last executing test programs: 2m28.055394406s ago: executing program 2 (id=557): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) (async) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0x560c89bb) r7 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x101, 0x2, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRESHEX=r8, @ANYRES64=r4], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe2700, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {0x0}, {0x0}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000a00100000000000029000000360000005e3000000000000000010000010001060000000000000738000000030c00ff0fffff00000000000066090000000000000700000000000000f7ffffffffffffffc397000000000000010000000000000007100000000002070600ff7f00000000000008e2c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add644f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c08000000b3f9b0e9c19b929779fe65f579221b8101419a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e8100000000000000180000000000000029000000390000006200000000000000380000000000000029000000390000003a04037000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x238}}], 0x1, 0x810) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c788fde6ebe", 0xfffffffffffffd9d) (async) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 2m28.055136235s ago: executing program 2 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="040000000000000084"], 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m27.55957232s ago: executing program 2 (id=565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$packet_int(r2, 0x107, 0x1, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2b) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 2m27.422354746s ago: executing program 2 (id=568): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xa020, 0x3, 0x1}, 0x18, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x4, 0x0) landlock_restrict_self(r1, 0x3) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x80000000000005, &(0x7f0000000580)="0f", 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "9123dbf1aea4ad9484b2cbf5fef9149d2965e642f2557f836662bdd2be1f755f", 0x32314d4e}) 2m27.349569767s ago: executing program 2 (id=571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x78426e3c296cdd96}, @void, @x25={0x0, 0x0, 0xea, "2dc049b681dd0c6b"}}, 0xf) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40480, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x8, 0x0, @time={0x2, 0xffffffff}, {}, {}, @raw32={[0x0, 0x0, 0x6]}}], 0x1c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x1b7, @time={0x6, 0x8}, 0x0, {}, 0x67, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) write$sndseq(r3, &(0x7f00000001c0)=[{0x1, 0x7f, 0x9, 0x8, @tick=0x2, {0xff, 0x1}, {0x7, 0xf}, @note={0x7, 0x9, 0x4, 0x80, 0x8}}, {0x8, 0xb, 0x5, 0x6, @tick=0x4, {0x7, 0x3}, {0x4, 0x5}, @quote={{0xf7, 0x1}, 0x3ac, &(0x7f00000000c0)={0x8, 0x9, 0x3, 0x5, @tick=0xa, {0x2, 0x6}, {0xc, 0x8}, @raw8={"a94adf57a3fea038977b6a1c"}}}}, {0x7, 0x3, 0x9, 0x9, @tick=0x6, {0x3, 0x80}, {0x75, 0x7}, @queue={0x3, {0x4, 0x8}}}, {0x80, 0x0, 0xc, 0x4, @time={0x83e5, 0x4583b67e}, {0x9, 0x8}, {0x5, 0x9}, @time=@tick=0x81}, {0x5, 0x0, 0x9, 0x9, @tick=0x6, {0x9, 0x4}, {0x6, 0x64}, @result={0x3ff, 0x15dc}}, {0x0, 0x6, 0x4, 0x1, @time={0x0, 0x3d3e}, {0xc, 0x4c}, {0xa, 0xc}, @connect={{0x4, 0x3}, {0x8c, 0x14}}}], 0xa8) 2m27.285561416s ago: executing program 2 (id=573): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4}) r3 = socket(0x2, 0x3, 0xff) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x5, "9e03765345"}, &(0x7f0000000140)=0x2d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x1304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000700)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10a233e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a4791300", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "4921095856cdf9fd819b034f3a872200a6ba00", [0x1, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2m11.23988864s ago: executing program 32 (id=573): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4}) r3 = socket(0x2, 0x3, 0xff) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x5, "9e03765345"}, &(0x7f0000000140)=0x2d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x1304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000700)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10a233e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a4791300", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "4921095856cdf9fd819b034f3a872200a6ba00", [0x1, 0x9]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 1m15.366928913s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000ef000000000800000001000000808a93c5a855c0586a99088c1672a99fb367e19d44d8c0215a964027fa5252368c3c6d25eb92"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'ip6gretap0\x00', 0x200}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r8, &(0x7f0000000700)={'#! ', '', [{}, {0x20, '/dev/net/tun\x00'}, {0x20, '(%@-'}, {0x20, '/dev/kvm\x00'}], 0xa, "e8f508ef022dba1311d025dd8ca8f488dbe6e6937869bdf4ad64bb80cad3b55b5b122f2c10cb8ca70613516c5ddceeb294d7d32a31d961ebed6dbde817d17f828ecd2508377a03c5104b5d5cc006781084d80bd13e763a24fdc5fa1a8e06e9b649fcac4c821fa4134897af6f1e416636000a624c81cc28bf7ac5f579051adb5536e3a60006d46ce633207c33122396b60a946593c2f9c172bce6366d8c1761943ff8084e535ea4950715461bfdff78744b907dd1aa182a6d2b95c2acbb2767afa2e2a565f86595f124f4294b9c9f714ae35ce7b80dc4dac5ae6cfffc1b3ff2ae1e4bd5"}, 0x105) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b9800000c00f32baf80c66b84a5f9d8066efbafc0cb03bee0f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x64, 0x0, 0xffffffffffffffee) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0, 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="2d1df93176374730ce86", 0xa}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r12, @ANYBLOB="3b1625bd7000090003000000000000480000", @ANYRES32=r2, @ANYBLOB="5fa616de75aae1725377c34113715bfdfa"], 0x1c}, 0x1, 0x0, 0x0, 0x28000010}, 0x50) write$tun(r3, &(0x7f0000002140)=ANY=[@ANYBLOB="944b3fa7657504008b81004000dbac6a5402bd0000297a00000000000000000000000000000000ff01000000000000000000fe32140fb0fe7a25a8b039e345872a0200000004e251ee06a7470f8e3f5684ffe9275ec104c1cc046fd110255a0c9a6b3ccaef03be98de3dab971e62f94450e407b0d7c0de6e4dcb42a5b7f65e195cc985f4992288a71b34e2b3c913489fcd056683e565115a5f9b12a0df496067798077711cb2979172cd85e4f8c1df922d8eb1e14a"], 0x3a) 1m15.210278112s ago: executing program 4 (id=1710): r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) fcntl$addseals(r0, 0x409, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0x40305829, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x16, 0x31, 0x0, 0x42}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fallocate(r0, 0x3, 0x0, 0x2) 1m15.056678499s ago: executing program 4 (id=1711): r0 = timerfd_create(0x9, 0x0) r1 = timerfd_create(0x9, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x198, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_IE={0xdb, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random={0x2, 0xbe, "40618851f88c2b4398a6d1b60645cbc0ffe949c3552cb2a42efd7b91e0d10b040c9c5755e580f35f74eb9f9c5d3953a5d91c35eefb780156fd37f72aa77c99db1ee3902fc617a4e540d01f520b6dc37a93a0cf68af084117622921dc93111ad37926adc558efb3dc82651560b3334d1d729748bf5de8ea39d36fbe7dc78a708b9c3e2ca3fbc3c6522ba71a1bf8e3d8e10432e4afe0660541739df4406443b4a8d7bd0e69a7b3dc4fd332e5e52a9588ec9da574f9d4d18b400ce7464025b8"}, @chsw_timing={0x68, 0x4, {0x2}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x21, 0xfa, "87d7452ece5f74c6a2fd282f5fb8964b52b68bf67ecbf2c45b875627c6"}, @NL80211_ATTR_FILS_ERP_RRK={0x70, 0xfc, "4c53546d11c172ae23cb1ec20baabceac30cf18192c21348d14f83d896379503ce8d240f3cfd6c4acaa085fc60f2b0f6080cc934a54595a8462b2e529376b052474772fd6a6783806b4f62ecd09f3254843582ba65bc11b804a7160ac0bc8ca77689f9bb37e8b04eb83d650a"}]]}, 0x198}, 0x1, 0x0, 0x0, 0x8811}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000300)={0x5, 0x7, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x80015b1b, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000007000)={{r8, r9+10000000}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a02010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000038000000030a0104009a810000000000010000010900030073797a3200000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, 0x0, &(0x7f0000000080)) r12 = socket(0x10, 0x803, 0x0) r13 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_PEC(r13, 0x708, 0x62f) ioctl$I2C_SMBUS(r13, 0x720, &(0x7f00000001c0)={0x0, 0xf, 0x5, &(0x7f0000000140)={0xf, "25f210caf4d99a17ffffff7f066cc1d80085469289ab99912870fe4a59784bc987"}}) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000001000370429bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="890c040000000000600012800b0001006970366772650000500002800400120014000600fc01000000000000000000000000000014000700fc00000000000000000000000000000006000f00080000000500080003000000050008010600000008000c0005000000"], 0x80}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) 1m11.795870513s ago: executing program 4 (id=1757): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4c080, 0x80, 0xc}, 0x18) execveat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) 1m11.794227355s ago: executing program 4 (id=1759): r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) fcntl$addseals(r0, 0x409, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0x40305829, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x16, 0x31, 0x0, 0x42}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fallocate(r0, 0x3, 0x0, 0x2) 1m11.172328797s ago: executing program 4 (id=1765): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m11.104271764s ago: executing program 33 (id=1765): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 49.039294438s ago: executing program 5 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004900003800000000000690780a210106ac1414aa890fe9e0000002ac1414bbe00000020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c20800090780000"], 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000001000000018000180140002006e657464657673696d3000000000000005000b"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 48.953119806s ago: executing program 5 (id=2101): syz_emit_ethernet(0x200000, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0x30, @remote, @remote, 0x8, 0x10, 0x0, 0x15f}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tun(r2, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tipc={{0x1a, 0x4, 0x3, 0x5, 0x98, 0x65, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x2c, 0x8, 0x3, 0xd, [{@empty, 0x4}, {@rand_addr=0x64010100, 0x3}, {@empty, 0x7fff}, {@empty, 0x800}, {@multicast2, 0x5}]}, @noop, @noop, @timestamp={0x44, 0xc, 0xd0, 0x0, 0x0, [0x7, 0x6]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x7, 0x2}]}, @generic={0x7, 0xf, "b29fcd9dd9c9e176a524b5327c"}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x7, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e21, 0x4e22}, 0x0, 0x4}, 0x3, 0x4}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0xa6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x200c80d4) 48.879111665s ago: executing program 5 (id=2104): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x180, 0x44) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x100, 0x7) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40ce00}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) 48.878849134s ago: executing program 5 (id=2105): socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) (rerun: 32) 48.822320588s ago: executing program 5 (id=2107): r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) fcntl$addseals(r0, 0x409, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 48.597529114s ago: executing program 5 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000ff0100000000170000000100000000000000000000000000ebdea5fb6ce5fbe0262a131a6b725116915e1e900f41f1e5ef7ed1e98f461135bcee6bd5acd65d2b88f7f946161579fd4b0f430330740c9b912e465d590205cd60ea94be95b324f18ff80c666551c511ba4148980f4ed63696cd068688891c9310800e2792124181b36883ad6024cb04fd7687237e8ed2bc614fba945a5f"], 0x204000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000ff0100000000170000000100000000000000000000000000ebdea5fb6ce5fbe0262a131a6b725116915e1e900f41f1e5ef7ed1e98f461135bcee6bd5acd65d2b88f7f946161579fd4b0f430330740c9b912e465d590205cd60ea94be95b324f18ff80c666551c511ba4148980f4ed63696cd068688891c9310800e2792124181b36883ad6024cb04fd7687237e8ed2bc614fba945a5f"], 0x204000) (async) 48.482121032s ago: executing program 34 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000ff0100000000170000000100000000000000000000000000ebdea5fb6ce5fbe0262a131a6b725116915e1e900f41f1e5ef7ed1e98f461135bcee6bd5acd65d2b88f7f946161579fd4b0f430330740c9b912e465d590205cd60ea94be95b324f18ff80c666551c511ba4148980f4ed63696cd068688891c9310800e2792124181b36883ad6024cb04fd7687237e8ed2bc614fba945a5f"], 0x204000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000ff0100000000170000000100000000000000000000000000ebdea5fb6ce5fbe0262a131a6b725116915e1e900f41f1e5ef7ed1e98f461135bcee6bd5acd65d2b88f7f946161579fd4b0f430330740c9b912e465d590205cd60ea94be95b324f18ff80c666551c511ba4148980f4ed63696cd068688891c9310800e2792124181b36883ad6024cb04fd7687237e8ed2bc614fba945a5f"], 0x204000) (async) 3.848946791s ago: executing program 1 (id=2929): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x1, 0x6, {0x77359400}, {0x5, 0xc, 0xce, 0x9, 0x4, 0x0, "0080ca4f"}, 0xff, 0x2, {0x0}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50d300, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x2, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]}) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) 3.848379402s ago: executing program 1 (id=2931): fsopen(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x15b2c1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x721a, 0x20, 0x1, 0x10, "d62f0264d223ab8b882bd6f27d53d0ebf78061"}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_open(0x0, 0x840, 0x184, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) timer_create(0x7, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000014000305000000000000000002180000", @ANYRES32=r6, @ANYBLOB="08000900030000001400030076657468315f6d61637674617000000014000600000000004000000003000000feffffff08000400ac1414aa140003006d616376746170300000000000000000140006000800000002783ef10000000500000008000000"], 0x78}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000066402b89a08870e1e89c21001400030500", @ANYRES32=r9, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, r10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x33, 0x0, 0x4, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x10, 0xba08, 0x0, 0x2}}) 3.847868156s ago: executing program 1 (id=2932): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x50565559, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x50565559, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), 0x4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) (async) 3.844209448s ago: executing program 1 (id=2934): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x808, 0x0, 0x3}, 0x18, 0x1) landlock_restrict_self(r0, 0x3) 899.044087ms ago: executing program 3 (id=2973): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a3000e600002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000"], 0x80}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x4d180, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) syz_clone(0x4d180, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 772.081386ms ago: executing program 0 (id=2974): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300"}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x101ff, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = shmget(0x3, 0x2000, 0x1800, &(0x7f0000ffd000/0x2000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) 589.569251ms ago: executing program 0 (id=2975): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001fff000000000000000000000000a937598657b85740e2ce482508adc2fe61094a593a33d0f8fef70d6c3ce3867a16295bb90756b45338015e44a4b89c2905e3c26a9222d28c1a74518ba2d2660040a34d029f0d662e0a0c484f0d64d688f9b44d344d492b481e33db89aeeb29f3c84f32374b083a10fb35fb", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b0001006272696467650000100002800c0021000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 588.380118ms ago: executing program 1 (id=2976): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x688802, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) gettid() close(0x3) 588.192371ms ago: executing program 0 (id=2977): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="2511000000e4ff0061116000000000001838fff30400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 515.565987ms ago: executing program 0 (id=2978): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="00000010000097a1c4bbe89086dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 509.558205ms ago: executing program 0 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x2, @loopback}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x9, 0x0, 0x4, 0x5, 0xe, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000880)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x6000, 0x1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x900) r8 = inotify_init1(0x80800) r9 = syz_clone(0x11327fc801bf09a5, &(0x7f0000000b00)="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", 0x1000, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="6be2c6830943119a78f4356f47673f6c15eacad40b218924b73108d2914dfd3674ae1d4ff136c80651523d38fe23c05c20e74c57d2886de682390738567538a99530aab66ec6f001590df1d09bd96c3784109460563e125065620c8bbda55a78f3aba6dd329bc15b4445d8cef8696d51eec64c4867d5024f8b291f77dc009dd649bbb36f03ee0297acdff1060450967926aff719b4bc42d5aefbe8bf84288c6500d29f5a7f1df10e7ede93b592c07f3899b4230602c5897e35504f730b741ad669e91d2d6051af0ebc650eb18d47b0e4a8cce2a5bc3a35b61dae65b822721d7dd60693fc") lstat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800000, &(0x7f0000002140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000004200)={0x50, 0x0, r12, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x0, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x3, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x4, 0x6000, 