last executing test programs: 6m3.843562278s ago: executing program 32 (id=54): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfd, 0x200180) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0xe8a, [[0x3, 0xffffff90, 0x12000000, 0x7, 0xfffffff9, 0x5, 0x100, 0x3], [0x10, 0x9, 0x7, 0x7, 0x2, 0xe0, 0x8001, 0xed8], [0x2, 0x3, 0x0, 0x0, 0x8, 0xfffffffa, 0x4, 0x8]], '\x00', [{0x4, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x5a1, 0x2, 0x1, 0x0, 0x0, 0x1}, {0xc0000000, 0x9, 0x1}, {0x66, 0x2d, 0x0, 0x1, 0x1}, {0x5, 0x80, 0x1, 0x0, 0x1}, {0x80, 0x100, 0x1, 0x0, 0x0, 0x1}, {0xc, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8f, 0x4, 0x1, 0x1}, {0x0, 0x81, 0x0, 0x1, 0x0, 0x1}, {0x80000000, 0x1, 0x1, 0x1, 0x1, 0x1}, {0xe0000000, 0x375, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0x1, 0x1, 0x0, 0x0, 0x1}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x180000, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000340), 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r1, 0xc0106440, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)}) bind$netrom(r1, &(0x7f0000000400)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}}, 0x90) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000005c0)={[0x2, 0xd, 0xd, 0x6, 0x1, 0x6, 0x5, 0x7, 0x5422, 0x1, 0x9, 0x0, 0x0, 0x7ff, 0x1, 0xc], 0x2, 0x2000}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000680)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001680)={r3, 0x8}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002680)={'lo\x00', 0x200}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000002700)={0x16, 0x98, 0xfa00, {&(0x7f00000026c0), 0x3, r2, 0x10, 0x1, @in6={0xa, 0x4e23, 0x8, @loopback, 0x1}}}, 0xa0) listen(r1, 0x400) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000027c0), 0x68641, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002800)={"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"}) read(r1, &(0x7f0000002c00)=""/218, 0xda) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) io_uring_enter(r1, 0x60dc, 0xe3c2, 0x8, &(0x7f0000002d00)={[0x4]}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000002d40)={0x1, r1, 0x1}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f0000002d80)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000002dc0)={0x1, 0x1, r6}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000002e00)) sync() ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002e40)={r1, 0xa, 0x0, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000031c0)={r7, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000002f80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003000), &(0x7f0000003040), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000003080)}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000003200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfd78}, r2}}, 0x30) fgetxattr(r5, &(0x7f0000003240)=@random={'security.', '/dev/snd/pcmC#D#p\x00'}, &(0x7f0000003280)=""/14, 0xe) 5m58.843040929s ago: executing program 0 (id=247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, 0x140f, 0x1, 0x70bd27, 0x4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x4004044) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x440b0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x703}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x2, 0x2}, 0x90) 5m58.664256699s ago: executing program 0 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x81, 0x10000) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="11400200000000001c0012800b00010067656e65766500000c000280ed000d0009100000"], 0x3c}}, 0x0) 5m58.662573417s ago: executing program 0 (id=249): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5m58.593851666s ago: executing program 0 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x100, 0xc00, 0x0, 0x392}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x200a40, 0x16c, 0x23}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3e58, 0x21, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) 5m58.593054837s ago: executing program 0 (id=251): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r3, 0x0, 0x8, 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x6a, 0x0, &(0x7f0000000100)="d69a47fe2954ad079651a2aa889ab04c11c656711c075ae40df4dbf3d26efd2a911ec21cff5febfd8465af9dfbe1f21e91a5a2fb2f43d4b5864055fe7ac57bd647e9411438f8617c643e6e6ad45d485ca177c9bd62ab0cbdd41bdec19f92cc3f2175d33e0e955d86e81b"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xb3) 5m58.493275201s ago: executing program 0 (id=252): statx(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2d, 0xfff, 0x20200228, 0x7ff, 0x9000, 0x43bd, 0xfffffff8, 0x0, 0x0, 0x208c777ddc8c23f0, 0x6d9a}}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbb9366f942d32d81004e00884864d2383a00102100fe8000000000000000000000000000aafe800000000000000000000000832708a8244e22048190780e30e461051b22d9"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="300000002000010300000008fedbdf2502000000030000040000000008041000090000000c00eeb685f5f9f8525c7fff0f9727693d10c379fbbd4d7448f613f68ab503922e012c2fab703e39c0f2a65ead86776b3aeded525d5b2086ada661703996d6612314fed262f5858e2030d5a872a9089311796db097239dcffc94a5cefc8fdcdee2929364f515cd6a1d512c1cdc4fd17a"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000001, 0x484800) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 5m44.247466696s ago: executing program 33 (id=228): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000a80)={0x6, 0x7, 0x6, 0x2005fe7, 0x5, 0x904, 0x0, 0x34}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x4db5, 0x80801) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x7, 0x2, r5}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000095"]) 5m43.744088132s ago: executing program 3 (id=350): r0 = socket$rxrpc(0x21, 0x2, 0x2) fsetxattr$security_selinux(r0, &(0x7f00000001c0), &(0x7f0000000040)='system_u:object_r:crypt_device_t:s0\x00', 0x11, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xb3) close(r3) 5m43.653556942s ago: executing program 3 (id=351): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x0, [], [0x0, 0x0, 0x33f1], [0x8, 0x0, 0x7d], [0x0, 0x0, 0x800000000001]}) 5m43.504180555s ago: executing program 3 (id=353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 5m43.491706486s ago: executing program 34 (id=252): statx(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2d, 0xfff, 0x20200228, 0x7ff, 0x9000, 0x43bd, 0xfffffff8, 0x0, 0x0, 0x208c777ddc8c23f0, 0x6d9a}}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbb9366f942d32d81004e00884864d2383a00102100fe8000000000000000000000000000aafe800000000000000000000000832708a8244e22048190780e30e461051b22d9"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="300000002000010300000008fedbdf2502000000030000040000000008041000090000000c00eeb685f5f9f8525c7fff0f9727693d10c379fbbd4d7448f613f68ab503922e012c2fab703e39c0f2a65ead86776b3aeded525d5b2086ada661703996d6612314fed262f5858e2030d5a872a9089311796db097239dcffc94a5cefc8fdcdee2929364f515cd6a1d512c1cdc4fd17a"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x8000000000000001, 0x484800) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 5m43.129028321s ago: executing program 3 (id=357): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2000000, 0x0, 0x0, 0x0, 0x465a4540, 0x1}}) 5m43.127734111s ago: executing program 3 (id=358): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/106, 0x6a}]}, 0x41) 5m42.903191081s ago: executing program 3 