last executing test programs: 2m54.320639408s ago: executing program 3 (id=467): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x1, 0x45c0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x8) lseek(r6, 0xffffffffffffff73, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000040)={0x9, 0x6, 0xfff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xfffd, 0x7a}, 0x8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) 2m54.101189435s ago: executing program 3 (id=478): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c9301c00180005"], 0x21) r0 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000012c0)={0x900a000, &(0x7f0000000000), &(0x7f0000001100)=0x0, &(0x7f0000001140), {0x23}, &(0x7f0000001180)=""/86, 0x56, &(0x7f0000001200)=""/85, &(0x7f0000001280)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) syz_open_procfs(r1, &(0x7f0000001340)='net/if_inet6\x00') prlimit64(r0, 0xf, &(0x7f00000010c0)={0x3, 0x1c88000005}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m53.978484606s ago: executing program 3 (id=482): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20c481, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8, 0x80, 0x5, 0x2, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x4d, 0x0, 0x1, [0x7, 0xef, 0x200]}, @timestamp_addr={0x44, 0x34, 0x40, 0x1, 0xf, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x10001}, {@remote, 0xb8f}]}, @lsrr={0x83, 0xb, 0x15, [@local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @fwd={0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000380)=""/201, 0x3f, 0xc9, 0x0, 0x7fff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000019580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000019580), &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000680), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='\x00', 0x0, 0x10, r0}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r8, 0x20000000000002, 0x1) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r10, &(0x7f0000000a40)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="f8", 0x1}, {&(0x7f0000000240)='o', 0x1}, {&(0x7f0000000300)="a0", 0x1}], 0x4, 0x7) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r12, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) readv(r11, &(0x7f0000000180)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0xee4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x8b2, 0x95, &(0x7f00000001c0)=""/149, 0x41000, 0x24, '\x00', r2, @tracing=0x18, r4, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xa, 0x3d, 0x8}, 0x10, r5, r6, 0x0, &(0x7f0000000940)=[r7, r8, r9, r10], 0x0, 0x10, 0xe}, 0x94) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) 2m53.976004288s ago: executing program 3 (id=484): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT=r0, @ANYBLOB='@'], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x2000c4b0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000013c0)={'syztnl2\x00', &(0x7f0000001340)={'gretap0\x00', 0x0, 0x80, 0x20, 0x6, 0xc, {{0xf, 0x4, 0x0, 0x31, 0x3c, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0xf, 0xf2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @lsrr={0x83, 0x17, 0x98, [@empty, @local, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0xfffffff8}], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x79, '\x00', r1}, 0x94) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mknodat$loop(r2, &(0x7f00000001c0)='./file1\x00', 0x6000, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x7587e9034172e6ac, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x5, 0x1]}, @timestamp={0x8, 0xa, 0xee, 0x500000}, @sack={0x5, 0x16, [0x5, 0xfffff000, 0x9, 0xd, 0x80000001]}, @timestamp={0x8, 0xa, 0x1, 0x2}]}}}}}}}, 0x0) accept$unix(r3, 0x0, &(0x7f00000012c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x824c4fc41db1b3f8) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000280)={{r5}, "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"}) 2m53.908692917s ago: executing program 3 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e80)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x40, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) 2m53.599739564s ago: executing program 3 (id=491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000058f30000000000000000000000000000000000000000000000000000ffffffff41000000000000000000000000000000000000000abc2f390000000000000000000000000000000002000000feffffff0000000000000000000040000000000000000000000000000000000000000000000000000000000004000000feffffff00000000"]}, 0x108) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3f000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000002800ea7f240001800b0001006f626a726566000014000280080005400000000308000340000000091400000a"], 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, 0x0, 0xfffffffffffffcf4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m53.497377836s ago: executing program 32 (id=491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) unshare(0x28000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000058f30000000000000000000000000000000000000000000000000000ffffffff41000000000000000000000000000000000000000abc2f390000000000000000000000000000000002000000feffffff0000000000000000000040000000000000000000000000000000000000000000000000000000000004000000feffffff00000000"]}, 0x108) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3f000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000002800ea7f240001800b0001006f626a726566000014000280080005400000000308000340000000091400000a"], 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, 0x0, 0xfffffffffffffcf4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m18.994616119s ago: executing program 0 (id=851): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000040)={r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)={0x57, 0x6f, 0x2, {0x6, [{0x8, 0x0, 0x4}, {0x8, 0x3, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}, {0x20, 0x3, 0x1}, {0x10, 0x3, 0x7}]}}, 0x57) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x0, 0x101}) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000380000000000019078ac1e0001ac1414aa0b009078120002282508000000000000002f00007f00000100000000000088beffff00008a10dd530676af4ab0ab23adca3d9e5335894970b871beb9427c1c5f2849b93730bc17"], 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x8}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m18.050726052s ago: executing program 0 (id=858): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$CDROMEJECT(r0, 0x2202) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 2m17.991151371s ago: executing program 0 (id=859): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) read$char_usb(r2, &(0x7f0000000180)=""/189, 0xbd) (async) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async, rerun: 32) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) (async, rerun: 32) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2, 0x15, 0x4, 0x6, 0x2, 0x0, 0x70bd25, 0x25dfdc00}, 0x10}}, 0x4001) (async, rerun: 32) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) (rerun: 32) 2m17.989460774s ago: executing program 0 (id=860): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) r2 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r5, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c0395"]) 2m17.89106198s ago: executing program 0 (id=861): r0 = openat$iommufd(0xffffffffffffff9c, 0xfffffffffffffffd, 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000010c0)={0xc, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000001040)={0x6, 0x3, 0xa, 0x7, 0x6, "fb6b155a28a58c069f4015b6b82d07d1854fa6"}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000200)={0x71, 0x1, 0x1, 0x8000000000000001, "485f178f2160e421286963865e332c5213a5e4b05e10c6ef2c77446fcb695e5633403625ee9ac5dca5ded29682b4a7c1885b360386dbd0e407a7811eee30ffb090ae4f1bf3c0cad3a4487cb65a812533dbac84d3fdb2ea359b"}) write$UHID_INPUT(r2, &(0x7f0000001100)={0xc, {"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", 0xfffffffffffffc34}}, 0x1006) lseek(r2, 0x800003, 0x3) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="01000000"]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010102, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x2, 0x0, 0x1f}, {}, {}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000000)={&(0x7f00000003c0)=[{0x5, 0x10, 0x4f, &(0x7f0000000280)="3113d65683e82c440824949112d6a2fd15562b57f42517684b88a765d7b095d280471f36c921eb6880d600cb89b36959d348a9f6a4ac403e8c1cd84fcd800685ef79cbe5a5499fe2f0078ae4c0f509"}], 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r11, 0x3b64) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r12, &(0x7f0000000300)) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000180)=0x7) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000001080)={0x28, 0x3, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.68563609s ago: executing program 0 (id=876): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="3811ee307bd5a855c32ebbc563ecd2c4f34039fb85ae55809e171eeba8d792d0a962c84f022dc71a3b188a1e9494ba0a69d91e54eadec32b01e91a529ec8693a4e62fe544667a9c1", 0x48, r0}, 0x68) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000011000001e283807c5928b25ea74b0700", @ANYRES32=0x0, @ANYBLOB="8000040000000000140003007665746831000000000000000000000008001d0009000000"], 0x3c}}, 0x4c030) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @empty, 0x2}, 0x1c) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x0, 0x3, 0x0, 0x4}}, 0x26) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x8, 0x8000000000000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 2m5.58965466s ago: executing program 2 (id=1041): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x600000000000000, 0x7, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000005, 0x7ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80, 0x8, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x2000000000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0xfffffffc, 0x7, 0x4]}) 2m5.390456328s ago: executing program 2 (id=1045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2m5.390043328s ago: executing program 2 (id=1047): socket$nl_netfilter(0x10, 0x3, 0xc) 2m5.311198159s ago: executing program 2 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 2m5.247590534s ago: executing program 2 (id=1051): socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') 2m5.001220928s ago: executing program 2 (id=1057): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x2, 0x3, &(0x7f00000002c0)={0x1a, "bbf6d4ef1b290853ddd34e4ee9a65e8f2d11cdc13260c7fb16b831b023e8c37d5f"}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 2m4.961974017s ago: executing program 33 (id=1057): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x2, 0x3, &(0x7f00000002c0)={0x1a, "bbf6d4ef1b290853ddd34e4ee9a65e8f2d11cdc13260c7fb16b831b023e8c37d5f"}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 2m1.619383496s ago: executing program 34 (id=876): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="3811ee307bd5a855c32ebbc563ecd2c4f34039fb85ae55809e171eeba8d792d0a962c84f022dc71a3b188a1e9494ba0a69d91e54eadec32b01e91a529ec8693a4e62fe544667a9c1", 0x48, r0}, 0x68) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000011000001e283807c5928b25ea74b0700", @ANYRES32=0x0, @ANYBLOB="8000040000000000140003007665746831000000000000000000000008001d0009000000"], 0x3c}}, 0x4c030) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r2, r5) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={r4}, 0x8) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @empty, 0x2}, 0x1c) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x0, 0x3, 0x0, 0x4}}, 0x26) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x8, 0x8000000000000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 4.606594133s ago: executing program 4 (id=2849): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x2}, @const={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x36}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x2}, @const={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x36}, 0x28) (async) 3.416178645s ago: executing program 1 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffff699, {0x4, 0x0, 0xa53, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.415705525s ago: executing program 1 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r2}, 0x18) close_range(r0, r2, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x260, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x204, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x5c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0xb, 0xff}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1e, 0xa, "ea21b2b9dc2eea5cacf4f6cb92c97d4f7434a4dc6671aa8d1672"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xf}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7ff}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x190, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa6, 0x6, "8350121a8cc1aa4cefac4f3e7e5767ce24d9bc184e68c01ecd9abc3857febfab26ca131700c50e413470b750999ebcf8102d320b9ea4908bf61ccc429ad75dba5b55c91f0c5e844109f0f3fcf8f692dc5f4a85023697a3d452631f2820786c8f549777141bcbea66605a42890bee43e28157e93dc7760bb37cd95e36c9436421ae1ba8438926e05a9eb4acb7969adba00f11db1dc7848e169d7add5dec502fcf87fd"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xc2, 0x6, "c716ab8c358197442a61c045aa773a08ad199410910044a6e98b23800ac5f821e3fff32e20bbfc81faa36efe302790501b31daee3ac6a62534b2909b46878ba6838dca73bb91671546d10a19a03c34e0d8258254d90fdc46d30d40448b1e265ee4f758a45159416ee878742ff2265d7bceec9235af344061f9e2d95d76c7da2f58a100f8a8ce5cdd4d6ee6c3cecd9e470ea828801326dcbb4866ed09787703993d1648624e55ee4f2063a6ff0fef25ff00f34542921eda4b0402d25b7a61"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x7}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20004189}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) (async) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x1, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r2}, 0x18) (async) close_range(r0, r2, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x260, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x204, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x5c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0xb, 0xff}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1e, 0xa, "ea21b2b9dc2eea5cacf4f6cb92c97d4f7434a4dc6671aa8d1672"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xf}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7ff}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x190, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa6, 0x6, "8350121a8cc1aa4cefac4f3e7e5767ce24d9bc184e68c01ecd9abc3857febfab26ca131700c50e413470b750999ebcf8102d320b9ea4908bf61ccc429ad75dba5b55c91f0c5e844109f0f3fcf8f692dc5f4a85023697a3d452631f2820786c8f549777141bcbea66605a42890bee43e28157e93dc7760bb37cd95e36c9436421ae1ba8438926e05a9eb4acb7969adba00f11db1dc7848e169d7add5dec502fcf87fd"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xc2, 0x6, "c716ab8c358197442a61c045aa773a08ad199410910044a6e98b23800ac5f821e3fff32e20bbfc81faa36efe302790501b31daee3ac6a62534b2909b46878ba6838dca73bb91671546d10a19a03c34e0d8258254d90fdc46d30d40448b1e265ee4f758a45159416ee878742ff2265d7bceec9235af344061f9e2d95d76c7da2f58a100f8a8ce5cdd4d6ee6c3cecd9e470ea828801326dcbb4866ed09787703993d1648624e55ee4f2063a6ff0fef25ff00f34542921eda4b0402d25b7a61"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x7}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20004189}, 0x4008000) (async) 3.27960675s ago: executing program 4 (id=2859): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000140)=[r1, r2], &(0x7f0000000180)=[0x1, 0x3], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000340)={{[0x6, 0x4, 0x3, 0x7]}, 0x0, 0x3, 0xffffffff, 0x0, &(0x7f0000000200)=[{{@align, {0x1000, 0xffff, 0x2, 0x5}}, 0x80000000, 0x0, 'GPL\x00'}, {{@align=0xd4d0, {0xffff, 0x100, 0x800, 0x1}}, 0x5, 0x0, ')[(\x00'}, {{@_ha_fsid={[0x3, 0xfff]}, {0x0, 0x1, 0xdf, 0x2}}, 0x0, 0x0, '*&\x00'}, {{@align=0x8, {0x5, 0x9, 0x8, 0xfffffffffffffff6}}, 0x4, 0x0, '\x00'}, {{@align=0x2f0e, {0xfff9, 0x1, 0xc, 0xd5c1}}, 0x7, 0x0, '\x00'}, {{@align=0x9, {0xc613, 0x200, 0xfffff800, 0x8}}, 0xfffffff7, 0x0, '.{\x00'}, {{@_ha_fsid={[0x7, 0xfffffffb]}, {0xf800, 0x2, 0x1ff, 0x4}}, 0x91f1, 0x0, '(\x00'}, {{@align=0x8, {0x7, 0x2, 0x8, 0x9}}, 0xce9, 0x0, '.