmalloc_alloc+0x135/0x410 [ 192.869227][T12103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.869248][T12103] ? vb2_vmalloc_alloc+0x135/0x410 [ 192.869263][T12103] vmalloc_user_noprof+0x9e/0xe0 [ 192.869276][T12103] ? vb2_vmalloc_alloc+0x135/0x410 [ 192.869292][T12103] vb2_vmalloc_alloc+0x135/0x410 [ 192.869308][T12103] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 192.869324][T12103] __vb2_queue_alloc+0x8d5/0x1160 [ 192.869345][T12103] vb2_core_create_bufs+0x5fa/0xa30 [ 192.869362][T12103] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 192.869376][T12103] ? rcu_is_watching+0x12/0xc0 [ 192.869405][T12103] ? __mutex_lock+0x26a/0x1b90 [ 192.869417][T12103] ? __kmalloc_noprof+0x301/0x850 [ 192.869433][T12103] ? v4l2_ioctl+0x1bd/0x250 [ 192.869448][T12103] vb2_create_bufs+0x40c/0x830 [ 192.869465][T12103] ? __pfx_vb2_create_bufs+0x10/0x10 [ 192.869479][T12103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.869495][T12103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.869513][T12103] v4l_create_bufs+0x17d/0x270 [ 192.869531][T12103] __video_do_ioctl+0xaf8/0xdc0 [ 192.869544][T12103] ? __might_fault+0xc5/0x140 [ 192.869559][T12103] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.869575][T12103] video_usercopy+0x47a/0x1740 [ 192.869587][T12103] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.869599][T12103] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 192.869648][T12103] ? __pfx_video_usercopy+0x10/0x10 [ 192.869670][T12103] v4l2_ioctl+0x1bd/0x250 [ 192.869687][T12103] ? __pfx_v4l2_ioctl+0x10/0x10 [ 192.869701][T12103] __x64_sys_ioctl+0x18e/0x210 [ 192.869742][T12103] do_syscall_64+0x106/0xf80 [ 192.869754][T12103] ? clear_bhb_loop+0x40/0x90 [ 192.869768][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.869780][T12103] RIP: 0033:0x7fbc9ab9c799 [ 192.869789][T12103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.869800][T12103] RSP: 002b:00007fbc9ba6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.869811][T12103] RAX: ffffffffffffffda RBX: 00007fbc9ae15fa0 RCX: 00007fbc9ab9c799 [ 192.869817][T12103] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 192.869824][T12103] RBP: 00007fbc9ac32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 192.869830][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.869836][T12103] R13: 00007fbc9ae16038 R14: 00007fbc9ae15fa0 R15: 00007ffd191bac48 [ 192.869850][T12103] [ 192.869854][T12103] Mem-Info: [ 192.925085][ T41] audit: type=1400 audit(2000000050.522:716): avc: denied { map } for pid=12102 comm="syz.0.1783" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 192.926075][T12103] active_anon:5202 inactive_anon:3055 isolated_anon:0 [ 192.926075][T12103] active_file:12662 inactive_file:15933 isolated_file:0 [ 192.926075][T12103] unevictable:1768 dirty:125 writeback:0 [ 192.926075][T12103] slab_reclaimable:8954 slab_unreclaimable:81024 [ 192.926075][T12103] mapped:23190 shmem:2381 pagetables:6097 [ 192.926075][T12103] sec_pagetables:302 bounce:0 [ 192.926075][T12103] kernel_misc_reclaimable:0 [ 192.926075][T12103] free:464241 free_pcp:14997 free_cma:0 [ 193.021402][T12103] Node 0 active_anon:20544kB inactive_anon:12220kB active_file:36400kB inactive_file:63488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:54680kB dirty:492kB writeback:0kB shmem:5964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14496kB pagetables:22064kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB [ 193.031936][T12103] Node 1 active_anon:264kB inactive_anon:0kB active_file:14248kB inactive_file:244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38080kB dirty:8kB writeback:0kB shmem:3560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:2324kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB [ 193.041682][T12103] Node 0 DMA free:11476kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.051198][T12103] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 193.053073][T12103] Node 0 DMA32 free:308292kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20540kB inactive_anon:12220kB active_file:36400kB inactive_file:63488kB unevictable:3536kB writepending:492kB zspages:0kB present:2080628kB managed:1260952kB mlocked:0kB bounce:0kB free_pcp:57424kB local_pcp:21680kB free_cma:0kB [ 193.063851][T12103] lowmem_reserve[]: 0 0 0 0 0 [ 193.065413][T12103] Node 