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') read$FUSE(r1, &(0x7f000000a240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0) (async) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) (async, rerun: 64) r3 = syz_pidfd_open(r2, 0x0) (rerun: 64) waitid$P_PIDFD(0x3, r3, &(0x7f0000000280), 0x4, &(0x7f0000000340)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x48}}, 0xa) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c00fe8008001080040013800c000300000000000000000079d4071a6e1a3da1de79359762c0542155b11a795ff0e1dbf30418d9e3fa55673abae70175c90ed3e73aa16c7b79a370453e1b9847ba72a846bb32f037d787091986ef08310cf49c6fca10a64d7700dc8d7232477472740c2c59ddf65d2c11c3a5ce5b0e474bdda997310220a00f36f66e1b1e3ebda57fb219bdd76180ddcaab0ac45ed1778492b14b"], 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x4008094) read$qrtrtun(r1, &(0x7f0000000040)=""/47, 0x2f) 5m27.421205414s ago: executing program 35 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') read$FUSE(r1, &(0x7f000000a240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0) (async) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) (async, rerun: 64) r3 = syz_pidfd_open(r2, 0x0) (rerun: 64) waitid$P_PIDFD(0x3, r3, &(0x7f0000000280), 0x4, &(0x7f0000000340)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x48}}, 0xa) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c00fe8008001080040013800c000300000000000000000079d4071a6e1a3da1de79359762c0542155b11a795ff0e1dbf30418d9e3fa55673abae70175c90ed3e73aa16c7b79a370453e1b9847ba72a846bb32f037d787091986ef08310cf49c6fca10a64d7700dc8d7232477472740c2c59ddf65d2c11c3a5ce5b0e474bdda997310220a00f36f66e1b1e3ebda57fb219bdd76180ddcaab0ac45ed1778492b14b"], 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x4008094) read$qrtrtun(r1, &(0x7f0000000040)=""/47, 0x2f) 4m27.543751026s ago: executing program 5 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0xd10c390197e9f1db) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x14, 0x18, 0x1, 0x8ba, 0x25dfdbfd, {0x1d, 0x1, 0x1}}, 0x14}}, 0x880) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x501200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) (rerun: 64) 4m27.543057113s ago: executing program 5 (id=934): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) 4m27.470160055s ago: executing program 5 (id=936): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) landlock_restrict_self(r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r1, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/87, 0x57}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=r2, 0x4) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x21, '\x00', @buffer={"f587bd5ad5df34e51501eaeaf1f7a1416c68c33ca58c3362f1bb3a7b8959ed24", 0x20}, 0x401}, {0x46, '\x00', @data=0x2, 0x8}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000080)=0x99c7, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0xa, 0x90}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m27.469682117s ago: executing program 5 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) (async, rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) (rerun: 64) preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) (async) clock_getres(0x17, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)='virtiofs\x00', 0x200000, 0x0) 4m27.382933865s ago: executing program 5 (id=938): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4004, 0xfffffffd}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004200010a"], 0x18}}, 0x890) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f00000000c0)={0x2, 0x200, 0xfffffffe}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="58010000100001000000000000000000fc0100000000000000000000000000000600b7d351fd6b417c099b000000000000000000000006000000000800000000925bc1ea0fcdc6e64b8139550c572475d3955fdb73624af9219230d469fcd4b8c0e2ebd7fb2d4bcdd5f1dc8d325846e72dccefe7167c734dc17c3cdd19fc653edd833c0ef929a9941915c271a38c3637372d4b0e935decb1cbf55e9c430a02ff3937408660e8f0118ee6879f689156cf70b6eba991615bb3ece89be291cabe3b1ab6d46f68b36bb4b2d4f5679d6c7420c7862565", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000003000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/272], 0x158}}, 0x0) 4m27.123647533s ago: executing program 5 (id=943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) read(r1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x46080, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000000c0)=0x3) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r4, 0x0) getgroups(0x27, &(0x7f0000002540)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 4m27.08126623s ago: executing program 36 (id=943): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) read(r1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x46080, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000000c0)=0x3) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r4, 0x0) getgroups(0x27, &(0x7f0000002540)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 4m4.868500843s ago: executing program 8 (id=1272): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x1) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VHOST_GET_FEATURES(r1, 0x4008af25, &(0x7f0000000040)) 4m4.753018007s ago: executing program 8 (id=1277): r0 = socket$inet6(0xa, 0x802, 0x200000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x20c42) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000005c0)={0x1, "1898000100010000000000767c2a971d92c8aa5600000000000100", 0x2, 0x2, 0x3, 0xb700, 0x410, 0x2}) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$inet6(0xa, 0x1, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000500)="362ada95492a31d273d7ca991bc02266778a9492efecc82780d0a61e291aaef96e6dbddb399057229c9e83c195d2fa69c569c8e50dd7885842c68f51dc1e9eedf9218a0652df63c7acd97b718dab56924e9e5ad5295e5f4759c0b38d9109c5d88a5f1b54ecde16040a3ac90a7a5268006ac158c02aac7c4871772bb8a6fa23bc4faf4cb1228e42525ca47b9cb99782b73c8deb7028d306", 0x97) r2 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xe, @empty, 0x8000}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000017c0)="2c8b039ebe5699eda53bf321c80f74b42cc1ddb475985cad11dcb95c61623d9097c4d7583c8810da6da802870f6e1d01c78e3f4a126c143bb33341d70f226e9dd4316a514f8b7d1853720383c72b67730e237d55402023a96d7dff0248e4ee192cd859f1be4a8604617e7ff18274c1e75d5f0717155898f9f98bdc2c636268b42f34457355834a232f379139029f5a1d9f00e1f47202a09000b267b8e23a723c82e6c03de6690aa040cb2c89edca44b6b4cf3fb605da2492761ac79202b9aea73dbb0d0aae28d157db1b230b73b7bbebf6c044102f466552a5059b98085532c7ff9ad182b6c9d384a390293fd1967c4aab4556d24da4c7", 0xf7}, {&(0x7f0000000200)="b377e4da2a6cc97a554bc8dce133c6cc1311d1e07710b1d5464e3d16d28b96554f59f5a7761ff144375b477db60cb8883df6e25af1879f1e7308b69a66e0f5679b0f3a271f8347489c98c1f64e6269325755f4204de6d8d561cd8c17a884c81c0efd02557f638cc5ac20cce32b808f76b50c74eb826525f138c5b286352a18112b960cc3d3332a71cadb0cfb2585b2c8fa5ea623b3c9b3dde6963f3f036719", 0x9f}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="d6d035d603ad7bb5b4b57a371e5a94986ddeb7048f986a90c3249e94b8a472e646d01ee14a43e71896131d124003", 0x2e}, {&(0x7f0000000340)="3971f3a9003499d7665d503e3a71e13a80345754fbedcfae", 0x18}, {&(0x7f0000000380)="35b8e27c96a9760f2f871c2bfef63a95a0c63c01438fc48060510a1d23cc3456ce510712a3201ade6535cd73176a934a90908c6b7d06f394b45cb24b63ce0a1500ee5a0d0ecd64634c14dca7da178e1fdf67567e3bcafac4935c9fd173cd01e0e2a48faab499680644ad9e3ae424f05ede941f177a71dc741f2325054dbfbc3ed70c760aac246a7a21b928903c5c48d3166eb17b1929fc4a744dc361a2d21a993b0429c59ac269bbdd482137d8b8f3a00a8015", 0xb3}, {&(0x7f0000000640)="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", 