0x4, r13, r14, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001e40)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)="c827c46f0807de10e27ef6c3e215a8f1b23b1925d8e7d214a5bb2a71dfc29ff3051de2cc1872fae380005048404d858ac3241623a6530b7b4c5c536a028a31d5658e13e73ca3c0aed5c91a178bc1ac854d90ea4ade0eecf426c6bb0a4f92ea325f3b7e617d6827cdde9d9524ae54a009de660b4384977f46a50ff47ffbb7197038dae744d8468b4bc4cbe646bc1f652d4450de3efd17b8b35dc2f2cae51a543d0e38e89f1f2e261a8b66e9b366f84b35fe882ff15a93dcd30913fc264c2c44d8e38546ce27c0753e4d0117979c5c3ebf2733a873bcb1c9699eee21", 0xdb}, {&(0x7f0000000080)="9b912600c1d338cfc83531125ac1f201bfdbeb7c2c05299531ee1581179beb6fae1d6b47e0", 0x25}, {&(0x7f0000000380)="9588df07942cee7b3fbf001ca16e93956b9dd2f11db55e12f22d71f8d8fa8ad1802006f260d43cf37fc44ac45acccce9126ae440f2efb5abc17be87cacb8f7ab50ad117be8374424c475e2346dac85a4c9411ff7c0c900e94bbf318ac731c91c74e6e83b312f16ed1e12d821aaf6bf866b94dac9d475d5e6ed99bf4f89d025ef8144e9498fa75e155034d71652f0646bffc4bf6eca16498ccfa681515f7d36bcca9aaf11b50c2f19e3bffbdd883b2b4665397dfca2043c4dccaa1e90ebd708c745fcc5369dc1100212e97d748481ee797416d08d21f32ddaed0b7cff2a3ac5ebbb31bc9de45c4a12ece2e5132cd4", 0xee}, {&(0x7f0000000480)="bba5b9ebe156d762942b9c4d48f45d171002e402ecb2758a16090e7e4621eb5050ce6b51a4b707b930deca36995559d010e1d532f5a9f8a95bfd77e52907d133bb035dd0782d4e3f172bca282870f1edc274a3624d839de88caabf67277cd9d2e1a9c09c5ae75fff8d9ca7a476b463b5acc015bba2dfa9dbfdfa4bb09f189b311aa112ac11f2b6e0232fbbeec368ba69ec952b1214c35b70b1bdd5732f24306bcea03db492328febb6c3eafe8f94241ad58dda8555d7f5111d366b9c3d8c22b0f1616b1b059e1a4b42fa793e05a4521344d613215159dd56ab1029d36f6e", 0xde}, {&(0x7f0000000580)="0bb9b6987929734bc465b95cc879c439e1b7d3de129207315b5b3d27527e9f18f4ae67ca769e50fb1bcdb34c02587e6a218e6d51daa10d601c5b8da8dbd0312124fe0b4e18f74d6e9c4fdda60696299e51e502ee01f6c7e163863ef24b1ec26fff022ee21b448ad05bbe4b1df9cf0664ce5d1ec27aec2a2a9357d052bda1e003438b3f4dbd32ba53d38b7ba7161261b1e83eec8bd6261f00aa3d15380c1f01879ddeca19b5d1d74cf5d3453a7198bc370c01e7e904717a2ae88987baad7b244e2d871ac7bf85d7582d6a8d6adb74de7d498975f9b7f704ceeb309684335d6639cc4ea4863f22b443a8fd9c", 0xeb}, {&(0x7f0000000100)='\t', 0x1}], 0x6, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r14}}}], 0xd8, 0x4801}, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 509.221861ms ago: executing program 1 (id=2980): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0xa83, 0x0, 0xd}, {0xbf0, 0x0, 0xffffffff80000002}]}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f017d000f2261650fc76f00670f78efc7442400912fdef6c74424020d000000c7442406000000000f0114240f01c30f919111320000c4e2113f50edb8010000000f01d9", 0x44}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000300)=@ethtool_eeprom={0xc, 0x6, 0x8000, 0x1f, "9f057552cd8d04a8d0a453a39a72b7cc4f2430ae8c505d07ddc4f5924997ee"}}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) 429.013488ms ago: executing program 0 (id=2982): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x200, 0x283c, 0xd7e, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r1, @in6={{0xa, 0x4e1d, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffeff}}, 0x0, 0x3, 0x3fc, 0x7, 0x64, 0xfffffffe}, 0x9c) socket$netlink(0x10, 0x3, 0x15) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f00000003c0)={0x7f, &(0x7f0000000380)=[{}, {}, {}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000480)="c48175d5b100000000430fabfc42f40f0966ba400066b8871b66efc44165e2b1c40a0000c4a1835a2765440fc7ac7600000080c74424003d000000c744240200100000ff2c2426f30fbde1", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000440)={0x2, "12af0b41a571d378c90d18532e4d763e9c24f2c08053306e749f249d1d0e6d59"}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x8000000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000080)={{}, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000240)="3ec2f7df7041aa5d13cdf983e5157e59f7cd2d33cebb0068caa08135d0a698e342793bae39fd4e994dc0d9bd770eaf48209802757f72176f36090b732d4a6584f2f1830a90bd05d3754def46cb65eb4e9b916fa15d9906810eef750cbb8a5c62bf1c34506caf4a9e124d3c514dec7038b1369ae19bad924a3b6b19257580c6ffff4928171ff437a714931185e1f5af8101917ce36ed505d454b02953c7654b757403559af6663ebd1cfed7ab66c521c75ff1caac1cd035fa42003c0c1a3ea6494da2b8f7f7dc51fc795ce2e37d7e634300e94c348dfd4fcdf3cda53af679c83444b5cfe388", 0xe5, 0x640, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0xae3}, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xe, 0x123400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060300000000000000000007000000140007800800114000000000080012400000ffff050001000600000005000500020000d9b47184db910005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$DRM_IOCTL_CONTROL(r7, 0x40086414, &(0x7f00000001c0)={0x1, 0x2}) syz_usb_disconnect(r6) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0636, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 365.601928ms ago: executing program 6 (id=2983): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000001c0)={0x13, 0x0, 0x1b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x1, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0x9, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0xd, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xffff1000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1000, 0x151, 0x6, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x800, r4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 365.076223ms ago: executing program 3 (id=2984): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10d, 0x5}, {0x10, 0x107, 0x6}], 0x20}, 0x0, 0xe3d08660d3cd4684}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RETRIES(r5, 0x701, 0x0) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) ptrace$setopts(0x4206, r0, 0x0, 0x300024) 183.572995ms ago: executing program 6 (id=2985): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) (async) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newnexthop={0xffffffffffffffc7, 0x68, 0x521}, 0x18}}, 0x4020054) 182.876619ms ago: executing program 3 (id=2986): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000540)=""/145, 0x91) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) (async) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x5319) (async) write$UHID_INPUT(r2, &(0x7f0000000400)={0x8, {"afdfa1854b0f2bfc98e58d816a2b36b68bf55967103373b21db862c7d2d8c8a449e69b033859d57044c1c631e42e72c046194088d3c00336199f406ba70ea280531869b50b500281306b1698420be10da1432567b3292aac568099c21b493e9c46f136480f449b9e6abcf43f14db16b78578ed988267cef1f17e7fe30444d94c460491bac8b32ebb8a1dc7b073ccc45341919978da9e8d2b51662a43ff6aac4daff46556cfd296410f09e5d9653054dd17bbbc3b503c6ffb48f77c6b743b501dcfeab6d1f5d0932e2d2e9957b7b71d365322c6a72538d4579ddb6c5c3bc1743dfc281db1ee3db107385d785c44b41f5b60d131456b3670c76ed7cd945e71b2dfa688857755af2f2f34f3e6659b630598118788430362070e56aeb941e02c36f3aad6326c9651ee5830e1393bea8c3bf1d934698fb8c6212c1aa65c52857165e49992ab93b2da16949043c9ea84e033b4c6a9da349cc1f6ed1218fe39f64a8b36ed8ac18f2f8edd16583c19a8a7c72cfa56fff50c2f19cec68bfc5b5a3db745194be91a9ebd3de556c41024ac10b45a4d0bd5e58298b49e6b077c43bea778e5ed31ffa2c80c4f0faeef54f540d746e9b9df88bd3a3a4087dacb5bc8641420ebae33360d3cf0b24354a5d370d2f193e70e68224d1eba8b7b82047ce0c430631ffab404751de46e288c82c3142470501bff392c85b8f910c58ce6ddea97a25896cb1f9c117a70f05a801da1c840223dc54c1155f53bc6cec0febc7e6a9b8be38b26db834c271df72ee14c744a532f5397167e6c7b9703a583b95fe03024d799f5d0fe2d1a1bd43ee04a7a31b9df905a336faaeb08fe5ea506c92de4c91ac99651e293682f2643c7bd8fd2a09a69652d00172b47f2d1c3a341facfba04eb81706b76e1f1032e6504891388512e4089af788b338b72ed5ec073fff5057ccbbab234ae66758bf0d29a36cfd71e1486ca89858630566755f237fb662f8816108916e330ab15d1cd7ed5dff197bf9bdc3f2bd8712620ce90a4bea435d225b77516cbdf2d12f9dc16d1e846059fcc2c5390f5b7608b4d7c4fbb72997af3ad07138f1c9dcaf39e83558a8f51d496cbb750c8f636ae87dbd761b6e0eca377990c3d7c735b9536c727eb0b59fced2d56d62152a919df48a22a725ff24fcbbcb9d18615a491933f9c1e69d5b5adbb17d73c75d8f6f456a23072865145054e2248c618504339daf830635dae8dd43bbd134a647ecf2e63691cab32884ad6133d8ce17a969c21abed5eb48823b1fb71dc09f6ee78bc6145ab4a81bcf48731a4b9e5a4b4b1ee93111dde1f24c875550342bfef00aced67fa5740a927b2c88848e8d6570bd155bf7310f2e697e4cf4e54a24830bed8b6113930a02200e74d9c6beef219d8948445235b40be8bce89156946f7d1c7297118eb02f87b74ca70544e82e38ad4cc76e2e9602e16899fcb2088cee9edde5a78d67d53b1d8bd96126a1c305e30cb70b4a569e49518c714fa349276e86bfdd06381c3b784e6e17786dc00690e1a068572a3cde3bebf0fe0887fd28fd1de41d631a3cac0c45417799b429399026edfcd6fc213f2b3abe376acc522f0ea88e85616904b30ed6c292c6e8c91ba27aed54709f50ae6b643c92ab62c238888df10ce2db29f1768f6b72ea66b5a520d2dcd876d8c6072c56556fad5d2acd573c4350ee55d3efd26dd7dc9ce3f82e80cdab997fdd0fa628666edef70585ae9823fbc38d26debba03c3a93a25c91d0fa634b12e442df22b34ce8804706124bc1d33a3880c0f78aece2e1c4c41890b6ec2c28b7a5d1f7f618de94e0f003f2b6c9669545d52fc1340c78408c19b315011e5f977f43da98192247e5793750401dbcc3b6ff74825cb89b225bc86b83007b72e5d82c8b09094bd939ab7c9be8c7bcc9662abfb3dd22f1a600e7b817a02727f96e56d5d74fb9769441adfa7cb6fd85f505237d6031d49efca1562c3634f3dbbfc28045cb1abc71257d97883295cb9e79049017e61e83eac1128a3bb7a82e9dc590ef5b460c1f13b35d1cb6ddb6283328e8205c47bc32f90e54cb79cff24f4f49b8c157948c0566e61848c0b9e0afc9632715888c6613a170eb8ef38c58496e6cafdd558597d5a496e8be65b3597a5260695ac6d8f89d83dacf0c31036151b0a61d1e5911b1e2d57cdf3f692a145cbca5dc36f79e15876c00ab59b1797492701c4a13baa1dc50d05275e69d80fefd49842a3d22e0677d921b52465a52fe0f3f4f5a5cff43c6c810c473ef4469c2276fe88f587f4e19c938c390864271d0c0e5f576a2e21de26325e30e9ad46a203d15b6d743fe634f14f484202b0f211e7a0378f1cc2eb7b6c01df07922a5cf8f5c62527f9f868dd75624bf93850fe5f2ac6c70296cf73222eccfc6b20092b3a4c11baba9ae426582b82b6904c4b66af6ffc85a16e4f75878fb6e23cc9c263612214df7d84e22b0993f044db8ab0fb9830c4244507b9627dd047f05bd7e3a564e90c1ec6dbcc030af995c23f26ba8dc790e9b354d41d1afaf0fc9ea302ea98e2e2eb8fce96e0caef5a1c53344bbdc5d1242dd7a4165a6d49dcbbfd27f7a40b6ff232aa4081da0d17088011c9d1998ea12cff7bcdf3d2165cf8a20ef03d29d607549d1027982ddc04b41a4f3a648b35cfa79038c1146fe51361fd2176871864664979a5c8acc8801ef167fae239aa4878f214b655e5697d8fb58473c79a9526f613c36d72ff130b1046f6b404c419e38cffacf483a9c2a9f87233f6e5b0020e8bdbf75d29ae920c4651492c0ae7a1842dadcca79f27f85922ef94c6d070f417d687ce4cd7d8445392d17e80f89e8c26b39fde100782e094d6d0a6481d530ed9575118546e46861a4abc7d5819fe935d274ec5652cbc902dc5fc35cb940b9396f04ac278355a9898de2a80e2ea5a9eeabcd6d6861be30f288a45c87dd7c0575ccfced16049fc9e21ce84f3cab6162f6a8f05d9fda716da348b7252ee9cb02cce26475305107a61619f34364efeb34d60ec225efee20c2949fb310be84231f62c7b9b71edfc318d503d8a2107d6119eb0ae8d4a3e460457e6462cf78e594b11ba384c8b575927146ff469d739982d3fc507ea07b91241f34f7792533df3f90ab50503fe35ea0a9da3458cff6cff49d8201b9a3a4ec858d0713379af7a16b82d4487fe093a1cdf0e2c4a7138d7c9816205ff77bf5e6999c3bfc093b0861222fa851b7ac5050a00eabe0a391c9f816e526e041e191aeb3ebaa84916b9e879232aceaa3809800011e3e85847b2c618e0724306eccf64e685cf2028940cbdabadbe000dd0b6530bfe0f19bc7b89a30888bcef8c93f20068025e1cf216744fa299bc94549c23a0d87419e52d20349115573ef35f0ffaa7d92d945c529cd3d951e94b3042d7b12d95c2d718a31884403400f6c851a9731604579ed72cf98748ff7b1d0ea3e0378bbf21116fefc63dc15ff2dab3e737c7584a2b3d70689777c776c203461aa5fb2f51401ef70492e18ea27e2eda5c953bc04959f0b10542ad75f417ae3e69943f03fb90d8ee639a7492b4c100a6369cb55f20855d9de2cee500715fa85919c2e4315e7ca5d406b648b54a2b058785c76f49afcda9e3313d2f014f837cdd49fb7b43c87e4a00fa9343c4d01ba7577c77e0a9a8f96a05d8ec0e82360cf748cbd439a63c2bd861f1a715045b38d372a0ebe1bdd6ec93e6ea62c3a7f716621341a4e86146ee1ca9d96f6e8e4e35f7e3e31901505c68a1dfe163ebc99da9ee2e3d2288300272c67386d37ebd34f0d40807195ecd11a5eb615e6c955c018b5cc6960c09bc13a3786c5b20c33d5f2fe6ad137ddddfa199559de141b4da718bc100fb3a3cd7d3ac8ddda59ee5767bc422f06978a4dd3b7b8a1a29107b24c099aba975ce8337f1d6aa2d3c264a838793c85cccb3d3860753761e1b5a29cddec57b39f2c1f30f8634f55207b9077e2db124af43207bf77352cc1c665af43bae54e00a8a83fc59544d71ef6f30a92f4b28a49778844a439b99ef7e79aa0e597cfd5f2e5685b1fc88b626b47710c3d7049812f7c08a33a34000ea99f5a12d272656bdeeed65f1ebbdc0ab9d1f06024415498466325abfd39f009666c09258e8b17804a11cec9a02614051f926932904a90fecf41b0d866eb5d192ee079390296af3f1e1d8bd6d69cc20bea7dce7109ee4bd7ae85a890c71be71c06a82d07065d71bc43a49371db654bb7e83bd16d3ca32af7f2010f6e215056809e07979783760c7f564c71ba639a012942d32ad50af24b761fc53e8e4878e8faed726c46f4affa5a16b3d043f92a719c265e4591b88c0b8796270ba1a3e3bc4a55ee97f817e4031f83e553e4fcd37914ad1af48e896badd2e3d9fc64446b344ff76321ca69e47fa660e2cb78745d474885219ed3cc21a7da395cb0ce4d181e65408835d103537acf12bb9a4bb911fe5d4f14f3e5777532cdd42b65caea1b867a3dcda4f0751c89127ce61ae9e8852ea0191f90357280358d08018fc9542fbcb4529e635165f10a157b8c955b3c39a8e3383961d98eb623d6591cdb97a43565f06a80aa08f07b546d1bb8d42ea535fdb1b99d9f15ebe9bceffa7544b877a1ef69a5fe6a9df707320debd429826e587cbdb90b3f736ad2734cffc7d25e8b7de8c74f29ac70a513b807df8095ca4f72a07fc0af8ea02ce79e552b5e81ae4e02bfcb6a4a799348d1481b9749dad92eeebc9a24bfdcff6fc43622161b7f91c8b49c1ab73e12a6ca92f6586a40b23fe351c5d713b9c7ca02d310f5733c1ff3e8f984b93a3ad42bb1a8895b69657be1b6b0677385cc18bdb3de65b5c344c359c2fe3ec023b4b437905cc343668c6b3b602ef2956130d847e537a6c299f52abf13a2141687b3b075cd32562872705caf81ef92180bd39aa0d1af822981842fcf8f4c384272925c344bf411f2c52f7bea5380301fc26af0ce4a45039ac03164d168a54f641db2c31d90f369f701c93ee4de9ba6fefc1f20fad897f6014f9cac907dcb619bae3234321a0a01816a8baea8fb4d89d3451daaa66ee0eb669d78216cd6369eb717fda684fd9e93e209cec06d1389caa8074ba7a64663c94a2ca6a80c29756f4a91bc4760656c439c7e97c5d33bc9eddefde2131da91609162d98cefaa8cc5cb3498ff0bc79fd2d27b94370192e5a85bb178fdc9ca7bd301f8275072fc5630acd521db430a1b6fde9ab1739b03d3c02dbdb28334d934e2fb72d62e0af96946eea0882fb322c54de07a5656daf1c5afa994826977ca7751c9f85233ea9b7a044d2a031a4adf44c7e94d52bdfe8e18da987577677c3b98eb1f62e2afa5605ea0a7ded775b75eac3678080eb1b5d6687455873bdf8359dc68061f8918283149b50099d6f7096fbd2bd718de4f7e8ca16aea9d5000bc2e83de06aae362352ee613df463ef169b21b35df72f71a6d6a2d3f84844b703926eaa8e8e574e77481f02e3609661d99ead8871b51e56290654a6332845c13fb232e8a9436450e6515124813cf89a52b831612dd896b3631e6d594c1d52c8201da4185258864af1be1bee25fff58123156dffd8c7696d4e260e81fd2f7d3f1d1404e7e904052ab8f274c956ca09eddf0dd0999699f7df92d4016c6b8293c05d0e054d5a4143c5694698a11424d42c42492520d08604f104e56a2f23ca9ec8ff588c6a0241e9988592d7204ddd3c1bbe18108cd2287299565a84f88f6baeb5bf40ad8195f175ab9a3f0f7aaddd0c3423c577f3fef2e255311472a6b35bed280042467e0c3ef5bdb477350269213c214457b", 0x1000}}, 0x1006) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x700, 0x0) (async) sendfile(r5, r3, 0x0, 0x578410eb) (async) syz_emit_ethernet(0x93, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @dccp={{0x12, 0x4, 0x0, 0x2c, 0x85, 0x64, 0x0, 0x2, 0x21, 0x0, @local, @local, {[@end, @ssrr={0x89, 0x13, 0x3d, [@multicast1, @remote, @private=0xa010102, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1f, 0xf, [@private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101]}]}}, {{0x400, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, "1f1ccd", 0x5, "b95a5c"}, "09888e22355c3cf5eaf364a32ab60c467ad459409f9a3bd98d51f4a4b60327632a35453d5ea3130c6fb73b0878"}}}}}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 181.890742ms ago: executing program 6 (id=2987): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xc}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7, 0x40) (async) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) accept(r2, 0x0, 0x0) 119.118158ms ago: executing program 3 (id=2988): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)={{}, {@void, @max}}) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) r2 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 118.208826ms ago: executing program 6 (id=2989): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000001100)) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)={'trans=virtio,', {[{@cache_fscache}]}}) 116.352403ms ago: executing program 6 (id=2990): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x20000050) accept4(r2, 0x0, 0x0, 0x800) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x1006, 0x7ff, 0x1, 0x1, 0x0, 0xcca, 0x8, 0x7, 0xe, 0xfc, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x100, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0xc, 0x4, 0x10000, 0x6]}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x7448a000) ioctl$COMEDI_UNLOCK(r1, 0x6406) eventfd(0x81) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 1.251485ms ago: executing program 3 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x22800, 0x891}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000001400)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 574.267µs ago: executing program 6 (id=2992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$kcm(0x10, 0x3, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_open_dev$amidi(0x0, 0x2, 0x181) r7 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r10, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r12) recvmsg$can_raw(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1, &(0x7f0000001bc0)=""/158, 0x9e}, 0x40000040) 0s ago: executing program 3 (id=2993): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) (async) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000340)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000000)={&(0x7f00000004c0)=[r4, r3], 0x0, 0x7, 0x2, 0xd}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): eady in use [ 191.060688][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 191.084627][ T5946] block nbd64: NBD_DISCONNECT [ 191.124129][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 191.127250][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 191.130433][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 191.133105][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 191.135866][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 191.138468][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 191.141006][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 191.143556][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 191.146229][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 191.243226][ T5946] udevd[5946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 191.243459][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 191.279977][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 191.388334][ T6003] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 191.543205][T12489] geneve4: entered promiscuous mode [ 191.545220][T12489] geneve4: entered allmulticast mode [ 191.549483][ T1230] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 191.554268][ T1230] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 191.557658][ T1230] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 191.565331][ T1230] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 191.566381][ T6003] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.579617][ T6003] usb 5-1: config 0 has no interface number 0 [ 191.586012][ T6003] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.590717][ T6003] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 191.595384][ T6003] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.599053][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.616179][ T6003] usb 5-1: config 0 descriptor?? [ 191.618869][T12508] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 191.630694][ T6003] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 191.699024][ T53] usb 10-1: USB disconnect, device number 4 [ 191.718369][T12526] syz_tun: left promiscuous mode [ 191.739321][T12526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.756637][T12526] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.760775][T12526] dummy0: left promiscuous mode [ 191.779681][T12526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.846529][ T1146] usb 5-1: USB disconnect, device number 17 [ 191.888122][ T5949] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 191.966935][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.970575][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.974008][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.980762][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.983616][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.104296][ T8251] bond0: (slave syz_tun): Releasing backup interface [ 192.107879][ T8251] syz_tun (unregistering): left allmulticast mode [ 192.138184][ T6498] IPVS: stop unused estimator thread 0... [ 192.230955][T12548] chnl_net:caif_netlink_parms(): no params data found [ 192.320648][T12548] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.323887][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.327084][T12548] bridge_slave_0: entered allmulticast mode [ 192.331655][T12548] bridge_slave_0: entered promiscuous mode [ 192.336955][T12548] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.340337][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.343494][T12548] bridge_slave_1: entered allmulticast mode [ 192.346663][T12548] bridge_slave_1: entered promiscuous mode [ 192.370607][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.377022][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.396887][T12548] team0: Port device team_slave_0 added [ 192.401553][T12548] team0: Port device team_slave_1 added [ 192.421891][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.424953][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.434814][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.440319][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.442582][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.450780][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.472333][T12548] hsr_slave_0: entered promiscuous mode [ 192.474619][T12548] hsr_slave_1: entered promiscuous mode [ 192.476750][T12548] debugfs: 'hsr0' already exists in 'hsr' [ 192.478675][T12548] Cannot create hsr debugfs directory [ 192.509843][ T6024] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 192.549316][T12548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.616188][T12548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.666880][T12548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.671231][ T6024] usb 5-1: Using ep0 maxpacket: 8 [ 192.680980][ T6024] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 192.688085][ T6024] usb 5-1: string descriptor 0 read error: -22 [ 192.691049][ T6024] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.695040][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.748196][T12548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.779081][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 192.799495][T12578] bond5: entered promiscuous mode [ 192.801968][T12578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.805958][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 192.810016][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 192.813772][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1953'. [ 192.837941][T12578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12578 comm=syz.1.1953 [ 192.845506][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 192.915725][T12585] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 192.923296][ T6024] cdc_ncm 5-1:1.0: bind() failure [ 192.936006][ T6024] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 192.939173][ T6024] cdc_ncm 5-1:1.1: bind() failure [ 192.943072][T12548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.943397][ T6024] usb 5-1: USB disconnect, device number 18 [ 192.962621][T12548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.970305][T12548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.975582][T12548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.035613][T12548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.048133][T12548] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.053428][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.055871][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.065088][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.067509][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.177761][T12604] Cannot find set identified by id 65534 to match [ 193.200847][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.231832][T12548] veth0_vlan: entered promiscuous mode [ 193.234379][T12607] netlink: 'syz.5.1958': attribute type 9 has an invalid length. [ 193.239995][T12548] veth1_vlan: entered promiscuous mode [ 193.263248][T12548] veth0_macvtap: entered promiscuous mode [ 193.269693][T12548] veth1_macvtap: entered promiscuous mode [ 193.285085][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.295766][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.308980][ T6498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.314249][ T6498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.318458][ T6498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.321314][ T6498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.359892][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.362535][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.368511][ T5949] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 193.371572][ T5949] Bluetooth: Wrong link type (-22) [ 193.383087][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.385756][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.449509][T12622] ip6gre1: entered promiscuous mode [ 193.455958][T12622] ip6gre1: entered allmulticast mode [ 193.561807][T12632] 9p: Bad value for 'rfdno' [ 193.561941][T12630] 9p: Bad value for 'rfdno' [ 193.564924][T12632] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 193.569366][T12632] overlayfs: overlapping lowerdir path [ 193.599273][T12635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.769114][ T40] audit: type=1400 audit(1767010827.801:29006): avc: denied { bind } for pid=12656 comm="syz.1.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 193.891104][ T6498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.895652][ T6498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.898988][ T53] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 193.932297][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.062006][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.065443][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.068580][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.073382][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.079604][ T53] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 194.083429][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.086662][ T53] usb 5-1: Product: syz [ 194.088336][ T53] usb 5-1: Manufacturer: syz [ 194.090229][ T53] usb 5-1: SerialNumber: syz [ 194.094651][ T53] usb 5-1: config 0 descriptor?? [ 194.147557][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.199627][ T5949] Bluetooth: hci4: command tx timeout [ 194.234854][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.315360][ T53] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 194.528591][T12641] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 194.535221][ T5940] usb 5-1: USB disconnect, device number 19 [ 194.603798][T12656] delete_channel: no stack [ 194.688153][ T54] IPVS: starting estimator thread 0... [ 194.777568][T12689] IPVS: using max 29 ests per chain, 69600 per kthread [ 195.102219][T12720] __vm_enough_memory: pid: 12720, comm: syz.0.1995, bytes: 4503599627366400 not enough memory for the allocation [ 195.145228][T12724] vivid-000: disconnect [ 195.154934][ T40] audit: type=1400 audit(1767010829.101:29007): avc: denied { write } for pid=12723 comm="syz.0.1997" name="/" dev="9p" ino=71827865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.165336][T12723] vivid-000: reconnect [ 195.277912][T12732] xt_NFQUEUE: number of total queues is 0 [ 195.333267][ T54] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 195.421871][T12738] block nbd3: shutting down sockets [ 195.430278][T12736] block nbd3: NBD_DISCONNECT [ 195.432123][T12736] block nbd3: Send disconnect failed -32 [ 195.475027][T12740] __nla_validate_parse: 4 callbacks suppressed [ 195.475039][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'. [ 195.506130][ T54] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 195.509507][ T54] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.513553][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 195.519032][ T54] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.522527][ T54] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.525355][ T54] usb 10-1: Product: syz [ 195.527359][ T54] usb 10-1: Manufacturer: syz [ 195.529274][ T54] usb 10-1: SerialNumber: syz [ 195.534749][ T54] usb 10-1: config 0 descriptor?? [ 195.539199][ T54] hub 10-1:0.0: bad descriptor, ignoring hub [ 195.541550][ T54] hub 10-1:0.0: probe with driver hub failed with error -5 [ 195.546718][ T54] usb 10-1: selecting invalid altsetting 0 [ 195.550995][T12745] overlayfs: overlapping lowerdir path [ 195.717380][T12753] macvtap0: entered allmulticast mode [ 195.720040][T12753] veth0_macvtap: entered allmulticast mode [ 195.984059][T12774] overlayfs: overlapping lowerdir path [ 196.129689][ T40] audit: type=1400 audit(1767010830.008:29008): avc: denied { execute } for pid=12786 comm="syz.3.2015" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 196.156761][ T6003] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 196.183388][ T54] usb 10-1: USB disconnect, device number 5 [ 196.185793][T12789] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 196.330498][ T6003] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.331009][ T40] audit: type=1400 audit(1767010830.204:29009): avc: denied { watch_mount } for pid=12790 comm="syz.3.2017" path="/28" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 196.333393][ T6003] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.333408][ T6003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.333434][ T6003] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 196.353473][ T6003] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 196.358370][ T6003] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.362366][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.365291][ T6003] usb 6-1: Product: syz [ 196.366908][ T6003] usb 6-1: Manufacturer: syz [ 196.370746][ T54] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 196.371595][ T6003] cdc_wdm 6-1:1.0: skipping garbage [ 196.375769][ T6003] cdc_wdm 6-1:1.0: skipping garbage [ 196.380768][ T6003] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 196.383861][ T6003] cdc_wdm 6-1:1.0: Unknown control protocol [ 196.424189][ T5949] Bluetooth: hci4: command tx timeout [ 196.506163][T12798] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2019'. [ 196.520323][ T54] usb 10-1: device descriptor read/64, error -71 [ 196.587963][ T5940] usb 6-1: USB disconnect, device number 20 [ 196.657788][T12811] overlayfs: overlapping lowerdir path [ 196.743308][T12819] Driver unsupported XDP return value 0 on prog (id 226) dev N/A, expect packet loss! [ 196.751434][T12819] No control pipe specified [ 196.787785][ T54] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 196.902342][ T40] audit: type=1400 audit(1767010830.728:29010): avc: denied { getopt } for pid=12830 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.905021][T12831] IPv6: NLM_F_REPLACE set, but no existing node found! [ 196.948100][ T54] usb 10-1: device descriptor read/64, error -71 [ 196.954848][ T5949] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 196.958040][ T5949] Bluetooth: Wrong link type (-22) [ 196.964367][T12835] ata1.00: invalid multi_count 1 ignored [ 197.077797][T12841] overlayfs: overlapping lowerdir path [ 197.078517][ T54] usb usb10-port1: attempt power cycle [ 197.112878][T12845] program syz.1.2031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.254789][ T40] audit: type=1400 audit(1767010831.055:29011): avc: denied { mounton } for pid=12836 comm="syz.3.2029" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 197.262285][T12839] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 197.319079][T12854] comedi comedi2: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 197.450776][ T54] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 197.488764][ T54] usb 10-1: device descriptor read/8, error -71 [ 197.739552][ T54] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 197.772381][ T54] usb 10-1: device descriptor read/8, error -71 [ 197.809184][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'. [ 197.890193][T12878] SELinux: ebitmap start bit (1936614464) is beyond the end of the bitmap (1088) [ 197.899447][T12878] SELinux: failed to load policy [ 197.900138][ T54] usb usb10-port1: unable to enumerate USB device [ 197.964249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.247119][ T40] audit: type=1400 audit(1767010831.990:29012): avc: denied { shutdown } for pid=12888 comm="syz.3.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.309337][T12893] option changes via remount are deprecated (pid=12892 comm=syz.3.2047) [ 198.330836][ T40] audit: type=1400 audit(1767010832.065:29013): avc: denied { unmount } for pid=12548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 198.358130][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 198.363490][ T40] audit: type=1400 audit(1767010832.102:29014): avc: denied { kexec_image_load } for pid=12896 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 198.481591][T12904] binder: 12903:12904 ioctl c018620c 200000000000 returned -22 [ 198.500932][T12906] misc userio: The device must be registered before sending interrupts [ 198.506024][T12906] CIFS mount error: No usable UNC path provided in device string! [ 198.506024][T12906] [ 198.511951][T12906] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.648714][ T5949] Bluetooth: hci4: command tx timeout [ 198.683327][T12918] could not open pipe file descriptor [ 198.712934][T12920] comedi comedi2: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 198.766363][ T6003] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 198.928728][ T6003] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.933133][ T6003] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.937886][ T6003] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.943352][ T6003] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.947215][ T6003] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.951679][ T6003] usb 8-1: config 0 descriptor?? [ 198.999922][T12929] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 199.010874][T12929] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 199.386594][ T6003] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 199.397491][ T6003] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 199.423983][ T5947] udevd[5947]: 'fido_id' [12936] terminated by signal 33 (Unknown signal 33) [ 199.803788][ T53] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 199.830866][ T40] audit: type=1400 audit(1767010833.468:29015): avc: denied { write } for pid=12947 comm="syz.1.2063" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 199.836321][ T6003] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 199.965696][ T53] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 199.968897][ T53] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 199.973591][ T53] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 199.977300][ T53] usb 10-1: config 220 has no interface number 1 [ 199.980240][ T53] usb 10-1: config 220 interface 0 has no altsetting 0 [ 199.983003][ T53] usb 10-1: config 220 interface 76 has no altsetting 0 [ 199.987803][ T53] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.991430][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.994694][ T53] usb 10-1: Product: syz [ 199.996718][ T53] usb 10-1: Manufacturer: syz [ 199.997850][ T6003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.998752][ T53] usb 10-1: SerialNumber: syz [ 200.004223][ T6003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.007408][ T6003] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 200.011163][ T6003] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 200.014220][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.019632][T12945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.023360][ T6003] hub 5-1:1.0: bad descriptor, ignoring hub [ 200.025466][ T6003] hub 5-1:1.0: probe with driver hub failed with error -5 [ 200.028320][ T6003] cdc_wdm 5-1:1.0: skipping garbage [ 200.030166][ T6003] cdc_wdm 5-1:1.0: skipping garbage [ 200.033109][ T6003] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 200.035170][ T6003] cdc_wdm 5-1:1.0: Unknown control protocol [ 200.276486][ T53] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 200.279053][ T53] uvcvideo 10-1:220.0: No valid video chain found. [ 200.285600][ T53] usb 10-1: USB disconnect, device number 10 [ 200.350295][ T6003] usb 5-1: USB disconnect, device number 20 [ 200.874441][ T5949] Bluetooth: hci4: command tx timeout [ 201.175052][T12971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2069'. [ 201.385136][T12983] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2072'. [ 201.449814][ T5949] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 201.453551][ T5949] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 201.629690][ T9] usb 8-1: USB disconnect, device number 21 [ 201.683163][T13008] overlayfs: missing 'lowerdir' [ 201.719050][ T6498] Bluetooth: (null): Invalid header checksum [ 201.740865][ T40] audit: type=1400 audit(1767010835.253:29016): avc: denied { setopt } for pid=13011 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.789055][ T40] audit: type=1400 audit(1767010835.300:29017): avc: denied { create } for pid=13004 comm="syz.5.