1 Normal free:1537196kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:264kB inactive_anon:0kB active_file:14248kB inactive_file:244kB unevictable:3536kB writepending:8kB zspages:4824kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:2420kB local_pcp:1092kB free_cma:0kB [ 193.075852][T12103] lowmem_reserve[]: 0 0 0 0 0 [ 193.077520][T12103] Node 0 DMA: 15*4kB (UM) 19*8kB (UM) 20*16kB (UM) 20*32kB (U) 21*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 11476kB [ 193.082660][T12103] Node 0 DMA32: 1001*4kB (M) 744*8kB (UME) 1710*16kB (UME) 254*32kB (UME) 383*64kB (UME) 273*128kB (UME) 270*256kB (UM) 150*512kB (UM) 40*1024kB (UM) 8*2048kB (UM) 0*4096kB = 308164kB [ 193.088518][T12103] Node 1 Normal: 91*4kB (UME) 462*8kB (UME) 501*16kB (UM) 528*32kB (UME) 470*64kB (UME) 358*128kB (UME) 323*256kB (UME) 274*512kB (UME) 283*1024kB (UM) 23*2048kB (UME) 213*4096kB (UM) = 1537196kB [ 193.094571][T12103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.097642][T12103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.100598][T12103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.103633][T12103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.106581][T12103] 31549 total pagecache pages [ 193.108193][T12103] 577 pages in swap cache [ 193.109581][T12103] Free swap = 112488kB [ 193.111042][T12103] Total swap = 124996kB [ 193.112420][T12103] 1048443 pages RAM [ 193.113683][T12103] 0 pages HighMem/MovableOnly [ 193.115215][T12103] 283894 pages reserved [ 193.116567][T12103] 0 pages cma reserved [ 193.178422][ T7155] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 193.209119][ T7155] usb 7-1: device descriptor read/8, error -71 [ 193.453565][ T41] audit: type=1400 audit(2000000051.052:717): avc: denied { accept } for pid=12109 comm="syz.5.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 193.467241][ T7155] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 193.497802][ T7155] usb 7-1: device descriptor read/8, error -71 [ 193.512386][ T5288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.518876][ T5288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.523358][ T5288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.526375][ T5288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.529535][ T5288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.618145][ T211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.621777][ T7155] usb usb7-port1: unable to enumerate USB device [ 193.649791][T12117] wg1 speed is unknown, defaulting to 1000 [ 193.715519][ T211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.814671][ T211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.886445][ T211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.896818][T12117] chnl_net:caif_netlink_parms(): no params data found [ 193.941447][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.943982][T12117] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.946369][T12117] bridge_slave_0: entered allmulticast mode [ 193.949276][T12117] bridge_slave_0: entered promiscuous mode [ 193.952689][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.955070][T12117] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.957730][T12117] bridge_slave_1: entered allmulticast mode [ 193.960405][T12117] bridge_slave_1: entered promiscuous mode [ 193.978360][T12117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.982881][T12117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.998152][T12117] team0: Port device team_slave_0 added [ 194.001777][T12117] team0: Port device team_slave_1 added [ 194.014699][T12117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.017045][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.026201][T12117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.030927][T12117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.033275][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.042106][T12117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.106976][T12117] hsr_slave_0: entered promiscuous mode [ 194.114389][T12117] hsr_slave_1: entered promiscuous mode [ 194.116619][T12117] debugfs: 'hsr0' already exists in 'hsr' [ 194.118853][T12117] Cannot create hsr debugfs directory [ 194.130634][ T211] bridge_slave_1: left allmulticast mode [ 194.132520][ T211] bridge_slave_1: left promiscuous mode [ 