[+(\x00'}]}) 3.279273468s ago: executing program 1 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x7, 0xfffffffffffffffe, 0x5, 0x1, 0x3, 0x4, {0x2000400000080001, 0x400fd, 0x7ffffffffffffffe, 0x8000000dd6, 0x200, 0xd615, 0x9, 0xffff, 0xfffff7fc, 0x8000, 0xfffffff6, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000100), 0x4) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x4) r5 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}}, 0x20008184) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000020c0)={'vxcan0\x00'}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r7, &(0x7f00000010c0)=""/4096, 0x1000) 3.277056449s ago: executing program 4 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x20000000, 0x8, 0x1, 0x7fb, 0x7e73, 0x7fffffffffffffff, 0x10000006, 0x95}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x288, 0x0, 0x0, 0x440, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.199663103s ago: executing program 4 (id=2862): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904000000000000000000020000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25df5bfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe95}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0xfe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x79, 0x59, ""/89}, &(0x7f00000000c0)=0x79, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd8e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r12) syz_usb_control_io$hid(r12, &(0x7f00000006c0)={0x24, &(0x7f0000000600)={0x40, 0xb, 0x85, {0x85, 0x0, "3d7a2b1daaaa761c302cce3c1dbc2b4c0b36b2cc4a918bda97f7f90f556dd00fd758c5071b61373da3bc652eebf8010b4f7898f8159458740baf88533c59367c5ce97f88836bd6fbfffa492a0ce70ca49ee0b1958e7e578c0fb4e3e9fe5477128e78e8d02da6a016883a3f91437ddaebc07a16bc43a06eb7491830ccce489fefda0ae0"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, &(0x7f00000004c0)={0x0, 0x22, 0xa, {[@main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x2, 0x0, 0xb, '}/'}, @local=@item_4={0x3, 0x2, 0xa, "9f86ab54"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0xf5, 0x1, {0x22, 0xec4}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x40, 0x17, 0x60, "54d7a39775415d9a740191d707edafc1dd50d5566acb342342c6273666e72092839e2e8dc759521b16748e8c0dc816fb5afcfc45eb97f89694ab9d5ea448c17c04c9db3ca3498be5267fa5d8290d97b099aede72c3a985721c25f0709cb49739"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x1, 0x95, "914c9518f70d95b5f6cdc515a256168e6c4771ded306379a8e9f8f35bbca10f4e44a5344b3e9a250c8d2fc6f2a5862d4e6ba8a8db0780908eb880d3f874bc29b4b21be5e8f020673d7c545d7fc9f76db891a994c1fe5808ee81caa8a3c9512b2c98d6427969c3e2608f2dba6d791cb245b31f2ea312271598e7249edc595800c360877d450c00f2f5551c3334ca9471f07aa843a1c"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x6}}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x6c, r11, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c1) 3.126326918s ago: executing program 1 (id=2865): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x1, 0x44100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r0, 0x6d525000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 2.939134509s ago: executing program 6 (id=2869): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x70}}, 0x2000c894) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0xc0404d1a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000201010200000000000000000100000a600002800c00028005000100840000000c00028005000100880000000c00028005000100010000000600034001000000060003400200000000000000050001002f0000001400a25708000100ac14141508000200ffffffff0600034000020000"], 0x74}, 0x1, 0x0, 0x0, 0x2000008a}, 0x48004) r2 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendto$inet6(r4, &(0x7f0000000080)="29a422", 0x3, 0x4004, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/69, 0x45}], 0x1}, 0x200321b1) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x1ac, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x674b6175}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff83}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2.83989479s ago: executing program 6 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x31e0, 0xfff, 0x4a0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x5, 0xb}, 0x50) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xd}, @IFLA_GRE_IKEY={0x8, 0x4, 0x100}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000d, 0x4000010, r0, 0xf4fbd000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}}, 0x24}}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@out_dx={0x6a, 0x28, {0xcce4, 0x1, 0xffffffff}}], 0x28}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000000180)={0x3, 0x0, [{0x7, 0x101, 0xc, 0x0, 0x400, 0xfffffff2, 0x2}, {0x80000000, 0x4f02, 0x0, 0xff, 0xc25, 0x1b, 0x40}, {0x4, 0x3, 0x0, 0x1ff, 0x6, 0x7, 0x3}]}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xf) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x9, 0x1ff, 0x101, 0x6, 0x90}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x7}]}}}]}, 0x58}}, 0x4000010) 2.839642288s ago: executing program 1 (id=2871): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000f"], 0x0, 0x96}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x50009404, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r7, &(0x7f0000000240)='./file0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f000000b1c0), 0x4) ftruncate(r10, 0x8008976) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r12) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r12, &(0x7f0000000540)={0x0, 0x3e, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r13, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000000000000cc0000000000000004"]) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f0000000140)=""/66, 0x42}, &(0x7f00000001c0)=0x40) 2.749933312s ago: executing program 6 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 2.748451132s ago: executing program 6 (id=2873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, 0x0, &(0x7f0000000840)=""/165}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = signalfd(r0, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x5, 0x0, 0x2000, &(0x7f0000005000/0x2000)=nil}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x1, 0x8, 0x100, 0x1, 0x7b, 0xd601}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000200)={0x8, 0x0, [{0xb, 0x8, 0x2, 0xf, 0x8, 0x9d5, 0x9}, {0x6, 0xec5, 0x2, 0x6, 0x200, 0x8001, 0x8000}, {0x80000007, 0xf, 0x4, 0x10001, 0x1, 0x3a2b, 0x6}, {0x6, 0x3, 0x6, 0x9, 0x8000, 0x8000, 0x100}, {0xa, 0x5, 0x7, 0x6, 0x7f, 0x2, 0xa}, {0xa, 0x100, 0x5, 0xfffffff7, 0x3, 0x3, 0x1}, {0xc0000001, 0xfffffff8, 0x1, 0x7, 0x6, 0x3, 0x943c}, {0x80000019, 0xf16f, 0x4, 0xc, 0x8, 0x0, 0x5}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000003c0)={0x3, {0x10, 0x7, 0x6, 0xc2a}, {0xac, 0x2, 0x4, 0x1ff}, {0x5, 0x6}}) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x103c290d87ac8ff6}) 2.598931003s ago: executing program 6 (id=2874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x284b}, &(0x7f0000000240)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x404080c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x9, 0x8, 0x101, 0x4, 0x68d8}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461560000000800014000000005"], 0xe8}}, 0x0) 1.860615768s ago: executing program 5 (id=2884): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000a80)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/16, 0x10}, {&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000b40)=""/15, 0xf}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/52, 0x34}], 0xa, &(0x7f0000000980)=""/251, 0xfb}, 0x4100) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000b00)={0x0, 0x2, 0xd7, '\x00', &(0x7f0000000ac0)=0xf}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.009968349s ago: executing program 5 (id=2885): ptrace(0x11, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x400}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 159.727001ms ago: executing program 1 (id=2886): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 159.48843ms ago: executing program 5 (id=2887): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040)) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 159.218982ms ago: executing program 6 (id=2888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, 0x0, &(0x7f0000000840)=""/165}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = signalfd(r0, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x5, 0x0, 0x2000, &(0x7f0000005000/0x2000)=nil}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x1, 0x8, 0x100, 0x1, 0x7b, 0xd601}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000200)={0x8, 0x0, [{0xb, 0x8, 0x2, 0xf, 0x8, 0x9d5, 0x9}, {0x6, 0xec5, 0x2, 0x6, 0x200, 0x8001, 0x8000}, {0x80000007, 0xf, 0x4, 0x10001, 0x1, 0x3a2b, 0x6}, {0x6, 0x3, 0x6, 0x9, 0x8000, 0x8000, 0x100}, {0xa, 0x5, 0x7, 0x6, 0x7f, 0x2, 0xa}, {0xa, 0x100, 0x5, 0xfffffff7, 0x3, 0x3, 0x1}, {0xc0000000, 0x431d, 0x2, 0x7, 0x2, 0x7, 0x2}, {0x80000019, 0xf16f, 0x4, 0xc, 0x8, 0x0, 0x5}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000003c0)={0x3, {0x10, 0x7, 0x6, 0xc2a}, {0xac, 0x2, 0x4, 0x1ff}, {0x5, 0x6}}) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x103c290d87ac8ff6}) 157.984503ms ago: executing program 4 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffff699, {0x4, 0x0, 0xa53, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 109.842526ms ago: executing program 5 (id=2890): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x16, 0x20000000, 0x4, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xd) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES64=r1, @ANYRESDEC=r2, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="170f6e80dd9e85d5"], 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) 59.871177ms ago: executing program 5 (id=2891): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@local, 0x80, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005800000080009000200000008000b000000000008000c00a80a00005fea37f31ad0ceda38a81af4ee7459b0d6d365eb191f20f5dfc6ac9eee45b44f34a3a7d8e878801e2eda8be28139f0aed6388d0d09832d1db9b488ca013c6ed1bb2e4a958634970e2524fed350d23b9de376be027f2691412403548569be5712b8b43f7aa2176764f37d42f5f3137a58670cbfd191ad0c6b0393ec28798bd0e48d90e87fd556df4dc85e1c5be31c725daf5d4e0279dac433a716e721b91041877b07f8aa324edb6e89af9f7d2de639dfd9d82090dcdc0521e5a288665dcf10fc7fc4e32d995d9b"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 59.203567ms ago: executing program 4 (id=2892): r0 = gettid() r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000100)={0xeeef0000, 0x2, 0xdefd, 0x0, 0x8}) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0) setresgid(0x0, 0x0, 0xee00) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(r9, r8, 0x0, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r7, 0x4}}, 0x10) 0s ago: executing program 5 (id=2893): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket(0x0, 0x2, 0x9) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) (async) socket(0x0, 0x2, 0x9) (async) kernel console output (not intermixed with test programs): as 6 unknown bytes. [ 183.780285][ T40] audit: type=1400 audit(2000000074.239:6158): avc: denied { getopt } for pid=13011 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.943583][ T39] kernel read not supported for file /1438/comm (pid: 39 comm: kworker/2:1) [ 184.133265][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.136010][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.341967][ T54] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 184.493427][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.496259][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.499636][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.503056][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 184.506571][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 184.511491][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.514705][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.517333][ T54] usb 6-1: Product: syz [ 184.518683][ T54] usb 6-1: Manufacturer: syz [ 184.525241][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 184.526936][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 184.530059][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 184.532128][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 184.543233][T13037] xt_limit: Overflow, try lower: 271964/0 [ 184.571902][T13039] autofs: Bad value for 'fd' [ 184.725305][ T40] audit: type=1400 audit(2000000075.189:6159): avc: denied { read write } for pid=13026 comm="syz.1.1708" name="cdc-wdm0" dev="devtmpfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 184.732139][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.735528][ T40] audit: type=1400 audit(2000000075.189:6160): avc: denied { open } for pid=13026 comm="syz.1.1708" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 184.737654][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.750344][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.752486][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.754689][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.756850][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.759072][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.761211][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.763430][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.765565][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.767779][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.769925][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.772492][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.774637][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.777337][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.779488][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.781682][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 184.784106][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 184.786464][ T54] usb 6-1: USB disconnect, device number 16 [ 184.859875][T13073] netlink: 'syz.4.1718': attribute type 10 has an invalid length. [ 184.865364][T13073] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 184.868698][T13073] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 184.872757][T13073] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 184.903865][T13075] xt_limit: Overflow, try lower: 271964/0 [ 185.031957][ T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 185.203201][ T10] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 185.207813][ T10] usb 11-1: config index 0 descriptor too short (expected 57115, got 27) [ 185.211632][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.217213][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.222360][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.226410][ T10] usb 11-1: config index 1 descriptor too short (expected 57115, got 27) [ 185.230024][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.236571][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.240078][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.243129][ T10] usb 11-1: config index 2 descriptor too short (expected 57115, got 27) [ 185.245927][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.248830][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.254128][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.257053][ T10] usb 11-1: config index 3 descriptor too short (expected 57115, got 27) [ 185.259854][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.260633][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 185.262976][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.262992][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.263737][ T10] usb 11-1: config index 4 descriptor too short (expected 57115, got 27) [ 185.276236][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.279185][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.282676][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.285591][ T10] usb 11-1: config index 5 descriptor too short (expected 57115, got 27) [ 185.288370][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.291162][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.294881][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.298056][ T10] usb 11-1: config index 6 descriptor too short (expected 57115, got 27) [ 185.300791][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.304388][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.307955][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.310916][ T10] usb 11-1: config index 7 descriptor too short (expected 57115, got 27) [ 185.313749][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.316683][ T10] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.319999][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 185.323832][ T10] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.326889][ T10] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.329643][ T10] usb 11-1: Product: syz [ 185.331074][ T10] usb 11-1: Manufacturer: syz [ 185.332882][ T10] usb 11-1: SerialNumber: syz [ 185.347157][ T10] usb 11-1: config 0 descriptor?? [ 185.360749][ T10] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.554309][ T39] usb 11-1: USB disconnect, device number 11 [ 185.565448][ T39] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 185.907977][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 185.915622][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 185.922213][T13125] netlink: 211664 bytes leftover after parsing attributes in process `syz.4.1729'. [ 185.925367][T13125] openvswitch: netlink: Message has 6 unknown bytes. [ 186.219256][T13159] netlink: 'syz.1.1739': attribute type 13 has an invalid length. [ 186.256132][T13158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.273418][T13159] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 186.284018][T13168] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 186.293286][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1737'. [ 186.355118][T13158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.403000][T13183] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1743'. [ 186.443639][T13158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.547450][T13158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.602439][T13214] tmpfs: Unknown parameter '00000000000000000000003' [ 186.635355][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 186.635366][ T40] audit: type=1400 audit(2000000077.099:6162): avc: denied { listen } for pid=13215 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.670662][ T7072] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.674588][T13220] tc_dump_action: action bad kind [ 186.686043][ T7072] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.699358][ T7085] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.713570][ T9951] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.771064][T13232] mkiss: ax0: crc mode is auto. [ 186.814287][T13242] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1754'. [ 186.844570][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.847959][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.896273][T13242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.904556][T13242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.957020][T13242] vlan2: left promiscuous mode [ 186.958681][T13242] bridge0: left promiscuous mode [ 186.965553][ T9952] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.971508][ T9952] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.980756][ T9952] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.985750][ T9952] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.066883][T13256] overlayfs: failed to clone lowerpath [ 187.069749][T13256] overlayfs: failed to clone lowerpath [ 187.268536][ T40] audit: type=1400 audit(2000000077.729:6163): avc: denied { setopt } for pid=13280 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 187.313265][T13290] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 187.314685][T13292] netlink: 'syz.6.1770': attribute type 30 has an invalid length. [ 187.330414][T13290] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.342446][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 187.367396][T13290] bond5: (slave geneve3): making interface the new active one [ 187.369449][T13336] netlink: 'syz.6.1770': attribute type 30 has an invalid length. [ 187.370563][T13290] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 187.422759][T13292] tmpfs: Group quota inode hardlimit too large. [ 187.658295][T13370] netlink: 'syz.6.1778': attribute type 9 has an invalid length. [ 187.660870][T13370] netlink: 'syz.6.1778': attribute type 11 has an invalid length. [ 187.663659][T13370] netlink: 'syz.6.1778': attribute type 12 has an invalid length. [ 187.666822][T13370] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.1778'. [ 187.670769][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 187.685943][ T40] audit: type=1400 audit(2000000078.149:6164): avc: denied { execute_no_trans } for pid=13352 comm="syz.5.1775" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="hugetlbfs" ino=44403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 187.818820][T13384] cgroup: name respecified [ 187.821146][ T40] audit: type=1400 audit(2000000078.279:6165): avc: denied { mounton } for pid=13383 comm="syz.4.1781" path="/file0" dev="ramfs" ino=45285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 187.837038][T13384] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.839644][T13384] overlayfs: failed to set xattr on upper [ 187.841522][T13384] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.844521][T13384] overlayfs: ...falling back to index=off. [ 187.846406][T13384] overlayfs: ...falling back to uuid=null. [ 187.851408][T13384] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 188.056640][T13395] openvswitch: netlink: IP tunnel dst address not specified [ 188.296657][T13413] netlink: 'syz.1.1790': attribute type 15 has an invalid length. [ 188.301672][T13413] program syz.1.