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.801000][ T40] audit: type=1400 audit(1767010835.309:29018): avc: denied { ioctl } for pid=13004 comm="syz.5.2078" path="socket:[54713]" dev="sockfs" ino=54713 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.836349][ T6499] Bluetooth: (null): Invalid header checksum [ 201.869567][ T40] audit: type=1400 audit(1767010835.384:29019): avc: denied { bind } for pid=13019 comm="syz.1.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.876982][ T40] audit: type=1400 audit(1767010835.384:29020): avc: denied { write } for pid=13019 comm="syz.1.2082" path="socket:[56596]" dev="sockfs" ino=56596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.886924][ T5949] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 201.979877][T13029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2085'. [ 201.995122][T13029] bond4: option downdelay: invalid value (18446744073709551615) [ 201.999031][T13029] bond4: option downdelay: allowed values 0 - 2147483647 [ 202.003670][T13029] bond4 (unregistering): Released all slaves [ 202.041448][T13033] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 202.193074][T13044] overlayfs: missing 'lowerdir' [ 202.196322][T13040] EXT4-fs: Conflicting test_dummy_encryption options [ 202.214794][T13041] syzkaller1: entered promiscuous mode [ 202.217263][T13041] syzkaller1: entered allmulticast mode [ 202.224227][ T40] audit: type=1400 audit(1767010835.712:29021): avc: denied { write } for pid=13039 comm="syz.0.2091" name="file0" dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.232729][T13046] 9pnet_fd: p9_fd_create_tcp (13046): problem binding to privport [ 202.314021][T13055] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.367768][T13064] Cannot find set identified by id 65534 to match [ 202.381680][ T40] audit: type=1400 audit(1767010835.861:29022): avc: denied { append } for pid=13054 comm="syz.3.2096" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.390587][T13056] 9p: Bad value for 'rfdno' [ 202.501007][T13074] overlayfs: missing 'lowerdir' [ 202.735810][T13089] binder: Bad value for 'max' [ 202.885537][ T6498] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.995485][ T6498] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.996047][ T40] audit: type=1400 audit(1767010836.431:29023): avc: denied { mount } for pid=13099 comm="syz.0.2114" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.069833][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.075524][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.080273][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.083931][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.092579][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.116056][T13108] overlay: Unknown parameter '/' [ 203.125524][ T6498] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.204236][ T6498] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.285532][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 203.323377][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 203.343237][T13105] chnl_net:caif_netlink_parms(): no params data found [ 203.410259][ T5949] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 203.412490][ T5949] Bluetooth: Wrong link type (-22) [ 203.464699][T13146] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2126'. [ 203.531108][ T40] audit: type=1400 audit(1767010836.927:29024): avc: denied { create } for pid=13150 comm="syz.3.2127" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 203.571860][ T6498] bridge_slave_1: left allmulticast mode [ 203.577929][ T6498] bridge_slave_1: left promiscuous mode [ 203.586395][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.603337][ T6498] bridge_slave_0: left allmulticast mode [ 203.606057][ T6498] bridge_slave_0: left promiscuous mode [ 203.608841][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.746268][T13166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2129'. [ 204.011954][ T6498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.016861][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.021269][ T6498] bond0 (unregistering): Released all slaves [ 204.026113][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.028976][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.032065][T13105] bridge_slave_0: entered allmulticast mode [ 204.036106][T13105] bridge_slave_0: entered promiscuous mode [ 204.049489][T13158] ip6tnl0: Caught tx_queue_len zero misconfig [ 204.057320][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 204.072478][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.075768][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.079441][T13105] bridge_slave_1: entered allmulticast mode [ 204.093844][T13105] bridge_slave_1: entered promiscuous mode [ 204.136660][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.143784][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.214544][T13105] team0: Port device team_slave_0 added [ 204.225643][T13105] team0: Port device team_slave_1 added [ 204.294775][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.300396][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.312383][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.351199][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.358241][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.368957][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.448897][T13105] hsr_slave_0: entered promiscuous mode [ 204.456297][T13105] hsr_slave_1: entered promiscuous mode [ 204.458600][T13105] debugfs: 'hsr0' already exists in 'hsr' [ 204.460559][T13105] Cannot create hsr debugfs directory [ 204.486679][ T6498] hsr_slave_0: left promiscuous mode [ 204.494778][ T6498] hsr_slave_1: left promiscuous mode [ 204.496917][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.501101][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.504686][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.507646][ T5949] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 204.510370][ T5949] Bluetooth: Wrong link type (-22) [ 204.512363][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.545457][ T6498] veth1_macvtap: left promiscuous mode [ 204.547903][ T6498] veth0_macvtap: left promiscuous mode [ 204.550393][ T6498] veth1_vlan: left promiscuous mode [ 204.557563][ T6498] veth0_vlan: left promiscuous mode [ 204.615991][T13188] 9p: Bad value for 'rfdno' [ 204.921767][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 204.951529][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 205.260519][T13199] netlink: 'syz.0.2140': attribute type 12 has an invalid length. [ 205.325306][ T5949] Bluetooth: hci1: command tx timeout [ 205.403853][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 205.409578][T13105] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.424208][T13105] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.425619][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2143'. [ 205.434597][T13105] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.448330][T13105] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.448454][T13212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13212 comm=syz.1.2143 [ 205.580334][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.595221][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.602919][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.605372][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.615615][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.618090][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.743359][ T6498] IPVS: stop unused estimator thread 0... [ 205.749897][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 205.749910][ T40] audit: type=1326 audit(1767010839.003:29027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13236 comm="syz.1.2147" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f436238f7c9 code=0x0 [ 205.784368][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.979674][T13105] veth0_vlan: entered promiscuous mode [ 205.992393][T13105] veth1_vlan: entered promiscuous mode [ 206.024173][T13105] veth0_macvtap: entered promiscuous mode [ 206.030763][T13105] veth1_macvtap: entered promiscuous mode [ 206.046660][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.056466][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.066473][ T85] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.070853][ T85] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.076154][ T85] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.080117][ T85] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.145556][ T6499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.152889][ T6499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.166606][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.169541][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.351210][T13298] netlink: 'syz.6.2155': attribute type 10 has an invalid length. [ 206.354581][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.356332][ T40] audit: type=1400 audit(1767010839.573:29028): avc: denied { map } for pid=13301 comm="syz.3.2156" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 206.357262][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.374930][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.378070][T13298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.381276][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.384388][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.391705][T13298] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 206.702528][ T1337] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 206.739262][T13337] devtmpfs: Cannot change global quota limit on remount [ 206.875366][ T1337] usb 8-1: config 76 has an invalid interface number: 136 but max is 2 [ 206.878113][ T1337] usb 8-1: config 76 contains an unexpected descriptor of type 0x2, skipping [ 206.881118][ T1337] usb 8-1: config 76 descriptor has 1 excess byte, ignoring [ 206.883521][ T1337] usb 8-1: config 76 has 1 interface, different from the descriptor's value: 3 [ 206.887300][ T1337] usb 8-1: config 76 has no interface number 0 [ 206.890196][ T1337] usb 8-1: config 76 interface 136 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.894910][ T1337] usb 8-1: config 76 interface 136 has no altsetting 0 [ 206.900213][ T1337] usb 8-1: New USB device found, idVendor=0af0, idProduct=7361, bcdDevice=d8.14 [ 206.903726][ T1337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.909630][ T1337] usb 8-1: Product: syz [ 206.912030][ T1337] usb 8-1: Manufacturer: syz [ 206.913658][ T1337] usb 8-1: SerialNumber: syz [ 206.944891][ T40] audit: type=1400 audit(1767010840.115:29029): avc: denied { write } for pid=13357 comm="syz.6.2166" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 206.957308][T13360] __nla_validate_parse: 4 callbacks suppressed [ 206.957321][T13360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2167'. [ 207.007719][T13369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.014353][T13371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.037655][T13360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2167'. [ 207.053195][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2167'. [ 207.131885][T13383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.161616][T13385] netlink: 'syz.1.2175': attribute type 4 has an invalid length. [ 207.166522][T13385] tmpfs: Unknown parameter 'nr' [ 207.264358][T13389] bond4 (unregistering): Released all slaves [ 207.297959][T13401] tipc: Enabled bearer , priority 0 [ 207.300375][T13402] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 207.303035][T13402] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 207.307165][T13401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.317434][T13402] tipc: Resetting bearer [ 207.322448][ T6021] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 207.398073][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 207.401035][T13409] netlink: 'syz.0.2181': attribute type 30 has an invalid length. [ 207.403616][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 207.504354][ T6021] usb 11-1: Using ep0 maxpacket: 8 [ 207.507475][ T6021] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.510213][ T6021] usb 11-1: config 179 has no interface number 0 [ 207.512402][ T6021] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.516826][ T6021] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.520574][ T6021] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.523872][ T40] audit: type=1400 audit(1767010840.658:29030): avc: denied { getopt } for pid=13425 comm="syz.1.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.524568][ T6021] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.539233][ T6021] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.543671][ T6021] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.547503][ T5949] Bluetooth: hci1: command tx timeout [ 207.548361][ T6021] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.554504][T13377] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 207.636482][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.785836][ T6021] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input25 [ 207.992075][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2171'. [ 208.000738][T13377] erspan1: entered promiscuous mode [ 208.006026][ T5940] usb 11-1: USB disconnect, device number 2 [ 208.006162][ C1] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 208.010852][ C1] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.014219][ T6021] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 208.199588][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 208.202953][ T6021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.207844][ T6021] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 208.210916][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.213489][ T6021] usb 5-1: Product: syz [ 208.215107][ T6021] usb 5-1: Manufacturer: syz [ 208.216732][ T6021] usb 5-1: SerialNumber: syz [ 208.219734][ T6021] usb 5-1: config 0 descriptor?? [ 208.532079][ T5940] usb 5-1: USB disconnect, device number 21 [ 208.598387][T13449] autofs: Unknown parameter '>' [ 208.601124][ T40] audit: type=1400 audit(1767010841.667:29031): avc: denied { map } for pid=13448 comm="syz.6.2192" path="/11" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.611742][ T40] audit: type=1400 audit(1767010841.667:29032): avc: denied { execute } for pid=13448 comm="syz.6.2192" path="/11" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.906233][T13469] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2198'. [ 208.982045][T13473] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2201'. [ 209.159828][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 209.178222][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2204'. [ 209.436922][ T40] audit: type=1400 audit(1767010842.453:29033): avc: denied { mount } for pid=13488 comm="syz.6.2206" name="/" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 209.503181][T13491] syzkaller0: entered promiscuous mode [ 209.505761][T13491] syzkaller0: entered allmulticast mode [ 209.578707][ T1337] hso 8-1:76.136: Not our interface [ 209.582523][ T1337] usb 8-1: USB disconnect, device number 22 [ 209.686533][ T40] audit: type=1326 audit(1767010842.687:29034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz.1.2198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436238f7c9 code=0x7fc00000 [ 209.771618][ T5949] Bluetooth: hci1: command tx timeout [ 210.231722][ T40] audit: type=1400 audit(1767010843.192:29035): avc: denied { append } for pid=13543 comm="syz.0.2225" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.239473][ T40] audit: type=1400 audit(1767010843.201:29036): avc: denied { setattr } for pid=13545 comm="syz.6.2226" path="socket:[56196]" dev="sockfs" ino=56196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.264004][ T6024] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 210.338973][T13552] netlink: 'syz.6.2228': attribute type 10 has an invalid length. [ 210.352630][T13552] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.374065][T13554] ipvlan2: entered allmulticast mode [ 210.375931][T13554] team0: entered allmulticast mode [ 210.377657][T13554] vlan0: entered allmulticast mode [ 210.379451][T13554] veth0_vlan: entered allmulticast mode [ 210.382318][T13554] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 210.436384][ T6024] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 210.439151][ T6024] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.442356][ T6024] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.456418][ T6024] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.459490][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.462178][ T6024] usb 8-1: Product: syz [ 210.463596][ T6024] usb 8-1: Manufacturer: syz [ 210.465179][ T6024] usb 8-1: SerialNumber: syz [ 210.468405][ T6024] usb 8-1: config 0 descriptor?? [ 210.472263][ T6024] hub 8-1:0.0: bad descriptor, ignoring hub [ 210.474261][ T6024] hub 8-1:0.0: probe with driver hub failed with error -5 [ 210.478261][ T6024] usb 8-1: selecting invalid altsetting 0 [ 210.549802][T13571] usb 8-1: USB disconnect, device number 23 [ 210.561939][T13578] fuse: Bad value for 'rootmode' [ 210.584492][T13577] syzkaller0: entered promiscuous mode [ 210.586796][T13577] syzkaller0: entered allmulticast mode [ 210.859119][T13595] can: request_module (can-proto-4) failed. [ 211.295654][T13611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13611 comm=syz.6.2248 [ 211.303149][T13611] program syz.6.2248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.434972][T13615] openvswitch: netlink: Key type 31 is not supported [ 211.442032][T13615] 9pnet_fd: p9_fd_create_tcp (13615): problem connecting socket to 127.0.0.1 [ 211.647448][T13623] tipc: Resetting bearer [ 211.718506][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 211.718521][ T40] audit: type=1400 audit(1767010844.594:29040): avc: denied { getopt } for pid=13617 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.773036][ T1230] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.782324][ T1230] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.785474][ T1230] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.788885][ T1230] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.791648][ T1230] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.795403][ T1230] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.801146][ T1230] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.804192][ T1230] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.872437][T13640] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:19999 [ 211.996404][ T5949] Bluetooth: hci1: command tx timeout [ 212.084765][ T40] audit: type=1400 audit(1767010844.931:29041): avc: denied { node_bind } for pid=13663 comm="syz.6.2265" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 212.088024][T13664] vcan0: tx address claim with different name [ 212.101286][T13664] netlink: 'syz.6.2265': attribute type 10 has an invalid length. [ 212.110662][T13664] team0: Failed to send options change via netlink (err -105) [ 212.113175][T13664] team0: Port device dummy0 added [ 212.132990][T13666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.136075][T13666] IPv6: NLM_F_CREATE should be set when creating new route [ 212.280989][T13666] tipc: Resetting bearer [ 212.335229][T13666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.405317][T13666] veth1_macvtap: left allmulticast mode [ 212.481198][ T40] audit: type=1400 audit(1767010845.295:29042): avc: denied { setattr } for pid=13676 comm="syz.0.2269" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.491206][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 212.494500][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 212.575329][T13671] bond0: entered promiscuous mode [ 212.577072][T13671] bond_slave_0: entered promiscuous mode [ 212.579094][T13671] bond_slave_1: entered promiscuous mode [ 212.581036][T13671] bridge0: entered promiscuous mode [ 212.582844][T13671] syz_tun: entered promiscuous mode [ 212.586291][T13671] gretap0: entered promiscuous mode [ 212.588733][T13671] hsr1: entered promiscuous mode [ 212.605938][ T6499] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.611045][ T6499] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.613991][ T6499] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 212.617199][ T6499] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.620429][ T6499] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.623475][ T6499] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.626415][ T6499] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 212.629801][ T6499] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.632906][ T6499] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.635940][ T6499] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.640428][ T6499] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 212.643606][ T6499] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.646535][ T6499] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.649846][ T6499] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.652873][ T6499] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 212.655934][ T6499] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.733240][T13693] ata1.00: invalid multi_count 128 ignored [ 212.753838][T13697] __nla_validate_parse: 7 callbacks suppressed [ 212.753849][T13697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2278'. [ 212.790877][T13700] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2276'. [ 212.883741][ T40] audit: type=1400 audit(1767010845.669:29043): avc: denied { bind } for pid=13707 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.921497][ T40] audit: type=1400 audit(1767010845.707:29044): avc: denied { read } for pid=13707 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.017212][T13718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13718 comm=syz.1.2283 [ 213.085381][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.133351][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2289'. [ 213.144672][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 213.153417][ T53] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 213.182737][ T40] audit: type=1400 audit(1767010845.950:29045): avc: denied { write } for pid=13738 comm="syz.6.2290" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.220872][T13740] fido_id[13740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.230916][T13742] netlink: 'syz.1.2291': attribute type 1 has an invalid length. [ 213.397054][T13753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2294'. [ 213.428287][ T40] audit: type=1400 audit(1767010846.184:29046): avc: denied { ioctl } for pid=13756 comm="syz.1.2295" path="socket:[58986]" dev="sockfs" ino=58986 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.574398][ T40] audit: type=1400 audit(1767010846.324:29047): avc: denied { ioctl } for pid=13760 comm="syz.1.2297" path="socket:[59570]" dev="sockfs" ino=59570 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.822623][ T40] audit: type=1400 audit(1767010846.548:29048): avc: denied { getopt } for pid=13776 comm="syz.0.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.920825][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'. [ 214.002533][T13782] overlayfs: upper fs does not support tmpfile. [ 214.008545][T13782] genirq: Flags mismatch irq 10. 00200000 (pcmmio) vs. 00200000 (pcl812) [ 214.090234][ T40] audit: type=1400 audit(1767010846.801:29049): avc: denied { create } for pid=13784 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 214.100848][T13785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.109476][T13789] netlink: 'syz.3.2306': attribute type 12 has an invalid length. [ 214.112240][T13789] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2306'. [ 214.468763][T13823] bond4 (unregistering): Released all slaves [ 214.628761][T13838] xt_ecn: cannot match TCP bits for non-tcp packets [ 214.636693][T13838] 9p: Bad value for 'rfdno' [ 214.656098][T13841] SELinux: failed to load policy [ 214.675179][T13843] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 214.678622][T13843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2324'. [ 214.683920][T13841] SELinux: policydb version -2036187150 does not match my version range 15-35 [ 214.687662][T13841] SELinux: failed to load policy [ 214.825669][T13852] netlink: 'syz.1.2327': attribute type 6 has an invalid length. [ 214.941164][T13863] program syz.1.2331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.062232][T13876] ip6gre2: entered promiscuous mode [ 215.064663][T13876] ip6gre2: entered allmulticast mode [ 215.069217][ T1168] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.072497][ T1168] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.098343][ T6003] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.103744][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 215.108355][T13882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.144530][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2339'. [ 215.488615][T13901] bond0: (slave bridge0): Releasing backup interface [ 215.491623][T13901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.503149][T13901] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2343'. [ 215.847031][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 215.890122][T13916] fuse: Unknown parameter 'r9qode' [ 216.017910][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.373922][T13105] bond0: (slave syz_tun): Releasing backup interface [ 216.377521][T13105] syz_tun (unregistering): left promiscuous mode [ 216.463997][ T1168] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.535241][ T1168] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.612672][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.618537][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.622364][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.626692][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.629901][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.659781][ T1168] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.746017][ T1168] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.758308][T13920] chnl_net:caif_netlink_parms(): no params data found [ 216.822206][T13927] netlink: 'syz.0.2351': attribute type 11 has an invalid length. [ 216.824842][T13927] netlink: 'syz.0.2351': attribute type 11 has an invalid length. [ 216.837731][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.840375][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.844277][T13920] bridge_slave_0: entered allmulticast mode [ 216.847047][T13920] bridge_slave_0: entered promiscuous mode [ 216.864730][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.867229][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.869569][T13920] bridge_slave_1: entered allmulticast mode [ 216.872951][T13920] bridge_slave_1: entered promiscuous mode [ 216.901156][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.905930][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.915096][ T1168] bridge_slave_1: left allmulticast mode [ 216.917390][ T1168] bridge_slave_1: left promiscuous mode [ 216.919423][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.924158][ T1168] bridge_slave_0: left allmulticast mode [ 216.926101][ T1168] bridge_slave_0: left promiscuous mode [ 216.928354][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.050056][ T1168] gretap0 (unregistering): left promiscuous mode [ 217.096674][ T1168] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 217.101297][ T1168] bridge0 (unregistering): left promiscuous mode [ 217.177956][ T1168] bond0 (unregistering): left promiscuous mode [ 217.180541][ T1168] bond_slave_0: left promiscuous mode [ 217.183073][ T1168] bond_slave_1: left promiscuous mode [ 217.193004][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.198513][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.202341][ T1168] bond0 (unregistering): Released all slaves [ 217.216203][T13920] team0: Port device team_slave_0 added [ 217.220659][T13920] team0: Port device team_slave_1 added [ 217.236092][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.238740][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.247080][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.251791][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.254066][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.262753][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.327424][T13920] hsr_slave_0: entered promiscuous mode [ 217.330750][T13920] hsr_slave_1: entered promiscuous mode [ 217.333891][T13920] debugfs: 'hsr0' already exists in 'hsr' [ 217.336424][T13920] Cannot create hsr debugfs directory [ 217.563132][ T1168] hsr_slave_0: left promiscuous mode [ 217.565427][ T1168] hsr_slave_1: left promiscuous mode [ 217.567621][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.571065][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.573827][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.576345][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.589369][ T1168] veth1_macvtap: left promiscuous mode [ 217.591343][ T1168] veth0_macvtap: left promiscuous mode [ 217.593238][ T1168] veth1_vlan: left promiscuous mode [ 217.595034][ T1168] veth0_vlan: left promiscuous mode [ 217.926335][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 217.950834][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 218.207126][ T1168] team0 (unregistering): Port device dummy0 removed [ 218.304886][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 218.304900][ T40] audit: type=1400 audit(1767010850.737:29055): avc: denied { append } for pid=13948 comm="syz.0.2354" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 218.601380][T13920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.607809][T13920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.613880][T13920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.620592][T13920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.684579][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.694408][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.700679][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.703142][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.710394][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.712819][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.836657][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.851899][ T5948] Bluetooth: hci1: command tx timeout [ 218.985011][T13920] veth0_vlan: entered promiscuous mode [ 218.991129][T13920] veth1_vlan: entered promiscuous mode [ 219.005548][T13920] veth0_macvtap: entered promiscuous mode [ 219.010195][T13920] veth1_macvtap: entered promiscuous mode [ 219.019501][T13920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.027906][T13920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.037467][ T1230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.041793][ T1230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.046236][ T1230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.050139][ T1230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.085882][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.091846][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.110691][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.113312][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.279681][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 219.288201][T14018] __nla_validate_parse: 4 callbacks suppressed [ 219.288213][T14018] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2361'. [ 219.294040][T14018] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2361'. [ 219.328219][T14018] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2361'. [ 219.344130][ T40] audit: type=1400 audit(1767010851.719:29056): avc: denied { unmount } for pid=12548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 219.387133][ T40] audit: type=1400 audit(1767010851.756:29057): avc: denied { listen } for pid=14027 comm="syz.3.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.396482][ T40] audit: type=1400 audit(1767010851.756:29058): avc: denied { accept } for pid=14027 comm="syz.3.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.424940][T14034] netlink: 'syz.0.2367': attribute type 29 has an invalid length. [ 219.442270][T14035] netlink: 'syz.0.2367': attribute type 29 has an invalid length. [ 219.446225][T14034] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.508437][T14034] netlink: 'syz.0.2367': attribute type 11 has an invalid length. [ 219.545627][T14046] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 219.552073][T14046] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.556476][T14046] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.561545][T14046] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 219.576341][T14046] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 219.595255][T14046] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.603150][T14046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.811342][ T40] audit: type=1400 audit(1767010852.149:29059): avc: denied { bind } for pid=14087 comm="syz.3.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.067658][ T5948] Bluetooth: hci1: command tx timeout [ 221.204110][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.212294][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.215616][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.221282][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.224629][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.399261][T14187] chnl_net:caif_netlink_parms(): no params data found [ 221.500024][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.502459][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.505044][T14187] bridge_slave_0: entered allmulticast mode [ 221.509540][T14187] bridge_slave_0: entered promiscuous mode [ 221.512988][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.515500][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.517877][T14187] bridge_slave_1: entered allmulticast mode [ 221.520575][T14187] bridge_slave_1: entered promiscuous mode [ 221.580857][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.590288][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.616052][T14187] team0: Port device team_slave_0 added [ 221.619504][T14187] team0: Port device team_slave_1 added [ 221.638464][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.641378][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.655155][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.661761][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.665915][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.676200][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.707430][T14187] hsr_slave_0: entered promiscuous mode [ 221.718629][T14187] hsr_slave_1: entered promiscuous mode [ 221.721199][T14187] debugfs: 'hsr0' already exists in 'hsr' [ 221.723534][T14187] Cannot create hsr debugfs directory [ 221.959424][T14251] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 221.961681][T14251] overlayfs: failed to set xattr on upper [ 221.964032][T14251] overlayfs: ...falling back to redirect_dir=nofollow. [ 221.966941][T14251] overlayfs: ...falling back to index=off. [ 221.969414][T14251] overlayfs: ...falling back to uuid=null. [ 221.984330][ T40] audit: type=1804 audit(4129213694.261:29060): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2463" name="/newroot/41/file0/bus/file0" dev="overlay" ino=61314 res=1 errno=0 [ 222.171742][T14187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.176664][T14187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.187041][T14187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.192742][T14187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.209676][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.212248][T14187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.214854][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.217371][T14187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.246318][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.254743][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.257924][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.267906][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.278190][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.281475][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.294284][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.297283][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.413430][ T6022] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 222.444444][T14187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.473225][T14187] veth0_vlan: entered promiscuous mode [ 222.480232][T14187] veth1_vlan: entered promiscuous mode [ 222.503470][T14187] veth0_macvtap: entered promiscuous mode [ 222.509001][T14187] veth1_macvtap: entered promiscuous mode [ 222.523179][T14187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.531098][T14187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.540129][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.543923][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.547842][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.550788][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.585026][ T6022] usb 11-1: Invalid ep0 maxpacket: 32 [ 222.608860][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.612336][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.641686][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.645267][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.664959][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.724104][ T6022] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 222.790558][ T40] audit: type=1400 audit(4129213695.019:29061): avc: denied { setopt } for pid=14280 comm="syz.0.