194.134548][ T211] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.147666][ T211] bridge_slave_0: left allmulticast mode [ 194.149558][ T211] bridge_slave_0: left promiscuous mode [ 194.151516][ T211] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.390227][ T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.439007][ T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.478688][ T211] bond0 (unregistering): Released all slaves [ 194.614308][T12117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.625264][T12117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.638220][T12117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.643481][T12117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.654475][T12181] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.690468][ T41] audit: type=1800 audit(2000000052.292:718): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1799" name="file0" dev="tmpfs" ino=2460 res=0 errno=0 [ 194.776655][T12117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.786708][T12117] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.791804][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.794325][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.800199][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.802777][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.851193][T12117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.068393][T12117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.106400][T12232] netlink: 'syz.2.1804': attribute type 11 has an invalid length. [ 195.111416][T12232] __nla_validate_parse: 13 callbacks suppressed [ 195.111433][T12232] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1804'. [ 195.197747][ T211] hsr_slave_0: left promiscuous mode [ 195.202807][ T211] hsr_slave_1: left promiscuous mode [ 195.204879][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.207148][ T211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.218383][ T211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.221009][ T211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.235539][ T211] veth1_macvtap: left promiscuous mode [ 195.240537][ T211] veth0_macvtap: left promiscuous mode [ 195.243049][ T41] audit: type=1400 audit(2000000052.842:719): avc: denied { read write } for pid=12244 comm="syz.2.1807" name="file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.245384][ T211] veth1_vlan: left promiscuous mode [ 195.250858][ T41] audit: type=1400 audit(2000000052.842:720): avc: denied { open } for pid=12244 comm="syz.2.1807" path="/99/file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.253528][ T211] veth0_vlan: left promiscuous mode [ 195.259123][ T41] audit: type=1400 audit(2000000052.842:721): avc: denied { ioctl } for pid=12244 comm="syz.2.1807" path="/99/file0" dev="tmpfs" ino=555 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.332893][T12251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12251 comm=syz.5.1805 [ 195.382028][T12253] binder: BC_ATTEMPT_ACQUIRE not supported [ 195.384447][T12253] binder: 12252:12253 ioctl c0306201 200000001280 returned -22 [ 195.393492][T12253] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 195.426128][ T211] team0 (unregistering): Port device team_slave_1 removed [ 195.434695][ T211] team0 (unregistering): Port device team_slave_0 removed [ 195.557438][ T5288] Bluetooth: hci2: command tx timeout [ 195.613841][T12117] veth0_vlan: entered promiscuous mode [ 195.621332][T12117] veth1_vlan: entered promiscuous mode [ 195.649016][T12117] veth0_macvtap: entered promiscuous mode [ 195.652930][T12117] veth1_macvtap: entered promiscuous mode [ 195.663341][T12117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.683715][T12117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.688815][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.695518][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.698874][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.702208][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.763900][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.766523][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.785307][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.788478][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.808221][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 195.900734][ T211] IPVS: stop unused estimator thread 0... [ 195.913599][ T41] audit: type=1400 audit(2000000053.512:722): avc: denied { connect } for pid=12293 comm="syz.7.