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.305449][T13413] No source specified [ 188.550774][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 188.554523][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 188.557638][T13424] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 188.560056][T13424] UDF-fs: Scanning with blocksize 512 failed [ 188.562747][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 188.565883][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 188.568970][T13424] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 188.571404][T13424] UDF-fs: Scanning with blocksize 1024 failed [ 188.573995][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 188.577725][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 188.581362][T13424] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 188.584125][T13424] UDF-fs: Scanning with blocksize 2048 failed [ 188.586743][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 188.589854][T13424] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 188.593117][T13424] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 188.595544][T13424] UDF-fs: Scanning with blocksize 4096 failed [ 188.597722][T13424] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 188.696259][T13433] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 188.742895][ T40] audit: type=1400 audit(2000000079.209:6166): avc: denied { create } for pid=13435 comm="syz.6.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.749574][ T40] audit: type=1400 audit(2000000079.209:6167): avc: denied { read } for pid=13435 comm="syz.6.1798" path="socket:[41969]" dev="sockfs" ino=41969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.757253][ T40] audit: type=1400 audit(2000000079.209:6169): avc: denied { listen } for pid=13434 comm="syz.4.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.763742][ T40] audit: type=1400 audit(2000000079.209:6168): avc: denied { ioctl } for pid=13435 comm="syz.6.1798" path="socket:[41969]" dev="sockfs" ino=41969 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.791465][T13439] netlink: 'syz.6.1800': attribute type 6 has an invalid length. [ 188.935801][T13449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13449 comm=syz.6.1803 [ 189.036146][ T40] audit: type=1400 audit(2000000079.499:6170): avc: denied { setopt } for pid=13444 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.252901][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.450205][T13482] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 189.511460][T13491] batadv_slave_1: entered promiscuous mode [ 189.580800][T13500] fuse: Bad value for 'fd' [ 189.731132][ T40] audit: type=1400 audit(2000000080.189:6171): avc: denied { create } for pid=13519 comm="syz.4.1822" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.006678][T13546] dummy0: left promiscuous mode [ 190.081460][T13546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.091081][T13546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.141290][T13546] ipvlan1: left promiscuous mode [ 190.168731][T13546] macsec0: left promiscuous mode [ 190.195810][T13546] ip6erspan0: left promiscuous mode [ 190.199829][T13546] geneve2: left promiscuous mode [ 190.211879][T13546] ip6gre1: left promiscuous mode [ 190.229532][T13546] vxlan1: left promiscuous mode [ 190.244410][T13492] batadv_slave_1: left promiscuous mode [ 190.272814][T13555] xfrm0 speed is unknown, defaulting to 1000 [ 190.285773][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 190.285839][ T7085] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.293800][ T54] syz1: Port: 1 Link DOWN [ 190.294060][ T7085] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.307254][ T7085] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.311564][ T7085] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.334424][ T7085] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.338290][ T7085] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.351657][ T7085] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.361566][ T7085] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.698240][T13608] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.703626][T13608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.761967][T13612] __nla_validate_parse: 7 callbacks suppressed [ 190.761978][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1840'. [ 190.793387][T13615] xfrm0 speed is unknown, defaulting to 1000 [ 190.802944][T13623] xt_limit: Overflow, try lower: 271964/0 [ 190.849525][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 190.852856][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 191.345627][T13738] overlayfs: failed to clone upperpath [ 191.726170][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 191.889990][T13774] veth0_to_team: entered promiscuous mode [ 191.894157][T13774] erspan0: entered promiscuous mode [ 191.982014][T13783] xt_limit: Overflow, try lower: 271964/0 [ 192.010862][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 192.124812][T13798] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1880'. [ 192.127689][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 192.130541][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 192.194337][T13803] xfrm0 speed is unknown, defaulting to 1000 [ 192.240960][T13809] program syz.5.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.335108][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 192.341631][T13846] team0 (unregistering): Port device team_slave_0 removed [ 192.344971][ T1328] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 192.349756][T13846] team0 (unregistering): Port device team_slave_1 removed [ 192.492157][ T1328] usb 11-1: Using ep0 maxpacket: 16 [ 192.496657][ T1328] usb 11-1: config 12 has an invalid interface number: 65 but max is 2 [ 192.500239][ T1328] usb 11-1: config 12 has an invalid interface number: 8 but max is 2 [ 192.503695][ T1328] usb 11-1: config 12 has an invalid interface number: 68 but max is 2 [ 192.507392][ T1328] usb 11-1: config 12 has no interface number 0 [ 192.510135][ T1328] usb 11-1: config 12 has no interface number 1 [ 192.512625][ T1328] usb 11-1: config 12 has no interface number 2 [ 192.514722][ T1328] usb 11-1: config 12 interface 65 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 192.518932][ T1328] usb 11-1: config 12 interface 65 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 192.526280][ T1328] usb 11-1: config 12 interface 65 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 192.530690][ T1328] usb 11-1: config 12 interface 65 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 192.534979][ T1328] usb 11-1: config 12 interface 65 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 192.538802][ T1328] usb 11-1: config 12 interface 65 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 192.542487][ T1328] usb 11-1: config 12 interface 65 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 192.546455][ T1328] usb 11-1: config 12 interface 65 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 192.550126][ T1328] usb 11-1: config 12 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.555442][ T1328] usb 11-1: config 12 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.560027][ T1328] usb 11-1: config 12 interface 65 altsetting 0 endpoint 0xC has invalid maxpacket 3624, setting to 64 [ 192.560443][T13852] xt_limit: Overflow, try lower: 271964/0 [ 192.564007][ T1328] usb 11-1: config 12 interface 8 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 192.569852][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 192.573322][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 192.576789][ T1328] usb 11-1: config 12 interface 68 altsetting 12 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 192.581105][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 192.585393][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 192.589453][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 192.594367][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 192.598942][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 192.603144][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 192.607453][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 192.611144][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 192.615956][ T1328] usb 11-1: config 12 interface 68 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 192.620384][ T1328] usb 11-1: config 12 interface 8 has no altsetting 0 [ 192.623177][ T1328] usb 11-1: config 12 interface 68 has no altsetting 0 [ 192.627476][ T1328] usb 11-1: Dual-Role OTG device on HNP port [ 192.629747][ T1328] usb 11-1: New USB device found, idVendor=0bda, idProduct=318b, bcdDevice=ba.a1 [ 192.633624][ T1328] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.636963][ T1328] usb 11-1: Product: syz [ 192.638770][ T1328] usb 11-1: Manufacturer: 塾ë£ì›£é¾°é—Šê¾†á¢·ã“Ÿî» Å© [ 192.641572][ T1328] usb 11-1: SerialNumber: syz [ 192.647320][T13793] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 192.650460][T13793] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 192.720597][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 192.720609][ T40] audit: type=1400 audit(2000000083.179:6180): avc: denied { node_bind } for pid=13856 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 192.786931][T13861] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1889'. [ 192.829277][T13865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13865 comm=syz.4.1891 [ 192.875413][ T1328] usb 11-1: USB disconnect, device number 12 [ 193.174403][T13906] xt_limit: Overflow, try lower: 271964/0 [ 193.344873][T13919] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.463291][T13922] block nbd6: shutting down sockets [ 193.560625][T13933] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.607854][T13939] netlink: 'syz.6.1911': attribute type 10 has an invalid length. [ 193.653254][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 193.669281][T13944] CIFS mount error: No usable UNC path provided in device string! [ 193.669281][T13944] [ 193.673528][T13944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.707857][T13948] bond0: entered promiscuous mode [ 193.710248][T13948] bond_slave_0: entered promiscuous mode [ 193.713318][T13948] bond_slave_1: entered promiscuous mode [ 193.716051][T13948] bridge_slave_1: entered promiscuous mode [ 193.720621][T13948] gretap0: entered promiscuous mode [ 193.729018][T13948] hsr2: entered promiscuous mode [ 193.801889][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 193.805928][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 193.809521][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.821506][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.821694][T13960] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 193.826103][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 33056, setting to 1024 [ 193.834417][T13960] netlink: 'syz.4.1916': attribute type 3 has an invalid length. [ 193.834894][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 193.841302][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.851840][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.855780][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.928455][T13973] xt_limit: Overflow, try lower: 271964/0 [ 194.067454][ T10] usb 6-1: usb_control_msg returned -32 [ 194.069949][ T10] usbtmc 6-1:16.0: can't read capabilities [ 194.101727][T13988] netlink: 'syz.4.1926': attribute type 4 has an invalid length. [ 194.113409][T13988] netlink: 'syz.4.1926': attribute type 4 has an invalid length. [ 194.120399][ T40] audit: type=1400 audit(2000000084.579:6181): avc: denied { watch } for pid=13986 comm="syz.4.1926" path="pipe:[44994]" dev="pipefs" ino=44994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 194.134381][T13988] netlink: 'syz.4.1926': attribute type 3 has an invalid length. [ 194.228089][T13997] xt_connbytes: Forcing CT accounting to be enabled [ 194.230515][T13997] set match dimension is over the limit! [ 194.249944][T14008] netlink: 'syz.5.1922': attribute type 13 has an invalid length. [ 194.426423][T14014] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 194.432686][ T1328] usb 6-1: USB disconnect, device number 17 [ 194.447319][T14020] overlayfs: invalid origin (0000) [ 194.506501][T14034] gretap3: entered promiscuous mode [ 195.024195][T14068] netlink: 'syz.5.1942': attribute type 5 has an invalid length. [ 195.378215][T14091] macsec1: entered promiscuous mode [ 195.386719][T14089] netlink: 'syz.5.1949': attribute type 11 has an invalid length. [ 195.523297][T14106] macsec2: entered promiscuous mode [ 195.525087][T14106] macsec2: entered allmulticast mode [ 195.633093][T14119] xt_socket: unknown flags 0x20 [ 196.440696][T14139] set match dimension is over the limit! [ 196.445327][T14139] set match dimension is over the limit! [ 196.466734][T14142] batman_adv: batadv0: Adding interface: gretap2 [ 196.469045][T14142] batman_adv: batadv0: Interface activated: gretap2 [ 196.533118][T14161] __nla_validate_parse: 11 callbacks suppressed [ 196.533135][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'. [ 196.629671][ T40] audit: type=1400 audit(2000000087.089:6182): avc: denied { map } for pid=14188 comm="syz.1.1966" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 196.654076][ T40] audit: type=1326 audit(2000000087.119:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.4.1965" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f485399c629 code=0x0 [ 196.662006][T14197] Falling back ldisc for ttyS3. [ 196.731384][T14200] netlink: 'syz.6.1969': attribute type 21 has an invalid length. [ 196.734270][T14200] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1969'. [ 196.737123][T14200] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1969'. [ 196.778613][T14215] xfrm0 speed is unknown, defaulting to 1000 [ 196.824397][ T40] audit: type=1400 audit(2000000087.289:6184): avc: denied { write } for pid=14213 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 196.869115][T14250] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1972'. [ 196.883674][ T40] audit: type=1400 audit(2000000087.349:6185): avc: denied { read } for pid=14213 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.890549][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1970'. [ 197.067842][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1977'. [ 197.090260][T14280] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 197.096008][T14280] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 197.103116][T14284] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 197.106024][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 197.142450][ T40] audit: type=1400 audit(2000000087.609:6186): avc: denied { accept } for pid=14293 comm="syz.6.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.149271][T14294] overlayfs: conflicting options: nfs_export=on,index=off [ 197.219226][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1982'. [ 197.311975][ T40] audit: type=1400 audit(2000000087.779:6187): avc: denied { shutdown } for pid=14326 comm="syz.1.