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 222.819554][T14284] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 222.884108][ T6022] usb 11-1: Invalid ep0 maxpacket: 32 [ 222.886243][ T6022] usb usb11-port1: attempt power cycle [ 223.247729][ T6022] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 223.270189][ T6022] usb 11-1: Invalid ep0 maxpacket: 32 [ 223.290389][ T5948] Bluetooth: hci1: command tx timeout [ 223.376840][ T5948] Bluetooth: hci2: command tx timeout [ 223.408369][ T6022] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 223.430090][ T6022] usb 11-1: Invalid ep0 maxpacket: 32 [ 223.432079][ T6022] usb usb11-port1: unable to enumerate USB device [ 223.963178][T14302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2474'. [ 223.967639][T14302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2474'. [ 224.042611][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 224.047690][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 224.164598][T14318] tun0: tun_chr_ioctl cmd 1074025672 [ 224.167020][T14318] tun0: ignored: set checksum disabled [ 224.526312][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 224.529225][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 224.546359][ T1168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.549484][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.555125][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.559236][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.574638][ T40] audit: type=1400 audit(4129213696.683:29062): avc: denied { listen } for pid=14330 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.673685][T14343] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 224.877890][T14290] Set syz1 is full, maxelem 65536 reached [ 224.896081][ T40] audit: type=1400 audit(4129213696.992:29063): avc: denied { create } for pid=14347 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.902754][ T40] audit: type=1400 audit(4129213696.992:29064): avc: denied { setopt } for pid=14347 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.903507][T14348] x_tables: duplicate underflow at hook 1 [ 224.916413][ T849] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 225.104333][ T849] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 225.114254][ T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.118390][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.122580][ T849] usb 5-1: Product: syz [ 225.124479][ T849] usb 5-1: Manufacturer: syz [ 225.126568][ T849] usb 5-1: SerialNumber: syz [ 225.274897][T14372] sp0: Synchronizing with TNC [ 225.277788][ T40] audit: type=1400 audit(4129213697.337:29065): avc: denied { ioctl } for pid=14371 comm="syz.3.2497" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 225.277994][T14371] [U] [ 225.342349][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.349181][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.350665][ T849] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 225.355842][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.357402][ T849] usb 5-1: USB disconnect, device number 22 [ 225.360711][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.363367][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.429180][T14376] ip6erspan0: entered promiscuous mode [ 225.458403][T14378] 9p filesystem being mounted at /43/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 225.479989][T14378] __nla_validate_parse: 2 callbacks suppressed [ 225.480005][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2499'. [ 225.480174][ T40] audit: type=1804 audit(4129213697.534:29066): pid=14378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2499" name="/newroot/43/file0/file0" dev="9p" ino=71827885 res=1 errno=0 [ 225.500212][T14373] chnl_net:caif_netlink_parms(): no params data found [ 225.526073][ T5949] Bluetooth: hci1: command tx timeout [ 225.597713][ T40] audit: type=1400 audit(4129213697.637:29067): avc: denied { ioctl } for pid=14390 comm="syz.3.2502" path="socket:[64660]" dev="sockfs" ino=64660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.601399][ T5949] Bluetooth: hci2: command tx timeout [ 225.619373][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.622016][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.624425][T14373] bridge_slave_0: entered allmulticast mode [ 225.627186][T14373] bridge_slave_0: entered promiscuous mode [ 225.632091][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.635717][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.640267][T14373] bridge_slave_1: entered allmulticast mode [ 225.643041][T14373] bridge_slave_1: entered promiscuous mode [ 225.665180][T14394] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2502'. [ 225.699277][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.723940][ T8094] syz_tun (unregistering): left allmulticast mode [ 225.732121][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.757042][T14373] team0: Port device team_slave_0 added [ 225.757943][ T40] audit: type=1400 audit(4129213697.786:29068): avc: denied { execute } for pid=14402 comm="syz.6.2505" path="/sys/kernel/debug/sync/info" dev="debugfs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 225.761413][T14373] team0: Port device team_slave_1 added [ 225.809404][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.812452][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.822877][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.824235][ T40] audit: type=1400 audit(4129213697.852:29069): avc: granted { setsecparam } for pid=14406 comm="syz.6.2506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 225.827496][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.835838][ T6021] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 225.838625][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.841402][ T40] audit: type=1400 audit(4129213697.870:29070): avc: granted { setsecparam } for pid=14406 comm="syz.6.2506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 225.857177][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.916795][T14373] hsr_slave_0: entered promiscuous mode [ 225.919182][T14373] hsr_slave_1: entered promiscuous mode [ 225.921491][T14373] debugfs: 'hsr0' already exists in 'hsr' [ 225.923384][T14373] Cannot create hsr debugfs directory [ 225.996248][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 225.999189][ T6021] usb 5-1: config index 0 descriptor too short (expected 301, got 59) [ 226.001829][ T6021] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 226.005744][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.009292][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.011924][ T40] audit: type=1400 audit(4129213698.029:29071): avc: denied { connect } for pid=14414 comm="syz.3.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.013731][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024 [ 226.020397][T14415] sctp: [Deprecated]: syz.3.2510 (pid 14415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.020397][T14415] Use struct sctp_sack_info instead [ 226.032365][ T6021] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 226.036773][ T6021] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.041940][ T6021] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.044891][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.115170][ T5940] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 226.265796][ T6021] usb 5-1: usb_control_msg returned -32 [ 226.268703][ T6021] usbtmc 5-1:16.0: can't read capabilities [ 226.285027][ T5940] usb 11-1: Using ep0 maxpacket: 8 [ 226.292238][ T5940] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 226.302150][ T5940] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 226.309784][ T5940] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.312932][ T5940] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.315659][ T5940] usb 11-1: Product: ఊ [ 226.318110][ T5940] usb 11-1: Manufacturer: 뗂䛣ｪល啺궶扗₥぀네琯㏤쉷휿뵯㽗뉸摌蓎ᜑ㖓∭⪀㳸䡛଻쩀쉺⻭䝦䳨〥桔྆禱ꪐᑳ閐力躡 [ 226.324287][ T5940] usb 11-1: SerialNumber: syz [ 226.348402][ T60] bridge_slave_1: left allmulticast mode [ 226.351894][ T60] bridge_slave_1: left promiscuous mode [ 226.354549][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.359701][ T60] bridge_slave_0: left allmulticast mode [ 226.362248][ T60] bridge_slave_0: left promiscuous mode [ 226.364756][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.471269][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 226.512001][ T60] bond1 (unregistering): (slave erspan1): Releasing active interface [ 226.557146][ T5940] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 226.561779][ T5940] cdc_ncm 11-1:1.0: bind() failure [ 226.566562][ T5940] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 226.568943][ T5940] cdc_ncm 11-1:1.1: bind() failure [ 226.574316][ T5940] usb 11-1: USB disconnect, device number 7 [ 226.591912][ T60] dvmrp6 (unregistering): left allmulticast mode [ 226.646534][T14425] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 226.661210][ T53] usb 5-1: USB disconnect, device number 23 [ 226.751536][T14434] 9p filesystem being mounted at /16/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 226.888189][T14436] 9p: Bad value for 'rfdno' [ 227.127172][T14443] fuse: Invalid rootmode [ 227.173472][ T60] smc: removing net device bond0 with user defined pnetid SYZ2 [ 227.185671][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.191221][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.208906][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 227.214992][ T60] bond0 (unregistering): Released all slaves [ 227.311908][ T60] bond1 (unregistering): Released all slaves [ 227.323092][ T60] bond2 (unregistering): Released all slaves [ 227.422666][ T60] bond3 (unregistering): (slave bond4): Releasing backup interface [ 227.425950][ T60] bond3 (unregistering): Released all slaves [ 227.513768][ T60] bond4 (unregistering): Released all slaves [ 227.570335][ T5949] Bluetooth: hci0: command tx timeout [ 227.600158][ T60] bond5 (unregistering): Released all slaves [ 227.611504][ T60] bond6 (unregistering): Released all slaves [ 227.636480][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2513'. [ 227.722727][ T60] tipc: Disabling bearer [ 227.740331][ T60] tipc: Disabling bearer [ 227.756316][ T60] tipc: Disabling bearer [ 227.771365][ T60] tipc: Left network mode [ 227.836037][ T5949] Bluetooth: hci2: command tx timeout [ 227.862503][T14465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2523'. [ 228.174617][T14373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.220306][T14373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.236514][T14373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.255719][T14373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.263933][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2526'. [ 228.297704][T14488] netlink: 'syz.6.2526': attribute type 29 has an invalid length. [ 228.302110][T14488] netlink: 'syz.6.2526': attribute type 29 has an invalid length. [ 228.306402][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2526'. [ 228.326130][ T60] hsr_slave_0: left promiscuous mode [ 228.350410][ T60] hsr_slave_1: left promiscuous mode [ 228.353595][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.511649][ T60] team0 (unregistering): Port device vlan0 removed [ 228.625769][ T60] team0 (unregistering): Port device team_slave_1 removed [ 228.654992][ T60] team0 (unregistering): Port device team_slave_0 removed [ 228.965037][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.977920][T14373] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.991149][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.993573][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.004445][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.006841][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.195912][T14530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14530 comm=syz.0.2540 [ 229.200335][T14530] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 229.231607][T14530] bond1: (slave bridge1): making interface the new active one [ 229.234452][T14530] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 229.245380][T14531] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 229.353846][T14540] Set syz1 is full, maxelem 65536 reached [ 229.383567][T14373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.394389][ T60] IPVS: stop unused estimator thread 0... [ 229.423987][T14373] veth0_vlan: entered promiscuous mode [ 229.430087][T14373] veth1_vlan: entered promiscuous mode [ 229.454053][T14558] openvswitch: netlink: IPv6 tunnel dst address is zero [ 229.458967][T14373] veth0_macvtap: entered promiscuous mode [ 229.466118][T14373] veth1_macvtap: entered promiscuous mode [ 229.477598][T14373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.497069][T14373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.505689][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.508638][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.520084][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.522962][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.557519][T14568] syzkaller1: entered promiscuous mode [ 229.564229][T14568] syzkaller1: entered allmulticast mode [ 229.569184][T14568] netlink: 'syz.0.2546': attribute type 4 has an invalid length. [ 229.634808][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.638254][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.665427][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.668150][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.682246][T14577] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2550'. [ 229.735935][T14587] 9pnet_virtio: no channels available for device syz [ 229.793050][ T5949] Bluetooth: hci0: command tx timeout [ 230.051101][ T5949] Bluetooth: hci2: command tx timeout [ 230.442094][T14622] binder: 14621:14622 ioctl c0306201 2000000003c0 returned -14 [ 230.745253][T14640] netlink: 'syz.1.2569': attribute type 4 has an invalid length. [ 230.884092][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 230.884108][ T40] audit: type=1400 audit(4129213702.592:29083): avc: denied { watch watch_reads } for pid=14642 comm="syz.1.2570" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 230.999150][T14657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2575'. [ 231.002486][T14657] netlink: 'syz.3.2575': attribute type 7 has an invalid length. [ 231.005174][T14657] netlink: 'syz.3.2575': attribute type 8 has an invalid length. [ 231.007964][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 231.053108][ T40] audit: type=1400 audit(4129213702.742:29084): avc: denied { listen } for pid=14662 comm="syz.3.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 231.086266][ T40] audit: type=1400 audit(4129213702.742:29085): avc: denied { bind } for pid=14662 comm="syz.3.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 231.291773][T14685] netlink: 'syz.6.2585': attribute type 2 has an invalid length. [ 231.359785][T14690] tmpfs: Bad value for 'mpol' [ 231.419204][T14695] netlink: 'syz.1.2590': attribute type 9 has an invalid length. [ 231.440414][ T40] audit: type=1400 audit(4129213703.097:29086): avc: denied { setattr } for pid=14697 comm="syz.6.2591" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 231.506310][T14701] xt_hashlimit: max too large, truncated to 1048576 [ 231.510749][T14701] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 231.522503][ T5940] IPVS: starting estimator thread 0... [ 231.643619][T14706] IPVS: using max 30 ests per chain, 72000 per kthread [ 231.664268][T14730] o2cb: This node has not been configured. [ 231.666665][T14730] o2cb: Cluster check failed. Fix errors before retrying. [ 231.669000][T14730] (syz.1.2598,14730,0):user_dlm_register:674 ERROR: status = -22 [ 231.671537][T14730] (syz.1.2598,14730,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 231.681997][ T40] audit: type=1400 audit(4129213703.312:29087): avc: denied { create } for pid=14729 comm="syz.1.2598" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.750477][ T40] audit: type=1400 audit(4129213703.396:29088): avc: denied { append } for pid=14739 comm="syz.0.2603" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.818654][ T40] audit: type=1400 audit(4129213703.462:29089): avc: denied { ioctl } for pid=14739 comm="syz.0.2603" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.835786][ T40] audit: type=1400 audit(4129213703.462:29090): avc: denied { listen } for pid=14739 comm="syz.0.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.853534][ T40] audit: type=1400 audit(4129213703.480:29091): avc: denied { accept } for pid=14742 comm="syz.3.2605" path="/194/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 232.017688][ T5949] Bluetooth: hci0: command tx timeout [ 232.029168][ T1146] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 232.108240][ T40] audit: type=1400 audit(4129213703.733:29092): avc: denied { read } for pid=14768 comm="syz.6.