0xfa}, {&(0x7f0000000740)="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", 0x1000}], 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="2800000000000000290000003600000000010000000000000101000100010000000000000000000000c204000000000014000000000000002900000008000000040000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r7, @ANYBLOB="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"], 0x260}}], 0x1, 0x0) 4m4.593276676s ago: executing program 8 (id=1278): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x2, 0x4, 0x1, 0xcc7, 0x8, 0x7, 0x4, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10000, 0xfffffff4]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) socket$igmp6(0xa, 0x3, 0x2) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) setreuid(0xee00, 0xee00) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00aaaee58ad0a45b8a73b3a440db12800b0001006d616373656300004c000280050003004c00000005000800090000000500060005000000050003000700000005000300000000000c000400060000000000000005000800061fc2d92f24c65e0b00000000100000"], 0x7c}}, 0x0) r3 = fsmount(r1, 0x0, 0x8e) openat(r3, &(0x7f0000000440)='./file1\x00', 0x101042, 0x160) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x418, 0xffffffff, 0xffffffff, 0x418, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x67}, 0x0, 0x128, 0x190, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x100, 0x4, 0x637, 'syz0\x00', 'syz0\x00', {0x100000000}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x548) 4m4.592487525s ago: executing program 8 (id=1280): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m4.495040364s ago: executing program 8 (id=1285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0xfffa, {0x6, 0x1}, {0x17, 0x2}, @rumble={0x81, 0xd}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f020}) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/243, 0xf3}], 0x1, &(0x7f0000000280)=""/11, 0xb}, 0x1}, {{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000007cc0)=""/122, 0x7a}], 0x1}, 0x9}], 0x2, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0x0) (async) close(r3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000200)={0xdae8, 0x40c}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m4.191097021s ago: executing program 8 (id=1289): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r4, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x400000000000, 0x1}}, 0x40) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x0, 0x7fff3ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x13, 0xa, 0x201, 0x70bd2a, 0x25dfdbff, {0x1}, [@generic="26ecead64a21b7b3f87a60e678deb4fc656eb94a6259c23fefb4e76b039d12ffec"]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x0) (async) flock(r7, 0x0) 4m4.098102477s ago: executing program 37 (id=1289): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r4, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x400000000000, 0x1}}, 0x40) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x0, 0x7fff3ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x13, 0xa, 0x201, 0x70bd2a, 0x25dfdbff, {0x1}, [@generic="26ecead64a21b7b3f87a60e678deb4fc656eb94a6259c23fefb4e76b039d12ffec"]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x0) (async) flock(r7, 0x0) 2m47.06330208s ago: executing program 7 (id=2100): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0xffffffffffffffc0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x11) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176673d72656c61746901653a38302d3919"]) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000000c0)={@local}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2m46.912985447s ago: executing program 7 (id=2103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async, rerun: 32) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x20, 0x117, 0x2, 0x8, "36a31a42d8a5a0ec"}], 0x20}], 0x1, 0x40800) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x1, 0x2, 0x6}, 0x20) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) ioctl(r4, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (rerun: 32) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "9b106c0961c0d3b19bdf8061318e8f6aa126be7295d43deebf76112c588da278f7b10e5faeba79301b362047b4361c77652a537868fde5f8fd4394c9ffbd9adb"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffe000/0x1000)=nil, 0x5000) (async) shmctl$IPC_RMID(r6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x8000000, 0x10) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) (async) r7 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r7, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x440649714b33c6a8, 0x0) (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') (rerun: 64) 2m46.863557116s ago: executing program 7 (id=2104): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfffffffffffffffd, 0x424a00) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) 2m46.862393715s ago: executing program 7 (id=2106): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') 2m46.780924577s ago: executing program 7 (id=2108): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, r4, 0x68a7, 0x28, 0x7, 0x6, {0x9, 0xf, 0x1, 0x7, 0x5, 0x9, 0x6, 0x0, 0xfff0, 0x8, 0xb96, 0x7fffffff, 0x8, 0xffff, "bf09a95248845b2693f010a073ec7e5595288b19d4c1c94c84aace0fa146930e"}}) 2m46.511419003s ago: executing program 7 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000100)=0xca) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x10}, &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m46.438346961s ago: executing program 38 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000100)=0xca) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x10}, &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m38.893175038s ago: executing program 6 (id=2203): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004011, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) 2m35.85172074s ago: executing program 6 (id=2224): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x8001, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x5, 0x9}}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x202, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x3, 0x800000, 0xfffffff3, 0x5, 0x2000983e, 0x1, 0x3, 0x2}}, 0x9}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x8001, 0x46, 0x1, 0x0, 0x1, 0xcc7, 0x8, 0x7, 0x100a, 0x100, 0x1002, 0x8, 0xb, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x8, 0x4, 0xfffe, 0xfffffff8]}) 2m35.762941577s ago: executing program 6 (id=2225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xfffffffc, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffdfff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200030000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m32.712920167s ago: executing program 6 (id=2251): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r0, &(0x7f00000042c0)=[{&(0x7f00000001c0)="f9eebeeb7c074ecc0e01edc9ffd60ab6503b7290ba98f4050a85a105d68645ca53c35b6b0502e156babd9f3bad825a0a3e8d83ba21355af92a432c2d1ccbf9eb", 0x40}, {&(0x7f0000000200)="75bf0108fcc9ea7ddeedbfc83f3fed5cc25a8584df41190e4ed8c6b1363ef489f423651ed7ca73cc919b28855c89f1b92a00bf3569ba3c90fb5319bfb51854ec894bad716ce9f3cdf8b4bb8eda2223202b53bb2ae9c65e525e0a2027805bcd59b661d322bac2595e00e88eb2d0ac94861da755c7", 