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.997260][ T41] audit: type=1400 audit(2000000053.592:723): avc: denied { mount } for pid=12307 comm="syz.7.1823" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 196.007134][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 196.160247][ T41] audit: type=1400 audit(2000000053.762:724): avc: denied { listen } for pid=12324 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.350906][ T41] audit: type=1400 audit(2000000053.952:725): avc: denied { map } for pid=12342 comm="syz.5.1832" path="socket:[47769]" dev="sockfs" ino=47769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.407003][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1834'. [ 196.981311][T12382] netlink: 'syz.0.1843': attribute type 7 has an invalid length. [ 197.008593][T12388] binder: 12387:12388 ioctl c018620c 200000000280 returned -22 [ 197.198010][T12406] [ 197.198903][T12406] ====================================================== [ 197.201217][T12406] WARNING: possible circular locking dependency detected [ 197.203481][T12406] syzkaller #0 Tainted: G L [ 197.205603][T12406] ------------------------------------------------------ [ 197.207884][T12406] syz.7.1851/12406 is trying to acquire lock: [ 197.209878][T12406] ffff8880584a3a98 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 197.212980][T12406] [ 197.212980][T12406] but task is already holding lock: [ 197.215346][T12406] ffff88801381b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 197.218362][T12406] [ 197.218362][T12406] which lock already depends on the new lock. [ 197.218362][T12406] [ 197.221735][T12406] [ 197.221735][T12406] the existing dependency chain (in reverse order) is: [ 197.224611][T12406] [ 197.224611][T12406] -> #4 (&of->mutex){+.+.}-{4:4}: [ 197.226951][T12406] __mutex_lock+0x1a2/0x1b90 [ 197.228624][T12406] kernfs_seq_start+0x4f/0x2a0 [ 197.230361][T12406] traverse.part.0.constprop.0+0xaf/0x650 [ 197.232445][T12406] seq_read_iter+0x93f/0x1270 [ 197.234151][T12406] kernfs_fop_read_iter+0x46c/0x610 [ 197.236017][T12406] copy_splice_read+0x4ba/0xb90 [ 197.237778][T12406] do_splice_read+0x285/0x370 [ 197.239483][T12406] splice_direct_to_actor+0x2a1/0xa30 [ 197.241449][T12406] do_splice_direct+0x174/0x240 [ 197.243205][T12406] vfs_copy_file_range+0xc92/0x1910 [ 197.245089][T12406] __do_sys_copy_file_range+0x1a1/0x460 [ 197.247051][T12406] do_syscall_64+0x106/0xf80 [ 197.248716][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.250740][T12406] [ 197.250740][T12406] -> #3 (&p->lock){+.+.}-{4:4}: [ 197.252985][T12406] __mutex_lock+0x1a2/0x1b90 [ 197.254573][T12406] seq_read_iter+0xe1/0x1270 [ 197.256227][T12406] proc_reg_read_iter+0x220/0x310 [ 197.258036][T12406] copy_splice_read+0x4ba/0xb90 [ 197.259786][T12406] do_splice_read+0x285/0x370 [ 197.261538][T12406] splice_file_to_pipe+0x82/0x120 [ 197.263338][T12406] do_sendfile+0x366/0xe20 [ 197.264955][T12406] __x64_sys_sendfile64+0x1d8/0x220 [ 197.266926][T12406] do_syscall_64+0x106/0xf80 [ 197.268749][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.270870][T12406] [ 197.270870][T12406] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 197.273258][T12406] __mutex_lock+0x1a2/0x1b90 [ 197.274947][T12406] pipe_lock+0x69/0x80 [ 197.276464][T12406] iter_file_splice_write+0x1fd/0x10a0 [ 197.278583][T12406] do_splice+0x109c/0x1fd0 [ 197.280187][T12406] __do_splice+0x33b/0x370 [ 197.281854][T12406] __x64_sys_splice+0x187/0x250 [ 197.283598][T12406] do_syscall_64+0x106/0xf80 [ 197.285264][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.287384][T12406] [ 197.287384][T12406] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 197.289817][T12406] mnt_want_write+0x6f/0x450 [ 197.291508][T12406] ovl_fileattr_set+0x108/0x300 [ 197.293272][T12406] vfs_fileattr_set+0x783/0xd70 [ 197.295058][T12406] ioctl_setflags+0x1c7/0x200 [ 197.296759][T12406] do_vfs_ioctl+0x705/0x13e0 [ 197.298726][T12406] __x64_sys_ioctl+0x114/0x210 [ 197.300451][T12406] do_syscall_64+0x106/0xf80 [ 197.302164][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.304222][T12406] [ 