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.341664][T14330] tipc: Enabling of bearer rejected, failed to enable media [ 197.627234][ T40] audit: type=1400 audit(2000000088.089:6188): avc: denied { create } for pid=14359 comm="syz.6.1990" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.638856][ T40] audit: type=1400 audit(2000000088.099:6189): avc: denied { unlink } for pid=9850 comm="syz-executor" name="file0" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.710202][T14365] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 197.727205][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 197.727222][ T40] audit: type=1400 audit(2000000088.189:6192): avc: denied { rmdir } for pid=9850 comm="syz-executor" name="file0" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 197.862509][T14375] veth0: entered promiscuous mode [ 197.864731][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1996'. [ 198.181814][ T40] audit: type=1804 audit(2000000088.639:6193): pid=14404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2000" name="/newroot/213/file1" dev="tmpfs" ino=1144 res=1 errno=0 [ 198.608850][T14350] Set syz1 is full, maxelem 65536 reached [ 198.639722][ T5939] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 198.642296][ T39] IPVS: starting estimator thread 0... [ 198.731915][T14424] IPVS: using max 43 ests per chain, 103200 per kthread [ 198.835480][T14454] binder: Bad value for 'max' [ 198.939453][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2020'. [ 198.961409][T14470] bond3: entered promiscuous mode [ 198.963400][T14470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.975977][T14511] hsr_slave_0: left promiscuous mode [ 198.979984][T14511] hsr_slave_1: left promiscuous mode [ 198.992784][T14515] macsec0: entered promiscuous mode [ 198.995224][T14515] macsec0: entered allmulticast mode [ 198.997208][T14515] veth1_macvtap: entered allmulticast mode [ 199.025583][T14524] openvswitch: netlink: Unknown key attributes 2 [ 199.028251][ T40] audit: type=1400 audit(2000000089.489:6194): avc: denied { remount } for pid=14523 comm="syz.5.2023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.028297][T14524] binder: Binderfs stats mode cannot be changed during a remount [ 199.136795][T14550] fuse: Bad value for 'fd' [ 199.199244][T14558] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 199.207111][T14558] bond5 (unregistering): Released all slaves [ 199.343399][ T40] audit: type=1400 audit(2000000089.809:6195): avc: denied { append } for pid=14646 comm="syz.5.2042" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.352598][T14649] sit0: entered promiscuous mode [ 199.357883][T14649] validate_nla: 4 callbacks suppressed [ 199.357893][T14649] netlink: 'syz.4.2043': attribute type 1 has an invalid length. [ 199.425952][T14653] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 199.427367][T14659] xt_l2tp: v2 doesn't support IP mode [ 199.433509][ T40] audit: type=1400 audit(2000000089.899:6196): avc: denied { mount } for pid=14660 comm="syz.1.2047" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 199.441153][ T40] audit: type=1400 audit(2000000089.899:6197): avc: denied { mount } for pid=14658 comm="syz.4.2046" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 199.450904][T14659] overlayfs: failed to clone lowerpath [ 199.453656][T14659] overlayfs: failed to clone lowerpath [ 199.494460][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.704554][T14689] netlink: 'syz.4.2054': attribute type 10 has an invalid length. [ 199.707615][T14689] bond0: (slave wlan1): Opening slave failed [ 200.116870][T14719] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 200.144270][T14722] selinuxfs: Unknown parameter 'discard' [ 200.206867][ T40] audit: type=1400 audit(2000000090.669:6198): avc: denied { ioctl } for pid=14725 comm="syz.4.2066" path="socket:[48506]" dev="sockfs" ino=48506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.214999][ T40] audit: type=1400 audit(2000000090.669:6199): avc: denied { write } for pid=14725 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.279016][T14730] bridge_slave_1: left allmulticast mode [ 200.281614][T14730] bridge_slave_1: left promiscuous mode [ 200.285923][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.294834][T14730] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.668729][T14764] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 200.748764][T14776] IPVS: set_ctl: invalid protocol: 104 127.0.0.1:20002 [ 200.909846][T14800] netlink: 'syz.6.2082': attribute type 30 has an invalid length. [ 200.917702][ T9951] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.917744][ T9951] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.917824][ T9951] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.917843][ T9951] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.920449][T14800] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.928871][T14808] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 200.939136][T14808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.948129][T14808] bond5: (slave geneve2): making interface the new active one [ 200.949460][T14808] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 200.960296][T14845] fuse: Unknown parameter 'f~' [ 201.016465][T14855] overlayfs: failed to clone upperpath [ 201.075804][T14866] loop9: detected capacity change from 0 to 7 [ 201.088385][T14866] Dev loop9: unable to read RDB block 7 [ 201.090312][T14866] loop9: unable to read partition table [ 201.093139][T14866] loop9: partition table beyond EOD, truncated [ 201.095329][T14866] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 201.151373][ T40] audit: type=1400 audit(2000000091.609:6200): avc: denied { cmd } for pid=14880 comm="syz.4.2095" path="socket:[46948]" dev="sockfs" ino=46948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.163144][ T40] audit: type=1400 audit(2000000091.629:6201): avc: denied { create } for pid=14882 comm="syz.6.2096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 201.196350][T14893] IPv6: Can't replace route, no match found [ 201.238875][T14898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.250171][T14898] bond6: (slave ip6gretap1): making interface the new active one [ 201.255479][T14898] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 201.259990][T14922] xt_hashlimit: size too large, truncated to 1048576 [ 201.306575][T14942] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 201.545351][T14969] __nla_validate_parse: 20 callbacks suppressed [ 201.545362][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2112'. [ 201.546747][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'. [ 201.556910][T14969] bond2: entered promiscuous mode [ 201.558746][T14969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.582605][T14967] netlink: 'syz.1.2111': attribute type 39 has an invalid length. [ 201.586038][T14969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.588319][T14969] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 201.591989][T14969] bond2: (slave sit1): Error -95 calling set_mac_address [ 201.813338][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2116'. [ 201.885087][T15025] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2114'. [ 201.896865][T15025] netlink: 'syz.5.2114': attribute type 2 has an invalid length. [ 202.013789][T15037] overlayfs: failed to clone upperpath [ 202.070127][T15039] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 202.126686][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2120'. [ 202.348023][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.354781][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.357883][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.363383][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.366127][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.405923][T15055] xfrm0 speed is unknown, defaulting to 1000 [ 202.486626][T15055] chnl_net:caif_netlink_parms(): no params data found [ 202.556859][T15055] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.559142][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.561409][T15055] bridge_slave_0: entered allmulticast mode [ 202.564210][T15055] bridge_slave_0: entered promiscuous mode [ 202.570620][T15055] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.574854][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.577166][T15055] bridge_slave_1: entered allmulticast mode [ 202.579791][T15055] bridge_slave_1: entered promiscuous mode [ 202.609478][T15055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.615158][T15055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.632455][T15055] team0: Port device team_slave_0 added [ 202.635587][T15055] team0: Port device team_slave_1 added [ 202.650044][T15055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.652282][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.660092][T15055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.664518][T15055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.666917][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.674969][T15055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.691905][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 202.694596][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 202.728811][T15055] hsr_slave_0: entered promiscuous mode [ 202.731174][T15055] hsr_slave_1: entered promiscuous mode [ 202.733700][T15055] debugfs: 'hsr0' already exists in 'hsr' [ 202.735505][T15055] Cannot create hsr debugfs directory [ 202.954345][T15332] 9pnet_virtio: no channels available for device syz [ 202.958796][T15332] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 203.000701][ T9951] batman_adv: batadv0: Interface deactivated: gretap2 [ 203.025884][T15345] netlink: 'syz.6.2133': attribute type 8 has an invalid length. [ 203.028347][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2133'. [ 203.097044][ T9951] batman_adv: batadv0: Removing interface: gretap2 [ 203.116849][ T9951] bond5 (unregistering): (slave geneve3): Releasing active interface [ 203.328265][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 203.328281][ T40] audit: type=1400 audit(2000000093.789:6206): avc: denied { getopt } for pid=15361 comm="syz.5.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.364704][ T9951] bond1 (unregistering): (slave bridge5): Releasing active interface [ 203.646198][ T9951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.651180][ T9951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.654832][ T9951] bond0 (unregistering): Released all slaves [ 203.659839][ T9951] bond1 (unregistering): Released all slaves [ 203.666429][ T9951] bond2 (unregistering): Released all slaves [ 203.677652][ T9951] bond3 (unregistering): (slave veth5): Releasing active interface [ 203.681349][ T9951] bond3 (unregistering): Released all slaves [ 203.692687][ T9951] bond4 (unregistering): Released all slaves [ 203.707003][ T9951] bond5 (unregistering): Released all slaves [ 203.724373][T15336] IPv6: syztnl0: Disabled Multicast RS [ 203.797074][ T9951] tipc: Disabling bearer [ 203.803288][T15378] openvswitch: netlink: Duplicate key (type 6). [ 203.803597][ T9951] tipc: Left network mode [ 203.898393][ T9951] IPVS: stopping master sync thread 6108 ... [ 203.958211][T15400] Driver unsupported XDP return value 0 on prog (id 378) dev N/A, expect packet loss! [ 203.963155][T15402] fuse: Unknown parameter 'uid>00000000000000000000' [ 203.966279][T15402] sctp: [Deprecated]: syz.6.2141 (pid 15402) Use of int in maxseg socket option. [ 203.966279][T15402] Use struct sctp_assoc_value instead [ 204.107495][T15424] netlink: 'syz.5.2144': attribute type 10 has an invalid length. [ 204.110102][T15424] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2144'. [ 204.232079][ T1328] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 204.391807][ T1328] usb 11-1: Using ep0 maxpacket: 8 [ 204.394784][ T1328] usb 11-1: config 2 interface 0 has no altsetting 0 [ 204.403064][ T1328] usb 11-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 204.405973][ T1328] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.408569][ T1328] usb 11-1: Product: syz [ 204.409948][ T1328] usb 11-1: Manufacturer: syz [ 204.411418][ T1328] usb 11-1: SerialNumber: syz [ 204.451839][ T63] Bluetooth: hci4: command tx timeout [ 204.642621][ T1328] usb 11-1: USB disconnect, device number 13 [ 206.532306][ T63] Bluetooth: hci4: command tx timeout [ 207.174585][ T9951] hsr_slave_0: left promiscuous mode [ 207.175906][T15484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.180931][ T9951] hsr_slave_1: left promiscuous mode [ 207.180938][T15484] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 207.180960][T15484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.183702][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.184561][T15486] misc userio: Begin command sent, but we're already running [ 207.184603][T15486] misc userio: Begin command sent, but we're already running [ 207.184619][T15486] misc userio: Begin command sent, but we're already running [ 207.184633][T15486] misc userio: Begin command sent, but we're already running [ 207.184648][T15486] misc userio: Begin command sent, but we're already running [ 207.184662][T15486] misc userio: Begin command sent, but we're already running [ 207.185290][T15486] misc userio: Begin command sent, but we're already running [ 207.185307][T15486] misc userio: Begin command sent, but we're already running [ 207.185322][T15486] misc userio: Begin command sent, but we're already running [ 207.185337][T15486] misc userio: Begin command sent, but we're already running [ 207.185352][T15486] misc userio: Begin command sent, but we're already running [ 207.185367][T15486] misc userio: Begin command sent, but we're already running [ 207.185381][T15486] misc userio: Begin command sent, but we're already running [ 207.185396][T15486] misc userio: Begin command sent, but we're already running [ 207.185411][T15486] misc userio: Begin command sent, but we're already running [ 207.185425][T15486] misc userio: Begin command sent, but we're already running [ 207.185440][T15486] misc userio: Begin command sent, but we're already running [ 207.185455][T15486] misc userio: Begin command sent, but we're already running [ 207.185469][T15486] misc userio: Begin command sent, but we're already running [ 207.185483][T15486] misc userio: Begin command sent, but we're already running [ 207.185504][T15486] misc userio: Begin command sent, but we're already running [ 207.185520][T15486] misc userio: Begin command sent, but we're already running [ 207.185535][T15486] misc userio: Begin command sent, but we're already running [ 207.185550][T15486] misc userio: Begin command sent, but we're already running [ 207.265664][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.503488][T15055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.508671][T15055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.513242][T15055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.517374][T15055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.571171][T15520] veth0_to_bridge: mtu less than device minimum [ 207.593809][T15055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.607365][T15055] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.614984][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.617700][ T7085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.628240][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.631152][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.753483][T15055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.850754][T15538] NILFS (nbd6): device size too small [ 207.862258][ T1460] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 207.866046][ T9951] IPVS: stop unused estimator thread 0... [ 207.891286][T15055] veth0_vlan: entered promiscuous mode [ 207.895276][ T63] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 207.900951][T15055] veth1_vlan: entered promiscuous mode [ 207.919689][T15055] veth0_macvtap: entered promiscuous mode [ 207.926293][T15055] veth1_macvtap: entered promiscuous mode [ 207.938825][T15055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.945740][T15055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.956786][ T7072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.960389][ T7072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.981362][ T7072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.984745][ T7072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.036642][ T7085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.040105][ T7085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.064927][ T7069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.068015][ T7069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.192609][ T39] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 208.341891][ T39] usb 11-1: Using ep0 maxpacket: 32 [ 208.345244][ T39] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.349851][ T39] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.352766][ T39] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.355341][ T39] usb 11-1: Product: syz [ 208.356727][ T39] usb 11-1: Manufacturer: syz [ 208.358257][ T39] usb 11-1: SerialNumber: syz [ 208.362120][ T39] usb 11-1: config 0 descriptor?? [ 208.365183][T15550] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.611921][ T63] Bluetooth: hci4: command tx timeout [ 208.627952][ T10] usb 11-1: USB disconnect, device number 14 [ 208.866518][ T40] audit: type=1400 audit(2000000100.336:6207): avc: denied { connect } for pid=15609 comm="syz.5.