0x74}, {&(0x7f0000000bc0)="cb0db2573bffa1f7593fb4d9d9f9791999da89b352061d2725582b203de001af03fbdc4c143b311465290dc8fb71982c9b8f604033113591d87470fbab6cb953273b2348822b589219aae01926ed89bd9885746792b125172abc07223614becce06f8c648d01d99bda5949db07412bcd9b7029eedd173c97e63b0aa6b153287468dbb44ebf39bb1f08f433396f88a9995ede32dda8e0b50f1a819edf87ccb49f6e722cbac849b60e6c9d639e08c1c3a2b96c785196f932bdae6207f321e770e0c0644e3781f906833dcb6e14569309c69d49bcddfcd4fc0465c589c545e774c7e20c03a6c97ace61f7e048f0cb26c23dff8649b4160dcead6899a4b3762782a4c25a0963ad75bbeee23edbea9ceb9d8d7704ac3420004afd81890aba1fdce7ea0d8f4212eeeff43c2b550e99af5e7a0415cc80a6426429d990dc4e26680e2101af412980fe7a9e874ef9a2fcd4f0e2a4dba77ea70332b80c3ca538ef8e1add05cb21b0fc7f476d381a17a6a1fe4b75ce0455af1b4fb94ce2f6727502af68c305171c8992c96d381a63cbd296c24b4dd69013543703f7522f4c4d83bc680b4ba91e9558b51da1cf74fb9689edac96cda2686d4837711884289e273558a4124665a78ff2be1beabc8d28b464e849dba4101b6de7a941c0878a3e5f00c80e80d735f4ba14b6c84c2c717a24c691c20fd1f2a6cfcccce509682a245266cccf0d40d18bd74cfaeb550257a18cfec28b419a4f355d828ebf37667519e2fd105357282d88cb1e6cea38553786cc367b2608d0b4e2c24bd0ed101314677f11388275bccc621feca8279d328390f2b070e12b687f0298cfdc51ab0e25a4f54e6a99426daeb28dfeb9a6a429114cf07f11e9083476e055d402029c6e93914537e382fffb79c9e1a2c35681ceb10c033a717447955e95785dbca3feff118ed3c77e027c9f7512b45cd7625c8a6cda2d67a9aaf1c8e32e93fcea6742b9f93003b8c0016a63ae11f5d2d6384ab35f81e8033d99d0e0e1d5d17ed0d55881a3c9335a153c71500cebd0bca7e2fddf8f7f71987051b81a36132797bc967e5c47f318034e5e76ae4064d28a94159b17d4c787f06e8e93affa3d0429e3f41d13b1b9a87f20a9fc215bb483950388c6baa44087f754a35c1ec67745a81a40e63dbafc10917c639acfb2c0e568144bbb720af5af6fdc5f45b3bc53acd403b5f54a9b1c34a5279863cf2ada0bfb7d510c9af1637fe0eb5537cfe4b35ec21ebaf1a1aa9b56aa9eeed0f241052367c3f2f6d89ae89fdee741fd0411454a88e428805a5e8d5b29a37f9549459fbef95b3742854d0a31d09b6fe5207a1c905b5f091a68c611121df6c487f79405df8f7b32d47bd310d6a5b60c77396703c1102290842da9d1f6eab2a65dd5f8fe5e63473d0e72e56e9bca1d618a48e1204007c09e352d2cdd022e007b9c6238cb6bdcb45e65f257dd7c05afe42c1916adac09fbac99c4b6fcfde09581d5f8578a30c244ceb0ab3c651e91c9fc4e0c3cc99b2cd6c40f50f804405006d47b9213808bfb71676d58b7dec2a1538b348c76828cb14e1db4e6965c5b7c3feaa0163e93a0a6c059b84dec271bf6306832b204885c9abbb4b881b3d4618f34437e6458b0d1cbac570f282776d1d1d1a6be85d50350f355d4050b4019fad8605cfdca663032f2af825b03ea503ecb0bcee8154cdd6f9a4a0745672a43599b6adddc93d3071b4a0203332cb4b7902406fff8fdd8eadae19117a0670d1948ba27b607f00249a68566a35e353aad0b675ffa3bbb6a705c1b07453c1f01b93519cc9900ff5a957d176a1c28a1075a44abd8f2448091ccc75643f7185e225a963d071947da2a0b7f83424660f9459eff3a796562b7ce290800989d50537470c034ce3b4c5bf80c86430fd4a39fd06a9db1a1bfefb1a53a174892efc3b44bcfe21000ca3974f1480d21c6ea3588ae1e4dc90bd39a9a5442bd839add6c6a0795a73b9f2d898e66871d6022816f5dc13accb533916144db9e58ec0b9395ca2538084e356c767145ba6c653f11470f00f089d738a60fba1d120535a8a5cdf6201ff665646e9d13ef58d8edec56a137caa92344f0a1adc14732c93a04f3a4ddc70b612e12d6f23a03fb529dd388f03b50adf72ffb24ba18364dd18aaee6febcc395d6aee7f444805b2969b85349cb892a328ad188b2ba7b1cebf1dc218585efb31a773b6f5fead885705b43881873eb6ff9ff4d497e53afdeec1ba213c6730aca3c89b2e0d63b5ab62d8c4f3da60f35c2103add9658832d7b381346e24401d07cd2989e2d3d21287c1117cca7f7e11a92c8d591f52ce350229d5208cd60aeeb84abfee24be0cbf125840502514b89a8d026277037ee39c65702b4f42431d26861028ad28aae2375c4679ac95379eb4ca9e8da5bd969f9ecf4d26cba83f3f7dd6c5c6dc8c1d8bc4e4ebdb9c58e61f3b91e3c1527ce9721a29b4bf294a2a4d7540b2b3957876f06067118fd7692141ccc5499dd33d5d05cc73e54efa772d89430544b85588cf9ef2149683f810d09eae80d0161e17dd009905ecbc4b3bf99b0f6cc83cdf4af65468d823835f3e054b13aa6433f7d3a685dc2c25f51ed5b297f8005b8b32704516f56f88571824571fcaeb7d6a4e8ac1c92a6cb124893957ac610eff82906779658dec3f8507e630ae6092ac17e709071bdb2f444685ac3bf5604742805dcab3c070e5ca221944f2e5af48984e67848ad989a1a2d849d9fa29ffd18905bf5ab844931d2dd45c4c8c8d1a2d2ffb32b917960c9afdcb02cb9162d361c8bf9da2613deea3501f333a4b87ca5fcba26789c5b7311910b4153a3fbcbfa4fc578b5545725872ab8ac14151202998fd7e16de8e9b3e2a4c905090927de42045ce7129f4b42a181aab92eb8b9e89420de22bdff9cb30c344f9ee826da000a080367c5501ae3f8e837b9b00a61d07ba0f0c8be965c268dbf4c7339e785317945087251542ca260bd14fd24764b64d02dfde8af4cbe6aa5a3ca102068432ec0438d848cddf19deecf34ca9cdd6103f14379c9b2b9311275c9b4d57103e8fa9924a1fdedd07b4a43224f88f17236abc6fd74764e5bfeece6fa7844345ac33824301336c64f83074ec7a77dc244aed8610d536ef14d2fb2c46ae6242809ca984e756b9de069b3a1dcdbc6a857239b30c0fff11cee0709630188870ac19453a30151fb9d7159674d9895960d939f2da49b217635b0a38d1d7c8adeacd046e87a649b19a96b1c0c5e78493f935882f473872adeb8c17c98383674ed643c22b09755f08ea7e496bbeb01caed152c491a941e471d2a355c71bd7f44dacb5b55e1b6dba7da47502d9c6397a5bdc2054e04518613223b4822b0f3e0b5acbc70fd0a7cb91cb35574a83be0b30ee24b1d29522c3cc2a46f015ce681fbb993e88a358d57d075116e7918ffbf94adffa7b5c5b523a1dd631f38562d3e0da2743ce31bf2b6b07eb19b7aa0ca54e56b6cfa8aa65771effad5fbe3e3e129d261103a123c0abfc75a375ae588a60d75bdba648732efd3c210f3db2d522765952143216c167a9fa5e904cec82b0f18c0a3a91b59f0ee472d863773e51ef20168c61a34ac353e2bbc2c7c6be135edbff05ad0a37598178b4d634e453be57dd50e54fa6b4c6fb02b901223b9ded45b826d37682109f59f56940f1606434009cd7c0c0b41b9281414e3e3bfd37e8d81f9e737f0efe16d577b45b38847303ae17e0861abc6cc2c2c4656e2fb35db936452758a6fdb7429e59f9d983e7054115c481403accb72f72a5d343f296ac01c40df6a327243f3eb0509f7c03dcf04d53e8c7fe120398f3af72f68a94fb57365f88efb22a099b32f80c3e4ad6760e8390a70f7b07b8c62cdd517b57d7f62d8d480cff9072bac187440fc024124ea13179a1bd72a922b68702d88f7630de1aba99c6a88e5a93594a3c2409d195f532ac717f61338e8de761c28127840bcfec2692540c90f43dc785b0da038109a6db911e7b229d77ef8ac3f306500b8002faeef8759b1d5fd518fe89f702b812f12c0e8385c0bf5412ab55d98a0a78fac8860ab8da262131a9fe0e6ccb0365a196f770cabfe84c6e4c035cae8bc165e5df4643c9959c847f50349c1a0b471359abcb173cc9ac763efacfe25c13a8f2b3f230710fc5e120118d9148c8b48a4526a5fc632d9bf2344fece99d5a1e1b0d1088efda039d6323da42687938c7d428be597d72459d843a8de1096bdac3adf9703dc092319be7edafb99b6b5fa11d95aed81bebf567b888cf0b6e1a6cb107114af9d0212d72fc9d6d248f11d93ce655b824537d9e7a90dfc228d50875a73bf4eb5d9f3f41bfd617f327284ce8d170d4e3ca0e1a393f8a2d94a5618831ad4fa706a80f5601f5d6fe33c062b9b12f275f4942e81d6551c7bf5f76968098745592f50f73dcf00f800b4109a1aa3a4c527de0292a652adf6687c48c6d41e1188dcb2c6fba464cc9c5954695a594c55361f65a498d9e112a8aec2b24272f9ec30c795ee79910cf63ad23084f9a19d7b554aa632836311dd796b1e42d10128a16f2c6425e9ed482bc1f71333e03bf150e794391939c8de1f4137dd037052b4d9e3603ec1c02b3c77ce63b284533a7b5c49d21e0858ed656b2dc12ba56e90e0132f5103c4ad9eff9ec0aefbd0e3a1e6afc3d1afe3b373409f5710e90f6182e94cfc78b510f6aa2f67e3ccae95d5bcd14a3e2127ae9d13fd6513addd0c954059e542958db0147561738c00cd8562ca58801d161e5b7d988f7bf688020fa47758240a5683d540d71d41dd02242a8c0d2b4a245fb9837abe55c51330e89287b743b61d05e3ddc4fccc937605ac59c021e2be4a9977207f0c8c16f673d84d15998ab256ef20945388603bc37dac14422a126a18b2f6a7af61c969012f135a3956393e22e4f72e932ef1b3408c85bd22b7cdd9d8c946d49cf69847b087dcd469aa24ad6646f12d7e766238e8882ce14c32f3684b18fbfb7234f8d73f32535e8278fbb6ec7512420f69eac37e2ed905bafb1c29b881bb638bdf78bfc105adc969b843c76095da3ee154ac16d194b50f97f40f678f885d4de81b0308aa8caabf2c92680b2ad52403b7c12cbbe3eea977c24b3b6bbf9d820e6fd4cbdcfc19f08366089669f131c5bc5d906fbf45cd5a4a01c20b278a66d9c90d19bfc74fda24b17b13679e0a721593776fda532793625b1755445bc46b4184be6890c5354f500271443cb6b8bb03f815df2bea86dab0de79b1ac7d284b844e1529dd7db6b975167d4cb157c44803eee57f62c169b640ae75ddfbfe6501e68ad5e5dce71cbdd44b9140c956b68a8f417801c234a105f1362eb6005bcdcbea8a0760890ae6ab3b6e54461f242fe007748c7f2b32a96fb64cff20f3510193a795a62047632e9c71ab06e39d8c561ca7a550d40b39b7d5398d055a082a5c99ae1306bf74ee4eaf9726624bcef2c7cd4a1e792593d26c5c10fef9a8efb2dd49dd7cf11d2d597d0f941807a35e6abcc3612fac6e728c8bf7e9d4254db8593ba115792f9e2fc6cf2fddbbcdeb0e089f3f77cf743d80a293fd70f96e4c5ea5bf3121b3a675d4ee00059ff79c703b87f0511b56f91fdb1cc503d5b2cccac45acdd7168090a55b227288e95456d1d5b7d3ac21c426336bbb80dbe30123a896d6b77dcb7dad3b4576f25249c865b893190449deab86a17952edc816956d73ff13ef2eaa0f4e0517b8a8795206d0b869574aed603e12689b4d8892c07e9866b037d62688b6d656e82c62bccaf0a3385e1635f8c23bc497d487f0b459", 