197.304222][T12406] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 197.307034][T12406] __lock_acquire+0x14b8/0x2630 [ 197.308881][T12406] lock_acquire+0x1cf/0x380 [ 197.310586][T12406] down_read+0x99/0x460 [ 197.312161][T12406] lookup_slow+0x42/0x70 [ 197.313729][T12406] path_lookupat+0x5e8/0xc40 [ 197.315397][T12406] filename_lookup+0x202/0x590 [ 197.317119][T12406] kern_path+0x37/0x50 [ 197.318687][T12406] lookup_bdev+0xd8/0x280 [ 197.320289][T12406] resume_store+0x1d6/0x460 [ 197.321969][T12406] kobj_attr_store+0x58/0x80 [ 197.323656][T12406] sysfs_kf_write+0xf2/0x150 [ 197.325311][T12406] kernfs_fop_write_iter+0x3e0/0x5f0 [ 197.327200][T12406] vfs_write+0x6ac/0x1070 [ 197.328782][T12406] ksys_write+0x12a/0x250 [ 197.330355][T12406] do_syscall_64+0x106/0xf80 [ 197.332022][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.334100][T12406] [ 197.334100][T12406] other info that might help us debug this: [ 197.334100][T12406] [ 197.337365][T12406] Chain exists of: [ 197.337365][T12406] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &of->mutex [ 197.337365][T12406] [ 197.341540][T12406] Possible unsafe locking scenario: [ 197.341540][T12406] [ 197.343944][T12406] CPU0 CPU1 [ 197.345683][T12406] ---- ---- [ 197.347428][T12406] lock(&of->mutex); [ 197.348735][T12406] lock(&p->lock); [ 197.350787][T12406] lock(&of->mutex); [ 197.352891][T12406] rlock(&ovl_i_mutex_dir_key[depth]); [ 197.354688][T12406] [ 197.354688][T12406] *** DEADLOCK *** [ 197.354688][T12406] [ 197.357292][T12406] 4 locks held by syz.7.1851/12406: [ 197.359210][T12406] #0: ffff88805f8c4478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 197.362140][T12406] #1: ffff888028956420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 197.364901][T12406] #2: ffff88801381b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 197.367961][T12406] #3: ffff88801c3bd008 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 197.371401][T12406] [ 197.371401][T12406] stack backtrace: [ 197.373303][T12406] CPU: 2 UID: 0 PID: 12406 Comm: syz.7.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.373320][T12406] Tainted: [L]=SOFTLOCKUP [ 197.373324][T12406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.373331][T12406] Call Trace: [ 197.373336][T12406] [ 197.373341][T12406] dump_stack_lvl+0x100/0x190 [ 197.373359][T12406] print_circular_bug.cold+0x178/0x1c7 [ 197.373379][T12406] check_noncircular+0x146/0x160 [ 197.373399][T12406] __lock_acquire+0x14b8/0x2630 [ 197.373418][T12406] lock_acquire+0x1cf/0x380 [ 197.373434][T12406] ? lookup_slow+0x42/0x70 [ 197.373448][T12406] ? __pfx___might_resched+0x10/0x10 [ 197.373460][T12406] ? try_to_unlazy+0x296/0x910 [ 197.373476][T12406] down_read+0x99/0x460 [ 197.373489][T12406] ? lookup_slow+0x42/0x70 [ 197.373502][T12406] ? __pfx_down_read+0x10/0x10 [ 197.373516][T12406] lookup_slow+0x42/0x70 [ 197.373530][T12406] path_lookupat+0x5e8/0xc40 [ 197.373546][T12406] filename_lookup+0x202/0x590 [ 197.373563][T12406] ? __pfx_filename_lookup+0x10/0x10 [ 197.373605][T12406] ? __asan_memcpy+0x3c/0x60 [ 197.373619][T12406] ? do_getname_kernel+0x1be/0x250 [ 197.373633][T12406] kern_path+0x37/0x50 [ 197.373649][T12406] lookup_bdev+0xd8/0x280 [ 197.373665][T12406] ? __pfx_lookup_bdev+0x10/0x10 [ 197.373680][T12406] ? __asan_memcpy+0x3c/0x60 [ 197.373694][T12406] resume_store+0x1d6/0x460 [ 197.373706][T12406] ? __pfx_resume_store+0x10/0x10 [ 197.373719][T12406] ? find_held_lock+0x2b/0x80 [ 197.373731][T12406] ? sysfs_file_kobj+0xe4/0x290 [ 197.373746][T12406] ? sysfs_file_kobj+0xe4/0x290 [ 197.373760][T12406] ? __pfx_resume_store+0x10/0x10 [ 197.373772][T12406] kobj_attr_store+0x58/0x80 [ 197.373784][T12406] ? __pfx_kobj_attr_store+0x10/0x10 [ 197.373796][T12406] sysfs_kf_write+0xf2/0x150 [ 197.373810][T12406] kernfs_fop_write_iter+0x3e0/0x5f0 [ 197.373822][T12406] ? __pfx_sysfs_kf_write+0x10/0x10 [ 197.373836][T12406] vfs_write+0x6ac/0x1070 [ 197.373852][T12406] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 197.373864][T12406] ? __pfx_vfs_write+0x10/0x10 [ 197.373884][T12406] ksys_write+0x12a/0x250 [ 197.373899][T12406] ? __pfx_ksys_write+0x10/0x10 [ 197.373917][T12406] do_syscall_64+0x106/0xf80 [ 197.373928][T12406] ? clear_bhb_loop+0x40/0x90 [ 197.373940][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.373951][T12406] RIP: 0033:0x7f4cdc19c799 [ 