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.868001][T15611] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2167'. [ 208.878610][T15611] ALSA: mixer_oss: invalid OSS volume '' [ 208.916685][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2169'. [ 209.073175][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 209.098072][T15649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.189899][ T40] audit: type=1800 audit(2000000100.656:6208): pid=15687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.2179" name="/newroot/503/file0" dev="tmpfs" ino=2697 res=0 errno=0 [ 209.290728][T15702] xt_connbytes: Forcing CT accounting to be enabled [ 209.294819][T15702] set match dimension is over the limit! [ 209.319283][ T40] audit: type=1400 audit(2000000100.786:6209): avc: denied { mount } for pid=15695 comm="syz.4.2181" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 210.218099][ T40] audit: type=1400 audit(2000000101.686:6210): avc: denied { setattr } for pid=15725 comm="syz.4.2187" name="file0" dev="tmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.691859][ T63] Bluetooth: hci4: command tx timeout [ 210.798387][T15744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.804372][T15741] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 210.807944][T15741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.811460][T15741] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 210.823266][T15744] netlink: 'syz.1.2192': attribute type 9 has an invalid length. [ 210.826202][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 210.844252][ T7085] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.844348][T15744] netlink: 'syz.1.2192': attribute type 9 has an invalid length. [ 210.848170][ T7085] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.850717][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 210.857600][ T7085] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.860835][ T7085] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.936070][T15766] netlink: 'syz.1.2197': attribute type 1 has an invalid length. [ 210.942311][T15766] batman_adv: batadv0: Adding interface: geneve2 [ 210.944475][T15766] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 211.177076][T15785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=15785 comm=syz.6.2201 [ 211.242419][ T1328] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 211.334808][T15825] syzkaller0: entered promiscuous mode [ 211.337183][T15825] syzkaller0: entered allmulticast mode [ 211.369177][T15830] sp0: Synchronizing with TNC [ 211.373294][T15830] sp0: Found TNC [ 211.375935][T15829] [U] è` [ 211.382108][ T1328] usb 6-1: device descriptor read/64, error -71 [ 211.503290][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2208'. [ 211.538866][T15852] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2209'. [ 211.568361][ T40] audit: type=1400 audit(2000000103.036:6211): avc: denied { accept } for pid=15853 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.642098][ T1328] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 211.782057][ T1328] usb 6-1: device descriptor read/64, error -71 [ 211.804239][T15871] binder: 15867:15871 ioctl c0306201 2000000001c0 returned -14 [ 211.902764][ T1328] usb usb6-port1: attempt power cycle [ 211.913596][T15878] overlayfs: failed to clone upperpath [ 212.199395][T15896] xt_hashlimit: size too large, truncated to 1048576 [ 212.272168][ T1328] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 212.292459][ T1328] usb 6-1: device descriptor read/8, error -71 [ 212.410019][ T57] Process accounting resumed [ 212.551857][ T1328] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 212.572604][ T1328] usb 6-1: device descriptor read/8, error -71 [ 212.682095][ T1328] usb usb6-port1: unable to enumerate USB device [ 212.683242][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2226'. [ 212.769254][ T40] audit: type=1400 audit(2000000104.236:6212): avc: denied { append } for pid=15978 comm="syz.5.2227" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.052130][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 213.203417][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 40995, setting to 1024 [ 213.207258][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.211407][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.214546][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.218784][ T24] usb 10-1: config 0 descriptor?? [ 213.625683][ T24] hid_parser_main: 9 callbacks suppressed [ 213.625697][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.633767][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.636750][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.639213][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.642716][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.645465][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.648149][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.650503][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.653441][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.655950][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 213.672387][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 213.719548][T16017] netlink: 'syz.4.2235': attribute type 5 has an invalid length. [ 213.991997][ T6012] usb 10-1: USB disconnect, device number 8 [ 214.018957][T16053] lo: entered promiscuous mode [ 214.102470][T16059] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 214.430071][T16080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2249'. [ 214.448338][ T40] audit: type=1400 audit(2000000105.916:6213): avc: denied { name_connect } for pid=16081 comm="syz.5.2250" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 214.551870][T16088] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.618488][T16097] tipc: Started in network mode [ 214.620085][T16097] tipc: Node identity ac14140f, cluster identity 4711 [ 214.623107][T16097] tipc: New replicast peer: 255.255.255.255 [ 214.625671][T16097] tipc: Enabled bearer , priority 10 [ 214.627630][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2254'. [ 214.630462][T16098] tipc: Disabling bearer [ 214.737511][T16092] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 214.740856][T16092] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2252'. [ 214.745409][T16092] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2252'. [ 214.749829][T16092] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2252'. [ 214.828335][ T40] audit: type=1400 audit(2000000106.296:6214): avc: denied { read } for pid=16109 comm="syz.1.2256" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 214.836149][ T40] audit: type=1400 audit(2000000106.296:6215): avc: denied { open } for pid=16109 comm="syz.1.2256" path="/12/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 215.068549][T16143] overlayfs: failed to clone upperpath [ 215.218055][T16166] netlink: 'syz.1.2270': attribute type 21 has an invalid length. [ 215.221607][T16166] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 215.287837][T16171] sctp: [Deprecated]: syz.5.2272 (pid 16171) Use of int in maxseg socket option. [ 215.287837][T16171] Use struct sctp_assoc_value instead [ 215.322909][T16173] afs: Unknown parameter '' [ 215.855727][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2276'. [ 216.056920][T16196] fuse: Unknown parameter 'fd60x0000000000000004' [ 216.063777][ T40] audit: type=1400 audit(2000000107.536:6216): avc: denied { watch } for pid=16194 comm="syz.1.2280" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.100268][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 216.115754][T16203] tls_set_device_offload: netdev not found [ 216.119962][T16203] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2282'. [ 216.141924][T16203] input: syz0 as /devices/virtual/input/input18 [ 216.212935][T16218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2285'. [ 216.236722][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2286'. [ 216.257385][T16222] SELinux: unknown common  [ 216.259673][T16222] SELinux: failed to load policy [ 216.504666][T16250] netlink: 'syz.5.2295': attribute type 21 has an invalid length. [ 216.516057][T16248] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 216.563992][T16257] hsr_slave_0: left promiscuous mode [ 216.571872][T16257] hsr_slave_1: left promiscuous mode [ 216.782353][ T40] audit: type=1400 audit(2000000108.246:6217): avc: denied { map } for pid=16280 comm="syz.1.2304" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=51013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 216.801986][ T40] audit: type=1400 audit(2000000108.246:6218): avc: denied { execute } for pid=16280 comm="syz.1.2304" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=51013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 216.849317][ T40] audit: type=1400 audit(2000000108.316:6219): avc: denied { listen } for pid=16286 comm="syz.5.2307" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.861999][ T40] audit: type=1400 audit(2000000108.326:6220): avc: denied { setattr } for pid=16286 comm="syz.5.2307" name="TIPC" dev="sockfs" ino=51027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.868502][T16288] sctp: [Deprecated]: syz.1.2306 (pid 16288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.868502][T16288] Use struct sctp_sack_info instead [ 216.883294][ T40] audit: type=1400 audit(2000000108.356:6221): avc: denied { mounton } for pid=16284 comm="syz.1.2306" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 216.883348][T16288] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 217.951686][ T40] audit: type=1400 audit(2000000109.416:6222): avc: denied { setopt } for pid=16328 comm="syz.5.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.039139][T16340] can0: slcan on ttyS3. [ 218.094534][T16340] can0 (unregistered): slcan off ttyS3. [ 218.184973][T16362] netlink: 'syz.1.2327': attribute type 2 has an invalid length. [ 218.350549][T16377] F2FS-fs: Conflicting test_dummy_encryption options [ 218.354708][T16377] tmpfs: Unknown parameter 'h‹geSood' [ 218.992826][T16398] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 219.214094][T16417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16417 comm=syz.5.2342 [ 219.214714][T16413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16413 comm=syz.5.2342 [ 219.253279][T16424] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.255800][T16423] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.403216][T16444] trusted_key: encrypted_key: master key parameter 'LèE†Îòªb\úLuÀ£cs:€I}«¶|$z'ÒÐgƒhïÐaíØ&·®½–uðLsLAô9encrypted' is invalid [ 219.408282][T16444] x_tables: duplicate underflow at hook 1 [ 219.447572][T16452] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 219.450009][T16452] VFS: Can't find a romfs filesystem on dev nullb0. [ 219.450009][T16452] [ 219.525170][T16459] kvm: emulating exchange as write [ 219.657034][T16458] delete_channel: no stack [ 219.868449][T16513] __nla_validate_parse: 8 callbacks suppressed [ 219.868461][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2364'. [ 219.883763][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 219.883774][ T40] audit: type=1400 audit(2000000111.356:6229): avc: denied { create } for pid=16512 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.885104][T16513] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.886400][ T40] audit: type=1400 audit(2000000111.356:6230): avc: denied { write } for pid=16512 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.906230][ T40] audit: type=1400 audit(2000000111.366:6231): avc: denied { write } for pid=16512 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 219.952868][T16520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.988034][T16527] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 219.998812][T16527] team0: Device dummy0 is already a lower device of the team interface [ 220.003189][T16527] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 220.010246][T16527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.059934][T16531] vim2m vim2m.0: vidioc_s_fmt queue busy [ 220.249576][T16555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16555 comm=syz.1.2375 [ 220.283719][T16563] fuse: Bad value for 'fd' [ 220.287715][T16563] fuse: Bad value for 'fd' [ 220.399695][T16571] input: syz0 as /devices/virtual/input/input20 [ 220.412923][T16574] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 220.426534][T16574] vlan2: entered promiscuous mode [ 220.428198][T16574] bridge0: entered promiscuous mode [ 220.434410][T16574] openvswitch: netlink: IP tunnel TTL not specified. [ 220.437824][ T40] audit: type=1326 audit(2000000111.906:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16570 comm="syz.5.2379" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f084899c629 code=0x0 [ 220.463723][T16594] binder: 16593:16594 ioctl c0306201 200000000080 returned -14 [ 220.466569][T16594] binder: 16593:16594 ioctl c0306201 2000000003c0 returned -22 [ 220.493088][T16597] overlayfs: failed to resolve './file0': -2 [ 220.506560][T16597] bond1: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 220.509417][T16597] bond1: entered allmulticast mode [ 220.666463][T16638] Falling back ldisc for ttyS3. [ 220.760405][T16642] bridge1: entered promiscuous mode [ 220.762410][T16642] bridge1: entered allmulticast mode [ 220.766496][T16642] team0: Port device bridge1 added [ 220.771238][T16642] bridge0: port 3(team0) entered blocking state [ 220.774465][T16642] bridge0: port 3(team0) entered disabled state [ 220.776833][T16642] team0: entered allmulticast mode [ 220.778516][T16642] team_slave_0: entered allmulticast mode [ 220.780480][T16642] team_slave_1: entered allmulticast mode [ 220.783805][T16642] team0: entered promiscuous mode [ 220.785491][T16642] team_slave_0: entered promiscuous mode [ 220.787435][T16642] team_slave_1: entered promiscuous mode [ 220.789923][T16642] bridge0: port 3(team0) entered blocking state [ 220.792454][T16642] bridge0: port 3(team0) entered forwarding state [ 220.876205][T16651] xt_hashlimit: max too large, truncated to 1048576 [ 220.879567][T16651] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.935686][T16658] binder: 16657:16658 ioctl c018620c 200000000180 returned -22 [ 220.998915][T16665] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2392'. [ 221.008186][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 221.025663][T16666] Falling back ldisc for ttyS3. [ 221.187929][T16682] loop2: detected capacity change from 0 to 7 [ 221.194517][ T8851] Dev loop2: unable to read RDB block 7 [ 221.196660][ T8851] loop2: unable to read partition table [ 221.198726][ T8851] loop2: partition table beyond EOD, truncated [ 221.204309][T16682] Dev loop2: unable to read RDB block 7 [ 221.209939][T16682] loop2: unable to read partition table [ 221.213446][T16682] loop2: partition table beyond EOD, truncated [ 221.218807][T16682] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.225491][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 221.231897][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 221.232870][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 221.235349][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 221.238367][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2399'. [ 221.259793][T16693] binder: Unknown parameter 'obj_type' [ 221.322275][T16708] Falling back ldisc for ttyS3. [ 221.323422][T16706] netlink: 'syz.4.2406': attribute type 12 has an invalid length. [ 221.326574][T16706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2406'. [ 221.367393][T16717] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2410'. [ 221.371119][ T40] audit: type=1400 audit(2000000112.836:6233): avc: denied { read } for pid=16716 comm="syz.6.2410" dev="sockfs" ino=56459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 221.380764][ T40] audit: type=1400 audit(2000000112.836:6234): avc: denied { create } for pid=16716 comm="syz.6.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.410816][T16725] syz.6.2411 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.428979][T16724] CIFS mount error: No usable UNC path provided in device string! [ 221.428979][T16724] [ 221.432446][T16724] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.529369][T16737] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 221.683323][T16746] Invalid source name [ 221.685001][T16746] UBIFS error (pid: 16746): cannot open "ubifs", error -22 [ 221.745913][ T40] audit: type=1400 audit(2000000113.216:6235): avc: denied { write } for pid=16751 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.971000][T16773] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 222.356616][T16855] sctp: [Deprecated]: syz.4.2431 (pid 16855) Use of int in maxseg socket option. [ 222.356616][T16855] Use struct sctp_assoc_value instead [ 222.811891][ T57] usb 11-1: new full-speed USB device number 15 using dummy_hcd [ 222.934068][T16891] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 222.938038][T16891] Cannot find add_set index 0 as target [ 222.965732][ T57] usb 11-1: not running at top speed; connect to a high speed hub [ 222.970949][ T57] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 222.976447][ T57] usb 11-1: config 1 interface 1 has no altsetting 0 [ 222.981205][ T57] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.985146][ T57] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.988260][ T57] usb 11-1: Product: Ј [ 222.990247][ T57] usb 11-1: Manufacturer: 魀᫽዇í¬è•»éˆ´ïŒˆà¼¨ï¡Šê½¿æ’±è€‡í›ä–‰è´Œå½â‹šë€ ìµè”»ëª„⯲æšï³ªë¤æ°¿â…潌쌔䎗êºï•¼èššâº¢æŒ½æƒ‘ዴ [ 222.996025][ T57] usb 11-1: SerialNumber: syz [ 223.095048][T16900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.273015][T16914] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 223.315872][T16926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.320140][T16926] usb usb1: check_ctrlrecip: process 16926 (syz.1.2452) requesting ep 01 but needs 81 [ 223.323918][T16926] usb usb1: usbfs: process 16926 (syz.1.2452) did not claim interface 0 before use [ 223.423725][ T57] usb 11-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 223.456832][ T57] usb 11-1: USB disconnect, device number 15 [ 223.471054][ T8851] udevd[8851]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.591642][ T40] audit: type=1400 audit(2000000115.056:6236): avc: denied { execute } for pid=16978 comm="syz.5.2462" path="/dev/video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 224.104786][T17017] team0: Device gtp0 is of different type [ 224.159520][T17027] xt_hashlimit: size too large, truncated to 1048576 [ 224.210613][T17028] ipt_ECN: cannot use operation on non-tcp rule [ 224.312710][T17041] netlink: 'syz.5.2475': attribute type 19 has an invalid length. [ 224.313071][T17042] netlink: 'syz.5.2475': attribute type 19 has an invalid length. [ 224.326176][T17041] binder: BINDER_SET_CONTEXT_MGR already set [ 224.329040][T17041] binder: 17040:17041 ioctl 4018620d 200000000100 returned -16 [ 224.944397][T17070] __nla_validate_parse: 14 callbacks suppressed [ 224.944408][T17070] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2480'. [ 224.954548][T17070] bond0 (unregistering): left promiscuous mode [ 224.956715][T17070] bond_slave_0: left promiscuous mode [ 224.959011][T17070] bond_slave_1: left promiscuous mode [ 224.960959][T17070] bridge_slave_1: left promiscuous mode [ 224.964054][T17070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.969474][T17070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.975066][T17070] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 224.979682][T17070] bond0 (unregistering): Released all slaves [ 225.253878][T17094] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 225.359846][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 225.366770][T17115] netlink: 'syz.5.2490': attribute type 10 has an invalid length. [ 225.373074][T17115] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.762113][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.777968][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.786334][T17133] bond3: (slave geneve2): making interface the new active one [ 225.789577][T17133] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 225.792956][ T9951] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.793000][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.796712][ T9951] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.803958][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.804176][ T9951] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.809784][ T9951] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.814638][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.818148][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 225.821500][T17131] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 226.066306][T17176] atomic_op ffff88802daac198 conn xmit_atomic 0000000000000000 [ 226.449947][ T40] audit: type=1400 audit(2000000117.916:6237): avc: denied { lock } for pid=17183 comm="syz.1.2498" path="socket:[55167]" dev="sockfs" ino=55167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.456496][T17184] syzkaller0: entered promiscuous mode [ 226.461605][T17184] syzkaller0: entered allmulticast mode [ 226.511640][T17190] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 227.395803][T17205] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 227.446756][T17210] /dev/nullb0: Can't open blockdev [ 227.449703][T17209] /dev/nullb0: Can't open blockdev [ 227.604579][T17209] hpfs: Bad magic ... probably not HPFS [ 228.887804][T17259] 0: reclassify loop, rule prio 0, protocol 800 [ 229.035555][T17277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=17277 comm=syz.1.2513 [ 229.313678][T17294] kvm: kvm [17293]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 229.317539][T17294] kvm: kvm [17293]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 229.359841][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 229.510463][ T63] Bluetooth: hci2: unexpected event for opcode 0x204e [ 237.896216][ T5287] Bluetooth: hci2: hardware error 0x00 [ 239.972956][ T63] Bluetooth: hci2: command 0x0405 tx timeout [ 239.975519][ T6012] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 239.977856][ T6012] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 242.052008][ T5287] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.054782][ T6012] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 242.056758][ T6012] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 242.133443][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.144445][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.148398][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.152624][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.156317][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.166869][ T40] audit: type=1400 audit(2000000133.626:6238): avc: denied { create } for pid=17330 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 242.190288][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.204145][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.223475][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.234395][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.235154][ T7072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.238262][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.244209][ T7072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.294130][T17369] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2526'. [ 242.297918][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 242.301517][T17369] validate_nla: 58 callbacks suppressed [ 242.301528][T17369] netlink: 'syz.5.2526': attribute type 21 has an invalid length. [ 242.397114][ T7072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.401153][ T7072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.444187][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 242.480562][ T40] audit: type=1400 audit(2000000133.946:6239): avc: denied { read } for pid=17424 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.491254][ T7072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.496759][ T7072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.517912][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 242.550735][T16997] chnl_net:caif_netlink_parms(): no params data found [ 242.577991][ T7072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.581524][ T7072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.604261][T17459] veth0_to_bridge: entered promiscuous mode [ 242.632541][T17472] veth0_to_bridge: left promiscuous mode [ 242.660081][T16997] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.662858][T16997] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.665416][T16997] bridge_slave_0: entered allmulticast mode [ 242.668590][T16997] bridge_slave_0: entered promiscuous mode [ 242.673833][T16997] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.676378][T16997] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.679556][T17509] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.682056][T16997] bridge_slave_1: entered allmulticast mode [ 242.682880][T17509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.685446][T16997] bridge_slave_1: entered promiscuous mode [ 242.687113][T17509] IPv6: NLM_F_CREATE should be set when creating new route [ 242.691718][T17509] IPv6: NLM_F_CREATE should be set when creating new route [ 242.751591][T16997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.769572][T16997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.790053][ T7072] bridge_slave_0: left allmulticast mode [ 242.792363][ T7072] bridge_slave_0: left promiscuous mode [ 242.794253][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.920519][ T7072] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 242.923282][T17569] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 242.982359][ T7072] bond3 (unregistering): (slave erspan1): Releasing active interface [ 242.986011][ T7072] erspan1 (unregistering): left promiscuous mode [ 243.025064][ T7072] bond2 (unregistering): (slave gretap1): Releasing active interface [ 243.043609][ T7072] bond5 (unregistering): (slave geneve2): Releasing active interface [ 243.128639][ T40] audit: type=1400 audit(2000000134.596:6240): avc: denied { read append } for pid=17590 comm="syz.5.2544" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 243.136804][ T40] audit: type=1400 audit(2000000134.596:6241): avc: denied { open } for pid=17590 comm="syz.5.2544" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 243.146833][ T40] audit: type=1400 audit(2000000134.596:6242): avc: denied { ioctl } for pid=17590 comm="syz.5.2544" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 243.726944][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.736088][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.741487][ T7072] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 243.747875][ T7072] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 243.761546][ T7072] bond0 (unregistering): Released all slaves [ 243.768848][ T7072] bond1 (unregistering): Released all slaves [ 243.780265][ T7072] bond2 (unregistering): Released all slaves [ 243.791623][ T7072] bond3 (unregistering): Released all slaves [ 243.798235][ T7072] bond4 (unregistering): Released all slaves [ 243.808648][ T7072] bond5 (unregistering): Released all slaves [ 243.818571][ T7072] bond6 (unregistering): Released all slaves [ 243.828709][ T7072] bond7 (unregistering): Released all slaves [ 243.850324][T16997] team0: Port device team_slave_0 added [ 243.891939][T16997] team0: Port device team_slave_1 added [ 243.926225][T17629] cgroup: subsys name conflicts with all [ 243.941626][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=17629 comm=syz.6.2547 [ 243.945921][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17629 comm=syz.6.2547 [ 243.949952][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=17629 comm=syz.6.2547 [ 243.954277][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17629 comm=syz.6.2547 [ 243.954792][T16997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.965072][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.975532][T16997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.980107][T16997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.982397][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.990578][T16997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.032815][T16997] hsr_slave_0: entered promiscuous mode [ 244.036275][T16997] hsr_slave_1: entered promiscuous mode [ 244.039091][T16997] debugfs: 'hsr0' already exists in 'hsr' [ 244.041105][T16997] Cannot create hsr debugfs directory [ 244.215475][T17756] fuse: Bad value for 'user_id' [ 244.217035][T17756] fuse: Bad value for 'user_id' [ 244.295447][ T5287] Bluetooth: hci0: command tx timeout [ 244.307789][ T40] audit: type=1400 audit(2000000135.776:6243): avc: denied { mounton } for pid=17763 comm="syz.6.2555" path="/" dev="autofs" ino=57979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 244.375722][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.378233][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.381228][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.381297][T17778] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2555'. [ 244.384590][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.395343][ T7072] veth1_macvtap: left allmulticast mode [ 244.397295][ T7072] veth1_macvtap: left promiscuous mode [ 244.399228][ T7072] veth0_macvtap: left promiscuous mode [ 244.401001][ T7072] veth1_vlan: left promiscuous mode [ 244.412471][ T7072] veth0_vlan: left promiscuous mode [ 244.470400][T17661] kvm: Disabled LAPIC found during irq injection [ 244.472825][T17661] kvm: apic: phys broadcast and lowest prio [ 244.503807][ T7072] team0 (unregistering): Port device vlan2 removed [ 244.560896][T17788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2558'. [ 244.597458][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 244.601282][T17790] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 244.605817][T17790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2559'. [ 244.632305][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 244.647250][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 244.990553][T17826] netlink: 'syz.1.2563': attribute type 8 has an invalid length. [ 245.054081][T16997] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.064442][T16997] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.074421][T16997] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.079063][T16997] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.136763][ T7072] IPVS: stop unused estimator thread 0... [ 245.144671][T17856] fuse: Bad value for 'fd' [ 245.160916][T16997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.170101][T16997] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.175887][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.179019][ T7069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.181631][T17866] netlink: 'syz.1.2568': attribute type 2 has an invalid length. [ 245.187745][T17866] !: entered promiscuous mode [ 245.191323][T17866] netlink: 'syz.1.2568': attribute type 2 has an invalid length. [ 245.191715][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.197015][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.203955][T17866] !: left promiscuous mode [ 245.235158][T17874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.238690][T17874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.246827][T17874] Falling back ldisc for ttyS3. [ 245.310792][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.359566][T17902] netlink: 'syz.6.2575': attribute type 1 has an invalid length. [ 245.374882][T17902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.403850][T17902] bond0: (slave veth1): Enslaving as an active interface with a down link [ 245.407294][T17902] netlink: 'syz.6.2575': attribute type 10 has an invalid length. [ 245.410191][T17902] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2575'. [ 245.415221][T17902] dummy0: entered promiscuous mode [ 245.456503][T18005] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 245.469846][ T40] audit: type=1400 audit(2000000136.936:6244): avc: denied { setopt } for pid=18009 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 245.491227][ T40] audit: type=1400 audit(2000000136.956:6245): avc: denied { accept } for pid=18009 comm="syz.6.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.501051][T16997] veth0_vlan: entered promiscuous mode [ 245.507986][T16997] veth1_vlan: entered promiscuous mode [ 245.524897][T16997] veth0_macvtap: entered promiscuous mode [ 245.530333][T16997] veth1_macvtap: entered promiscuous mode [ 245.550966][T16997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.554298][T16997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.562545][ T7069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564352][ T7071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564569][ T7071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564645][ T7069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.622509][ T9951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.625028][ T9951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.641411][ T7069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.644640][ T7069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.655315][ T40] audit: type=1400 audit(2000000137.126:6246): avc: denied { mounton } for pid=16997 comm="syz-executor" path="/syzkaller.wqZCCt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 245.695773][T18031] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 245.711863][ T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 245.734592][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 245.873827][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.878401][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 245.883911][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 245.895750][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.901404][ T24] usb 6-1: config 0 descriptor?? [ 245.907033][T18005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.134283][T18005] Falling back ldisc for ttyS3. [ 246.137681][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 246.139755][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 246.147381][ T24] usb 6-1: USB disconnect, device number 22 [ 246.319582][T18107] netlink: 'syz.5.2589': attribute type 4 has an invalid length. [ 246.371960][ T5287] Bluetooth: hci0: command tx timeout [ 246.537874][T18123] No control pipe specified [ 246.573906][T18127] exFAT-fs (nullb0): invalid boot record signature [ 246.576148][T18127] exFAT-fs (nullb0): failed to read boot sector [ 246.578413][T18127] exFAT-fs (nullb0): failed to recognize exfat type [ 246.665675][ T40] audit: type=1400 audit(2000000138.136:6247): avc: denied { name_bind 0x1000000 } for pid=18137 comm="syz.6.2596" path="socket:[60002]" dev="sockfs" ino=60002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.011886][ T24] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 247.173404][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.176639][ T24] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.180128][ T24] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.186188][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.189352][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.192618][ T24] usb 11-1: Product: syz [ 247.194189][ T24] usb 11-1: Manufacturer: syz [ 247.195886][ T24] usb 11-1: SerialNumber: syz [ 247.200306][ T24] hub 11-1:1.0: bad descriptor, ignoring hub [ 247.204092][ T24] hub 11-1:1.0: probe with driver hub failed with error -5 [ 247.414467][ T24] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.423889][ T40] audit: type=1400 audit(2000000138.896:6248): avc: denied { getopt } for pid=18159 comm="syz.6.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.441257][ T40] audit: type=1400 audit(2000000138.906:6249): avc: denied { append } for pid=18212 comm="syz.5.2606" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 247.452284][ T24] usb 11-1: USB disconnect, device number 16 [ 247.455602][ T24] usblp0: removed [ 247.553019][T18213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18213 comm=syz.5.2606 [ 247.644063][T18230] __nla_validate_parse: 4 callbacks suppressed [ 247.644076][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'. [ 247.648966][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 247.792718][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'. [ 247.796620][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 247.803892][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'. [ 247.807723][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 247.872055][ T1460] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 247.899512][ T40] audit: type=1400 audit(2000000139.366:6250): avc: denied { ioctl } for pid=18249 comm="syz.5.2611" path="/350/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 248.035468][ T1460] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.039624][ T1460] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.045571][ T1460] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.057801][ T1460] usb 11-1: string descriptor 0 read error: -22 [ 248.060532][ T1460] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 248.065169][ T1460] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.075761][T18279] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2616'. [ 248.076266][ T1460] hub 11-1:1.0: bad descriptor, ignoring hub [ 248.081960][ T1460] hub 11-1:1.0: probe with driver hub failed with error -5 [ 248.278556][ T1460] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.310833][T18300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 248.312178][ T1460] usb 11-1: USB disconnect, device number 17 [ 248.312991][T18300] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.318216][T18300] vhci_hcd vhci_hcd.0: Device attached [ 248.319530][ T1460] usblp0: removed [ 248.451871][ T5287] Bluetooth: hci0: command tx timeout [ 248.501908][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 248.561892][ T9] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 248.838359][ T40] audit: type=1400 audit(2000000140.306:6251): avc: denied { accept } for pid=18310 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.897526][T18313] sctp: [Deprecated]: syz.6.2622 (pid 18313) Use of int in maxseg socket option. [ 248.897526][T18313] Use struct sctp_assoc_value instead [ 248.949259][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 248.953626][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2623'. [ 248.959369][ T40] audit: type=1400 audit(2000000140.426:6252): avc: denied { accept } for pid=18319 comm="syz.6.