0x1000}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="9deb4b901a7c36451566e1f394eb695475d804c049c37cd296", 0x19}, {&(0x7f0000003f00)="341d2ef88c65cd0068f3ad6ea843d9713ee4772b4fa17f6cb4ffea4a6d22912f4c8351a477386e13bfcfa4ace30045f5071eb98e49757c1dcd52593bffc3c9a088beccdb9a9a477f3b7a825c501fe068a752d48acb1f1d30368028dc94fdd7577094ded019195cd84e01a63f2310a65e949cf9b962200eae88e0b406baa30a0f01a1089a45f0a6a9f62ebf2b55e3cfa2d51035491c1ad0284cd1d2bf85e156f60a28322f5d8d91ffd8f2eaec3d1af5a008c18f749df963a73da23fc1cdf432b5fb7f1a0f8b54f84b3c7f61f6397540ef", 0xd0}, {&(0x7f0000004000)="9c30c6f80bc27bd953a084005e27bce3aee33d619308017b8962762d28e2f37ff04eb3798a0976569de428315f161c1c853c9b6b4baa58f6e6f644a3b2c5c4ec79c5fd2683994ed7b16f1f6fe1c07b685c5a713ab20ca295239cfc14005dceb3aada26e5129ef165355bec409b87e1d15ee7a991ebfaf4968ba4ec6b47b2b22fe4ffe6bd200a3a7bc17571d67348bec406c2380b5f67ec04664e22", 0x9b}, {&(0x7f00000040c0)="7f8eaaea43d542b047f08efc65dd6224d861a686876726b044d92c7135b63e7bdbae96e359ccf826e255f7032b312c22bfe7d6417f55fe1ea459b959ad7d195d87706f", 0x43}, {&(0x7f0000004140)="e1637ef42988fe8640725e3b00d1170a21b294624c597e8d68d03604deb89ddc92f56bb0cb0dd054265878a5a6dfee46b2a06f3fe1fe3092547d6491242bebc64413256cbf14a2a1e5880243e3d8779b29b0826aab6f6b13ac8f0a8e87f9884d9b73d9582e80f903845e7d5de8df2891941b440168cf2654b27adf3f2b7223a4be1ab6770526ab6207ff8ce7509525b7ff8ed5377a9b3de0d486f1354636eb69daaf77c62c5437bca064e0abbc4acde72514b8a924054fe21457c0e914a841a4c05e51377289e051900f952306e25857941154f3d38f415ae580dd67ab1c02a53479097fd9ef3bd63ffd", 0xea}, {&(0x7f0000004240)="312bd90872a83fa516e493d87ff649b3f55fb08c7e4681edb73105edad3c57898835c539e20abd183a2f5d1adc6b189d20e0c69301679a1cef638d8e0ad8d04ace5e47d2c0b59605", 0x48}], 0xa, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2m32.652372694s ago: executing program 6 (id=2252): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x200, 0x0) (async) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100003040400007d56bd319a00fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800000750050038fc12800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m32.651930951s ago: executing program 6 (id=2253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000006c0)={0x7b, "5d5089748723ea6b0d699f6ee5cff42c29df3f08a0f68a31019075a6a8eafed2", 0x5, 0x4, 0x7, 0x6, 0x4, 0x4, 0x4, 0x400}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000540), &(0x7f00000005c0)=@md5={0x1, "55bd0675017a6c9222f3ce13ed6f8ebf"}, 0x11, 0x2) r3 = socket(0xa, 0x6, 0xb) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {}, {0x1c, 0x1fffd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = signalfd(r1, &(0x7f0000000080)={[0xb]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r6) r7 = inotify_init1(0x800) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r6, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 2m17.602218s ago: executing program 39 (id=2253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000006c0)={0x7b, "5d5089748723ea6b0d699f6ee5cff42c29df3f08a0f68a31019075a6a8eafed2", 0x5, 0x4, 0x7, 0x6, 0x4, 0x4, 0x4, 0x400}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000540), &(0x7f00000005c0)=@md5={0x1, "55bd0675017a6c9222f3ce13ed6f8ebf"}, 0x11, 0x2) r3 = socket(0xa, 0x6, 0xb) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {}, {0x1c, 0x1fffd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = signalfd(r1, &(0x7f0000000080)={[0xb]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r6) r7 = inotify_init1(0x800) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r6, 0x8, r8) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 3.090374513s ago: executing program 4 (id=4298): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) 3.030203479s ago: executing program 4 (id=4299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.030028383s ago: executing program 4 (id=4300): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000100)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffff}) 2.909206479s ago: executing program 4 (id=4301): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x2, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080), &(0x7f00000000c0)) 2.908945302s ago: executing program 4 (id=4302): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000780)={0x0, 0x280, 0x180, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$inet(r0, 0x0, 0x3) 2.830193487s ago: executing program 4 (id=4303): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0, 0x0, 0x3000000000000500}]) 2.780641389s ago: executing program 2 (id=4304): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.780543698s ago: executing program 2 (id=4305): unshare(0x6020400) socket$kcm(0x29, 0x5, 0x0) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x61, 0x8001000, 0xffffffffffffffff, 0x0) 2.699245232s ago: executing program 2 (id=4306): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x6, &(0x7f0000769000/0x3000)=nil, 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_open_dev$video(0x0, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c90063df7c51c41784c2e58d9ae9d976c42cbddfa31065781e58f34a3b73140f0000d82c0a349ef81e0e506c96c168209738fc505a99660f99ec2aab1358304abd3a36a8ea205d25586eb4db218704bd0073bf633b4f19a1abc38fe7ebaec3d566b7e61f59"], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876750a602214f6040028d758f38a5a7cb4b31c4c09289e9ebb62867824d4", 0x68) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6deb53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f52b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) poll(&(0x7f0000001500)=[{0xffffffffffffffff, 0x90}, {}, {r3, 0x1000}, {r1, 0x400}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x6001}, {0xffffffffffffffff, 0x1030}, {r0, 0x312}, {r3, 0x210b}], 0x47, 0x3ff) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x85000cb9) rmdir(0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001300)=""/212, &(0x7f0000001400)=0xd4) 2.060886898s ago: executing program 1 (id=4310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 2.060602874s ago: executing program 1 (id=4311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1.288654932s ago: executing program 9 (id=4312): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 1.228504443s ago: executing program 9 (id=4313): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x6954, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 1.114924909s ago: executing program 2 (id=4314): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, 0x0, 0x10) 1.030705367s ago: executing program 2 (id=4315): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x2000000, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r6, 0x0}]) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x30, r7, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x20000010) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @private=0xa010101}}}}}}, 0x0) 1.030381295s ago: executing program 1 (id=4316): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x7b0a, &(0x7f00000000c0)={0x0, 0x3ccb, 0x400, 0x0, 0x37d}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r0}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0)) 