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.191201][ T1146] usb 6-1: config 1 interface 0 altsetting 40 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 232.195181][ T1146] usb 6-1: config 1 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.200403][ T1146] usb 6-1: config 1 interface 0 has no altsetting 0 [ 232.222425][ T1146] usb 6-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 232.225412][ T1146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.228010][ T1146] usb 6-1: Product: 醒纎 [ 232.229767][ T1146] usb 6-1: Manufacturer:  [ 232.232643][ T1146] usb 6-1: SerialNumber: syz [ 232.236207][T14748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.427116][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2618'. [ 232.431416][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2618'. [ 232.460917][ T1146] usbhid 6-1:1.0: can't add hid device: -71 [ 232.463098][ T1146] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 232.471875][ T1146] usb 6-1: USB disconnect, device number 21 [ 232.535158][ T5949] Bluetooth: hci1: Dropping invalid advertising data [ 232.538057][ T5949] Bluetooth: hci1: Malformed LE Event: 0x02 [ 232.716255][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 232.716674][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 232.720254][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2622'. [ 232.726043][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2622'. [ 233.346993][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 233.392556][T14841] loop6: detected capacity change from 0 to 2640 [ 233.396649][T14841] buffer_io_error: 27 callbacks suppressed [ 233.396662][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.403133][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.406555][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.409770][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.412365][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.415111][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.417793][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.421208][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.423783][T14841] ldm_validate_partition_table(): Disk read failed. [ 233.425913][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.428729][T14841] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.432367][T14841] Dev loop6: unable to read RDB block 0 [ 233.434994][T14841] loop6: unable to read partition table [ 233.437889][T14841] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 233.456859][ T5341] ldm_validate_partition_table(): Disk read failed. [ 233.459467][ T5341] Dev loop6: unable to read RDB block 0 [ 233.462342][ T5341] loop6: unable to read partition table [ 233.614669][ T5341] ldm_validate_partition_table(): Disk read failed. [ 233.617765][ T5341] Dev loop6: unable to read RDB block 0 [ 233.622953][ T5341] loop6: unable to read partition table [ 233.668037][ T5341] ldm_validate_partition_table(): Disk read failed. [ 233.670493][ T5341] Dev loop6: unable to read RDB block 0 [ 233.672437][ T5341] loop6: unable to read partition table [ 233.732593][ T5341] ldm_validate_partition_table(): Disk read failed. [ 233.734985][ T5341] Dev loop6: unable to read RDB block 0 [ 233.736865][ T5341] loop6: unable to read partition table [ 233.777247][ T5341] ldm_validate_partition_table(): Disk read failed. [ 233.779909][ T5341] Dev loop6: unable to read RDB block 0 [ 233.781898][ T5341] loop6: unable to read partition table [ 233.797280][T14861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14861 comm=syz.0.2639 [ 233.958894][T14880] input: syz1 as /devices/virtual/input/input27 [ 233.962412][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 234.017650][T14876] hsr_slave_1 (unregistering): left promiscuous mode [ 234.197581][T14897] bond2: entered promiscuous mode [ 234.206590][T14897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.211213][T14897] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.221484][T14897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.227458][T14897] lo: entered promiscuous mode [ 234.229489][T14897] bond2: (slave lo): Enslaving as a backup interface with an up link [ 234.234102][T14897] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 234.252936][ T5949] Bluetooth: hci0: command tx timeout [ 234.288622][ T5341] ldm_validate_partition_table(): Disk read failed. [ 234.291056][ T5341] Dev loop6: unable to read RDB block 0 [ 234.293164][ T5341] loop6: unable to read partition table [ 234.338863][ T85] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 234.351325][ T85] bond2: (slave lo): link status up again after 0 ms [ 234.353741][ T85] bond2: (slave lo): failed to get link speed/duplex [ 234.466995][ T60] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 234.480355][ T60] bond2: (slave lo): failed to get link speed/duplex [ 234.585603][ T849] hid (null): global environment stack underflow [ 234.587965][ T849] hid (null): invalid report_size 25705 [ 234.589923][ T849] hid (null): global environment stack underflow [ 234.592090][ T849] hid (null): unknown global tag 0xd [ 234.593860][ T849] hid (null): unknown global tag 0xd [ 234.595438][ T85] bond2: (slave lo): failed to get link speed/duplex [ 234.598221][ T849] hid (null): invalid report_size 48760 [ 234.600634][ T849] hid (null): unknown global tag 0xc [ 234.602398][ T849] hid (null): nested delimiters [ 234.611237][ T849] hid-generic 0009:0200:000B.0007: global environment stack underflow [ 234.614008][ T849] hid-generic 0009:0200:000B.0007: item 0 4 1 11 parsing failed [ 234.622067][ T849] hid-generic 0009:0200:000B.0007: probe with driver hid-generic failed with error -22 [ 234.642900][ T61] IPVS: starting estimator thread 0... [ 234.713347][ T6499] bond2: (slave lo): failed to get link speed/duplex [ 234.734261][T14959] IPVS: using max 45 ests per chain, 108000 per kthread [ 234.851879][ T85] bond2: (slave lo): failed to get link speed/duplex [ 234.910090][T14984] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 234.914000][T14984] ref_ctr decrement failed for inode: 0x48a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888034a2c980 [ 234.919925][T14984] uprobe: syz.3.2677:14984 failed to unregister, leaking uprobe [ 234.969684][ T60] bond2: (slave lo): failed to get link speed/duplex [ 235.087796][ T60] bond2: (slave lo): failed to get link speed/duplex [ 235.153049][T15015] netlink: 'syz.1.2688': attribute type 21 has an invalid length. [ 235.157083][T15015] netlink: 'syz.1.2688': attribute type 4 has an invalid length. [ 235.160576][T15015] netlink: 'syz.1.2688': attribute type 5 has an invalid length. [ 235.165440][T15015] netlink: 'syz.1.2688': attribute type 21 has an invalid length. [ 235.169199][T15015] netlink: 'syz.1.2688': attribute type 4 has an invalid length. [ 235.173824][T15015] netlink: 'syz.1.2688': attribute type 5 has an invalid length. [ 235.176978][T15015] netlink: 'syz.1.2688': attribute type 21 has an invalid length. [ 235.179577][T15015] netlink: 'syz.1.2688': attribute type 4 has an invalid length. [ 235.182100][T15015] netlink: 'syz.1.2688': attribute type 5 has an invalid length. [ 235.185627][T15015] netlink: 'syz.1.2688': attribute type 21 has an invalid length. [ 235.206386][ T1144] bond2: (slave lo): failed to get link speed/duplex [ 235.272518][T15031] MPI: mpi too large (16392 bits) [ 235.323457][ T60] bond2: (slave lo): failed to get link speed/duplex [ 235.453832][ T1144] bond2: (slave lo): failed to get link speed/duplex [ 235.469091][T15041] gretap0: entered allmulticast mode [ 235.472143][T15041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.570010][ T85] bond2: (slave lo): failed to get link speed/duplex [ 235.687727][ T60] bond2: (slave lo): failed to get link speed/duplex [ 236.078611][ T85] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.082733][ T85] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.086847][ T85] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.089661][ T85] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.264978][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 236.264995][ T40] audit: type=1400 audit(4129213707.613:29097): avc: denied { connect } for pid=15091 comm="syz.6.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.353590][T15103] vxlan0: entered promiscuous mode [ 236.355716][T15103] vxlan0: entered allmulticast mode [ 236.358515][ T6499] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.364122][ T6499] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.369018][ T6499] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.385919][ T6499] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.389950][T15103] usb usb8: usbfs: process 15103 (syz.6.2712) did not claim interface 0 before use [ 236.494337][T15116] 9pnet_virtio: no channels available for device 127.0.0.1 [ 236.515413][T15119] __nla_validate_parse: 139 callbacks suppressed [ 236.515427][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 236.521956][T15116] bridge1: entered allmulticast mode [ 236.561635][ T40] audit: type=1326 audit(4129213707.894:29098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.3.2718" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8a218f7c9 code=0x0 [ 236.724820][T15138] tipc: Started in network mode [ 236.726459][T15138] tipc: Node identity 84e, cluster identity 4711 [ 236.728658][T15138] tipc: Node number set to 2126 [ 236.905721][ T5940] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 237.077961][ T5940] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.080850][ T5940] usb 6-1: config 0 has no interface number 0 [ 237.082975][ T5940] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 237.087312][ T5940] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 237.103336][ T5940] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 237.107215][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.114111][ T5940] usb 6-1: config 0 descriptor?? [ 237.119329][T15132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.125059][ T5940] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 237.150679][ T40] audit: type=1326 audit(4129213708.436:29099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.0.2726" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55b978f7c9 code=0x0 [ 237.206787][T15147] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 237.211681][T15147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2726'. [ 237.279644][ T849] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 237.340640][ T5940] usb 6-1: USB disconnect, device number 22 [ 237.340700][ C3] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 237.472261][ T849] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 237.475503][ T849] usb 11-1: can't read configurations, error -71 [ 237.560584][T15155] No source specified [ 237.596950][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 237.601064][T15157] bridge_slave_1: left promiscuous mode [ 237.603779][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.609438][T15157] bridge_slave_0: left allmulticast mode [ 237.613715][T15157] bridge_slave_0: left promiscuous mode [ 237.616406][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.804634][T15160] pimreg: entered allmulticast mode [ 237.982732][T15166] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2733'. [ 238.175797][T15178] syzkaller1: entered promiscuous mode [ 238.179291][T15178] syzkaller1: entered allmulticast mode [ 238.228634][T15183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.236001][T15183] xt_TCPMSS: Only works on TCP SYN packets [ 238.264917][T15183] bond3: (slave veth3): Enslaving as an active interface with a down link [ 238.276791][T15183] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 238.279644][T15183] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 238.370305][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2743'. [ 238.442258][T15198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=15198 comm=syz.3.2745 [ 238.446314][T15198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=15198 comm=syz.3.2745 [ 238.450201][T15198] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2745'. [ 238.517324][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 238.528960][T15203] btrfs: Unknown parameter 'barrier' [ 238.533406][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 238.541789][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 238.608956][ T849] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 238.677563][T15225] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2753'. [ 238.681414][T15225] NCSI netlink: No device for ifindex 0 [ 238.777239][ T849] usb 11-1: Using ep0 maxpacket: 16 [ 238.798398][ T849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.802291][ T849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.806433][ T849] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.819738][ T849] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 238.822796][ T849] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.828199][ T849] usb 11-1: config 0 descriptor?? [ 238.965754][T15245] rdma_op ffff88803ad9f9f0 conn xmit_rdma 0000000000000000 [ 238.973839][ T40] audit: type=1400 audit(4129213710.138:29100): avc: denied { view } for pid=15246 comm="syz.3.2761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 239.271286][ T849] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 239.273905][ T849] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 239.276471][ T849] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 239.279084][ T849] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 239.285052][ T849] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 239.292009][ T849] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 239.310143][ T849] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 239.317763][ T849] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 239.697157][T15175] comedi comedi3: comedi_config --init_data is deprecated [ 239.764739][ T6024] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 239.769452][ T61] usb 11-1: USB disconnect, device number 9 [ 239.769576][ T6024] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 239.776357][ T6024] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 240.081954][ T1144] net_ratelimit: 38 callbacks suppressed [ 240.081967][ T1144] bond2: (slave lo): failed to get link speed/duplex [ 240.242518][ T6498] bond2: (slave lo): failed to get link speed/duplex [ 240.342389][T15315] ptrace attach of "/syz-executor exec"[12548] was attempted by "/syz-executor exec"[15315] [ 240.425504][ T1168] bond2: (slave lo): failed to get link speed/duplex [ 240.444563][T15323] program syz.3.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.543947][ T1168] bond2: (slave lo): failed to get link speed/duplex [ 240.640969][ T40] audit: type=1400 audit(4129213711.708:29101): avc: denied { write } for pid=15329 comm="syz.6.2785" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 240.683117][ T13] bond2: (slave lo): failed to get link speed/duplex [ 240.728104][ T40] audit: type=1400 audit(4129213711.793:29102): avc: denied { map } for pid=15355 comm="syz.1.2794" path="socket:[69511]" dev="sockfs" ino=69511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.800505][ T13] bond2: (slave lo): failed to get link speed/duplex [ 240.916098][ T40] audit: type=1400 audit(4129213711.952:29103): avc: denied { create } for pid=15364 comm="syz.1.2795" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.920233][ T1168] bond2: (slave lo): failed to get link speed/duplex [ 240.925727][ T40] audit: type=1400 audit(4129213711.952:29104): avc: denied { unlink } for pid=15364 comm="syz.1.2795" name="file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.046534][ T1144] bond2: (slave lo): failed to get link speed/duplex [ 241.173133][ T1168] bond2: (slave lo): failed to get link speed/duplex [ 241.233821][T15387] random: crng reseeded on system resumption [ 241.244389][ T40] audit: type=1400 audit(4129213712.269:29105): avc: denied { ioctl } for pid=15386 comm="syz.1.2801" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.284355][T15390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15390 comm=syz.6.2802 [ 241.311879][ T13] bond2: (slave lo): failed to get link speed/duplex [ 241.475325][T15404] validate_nla: 195 callbacks suppressed [ 241.475336][T15404] netlink: 'syz.6.2807': attribute type 3 has an invalid length. [ 241.479987][T15404] netlink: 'syz.6.2807': attribute type 1 has an invalid length. [ 241.485798][T15404] overlay: ./file0 is not a directory [ 241.503644][T15400] netlink: 'syz.1.2805': attribute type 10 has an invalid length. [ 241.506390][T15400] dummy0: entered promiscuous mode [ 241.525815][T15408] 9p filesystem being mounted at /129/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 241.558338][ T40] audit: type=1400 audit(4129213712.569:29106): avc: denied { rename } for pid=15406 comm="syz.6.2808" name="file1" dev="9p" ino=71827893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.672395][T15422] netlink: 'syz.3.2812': attribute type 7 has an invalid length. [ 241.675847][T15422] netlink: 'syz.3.2812': attribute type 8 has an invalid length. [ 242.229139][T15437] ip6tnl1: entered promiscuous mode [ 242.258045][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 242.258056][ T40] audit: type=1400 audit(4129213713.223:29108): avc: denied { write } for pid=15433 comm="syz.6.2815" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.335215][T15443] overlayfs: failed to resolve 'fsuuid=d269112': -2 [ 242.341970][ T40] audit: type=1400 audit(4129213713.298:29109): avc: denied { execute } for pid=15440 comm="syz.1.2818" path="/62/file0/cgroup.controllers" dev="cgroup2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 242.429036][ T40] audit: type=1400 audit(4129213713.382:29110): avc: denied { listen } for pid=15451 comm="syz.0.