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.987914][T18323] fuse: Bad value for 'fd' [ 249.086063][T18301] vhci_hcd: connection reset by peer [ 249.091282][ T7069] vhci_hcd vhci_hcd.1: stop threads [ 249.094081][ T7069] vhci_hcd vhci_hcd.1: release socket [ 249.097950][ T7069] vhci_hcd vhci_hcd.1: disconnect device [ 249.149639][ T40] audit: type=1400 audit(2000000140.616:6253): avc: denied { getopt } for pid=18329 comm="syz.6.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.362802][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 249.363211][T18348] overlay: Bad value for 'workdir' [ 249.464590][T18353] fuse: Invalid rootmode [ 249.511841][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 249.514967][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.518209][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.521111][ T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 249.524006][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.529738][ T24] usb 10-1: config 0 descriptor?? [ 249.639792][T18361] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2636'. [ 249.899134][ T40] audit: type=1400 audit(2000000141.366:6254): avc: denied { accept } for pid=18374 comm="syz.1.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 250.530157][T18406] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 250.532132][ T5287] Bluetooth: hci0: command tx timeout [ 250.532554][T18406] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 250.540109][T18406] vhci_hcd vhci_hcd.0: Device attached [ 250.543668][T18407] vhci_hcd: connection closed [ 250.544053][ T7071] vhci_hcd vhci_hcd.6: stop threads [ 250.547558][ T7071] vhci_hcd vhci_hcd.6: release socket [ 250.550617][ T7071] vhci_hcd vhci_hcd.6: disconnect device [ 251.121651][T18443] tipc: Enabling of bearer rejected, failed to enable media [ 251.126695][T18443] loop6: detected capacity change from 0 to 8 [ 251.173042][T18443] loop6: detected capacity change from 8 to 0 [ 251.196908][T18443] PID 18443 killed due to inadequate hugepage pool [ 251.581833][ T40] audit: type=1400 audit(2000000143.046:6255): avc: denied { accept } for pid=18470 comm="syz.4.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 251.770139][T18493] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 251.962342][ T57] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 252.092641][ T57] usb 11-1: device descriptor read/64, error -71 [ 252.133208][ T29] usb 10-1: USB disconnect, device number 9 [ 252.308419][T18524] SELinux: failed to load policy [ 252.343150][ T57] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 252.472456][ T57] usb 11-1: device descriptor read/64, error -71 [ 252.582218][ T57] usb usb11-port1: attempt power cycle [ 252.603649][T18526] netlink: 'syz.4.2676': attribute type 32 has an invalid length. [ 252.631836][T18526] bond1: Setting coupled_control to off (0) [ 252.839948][ T40] audit: type=1326 audit(2000000144.306:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18562 comm="syz.4.2677" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f9a79c629 code=0x0 [ 252.931963][ T57] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 252.952409][ T57] usb 11-1: device descriptor read/8, error -71 [ 253.203113][ T57] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 253.223710][ T57] usb 11-1: device descriptor read/8, error -71 [ 253.333726][ T57] usb usb11-port1: unable to enumerate USB device [ 253.347283][T18571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.415090][T18575] SELinux: policydb magic number 0x788c does not match expected magic number 0xf97cff8c [ 253.418964][T18575] SELinux: failed to load policy [ 253.652438][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 253.699128][T18588] netlink: zone id is out of range [ 253.701357][T18588] netlink: zone id is out of range [ 253.706354][T18588] netlink: zone id is out of range [ 253.708583][T18588] netlink: zone id is out of range [ 253.710760][T18588] netlink: zone id is out of range [ 253.719934][T18588] netlink: zone id is out of range [ 253.722401][T18588] netlink: zone id is out of range [ 253.724565][T18588] netlink: zone id is out of range [ 253.727408][T18588] netlink: zone id is out of range [ 253.741964][ T10] IPVS: starting estimator thread 0... [ 253.781577][T18595] fuse: Invalid rootmode [ 253.831885][T18591] IPVS: using max 27 ests per chain, 64800 per kthread [ 254.092412][T18608] kvm: pic: non byte write [ 254.183651][ T40] audit: type=1326 audit(2000000145.656:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.4.2690" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f9a79c629 code=0x5d380000 [ 254.309585][T18622] bond4: invalid ARP target 0.0.0.0 specified for addition [ 254.312792][T18622] bond4: option arp_ip_target: invalid value (0) [ 254.317357][T18622] bond4 (unregistering): Released all slaves [ 255.019781][T18707] random: crng reseeded on system resumption [ 255.077345][ T40] audit: type=1400 audit(2000000146.546:6258): avc: denied { mount } for pid=18709 comm="syz.6.2696" name="/" dev="configfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.108496][T18714] fuse: Bad value for 'rootmode' [ 256.818766][T18598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.895757][ T40] audit: type=1400 audit(2000000148.356:6259): avc: denied { name_bind } for pid=18729 comm="syz.4.2701" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 257.015067][T18731] __nla_validate_parse: 13 callbacks suppressed [ 257.015094][T18731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2700'. [ 257.053729][T18749] syzkaller0: entered promiscuous mode [ 257.055769][T18749] syzkaller0: entered allmulticast mode [ 257.314399][ T40] audit: type=1400 audit(2000000148.786:6260): avc: denied { write } for pid=18770 comm="syz.1.2710" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.332291][ T40] audit: type=1400 audit(2000000148.786:6261): avc: denied { map } for pid=18770 comm="syz.1.2710" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.343290][ T40] audit: type=1400 audit(2000000148.786:6262): avc: denied { execute } for pid=18770 comm="syz.1.2710" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.345239][T18776] netlink: 'syz.1.2711': attribute type 20 has an invalid length. [ 258.415755][T18795] net_ratelimit: 48 callbacks suppressed [ 258.415767][T18795] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 258.421068][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 258.472943][ T40] audit: type=1400 audit(2000000149.946:6263): avc: denied { write } for pid=18806 comm="syz.6.2719" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 258.473456][T18811] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 258.488419][T18811] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 258.497364][T18811] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 258.497374][ T40] audit: type=1400 audit(2000000149.966:6264): avc: denied { firmware_load } for pid=18794 comm="syz.1.2715" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 258.602630][T18800] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 258.609062][T18795] netlink: 176736 bytes leftover after parsing attributes in process `syz.1.2715'. [ 258.655367][T18838] fuse: Unknown parameter 'user_id00000000000000000000' [ 258.776513][T18848] can0: slcan on ttynull. [ 258.782323][ T1460] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 258.807666][T18864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2727'. [ 258.849793][T18873] netlink: 'syz.5.2729': attribute type 1 has an invalid length. [ 258.852420][T18873] netlink: 'syz.5.2729': attribute type 2 has an invalid length. [ 258.907708][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'. [ 259.014668][T18894] fuse: Unknown parameter 'user_id00000000000000000000' [ 259.631993][T18845] can0 (unregistered): slcan off ttynull. [ 259.830454][T18946] ipt_REJECT: TCP_RESET invalid for non-tcp [ 259.841387][T18946] ufs: You didn't specify the type of your ufs filesystem [ 259.841387][T18946] [ 259.841387][T18946] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 259.841387][T18946] [ 259.841387][T18946] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 259.861008][T18930] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 259.904142][T18959] fuse: Bad value for 'fd' [ 259.932770][T18963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.937419][ T40] audit: type=1400 audit(2000000151.406:6265): avc: denied { bind } for pid=18961 comm="syz.5.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 260.073832][ T40] audit: type=1400 audit(2000000151.546:6266): avc: denied { watch_sb } for pid=18983 comm="syz.4.2751" path="/51" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 260.077736][T18986] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 260.299642][ T40] audit: type=1326 audit(2000000151.766:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.4.2753" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f9a79c629 code=0x5fff0000 [ 260.714556][T19021] fuse: Bad value for 'fd' [ 260.763774][T19026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2756'. [ 260.770197][T19026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2756'. [ 260.854416][T19037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.927988][T19044] can0: slcan on ttyS3. [ 260.943975][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.003371][T19044] can0 (unregistered): slcan off ttyS3. [ 261.108512][T19065] fuse: Bad value for 'fd' [ 261.203209][T19073] vxfs: unable to read disk superblock at 1 [ 261.205549][T19073] vxfs: unable to read disk superblock at 8 [ 261.209735][T19073] vxfs: can't find superblock. [ 261.385840][T19076] netlink: 'syz.1.2767': attribute type 1 has an invalid length. [ 261.402039][T19076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.408036][ T40] audit: type=1400 audit(2000000152.876:6268): avc: denied { write } for pid=19075 comm="syz.1.2767" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.525689][T19076] vlan4: entered promiscuous mode [ 261.527489][T19076] bond2: entered promiscuous mode [ 261.529236][T19076] vlan4: entered allmulticast mode [ 261.530933][T19076] bond2: entered allmulticast mode [ 261.542779][T19076] bond2: (slave bridge3): making interface the new active one [ 261.545327][T19076] bridge3: entered promiscuous mode [ 261.547781][T19076] bridge3: entered allmulticast mode [ 261.550182][T19076] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 261.651241][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 261.686255][T19123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19123 comm=syz.6.2770 [ 261.694453][T19125] netlink: 'syz.4.2771': attribute type 30 has an invalid length. [ 261.695077][T19123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19123 comm=syz.6.2770 [ 261.943784][T19170] fuse: Unknown parameter '0x0000000000000003' [ 262.300631][T19197] fuse: Unknown parameter '0x0000000000000003' [ 262.348267][T19206] tipc: Started in network mode [ 262.350537][T19206] tipc: Node identity c65e686577fc, cluster identity 4711 [ 262.353208][T19206] tipc: Enabled bearer , priority 0 [ 262.356017][T19206] syzkaller0: entered promiscuous mode [ 262.357719][T19206] syzkaller0: entered allmulticast mode [ 262.360454][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 262.363469][T19211] openvswitch: netlink: Flow actions attr not present in new flow. [ 262.365056][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2785'. [ 262.382962][T19212] tipc: Resetting bearer [ 262.401294][T19212] tipc: Disabling bearer [ 262.420790][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 262.475489][ T40] audit: type=1400 audit(2000000153.946:6269): avc: denied { setcheckreqprot } for pid=19222 comm="syz.6.2789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 262.514221][ T40] audit: type=1400 audit(2000000153.986:6270): avc: denied { accept } for pid=19227 comm="syz.6.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 262.568435][T19233] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004 [ 262.595282][T19235] fuse: Unknown parameter '0x0000000000000003' [ 262.941922][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 263.097454][T19256] FAT-fs (sr0): bogus number of reserved sectors [ 263.099638][T19256] FAT-fs (sr0): Can't find a valid FAT filesystem [ 263.101940][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 263.103245][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 263.106801][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 263.109833][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 263.112943][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.116406][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.120802][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.132135][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.142991][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.149775][ T9] usb 9-1: config 0 descriptor?? [ 263.150127][T19261] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.150162][T19260] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.363789][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.377572][ T9] usb 9-1: USB disconnect, device number 10 [ 263.388510][ T9] usblp0: removed [ 263.801856][ T839] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 263.961844][ T839] usb 9-1: Using ep0 maxpacket: 32 [ 263.966927][ T839] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 263.970539][ T839] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 263.974989][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 263.978871][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.983759][ T839] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.987699][ T839] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.992911][ T839] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.996329][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.001733][ T839] usb 9-1: config 0 descriptor?? [ 264.213578][ T839] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 264.219291][T19370] bridge5: entered promiscuous mode [ 264.220977][T19370] bridge5: entered allmulticast mode [ 264.224046][T19370] team0: Port device bridge5 added [ 264.229900][T19370] hfs: can't find a HFS filesystem on dev sr0 [ 264.237691][T19377] hfs: can't find a HFS filesystem on dev sr0 [ 264.240993][T19370] bridge0: port 3(team0) entered blocking state [ 264.243288][T19370] bridge0: port 3(team0) entered disabled state [ 264.245455][T19370] team0: entered allmulticast mode [ 264.247036][T19370] team_slave_0: entered allmulticast mode [ 264.248895][T19370] team_slave_1: entered allmulticast mode [ 264.252100][T19370] team0: entered promiscuous mode [ 264.253807][T19370] team_slave_0: entered promiscuous mode [ 264.255725][T19370] team_slave_1: entered promiscuous mode [ 264.379287][T19389] fuse: Unknown parameter '0x0000000000000003' [ 264.616372][T19244] x_tables: ip_tables: osf match: only valid for protocol 6 [ 264.621231][ T6009] usb 9-1: USB disconnect, device number 11 [ 264.624751][ T40] audit: type=1400 audit(2000000156.086:6271): avc: denied { mounton } for pid=19243 comm="syz.4.2796" path="/81/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 264.634069][ T6009] usblp0: removed [ 264.928726][T19428] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 265.116105][T19449] : entered promiscuous mode [ 265.166572][T19459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2827'. [ 265.169648][T19459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2827'. [ 265.247220][T19461] Bluetooth: MGMT ver 1.23 [ 265.419571][T19501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19501 comm=syz.4.2832 [ 265.538145][T19514] fuse: Unknown parameter 'fd0x0000000000000003' [ 265.651949][ T10] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 265.801897][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 265.817717][ T10] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 265.820538][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.823981][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.827031][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.830145][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.837706][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.841606][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.841836][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 265.991900][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 265.994867][ T29] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 265.997392][ T29] usb 6-1: config 0 has no interface number 0 [ 265.999363][ T29] usb 6-1: too many endpoints for config 0 interface 49 altsetting 125: 85, using maximum allowed: 30 [ 266.002946][ T29] usb 6-1: config 0 interface 49 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 266.007162][ T29] usb 6-1: config 0 interface 49 has no altsetting 0 [ 266.012306][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.016091][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.020166][ T29] usb 6-1: Product: syz [ 266.022585][ T29] usb 6-1: Manufacturer: syz [ 266.024450][ T29] usb 6-1: SerialNumber: syz [ 266.027632][ T29] usb 6-1: config 0 descriptor?? [ 266.032873][ T29] smsc95xx 6-1:0.49 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 266.036225][ T29] smsc95xx 6-1:0.49: probe with driver smsc95xx failed with error -22 [ 266.232257][T19530] binder: BINDER_SET_CONTEXT_MGR already set [ 266.235046][T19530] binder: 19527:19530 ioctl 4018620d 200000004a80 returned -16 [ 266.238687][T19529] binder: 19527:19529 ioctl c0306201 200000000480 returned -14 [ 266.242739][ T10] usb 6-1: USB disconnect, device number 23 [ 266.262397][T19567] usbtmc 11-1:16.0: simple control status returned fe [ 266.277748][ T29] usb 11-1: USB disconnect, device number 22 [ 266.315659][T19580] netlink: 'syz.6.2842': attribute type 21 has an invalid length. [ 266.318937][T19580] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2842'. [ 266.435722][T19596] fuse: Unknown parameter 