500.540796ms ago: executing program 9 (id=4317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000010c0)={0x0, 0x6}, 0x8) 299.996864ms ago: executing program 9 (id=4318): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$RTC_RD_TIME(r0, 0x40187013, &(0x7f0000000200)) 240.115293ms ago: executing program 9 (id=4319): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000002, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) 120.246147ms ago: executing program 1 (id=4320): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 120.081061ms ago: executing program 9 (id=4321): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x20008810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 68.654928ms ago: executing program 1 (id=4322): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) r1 = syz_clone(0x80, 0x0, 0x5d, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8248, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x3) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x6) rt_tgsigqueueinfo(r1, r1, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) 68.337673ms ago: executing program 2 (id=4323): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x15, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x7d, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0xfffffffd, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x5, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x6, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x9, 0x0, 0x5, 0x4, 0x15, 0x4, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x9, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0xfffffffd, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x100003, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x70, 0x8, 0x8a, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x9, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x5, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0x7fd3, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x440) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 1 (id=4324): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x2, 0x3, 0xfffffffa, 0x1, {0xac7c, 0x1, 0x9, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xfffa, 0x27, 0x6, 0x4, 0x3, "fe1d000034000000e4b2060018001000"}}) kernel console output (not intermixed with test programs): :3289): avc: denied { execute } for pid=18272 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 388.909313][ T40] audit: type=1400 audit(2000525119.122:3290): avc: denied { execute_no_trans } for pid=18272 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 388.933825][ T40] audit: type=1400 audit(2000525119.142:3291): avc: denied { execmem } for pid=18272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 389.017465][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.028829][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.034041][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.038403][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.042731][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.079222][T18274] wg1 speed is unknown, defaulting to 1000 [ 389.421464][T18289] block nbd2: NBD_DISCONNECT [ 389.657682][T17893] syz.4.3291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 389.666399][T17893] CPU: 1 UID: 0 PID: 17893 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.666421][T17893] Tainted: [L]=SOFTLOCKUP [ 389.666425][T17893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.666432][T17893] Call Trace: [ 389.666437][T17893] [ 389.666442][T17893] dump_stack_lvl+0x100/0x190 [ 389.666470][T17893] dump_header+0xfb/0x606 [ 389.666485][T17893] oom_kill_process.cold+0xd/0x330 [ 389.666499][T17893] out_of_memory+0x340/0x14f0 [ 389.666521][T17893] ? __pfx_out_of_memory+0x10/0x10 [ 389.666543][T17893] mem_cgroup_out_of_memory+0xc6/0x130 [ 389.666560][T17893] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 389.666576][T17893] ? find_held_lock+0x2b/0x80 [ 389.666597][T17893] ? do_raw_spin_unlock+0x145/0x1e0 [ 389.666612][T17893] ? _raw_spin_unlock+0x28/0x50 [ 389.666631][T17893] try_charge_memcg+0x652/0xc90 [ 389.666647][T17893] ? __pfx_try_charge_memcg+0x10/0x10 [ 389.666660][T17893] ? find_held_lock+0x2b/0x80 [ 389.666675][T17893] ? rcu_read_unlock+0x17/0x60 [ 389.666687][T17893] ? rcu_read_unlock+0x17/0x60 [ 389.666704][T17893] charge_memcg+0xa6/0x280 [ 389.666717][T17893] __mem_cgroup_charge+0x2b/0x1e0 [ 389.666732][T17893] shmem_alloc_and_add_folio+0x451/0xd40 [ 389.666755][T17893] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 389.666774][T17893] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 389.666795][T17893] shmem_get_folio_gfp+0x6ab/0x1900 [ 389.666816][T17893] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 389.666838][T17893] shmem_write_begin+0x1a4/0x420 [ 389.666857][T17893] ? __pfx_shmem_write_begin+0x10/0x10 [ 389.666877][T17893] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 389.666891][T17893] ? lockdep_hardirqs_on+0x78/0x100 [ 389.666911][T17893] generic_perform_write+0x292/0xa40 [ 389.666934][T17893] ? __pfx_generic_perform_write+0x10/0x10 [ 389.666953][T17893] ? file_update_time_flags+0x373/0x500 [ 389.666973][T17893] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 389.666985][T17893] shmem_file_write_iter+0x10e/0x140 [ 389.666999][T17893] __kernel_write_iter+0x2ac/0x920 [ 389.667012][T17893] ? __pfx___kernel_write_iter+0x10/0x10 [ 389.667023][T17893] ? __up_read+0x2c5/0x700 [ 389.667038][T17893] ? dump_user_range+0x73b/0xb50 [ 389.667061][T17893] ? copy_mc_enhanced_fast_string+0x6/0xf [ 389.667078][T17893] dump_user_range+0x3f9/0xb50 [ 389.667098][T17893] ? __pfx_dump_user_range+0x10/0x10 [ 389.667121][T17893] ? __pfx_writenote+0x10/0x10 [ 389.667142][T17893] elf_core_dump+0x2d5f/0x3d10 [ 389.667168][T17893] ? __pfx_elf_core_dump+0x10/0x10 [ 389.667186][T17893] ? kasan_save_stack+0x3f/0x50 [ 389.667204][T17893] ? kasan_save_stack+0x30/0x50 [ 389.667221][T17893] ? __kasan_kmalloc+0xaa/0xb0 [ 389.667238][T17893] ? __kvmalloc_node_noprof+0x360/0xa00 [ 389.667256][T17893] ? vfs_coredump+0x22f5/0x5790 [ 389.667273][T17893] ? asm_exc_page_fault+0x26/0x30 [ 389.667286][T17893] ? 0xffffffffff600000 [ 389.667319][T17893] ? vfs_coredump+0x29ba/0x5790 [ 389.667335][T17893] vfs_coredump+0x29ba/0x5790 [ 389.667357][T17893] ? __pfx_vfs_coredump+0x10/0x10 [ 389.667375][T17893] ? __lock_acquire+0x4a5/0x2630 [ 389.667392][T17893] ? lock_acquire+0x1cf/0x380 [ 389.667409][T17893] ? is_bpf_text_address+0x8a/0x1a0 [ 389.667427][T17893] ? bpf_ksym_find+0x128/0x1c0 [ 389.667442][T17893] ? __kernel_text_address+0xd/0x30 [ 389.667456][T17893] ? unwind_get_return_address+0x59/0xa0 [ 389.667473][T17893] ? arch_stack_walk+0xa6/0xf0 [ 389.667494][T17893] ? __sigqueue_free+0xbe/0x2a0 [ 389.667512][T17893] ? stack_trace_save+0x8e/0xc0 [ 389.667528][T17893] ? __pfx_stack_trace_save+0x10/0x10 [ 389.667544][T17893] ? stack_depot_save_flags+0x27/0x9d0 [ 389.667565][T17893] ? __lock_acquire+0x4a5/0x2630 [ 389.667613][T17893] ? proc_coredump_connector+0x2d3/0x4f0 [ 389.667631][T17893] ? __pfx_proc_coredump_connector+0x10/0x10 [ 389.667647][T17893] ? rcu_is_watching+0x12/0xc0 [ 389.667665][T17893] get_signal+0x1f2a/0x21e0 [ 389.667687][T17893] ? __pfx_get_signal+0x10/0x10 [ 389.667707][T17893] arch_do_signal_or_restart+0x91/0x7a0 [ 389.667726][T17893] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.667747][T17893] ? do_user_addr_fault+0x8d6/0x12f0 [ 389.667764][T17893] irqentry_exit+0x1f3/0x650 [ 389.667783][T17893] asm_exc_page_fault+0x26/0x30 [ 