197.373961][T12406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.373971][T12406] RSP: 002b:00007f4cdcfd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.373982][T12406] RAX: ffffffffffffffda RBX: 00007f4cdc415fa0 RCX: 00007f4cdc19c799 [ 197.373988][T12406] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 197.373995][T12406] RBP: 00007f4cdc232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 197.374001][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.374007][T12406] R13: 00007f4cdc416038 R14: 00007f4cdc415fa0 R15: 00007ffcee4379d8 [ 197.374016][T12406] [ 197.477371][T12412] program syz.0.1853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.478576][T12406] block device autoloading is deprecated and will be removed. [ 197.485904][T12406] PM: Image not found (code -22) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 197.647593][ T5288] Bluetooth: hci2: command tx timeout [ 198.310243][ T1170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.392553][ T1170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.539541][ T1170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.661047][ T1170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.854186][ T1170] bridge_slave_1: left allmulticast mode [ 198.856695][ T1170] bridge_slave_1: left promiscuous mode [ 198.859995][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.864126][ T1170] bridge_slave_0: left allmulticast mode [ 198.866545][ T1170] bridge_slave_0: left promiscuous mode [ 198.869169][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.015621][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.069007][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.098672][ T1170] bond0 (unregistering): Released all slaves [ 199.103615][ T1170] team0: Port device bond1 removed [ 199.106704][ T1170] bond1 (unregistering): Released all slaves [ 199.111029][ T1170] bond2 (unregistering): Released all slaves [ 199.114807][ T1170] bond3 (unregistering): Released all slaves [ 199.159036][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.752314][ T1170] hsr_slave_0: left promiscuous mode [ 199.754350][ T1170] hsr_slave_1: left promiscuous mode [ 199.756340][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.759115][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.761903][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.764350][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.768569][ T1170] veth1_macvtap: left promiscuous mode [ 199.770361][ T1170] veth0_macvtap: left promiscuous mode [ 199.772212][ T1170] veth1_vlan: left promiscuous mode [ 199.773987][ T1170] veth0_vlan: left promiscuous mode [ 199.843807][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 199.853806][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 200.490699][ T1170] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.550575][ T1170] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.620487][ T1170] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.680496][ T1170] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.841604][ T1170] bridge_slave_1: left allmulticast mode [ 200.843476][ T1170] bridge_slave_1: left promiscuous mode [ 200.845402][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.848751][ T1170] bridge_slave_0: left allmulticast mode [ 200.850940][ T1170] bridge_slave_0: left promiscuous mode [ 200.852874][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.023886][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.069497][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.118198][ T1170] bond0 (unregistering): Released all slaves [ 201.714600][ T1170] hsr_slave_0: left promiscuous mode [ 201.716769][ T1170] hsr_slave_1: left promiscuous mode [ 201.721196][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.723686][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.726401][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.728944][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.732922][ T1170] veth1_macvtap: left promiscuous mode [ 201.734794][ T1170] veth0_macvtap: left promiscuous mode [ 201.737042][ T1170] veth1_vlan: left promiscuous mode [ 201.738903][ T1170] veth0_vlan: left promiscuous mode [ 201.807513][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 201.813284][ T1170] team0 (unregistering): Port device team_slave_0 removed