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.438680][ T40] audit: type=1400 audit(4129213713.391:29111): avc: denied { ioctl } for pid=15451 comm="syz.0.2821" path="socket:[71019]" dev="sockfs" ino=71019 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.551074][T15459] __nla_validate_parse: 17 callbacks suppressed [ 242.551086][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 242.560952][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.567346][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 242.571122][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 242.575375][T15461] netlink: 'syz.1.2824': attribute type 13 has an invalid length. [ 242.591877][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.639467][T15462] netlink: 183180 bytes leftover after parsing attributes in process `syz.6.2825'. [ 242.701143][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2825'. [ 242.704845][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2825'. [ 242.900550][T15479] Unknown options in mask b7f2 [ 242.962865][ T40] audit: type=1400 audit(4129213713.878:29112): avc: denied { connect } for pid=15486 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.981682][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2832'. [ 243.025003][T15489] ISOFS: Unable to identify CD-ROM format. [ 243.078244][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'. [ 243.097593][T15494] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 243.119683][T15485] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 243.189439][T15505] netlink: 'syz.3.2840': attribute type 13 has an invalid length. [ 243.202661][T15505] gretap0: refused to change device tx_queue_len [ 243.292287][T15510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 243.334814][T15516] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2844'. [ 243.352816][T15518] bridge_slave_0: default FDB implementation only supports local addresses [ 243.503341][T15524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.507034][T15524] IPv6: NLM_F_CREATE should be set when creating new route [ 243.660256][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2849'. [ 243.929213][T15548] Bluetooth: MGMT ver 1.23 [ 244.084752][T15564] vcan0: tx address claim with different name [ 244.088046][ T40] audit: type=1400 audit(4129213714.934:29113): avc: denied { name_bind } for pid=15563 comm="syz.0.2859" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 244.267054][T15583] netlink: 'syz.6.2864': attribute type 7 has an invalid length. [ 244.270551][T15583] netlink: 'syz.6.2864': attribute type 7 has an invalid length. [ 244.304988][T15585] netlink: 'syz.6.2865': attribute type 5 has an invalid length. [ 244.398561][T15589] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 244.404050][T15589] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 244.449612][T15593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15593 comm=syz.6.2868 [ 244.568857][T15593] gretap1: entered promiscuous mode [ 244.699753][T15604] team0 (unregistering): Port device team_slave_0 removed [ 244.710669][T15604] team0 (unregistering): Port device team_slave_1 removed [ 244.928710][T15635] kvm: kvm [15634]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7 [ 244.968323][T15642] bond0: entered promiscuous mode [ 244.972009][T15642] bond_slave_0: entered promiscuous mode [ 244.975116][T15642] bond_slave_1: entered promiscuous mode [ 244.978779][T15642] batadv_slave_0: entered promiscuous mode [ 244.980860][T15642] batadv_slave_0: left promiscuous mode [ 244.982975][T15642] bond0: left promiscuous mode [ 244.984478][T15642] bond_slave_0: left promiscuous mode [ 244.986212][T15642] bond_slave_1: left promiscuous mode [ 245.210995][ T40] audit: type=1400 audit(4129213715.981:29114): avc: denied { bind } for pid=15661 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.537397][ T1230] net_ratelimit: 36 callbacks suppressed [ 245.537410][ T1230] bond2: (slave lo): failed to get link speed/duplex [ 245.665878][ T1230] bond2: (slave lo): failed to get link speed/duplex [ 245.782661][ T6499] bond2: (slave lo): failed to get link speed/duplex [ 245.901780][ T6498] bond2: (slave lo): failed to get link speed/duplex [ 246.013324][T15660] Set syz1 is full, maxelem 65536 reached [ 246.035517][ T60] bond2: (slave lo): failed to get link speed/duplex [ 246.156718][ T6498] bond2: (slave lo): failed to get link speed/duplex [ 246.281075][ T60] bond2: (slave lo): failed to get link speed/duplex [ 246.395136][ T6498] bond2: (slave lo): failed to get link speed/duplex [ 246.529022][ T6021] IPVS: starting estimator thread 0... [ 246.573810][ T6498] bond2: (slave lo): failed to get link speed/duplex [ 246.627663][T15721] IPVS: using max 26 ests per chain, 62400 per kthread [ 246.737068][T15728] sctp: [Deprecated]: syz.1.2911 (pid 15728) Use of int in max_burst socket option deprecated. [ 246.737068][T15728] Use struct sctp_assoc_value instead [ 246.795976][T15728] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 246.847137][T15734] vcan0: tx drop: invalid sa for name 0x0000000400000000 [ 247.209390][T15759] validate_nla: 1 callbacks suppressed [ 247.209406][T15759] netlink: 'syz.0.2920': attribute type 29 has an invalid length. [ 247.298460][ T40] audit: type=1400 audit(4129213717.926:29115): avc: denied { map } for pid=15760 comm="syz.1.2923" path="net:[4026534354]" dev="nsfs" ino=4026534354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.308722][ T40] audit: type=1400 audit(4129213717.926:29116): avc: denied { execute } for pid=15760 comm="syz.1.2923" path="net:[4026534354]" dev="nsfs" ino=4026534354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.392153][T15772] netlink: 'syz.1.2926': attribute type 11 has an invalid length. [ 247.395666][T15772] netlink: 'syz.1.2926': attribute type 7 has an invalid length. [ 247.401281][T15773] netlink: 'syz.1.2926': attribute type 11 has an invalid length. [ 247.404615][T15773] netlink: 'syz.1.2926': attribute type 7 has an invalid length. [ 247.419326][T15774] netlink: 'syz.6.2927': attribute type 1 has an invalid length. [ 247.490432][T15780] trusted_key: encrypted_key: insufficient parameters specified [ 247.626125][ T40] audit: type=1326 audit(4129213718.244:29117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.643948][ T40] audit: type=1326 audit(4129213718.253:29118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.651195][ T40] audit: type=1326 audit(4129213718.253:29119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.667141][ T40] audit: type=1326 audit(4129213718.253:29120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.675477][T15790] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.675987][ T40] audit: type=1326 audit(4129213718.263:29121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.678168][T15790] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 247.685374][ T40] audit: type=1326 audit(4129213718.263:29122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.685401][ T40] audit: type=1326 audit(4129213718.263:29123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.685423][ T40] audit: type=1326 audit(4129213718.263:29124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.1.2934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a578f7c9 code=0x50000 [ 247.879100][T15806] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.072463][T15809] netlink: 'syz.6.2939': attribute type 23 has an invalid length. [ 248.121222][T15809] __nla_validate_parse: 20 callbacks suppressed [ 248.121235][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2939'. [ 248.459098][T15822] vlan0: entered allmulticast mode [ 248.461291][T15822] veth0_vlan: entered allmulticast mode [ 248.475191][T15824] random: crng reseeded on system resumption [ 248.483708][T15824] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2944'. [ 248.513339][T15826] overlayfs: failed to clone lowerpath [ 248.606535][T15831] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 248.645669][T15841] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2949'. [ 248.649298][T15841] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.651871][T15841] IPv6: Can't replace route, no match found [ 249.085171][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2953'. [ 249.238982][T15875] netlink: 'syz.6.2958': attribute type 6 has an invalid length. [ 249.242158][T15875] netlink: 'syz.6.2958': attribute type 6 has an invalid length. [ 249.279161][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2959'. [ 249.290440][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2959'. [ 249.344923][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2957'. [ 249.464472][T15896] tmpfs: Unknown parameter 'grpxuota "Vv"Z'kfJվ?zfg)m S af/[#B&QN|>~' [ 249.809794][T15923] : renamed from vlan0 (while UP) [ 249.910727][ T10] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 250.083322][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.087148][ T10] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.093092][ T10] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 250.096011][ T10] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 250.098704][ T10] usb 11-1: Product: syz [ 250.100082][ T10] usb 11-1: Manufacturer: syz [ 250.101575][ T10] usb 11-1: SerialNumber: syz [ 250.110561][ T10] input: appletouch as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input31 [ 250.390170][ T6024] usb 11-1: USB disconnect, device number 10 [ 250.403375][ T6024] appletouch 11-1:1.0: input: appletouch disconnected [ 250.667692][T15931] bond4: Removing last arp target with arp_interval on [ 250.758293][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.823749][T15936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2975'. [ 250.935499][T15945] net_ratelimit: 36 callbacks suppressed [ 250.935512][T15945] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 250.980763][ T60] bond2: (slave lo): failed to get link speed/duplex [ 251.030259][T15952] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2982'. [ 251.108763][ T85] bond2: (slave lo): failed to get link speed/duplex [ 251.237802][ T6499] bond2: (slave lo): failed to get link speed/duplex [ 251.305029][T15973] syz.6.2989 uses old SIOCAX25GETINFO [ 251.355161][ T1230] bond2: (slave lo): failed to get link speed/duplex [ 251.451733][T15985] ------------[ cut here ]------------ [ 251.454052][T15985] WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x309/0x2430, CPU#0: syz.3.2993/15985 [ 251.458543][T15985] Modules linked in: [ 251.460312][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.3.2993 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.464642][T15985] Tainted: [L]=SOFTLOCKUP [ 251.466564][T15985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.470988][T15985] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 251.473910][T15985] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d f9 4a 56 0e 00 75 0b c6 05 f0 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 251.475700][ T85] bond2: (slave lo): failed to get link speed/duplex [ 251.481630][T15985] RSP: 0018:ffffc9000dadf7b8 EFLAGS: 00010246 [ 251.487174][T15985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 251.489989][T15985] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 251.493029][T15985] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 251.496210][T15985] R10: 0000000000000016 R11: ffff888033088b30 R12: 0000000000040cc0 [ 251.499070][T15985] R13: 1ffff92001b5bf0d R14: ffffffff9ac42ac4 R15: 0000000000000016 [ 251.502445][T15985] FS: 00007fe8a2fd66c0(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 251.506467][T15985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.509213][T15985] CR2: 00007fe8a2173460 CR3: 000000004eeaf000 CR4: 0000000000352ef0 [ 251.512507][T15985] Call Trace: [ 251.513964][T15985] [ 251.515348][T15985] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 251.517885][T15985] ? is_bpf_text_address+0x94/0x1a0 [ 251.520085][T15985] ? kernel_text_address+0x8d/0x100 [ 251.522243][T15985] ? __kernel_text_address+0xd/0x40 [ 251.524420][T15985] ? unwind_get_return_address+0x59/0xa0 [ 251.526889][T15985] ? arch_stack_walk+0xa6/0x100 [ 251.528933][T15985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.531576][T15985] ? stack_trace_save+0x8e/0xc0 [ 251.533673][T15985] ? stack_depot_save_flags+0x29/0x9b0 [ 251.535949][T15985] ? __lock_acquire+0x436/0x2890 [ 251.537994][T15985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.540283][T15985] ? policy_nodemask+0xea/0x4e0 [ 251.542212][T15985] alloc_pages_mpol+0x1fb/0x550 [ 251.543808][T15985] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.546050][T15985] ___kmalloc_large_node+0x10c/0x150 [ 251.548023][T15985] __kmalloc_large_node_noprof+0x1c/0x70 [ 251.550116][T15985] ? avc_has_extended_perms+0x47c/0x1090 [ 251.552462][T15985] __kmalloc_noprof.cold+0xc/0x62 [ 251.554105][T15985] ? drm_syncobj_array_find+0x35/0x3c0 [ 251.556328][T15985] ? drm_syncobj_array_find+0x35/0x3c0 [ 251.558612][T15985] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.560505][T15985] drm_syncobj_array_find+0x35/0x3c0 [ 251.562684][T15985] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 251.565206][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.567580][T15985] ? find_held_lock+0x2b/0x80 [ 251.569869][T15985] ? drm_dev_exit+0x41/0x60 [ 251.571839][T15985] drm_ioctl_kernel+0x1f4/0x3e0 [ 251.573984][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.576426][T15985] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 251.578523][T15985] drm_ioctl+0x5c9/0xc30 [ 251.580258][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.583048][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 251.584912][T15985] ? selinux_file_ioctl+0x180/0x270 [ 251.586927][T15985] ? selinux_file_ioctl+0xb4/0x270 [ 251.589272][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 251.591347][T15985] __x64_sys_ioctl+0x18e/0x210 [ 251.593472][T15985] do_syscall_64+0xcd/0xf80 [ 251.595562][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.597951][T15985] RIP: 0033:0x7fe8a218f7c9 [ 251.599398][T15985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.607366][T15985] RSP: 002b:00007fe8a2fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.610764][T15985] RAX: ffffffffffffffda RBX: 00007fe8a23e5fa0 RCX: 00007fe8a218f7c9 [ 251.613620][T15985] RDX: 0000200000000000 RSI: 00000000c03064ca RDI: 0000000000000005 [ 251.616865][T15985] RBP: 00007fe8a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.619728][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.622065][ T1144] bond2: (slave lo): failed to get link speed/duplex [ 251.623157][T15985] R13: 00007fe8a23e6038 R14: 00007fe8a23e5fa0 R15: 00007ffec2d43898 [ 251.628448][T15985] [ 251.629699][T15985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.632604][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.3.2993 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.636662][T15985] Tainted: [L]=SOFTLOCKUP [ 251.638459][T15985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.642758][T15985] Call Trace: [ 251.644160][T15985] [ 251.645387][T15985] dump_stack_lvl+0x3d/0x1f0 [ 251.647479][T15985] vpanic+0x640/0x6f0 [ 251.649072][T15985] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 251.651487][T15985] panic+0xca/0xd0 [ 251.653073][T15985] ? __pfx_panic+0x10/0x10 [ 251.654975][T15985] ? check_panic_on_warn+0x1f/0xb0 [ 251.657218][T15985] check_panic_on_warn+0xab/0xb0 [ 251.659349][T15985] __warn+0x108/0x3c0 [ 251.661024][T15985] __report_bug+0x2a0/0x520 [ 251.662954][T15985] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 251.665140][T15985] ? __pfx___report_bug+0x10/0x10 [ 251.667243][T15985] ? __lock_acquire+0x436/0x2890 [ 251.669435][T15985] ? irqentry_exit+0x1dd/0x8c0 [ 251.671509][T15985] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 251.674061][T15985] report_bug+0xb2/0x220 [ 251.675883][T15985] ? __alloc_frozen_pages_noprof+0x309/0x2430 [ 251.678568][T15985] handle_bug+0x127/0x260 [ 251.680401][T15985] exc_invalid_op+0x17/0x50 [ 251.682342][T15985] asm_exc_invalid_op+0x1a/0x20 [ 251.683993][T15985] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2430 [ 251.686138][T15985] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d f9 4a 56 0e 00 75 0b c6 05 f0 4a 56 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 251.692315][T15985] RSP: 0018:ffffc9000dadf7b8 EFLAGS: 00010246 [ 251.694377][T15985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 251.696956][T15985] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 251.699557][T15985] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 251.702115][T15985] R10: 0000000000000016 R11: ffff888033088b30 R12: 0000000000040cc0 [ 251.704778][T15985] R13: 1ffff92001b5bf0d R14: ffffffff9ac42ac4 R15: 0000000000000016 [ 251.707359][T15985] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 251.709411][T15985] ? is_bpf_text_address+0x94/0x1a0 [ 251.711150][T15985] ? kernel_text_address+0x8d/0x100 [ 251.712895][T15985] ? __kernel_text_address+0xd/0x40 [ 251.714648][T15985] ? unwind_get_return_address+0x59/0xa0 [ 251.716518][T15985] ? arch_stack_walk+0xa6/0x100 [ 251.718175][T15985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.720254][T15985] ? stack_trace_save+0x8e/0xc0 [ 251.721829][T15985] ? stack_depot_save_flags+0x29/0x9b0 [ 251.723619][T15985] ? __lock_acquire+0x436/0x2890 [ 251.725312][T15985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.727287][T15985] ? policy_nodemask+0xea/0x4e0 [ 251.728925][T15985] alloc_pages_mpol+0x1fb/0x550 [ 251.730546][T15985] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.732383][T15985] ___kmalloc_large_node+0x10c/0x150 [ 251.734479][T15985] __kmalloc_large_node_noprof+0x1c/0x70 [ 251.736349][T15985] ? avc_has_extended_perms+0x47c/0x1090 [ 251.738214][T15985] __kmalloc_noprof.cold+0xc/0x62 [ 251.739900][T15985] ? drm_syncobj_array_find+0x35/0x3c0 [ 251.741666][T15985] ? drm_syncobj_array_find+0x35/0x3c0 [ 251.743491][T15985] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.745279][T15985] drm_syncobj_array_find+0x35/0x3c0 [ 251.747044][T15985] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 251.749079][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.751277][T15985] ? find_held_lock+0x2b/0x80 [ 251.752838][T15985] ? drm_dev_exit+0x41/0x60 [ 251.754410][T15985] drm_ioctl_kernel+0x1f4/0x3e0 [ 251.756041][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.758273][T15985] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 251.760074][T15985] drm_ioctl+0x5c9/0xc30 [ 251.761497][T15985] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 251.763704][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 251.765331][T15985] ? selinux_file_ioctl+0x180/0x270 [ 251.767075][T15985] ? selinux_file_ioctl+0xb4/0x270 [ 251.768797][T15985] ? __pfx_drm_ioctl+0x10/0x10 [ 251.770408][T15985] __x64_sys_ioctl+0x18e/0x210 [ 251.772003][T15985] do_syscall_64+0xcd/0xf80 [ 251.773534][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.775500][T15985] RIP: 0033:0x7fe8a218f7c9 [ 251.776966][T15985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.783143][T15985] RSP: 002b:00007fe8a2fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.785890][T15985] RAX: ffffffffffffffda RBX: 00007fe8a23e5fa0 RCX: 00007fe8a218f7c9 [ 251.788473][T15985] RDX: 0000200000000000 RSI: 00000000c03064ca RDI: 0000000000000005 [ 251.791040][T15985] RBP: 00007fe8a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.793578][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.796255][T15985] R13: 00007fe8a23e6038 R14: 00007fe8a23e5fa0 R15: 00007ffec2d43898 [ 251.798824][T15985] [ 251.800710][T15985] Kernel Offset: disabled [ 251.802175][T15985] Rebooting in 86400 seconds..