389.667794][T17893] RIP: 0033:0x7f7306b9c821 [ 389.667806][T17893] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 389.667816][T17893] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 389.667826][T17893] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 389.667833][T17893] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 389.667840][T17893] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 389.667847][T17893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.667853][T17893] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 389.667868][T17893] [ 389.847748][T17893] memory: usage 307200kB, limit 307200kB, failcnt 32658 [ 389.850043][T17893] memory+swap: usage 412428kB, limit 9007199254740988kB, failcnt 0 [ 389.852695][T17893] kmem: usage 14016kB, limit 9007199254740988kB, failcnt 0 [ 389.855127][T17893] Memory cgroup stats for /syz4: [ 389.855374][T17893] cache 300101632 [ 389.858596][T17893] rss 106496 [ 389.859721][T17893] rss_huge 0 [ 389.860850][T17893] shmem 300097536 [ 389.862068][T17893] mapped_file 0 [ 389.863290][T17893] dirty 0 [ 389.864216][T17893] writeback 0 [ 389.865517][T17893] workingset_refault_anon 74 [ 389.867117][T17893] workingset_refault_file 3719 [ 389.870596][T17893] swap 107753472 [ 389.871837][T17893] swapcached 231952384 [ 389.873196][T17893] pgpgin 548320 [ 389.885267][T17893] pgpgout 475063 [ 389.886552][T17893] pgfault 293608 [ 389.888374][T17893] pgmajfault 79 [ 389.889525][T17893] inactive_anon 115916800 [ 389.890907][T17893] active_anon 184279040 [ 389.892255][T17893] inactive_file 0 [ 389.893454][T17893] active_file 4096 [ 389.894676][T17893] unevictable 0 [ 389.896084][T17893] hierarchical_memory_limit 314572800 [ 389.898043][T17893] hierarchical_memsw_limit 9223372036854771712 [ 389.900386][T17893] total_cache 300101632 [ 389.901766][T17893] total_rss 106496 [ 389.903000][T17893] total_rss_huge 0 [ 389.904260][T17893] total_shmem 300097536 [ 389.905592][T17893] total_mapped_file 0 [ 389.906958][T17893] total_dirty 0 [ 389.921369][T17893] total_writeback 0 [ 389.922638][T17893] total_workingset_refault_anon 74 [ 389.924268][T17893] total_workingset_refault_file 3719 [ 389.925948][T17893] total_swap 107753472 [ 389.927245][T17893] total_swapcached 231952384 [ 389.928848][T17893] total_pgpgin 548320 [ 389.930298][T17893] total_pgpgout 475063 [ 389.931874][T17893] total_pgfault 293608 [ 389.933309][T17893] total_pgmajfault 79 [ 389.934630][T17893] total_inactive_anon 184016896 [ 389.936181][T17893] total_active_anon 116178944 [ 389.937899][T17893] total_inactive_file 4096 [ 389.939339][T17893] total_active_file 0 [ 389.940714][T17893] total_unevictable 0 [ 389.942285][T17893] anon_cost 0 [ 389.943517][T17893] file_cost 0 [ 389.944732][T17893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3291,pid=17898,uid=0 [ 389.949783][T17893] Memory cgroup out of memory: Killed process 17898 (syz.4.3291) total-vm:98652kB, anon-rss:1236kB, file-rss:53516kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 389.956466][T17884] syz.4.3291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 389.960144][T17884] CPU: 1 UID: 0 PID: 17884 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.960166][T17884] Tainted: [L]=SOFTLOCKUP [ 389.960171][T17884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.960180][T17884] Call Trace: [ 389.960186][T17884] [ 389.960192][T17884] dump_stack_lvl+0x100/0x190 [ 389.960223][T17884] dump_header+0xfb/0x606 [ 389.960239][T17884] oom_kill_process.cold+0xd/0x330 [ 389.960256][T17884] out_of_memory+0x340/0x14f0 [ 389.960280][T17884] ? __pfx_out_of_memory+0x10/0x10 [ 389.960305][T17884] mem_cgroup_out_of_memory+0xc6/0x130 [ 389.960325][T17884] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 389.960342][T17884] ? find_held_lock+0x2b/0x80 [ 389.960364][T17884] ? do_raw_spin_unlock+0x145/0x1e0 [ 389.960380][T17884] ? _raw_spin_unlock+0x28/0x50 [ 389.960401][T17884] try_charge_memcg+0x652/0xc90 [ 389.960419][T17884] ? __pfx_try_charge_memcg+0x10/0x10 [ 389.960433][T17884] ? find_held_lock+0x2b/0x80 [ 389.960450][T17884] ? rcu_read_unlock+0x17/0x60 [ 389.960464][T17884] ? rcu_read_unlock+0x17/0x60 [ 389.960484][T17884] charge_memcg+0xa6/0x280 [ 389.960498][T17884] __mem_cgroup_charge+0x2b/0x1e0 [ 389.960515][T17884] shmem_alloc_and_add_folio+0x451/0xd40 [ 389.960541][T17884] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 389.960563][T17884] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 389.960587][T17884] shmem_get_folio_gfp+0x6ab/0x1900 [ 389.960611][T17884] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 389.960636][T17884] shmem_write_begin+0x1a4/0x420 [ 389.960659][T17884] ? __pfx_shmem_write_begin+0x10/0x10 [ 389.960680][T17884] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 389.960696][T17884] ? lockdep_hardirqs_on+0x78/0x100 [ 389.960718][T17884] generic_perform_write+0x292/0xa40 [ 389.960763][T17884] ? __pfx_generic_perform_write+0x10/0x10 [ 389.960787][T17884] ? file_update_time_flags+0x373/0x500 [ 389.960809][T17884] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 389.960823][T17884] shmem_file_write_iter+0x10e/0x140 [ 389.960839][T17884] __kernel_write_iter+0x2ac/0x920 [ 389.960854][T17884] ? __pfx___kernel_write_iter+0x10/0x10 [ 389.960867][T17884] ? __up_read+0x2c5/0x700 [ 389.960883][T17884] ? dump_user_range+0x73b/0xb50 [ 389.960908][T17884] dump_user_range+0x3f9/0xb50 [ 389.960931][T17884] ? __pfx_dump_user_range+0x10/0x10 [ 389.960956][T17884] ? __pfx_writenote+0x10/0x10 [ 389.960980][T17884] elf_core_dump+0x2d5f/0x3d10 [ 389.961010][T17884] ? __pfx_elf_core_dump+0x10/0x10 [ 389.961031][T17884] ? kasan_save_stack+0x3f/0x50 [ 389.961052][T17884] ? kasan_save_stack+0x30/0x50 [ 389.961076][T17884] ? __kasan_kmalloc+0xaa/0xb0 [ 389.961095][T17884] ? __kvmalloc_node_noprof+0x360/0xa00 [ 389.961116][T17884] ? vfs_coredump+0x22f5/0x5790 [ 389.961136][T17884] ? asm_exc_page_fault+0x26/0x30 [ 389.961151][T17884] ? 0xffffffffff600000 [ 389.961188][T17884] ? vfs_coredump+0x29ba/0x5790 [ 389.961206][T17884] vfs_coredump+0x29ba/0x5790 [ 389.961232][T17884] ? __pfx_vfs_coredump+0x10/0x10 [ 389.961252][T17884] ? __lock_acquire+0x4a5/0x2630 [ 389.961272][T17884] ? lock_acquire+0x1cf/0x380 [ 389.961291][T17884] ? is_bpf_text_address+0x8a/0x1a0 [ 389.961313][T17884] ? bpf_ksym_find+0x128/0x1c0 [ 389.961330][T17884] ? __kernel_text_address+0xd/0x30 [ 389.961346][T17884] ? unwind_get_return_address+0x59/0xa0 [ 389.961366][T17884] ? arch_stack_walk+0xa6/0xf0 [ 389.961389][T17884] ? __sigqueue_free+0xbe/0x2a0 [ 389.961409][T17884] ? stack_trace_save+0x8e/0xc0 [ 389.961429][T17884] ? __pfx_stack_trace_save+0x10/0x10 [ 389.961448][T17884] ? stack_depot_save_flags+0x27/0x9d0 [ 389.961471][T17884] ? __lock_acquire+0x4a5/0x2630 [ 389.961510][T17884] ? proc_coredump_connector+0x2d3/0x4f0 [ 389.961527][T17884] ? __pfx_proc_coredump_connector+0x10/0x10 [ 389.961545][T17884] ? rcu_is_watching+0x12/0xc0 [ 389.961565][T17884] get_signal+0x1f2a/0x21e0 [ 389.961589][T17884] ? __pfx_get_signal+0x10/0x10 [ 389.961611][T17884] arch_do_signal_or_restart+0x91/0x7a0 [ 389.961632][T17884] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 389.961656][T17884] ? do_user_addr_fault+0x8d6/0x12f0 [ 389.961676][T17884] irqentry_exit+0x1f3/0x650 [ 389.961698][T17884] asm_exc_page_fault+0x26/0x30 [ 389.961712][T17884] RIP: 0033:0x7f7306b9c821 [ 389.961724][T17884] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 389.961737][T17884] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 389.961748][T17884] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 