'fd0x0000000000000003' [ 266.467075][T19592] team0: Device ipvlan1 failed to register rx_handler [ 266.469217][T19600] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2847'. [ 266.619964][T19617] cgroup: Need name or subsystem set [ 266.802637][T19621] Invalid option length (1048180) for dns_resolver key [ 266.834843][T19621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.839902][T19621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.844794][T19621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.392049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 267.450210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.705042][T19635] fuse: Unknown parameter 'fd0x0000000000000003' [ 267.706171][ C1] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 267.710482][ C1] sr 2:0:0:0: [sr0] tag#1 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 267.813380][T19644] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2858'. [ 267.879022][ T40] audit: type=1800 audit(2000000159.346:6272): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2860" name="bus" dev="overlay" ino=1041 res=0 errno=0 [ 267.888636][T19656] Cannot find add_set index 0 as target [ 268.008398][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 268.012957][T19663] netlink: 'syz.4.2862': attribute type 30 has an invalid length. [ 268.016227][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'. [ 268.226441][T19702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19702 comm=syz.6.2869 [ 268.230709][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 268.235478][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 268.238442][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 268.241846][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 268.293000][ T40] audit: type=1400 audit(2000000159.766:6273): avc: denied { map } for pid=19704 comm="syz.6.2870" path="socket:[64178]" dev="sockfs" ino=64178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 268.402572][ T5978] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 268.581847][ T5978] usb 9-1: Using ep0 maxpacket: 32 [ 268.585038][ T5978] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 268.589958][ T5978] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 268.593165][ T5978] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 268.595776][ T5978] usb 9-1: Product: syz [ 268.597086][ T5978] usb 9-1: Manufacturer: syz [ 268.598636][ T5978] usb 9-1: SerialNumber: syz [ 268.601549][ T5978] usb 9-1: config 0 descriptor?? [ 268.604095][T19693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.607606][ T5978] hub 9-1:0.0: bad descriptor, ignoring hub [ 268.609526][ T5978] hub 9-1:0.0: probe with driver hub failed with error -5 [ 268.830757][T19756] program syz.5.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.872967][T19756] bond0: (slave dummy0): Releasing backup interface [ 268.878564][T19756] batman_adv: batadv0: Adding interface: dummy0 [ 268.881104][T19756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.891811][T19756] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 268.922170][ T6012] usb 9-1: USB disconnect, device number 12 [ 269.165511][ T29] hid_parser_main: 5 callbacks suppressed [ 269.165525][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.169615][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.173804][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.176119][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.178367][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.180649][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.183399][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.186016][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.188392][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.190612][ T29] hid-generic 0004:00B6:0009.0007: unknown main item tag 0x0 [ 269.213298][ T29] hid-generic 0004:00B6:0009.0007: hidraw1: HID v1ade12.f3 Device [syz0] on syz1 [ 269.281117][T19796] fido_id[19796]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.300411][T19803] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2884'. [ 270.924635][T19663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.019454][T19821] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2890'. [ 271.024245][T19821] sock: sock_set_timeout: `syz.5.2890' (pid 19821) tries to set negative timeout [ 271.086361][T19833] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 271.104285][ T40] audit: type=1326 audit(2000000162.576:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19835 comm="syz.4.2892" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f9a79c629 code=0x0 [ 271.121027][T19840] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 271.141370][T19845] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 271.167310][T19849] [ 271.168148][T19849] ====================================================== [ 271.170627][T19849] WARNING: possible circular locking dependency detected [ 271.172883][T19849] syzkaller #0 Tainted: G L [ 271.174874][T19849] ------------------------------------------------------ [ 271.177245][T19849] syz.4.2892/19849 is trying to acquire lock: [ 271.179155][T19849] ffff888024c04fa8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 271.182328][T19849] [ 271.182328][T19849] but task is already holding lock: [ 271.184764][T19849] ffff88805d658868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 271.186184][T19851] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 271.187389][T19849] [ 271.187389][T19849] which lock already depends on the new lock. [ 271.187389][T19849] [ 271.187395][T19849] [ 271.187395][T19849] the existing dependency chain (in reverse order) is: [ 271.197090][T19849] [ 271.197090][T19849] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 271.199391][T19849] __mutex_lock+0x1a2/0x1b90 [ 271.201117][T19849] pipe_lock+0x69/0x80 [ 271.202550][T19849] iter_file_splice_write+0x1f8/0x10a0 [ 271.204522][T19849] do_splice+0x109c/0x1fd0 [ 271.206078][T19849] __do_splice+0x237/0x370 [ 271.207633][T19849] __x64_sys_splice+0x187/0x250 [ 271.209346][T19849] do_syscall_64+0x106/0xf80 [ 271.210964][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.213055][T19849] [ 271.213055][T19849] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 271.216182][T19849] mnt_want_write+0x6f/0x450 [ 271.217775][T19849] ovl_create_object+0x12b/0x3b0 [ 271.219494][T19849] lookup_open.isra.0+0xc47/0x11b0 [ 271.221250][T19849] path_openat+0x2291/0x31a0 [ 271.222992][T19849] do_file_open+0x20e/0x430 [ 271.224920][T19849] do_sys_openat2+0x10d/0x1e0 [ 271.226643][T19849] __x64_sys_open+0xfe/0x1d0 [ 271.228394][T19849] do_syscall_64+0x106/0xf80 [ 271.230100][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.232196][T19849] [ 271.232196][T19849] -> #3 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 271.235047][T19849] down_read+0x99/0x460 [ 271.236541][T19849] lookup_slow+0x42/0x70 [ 271.238086][T19849] lookup_one_unlocked+0xb8/0xd0 [ 271.239788][T19849] ovl_lookup_single+0x3df/0x1280 [ 271.241588][T19849] ovl_lookup_layer+0x3f1/0x4b0 [ 271.243505][T19849] ovl_lookup_layers+0x16d4/0x2ac0 [ 271.245301][T19849] ovl_lookup+0x4a8/0x6b0 [ 271.246855][T19849] __lookup_slow+0x251/0x460 [ 271.248517][T19849] lookup_slow+0x50/0x70 [ 271.250353][T19849] path_lookupat+0x5e8/0xc40 [ 271.252602][T19849] filename_lookup+0x202/0x590 [ 271.254901][T19849] kern_path+0x37/0x50 [ 271.256770][T19849] lookup_bdev+0xd8/0x280 [ 271.258757][T19849] resume_store+0x1d6/0x460 [ 271.260785][T19849] kobj_attr_store+0x58/0x80 [ 271.262813][T19849] sysfs_kf_write+0xf2/0x150 [ 271.264694][T19849] kernfs_fop_write_iter+0x3e0/0x5f0 [ 271.266525][T19849] vfs_write+0x6ac/0x1070 [ 271.268050][T19849] ksys_write+0x12a/0x250 [ 271.269552][T19849] do_syscall_64+0x106/0xf80 [ 271.271152][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.273135][T19849] [ 271.273135][T19849] -> #2 (&ovl_i_mutex_dir_key[depth]#6){++++}-{4:4}: [ 271.275904][T19849] down_read+0x99/0x460 [ 271.277435][T19849] lookup_slow+0x42/0x70 [ 271.279138][T19849] path_lookupat+0x5e8/0xc40 [ 271.280766][T19849] filename_lookup+0x202/0x590 [ 271.282121][ T40] audit: type=1400 audit(2000000162.696:6275): avc: denied { write } for pid=5836 comm="syz-executor" path="pipe:[6625]" dev="pipefs" ino=6625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 271.282469][T19849] kern_path+0x37/0x50 [ 271.292255][T19849] lookup_bdev+0xd8/0x280 [ 271.294163][T19849] resume_store+0x1d6/0x460 [ 271.295736][T19849] kobj_attr_store+0x58/0x80 [ 271.297336][T19849] sysfs_kf_write+0xf2/0x150 [ 271.298938][T19849] kernfs_fop_write_iter+0x3e0/0x5f0 [ 271.300792][T19849] vfs_write+0x6ac/0x1070 [ 271.301971][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.302340][T19849] ksys_write+0x12a/0x250 [ 271.304717][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.306024][T19849] do_syscall_64+0x106/0xf80 [ 271.308322][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.309738][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.312378][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.313784][T19849] [ 271.313784][T19849] -> #1 (&of->mutex){+.+.}-{4:4}: [ 271.316189][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.318270][T19849] __mutex_lock+0x1a2/0x1b90 [ 271.321949][T19849] kernfs_seq_start+0x4f/0x2a0 [ 271.323675][T19849] seq_read_iter+0x2c1/0x1270 [ 271.325282][T19849] kernfs_fop_read_iter+0x46c/0x610 [ 271.327026][T19849] copy_splice_read+0x4ba/0xb90 [ 271.328723][T19849] do_splice_read+0x285/0x370 [ 271.330363][T19849] splice_direct_to_actor+0x2a1/0xa30 [ 271.332248][T19849] do_splice_direct+0x174/0x240 [ 271.334015][T19849] do_sendfile+0xadc/0xe20 [ 271.335624][T19849] __x64_sys_sendfile64+0x1d8/0x220 [ 271.337397][T19849] do_syscall_64+0x106/0xf80 [ 271.338988][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.340988][T19849] [ 271.340988][T19849] -> #0 (&p->lock){+.+.}-{4:4}: [ 271.343175][T19849] __lock_acquire+0x14b8/0x2630 [ 271.344869][T19849] lock_acquire+0x1cf/0x380 [ 271.346427][T19849] __mutex_lock+0x1a2/0x1b90 [ 271.348018][T19849] seq_read_iter+0xe1/0x1270 [ 271.349592][T19849] proc_reg_read_iter+0x220/0x310 [ 271.351413][T19849] copy_splice_read+0x4ba/0xb90 [ 271.353167][T19849] do_splice_read+0x285/0x370 [ 271.354948][T19849] splice_file_to_pipe+0x82/0x120 [ 271.356722][T19849] do_sendfile+0x366/0xe20 [ 271.358289][T19849] __x64_sys_sendfile64+0x1d8/0x220 [ 271.360167][T19849] do_syscall_64+0x106/0xf80 [ 271.361763][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.363781][T19849] [ 271.363781][T19849] other info that might help us debug this: [ 271.363781][T19849] [ 271.366863][T19849] Chain exists of: [ 271.366863][T19849] &p->lock --> sb_writers#6 --> &pipe->mutex [ 271.366863][T19849] [ 271.370434][T19849] Possible unsafe locking scenario: [ 271.370434][T19849] [ 271.372791][T19849] CPU0 CPU1 [ 271.374697][T19849] ---- ---- [ 271.376367][T19849] lock(&pipe->mutex); [ 271.377642][T19849] lock(sb_writers#6); [ 271.379654][T19849] lock(&pipe->mutex); [ 271.381911][T19849] lock(&p->lock); [ 271.383157][T19849] [ 271.383157][T19849] *** DEADLOCK *** [ 271.383157][T19849] [ 271.385634][T19849] 1 lock held by syz.4.2892/19849: [ 271.387245][T19849] #0: ffff88805d658868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 271.389977][T19849] [ 271.389977][T19849] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.391821][T19849] CPU: 3 UID: 0 PID: 19849 Comm: syz.4.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.391837][T19849] Tainted: [L]=SOFTLOCKUP [ 271.391841][T19849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.391848][T19849] Call Trace: [ 271.391872][T19849] [ 271.391877][T19849] dump_stack_lvl+0x100/0x190 [ 271.391895][T19849] print_circular_bug.cold+0x178/0x1c7 [ 271.391914][T19849] check_noncircular+0x146/0x160 [ 271.391933][T19849] __lock_acquire+0x14b8/0x2630 [ 271.391966][T19849] lock_acquire+0x1cf/0x380 [ 271.391985][T19849] ? seq_read_iter+0xe1/0x1270 [ 271.392002][T19849] ? __pfx___might_resched+0x10/0x10 [ 271.392015][T19849] __mutex_lock+0x1a2/0x1b90 [ 271.392027][T19849] ? seq_read_iter+0xe1/0x1270 [ 271.392043][T19849] ? seq_read_iter+0xe1/0x1270 [ 271.392060][T19849] ? __pfx___mutex_lock+0x10/0x10 [ 271.392075][T19849] ? seq_read_iter+0xe1/0x1270 [ 271.392091][T19849] seq_read_iter+0xe1/0x1270 [ 271.392110][T19849] proc_reg_read_iter+0x220/0x310 [ 271.392128][T19849] copy_splice_read+0x4ba/0xb90 [ 271.392146][T19849] ? __pfx_try_to_wake_up+0x10/0x10 [ 271.392160][T19849] ? __pfx_copy_splice_read+0x10/0x10 [ 271.392179][T19849] ? __fget_files+0x215/0x3d0 [ 271.392189][T19849] ? __pfx_copy_splice_read+0x10/0x10 [ 271.392206][T19849] do_splice_read+0x285/0x370 [ 271.392224][T19849] splice_file_to_pipe+0x82/0x120 [ 271.392236][T19849] do_sendfile+0x366/0xe20 [ 271.392252][T19849] ? __pfx_do_sendfile+0x10/0x10 [ 271.392267][T19849] ? __pfx___seccomp_filter+0x10/0x10 [ 271.392279][T19849] __x64_sys_sendfile64+0x1d8/0x220 [ 271.392291][T19849] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 271.392303][T19849] do_syscall_64+0x106/0xf80 [ 271.392314][T19849] ? clear_bhb_loop+0x40/0x90 [ 271.392326][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.392338][T19849] RIP: 0033:0x7f2f9a79c629 [ 271.392348][T19849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.392359][T19849] RSP: 002b:00007f2f9b61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.392393][T19849] RAX: ffffffffffffffda RBX: 00007f2f9aa16090 RCX: 00007f2f9a79c629 [ 271.392399][T19849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 271.392406][T19849] RBP: 00007f2f9a832b39 R08: 0000000000000000 R09: 0000000000000000 [ 271.392412][T19849] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 271.392418][T19849] R13: 00007f2f9aa16128 R14: 00007f2f9aa16090 R15: 00007fff4e63f8e8 [ 271.392429][T19849] [ 271.679715][ T9951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.684470][ T9951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.794681][ T9951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.799003][ T9951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.886049][ T9951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.889291][ T9951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.029902][ T9951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.033194][ T9951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.199104][ T9951] team0: left allmulticast mode [ 272.200674][ T9951] team_slave_0: left allmulticast mode [ 272.202419][ T9951] team_slave_1: left allmulticast mode [ 272.204159][ T9951] team0: left promiscuous mode [ 272.205665][ T9951] team_slave_0: left promiscuous mode [ 272.207423][ T9951] team_slave_1: left promiscuous mode [ 272.209235][ T9951] bridge0: port 3(team0) entered disabled state [ 272.212107][ T9951] bridge_slave_1: left allmulticast mode [ 272.213836][ T9951] bridge_slave_1: left promiscuous mode [ 272.215641][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.219065][ T9951] bridge_slave_0: left allmulticast mode [ 272.221156][ T9951] bridge_slave_0: left promiscuous mode [ 272.223377][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.275626][ T9951] batman_adv: batadv0: Removing interface: geneve2 [ 272.353624][ T9951] team0: Port device bridge1 removed [ 272.463459][ T9951] bond2 (unregistering): (slave bridge3): Releasing active interface [ 272.466026][ T9951] bridge3 (unregistering): left promiscuous mode [ 272.467914][ T9951] bridge3 (unregistering): left allmulticast mode [ 272.535532][ T9951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.539151][ T9951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.542743][ T9951] bond0 (unregistering): Released all slaves [ 272.545793][ T9951] bond1 (unregistering): Released all slaves [ 272.550752][ T9951] bond2 (unregistering): Released all slaves [ 272.851560][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.854559][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.857055][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.859372][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.863653][ T9951] veth1_macvtap: left promiscuous mode [ 272.865390][ T9951] veth0_macvtap: left promiscuous mode [ 272.867121][ T9951] veth1_vlan: left promiscuous mode [ 272.868761][ T9951] veth0_vlan: left promiscuous mode [ 272.915138][ T9951] team0 (unregistering): Port device team_slave_1 removed [ 272.919797][ T9951] team0 (unregistering): Port device team_slave_0 removed [ 273.315235][ T9951] IPVS: stop unused estimator thread 0... [ 273.355977][ T9951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.425246][ T9951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.524715][ T9951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.567110][ T9951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.627116][ T9951] bridge_slave_1: left allmulticast mode [ 273.628957][ T9951] bridge_slave_1: left promiscuous mode [ 273.630654][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.634165][ T9951] bridge_slave_0: left allmulticast mode [ 273.635849][ T9951] bridge_slave_0: left promiscuous mode [ 273.637555][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.804653][ T9951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.808388][ T9951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.811847][ T9951] bond0 (unregistering): Released all slaves [ 273.814979][ T9951] bond1 (unregistering): Released all slaves [ 273.818806][ T9951] bond2 (unregistering): Released all slaves [ 273.901203][ T9951] bond0 (unregistering): Released all slaves [ 274.167895][ T9951] hsr_slave_0: left promiscuous mode [ 274.169905][ T9951] hsr_slave_1: left promiscuous mode [ 274.171977][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.174369][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.176993][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.179353][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.183479][ T9951] veth1_macvtap: left promiscuous mode [ 274.185344][ T9951] veth0_macvtap: left promiscuous mode [ 274.187190][ T9951] veth1_vlan: left promiscuous mode [ 274.188913][ T9951] veth0_vlan: left promiscuous mode [ 274.241265][ T9951] team0 (unregistering): Port device team_slave_1 removed [ 274.246521][ T9951] team0 (unregistering): Port device team_slave_0 removed