389.961756][T17884] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 389.961764][T17884] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 389.961772][T17884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.961779][T17884] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 389.961796][T17884] [ 389.961802][T17884] memory: usage 307200kB, limit 307200kB, failcnt 32699 [ 390.126562][T17884] memory+swap: usage 389112kB, limit 9007199254740988kB, failcnt 0 [ 390.129196][T17884] kmem: usage 13988kB, limit 9007199254740988kB, failcnt 0 [ 390.131407][T17884] Memory cgroup stats for /syz4: [ 390.131506][T17884] cache 285237248 [ 390.134658][T17884] rss 106496 [ 390.135909][T17884] rss_huge 0 [ 390.137255][T17884] shmem 284123136 [ 390.138803][T17884] mapped_file 1024000 [ 390.140146][T17884] dirty 0 [ 390.141171][T17884] writeback 0 [ 390.142285][T17884] workingset_refault_anon 74 [ 390.143786][T17884] workingset_refault_file 3990 [ 390.145370][T17884] swap 99155968 [ 390.146498][T17884] swapcached 231952384 [ 390.147923][T17884] pgpgin 550854 [ 390.149068][T17884] pgpgout 481226 [ 390.150223][T17884] pgfault 293751 [ 390.151336][T18274] chnl_net:caif_netlink_parms(): no params data found [ 390.151376][T17884] pgmajfault 80 [ 390.151383][T17884] inactive_anon 205684736 [ 390.156978][T17884] active_anon 76533760 [ 390.158429][T17884] inactive_file 0 [ 390.159784][T17884] active_file 1114112 [ 390.161262][T17884] unevictable 0 [ 390.162648][T17884] hierarchical_memory_limit 314572800 [ 390.164761][T17884] hierarchical_memsw_limit 9223372036854771712 [ 390.166794][T17884] total_cache 285237248 [ 390.168282][T17884] total_rss 106496 [ 390.169508][T17884] total_rss_huge 0 [ 390.170735][T17884] total_shmem 284123136 [ 390.172083][T17884] total_mapped_file 1024000 [ 390.173588][T17884] total_dirty 0 [ 390.174805][T17884] total_writeback 0 [ 390.176302][T17884] total_workingset_refault_anon 74 [ 390.178480][T17884] total_workingset_refault_file 3990 [ 390.180907][T17884] total_swap 99155968 [ 390.182320][T17884] total_swapcached 231952384 [ 390.183817][T17884] total_pgpgin 550854 [ 390.185169][T17884] total_pgpgout 481226 [ 390.186482][T17884] total_pgfault 293751 [ 390.188212][T17884] total_pgmajfault 80 [ 390.189607][T17884] total_inactive_anon 205684736 [ 390.191514][T17884] total_active_anon 76533760 [ 390.193197][T17884] total_inactive_file 0 [ 390.194638][T17884] total_active_file 1114112 [ 390.196146][T17884] total_unevictable 0 [ 390.197572][T17884] anon_cost 0 [ 390.198864][T17884] file_cost 0 [ 390.200051][T17884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3291,pid=17872,uid=0 [ 390.205622][T17884] Memory cgroup out of memory: Killed process 17872 (syz.4.3291) total-vm:98652kB, anon-rss:1236kB, file-rss:53516kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 390.421724][ T7189] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.441144][T18274] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.443876][T18274] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.449227][T18274] bridge_slave_0: entered allmulticast mode [ 390.453974][T18274] bridge_slave_0: entered promiscuous mode [ 390.477328][T18274] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.482948][T18274] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.492152][T18274] bridge_slave_1: entered allmulticast mode [ 390.500483][T18274] bridge_slave_1: entered promiscuous mode [ 390.547733][T18274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.555354][T18274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.628836][ T7189] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.649611][T18274] team0: Port device team_slave_0 added [ 390.655029][T18274] team0: Port device team_slave_1 added [ 390.698775][T18274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.701944][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.715797][T18274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.722105][T18274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.726439][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.738999][T18274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.782771][ T7189] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.811346][T17902] syz.4.3291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 390.814478][T17902] CPU: 1 UID: 0 PID: 17902 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.814498][T17902] Tainted: [L]=SOFTLOCKUP [ 390.814502][T17902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.814510][T17902] Call Trace: [ 390.814515][T17902] [ 390.814521][T17902] dump_stack_lvl+0x100/0x190 [ 390.814549][T17902] dump_header+0xfb/0x606 [ 390.814563][T17902] oom_kill_process.cold+0xd/0x330 [ 390.814576][T17902] out_of_memory+0x340/0x14f0 [ 390.814598][T17902] ? __pfx_out_of_memory+0x10/0x10 [ 390.814619][T17902] mem_cgroup_out_of_memory+0xc6/0x130 [ 390.814637][T17902] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 390.814652][T17902] ? find_held_lock+0x2b/0x80 [ 390.814671][T17902] ? do_raw_spin_unlock+0x145/0x1e0 [ 390.814685][T17902] ? _raw_spin_unlock+0x28/0x50 [ 390.814703][T17902] try_charge_memcg+0x652/0xc90 [ 390.814718][T17902] ? __pfx_try_charge_memcg+0x10/0x10 [ 390.814730][T17902] ? find_held_lock+0x2b/0x80 [ 390.814745][T17902] ? rcu_read_unlock+0x17/0x60 [ 390.814757][T17902] ? rcu_read_unlock+0x17/0x60 [ 390.814774][T17902] charge_memcg+0xa6/0x280 [ 390.814785][T17902] __mem_cgroup_charge+0x2b/0x1e0 [ 390.814800][T17902] shmem_alloc_and_add_folio+0x451/0xd40 [ 390.814821][T17902] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 390.814840][T17902] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 390.814861][T17902] shmem_get_folio_gfp+0x6ab/0x1900 [ 390.814882][T17902] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 390.814903][T17902] shmem_write_begin+0x1a4/0x420 [ 390.814922][T17902] ? __pfx_shmem_write_begin+0x10/0x10 [ 390.814940][T17902] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 390.814954][T17902] ? lockdep_hardirqs_on+0x78/0x100 [ 390.814974][T17902] generic_perform_write+0x292/0xa40 [ 390.814995][T17902] ? __pfx_generic_perform_write+0x10/0x10 [ 390.815014][T17902] ? file_update_time_flags+0x373/0x500 [ 390.815033][T17902] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 390.815045][T17902] shmem_file_write_iter+0x10e/0x140 [ 390.815058][T17902] __kernel_write_iter+0x2ac/0x920 [ 390.815071][T17902] ? __pfx___kernel_write_iter+0x10/0x10 [ 390.815082][T17902] ? __up_read+0x2c5/0x700 [ 390.815096][T17902] ? dump_user_range+0x73b/0xb50 [ 390.815116][T17902] dump_user_range+0x3f9/0xb50 [ 390.815135][T17902] ? __pfx_dump_user_range+0x10/0x10 [ 390.815156][T17902] ? __pfx_writenote+0x10/0x10 [ 390.815177][T17902] elf_core_dump+0x2d5f/0x3d10 [ 390.815202][T17902] ? __pfx_elf_core_dump+0x10/0x10 [ 390.815220][T17902] ? kasan_save_stack+0x3f/0x50 [ 390.815238][T17902] ? kasan_save_stack+0x30/0x50 [ 390.815254][T17902] ? __kasan_kmalloc+0xaa/0xb0 [ 390.815271][T17902] ? __kvmalloc_node_noprof+0x360/0xa00 [ 390.815288][T17902] ? vfs_coredump+0x22f5/0x5790 [ 390.815309][T17902] ? asm_exc_page_fault+0x26/0x30 [ 390.815322][T17902] ? 0xffffffffff600000 [ 390.815354][T17902] ? vfs_coredump+0x29ba/0x5790 [ 390.815369][T17902] vfs_coredump+0x29ba/0x5790 [ 390.815391][T17902] ? __pfx_vfs_coredump+0x10/0x10 [ 390.815409][T17902] ? __lock_acquire+0x4a5/0x2630 [ 390.815425][T17902] ? lock_acquire+0x1cf/0x380 [ 390.815442][T17902] ? is_bpf_text_address+0x8a/0x1a0 [ 390.815460][T17902] ? bpf_ksym_find+0x128/0x1c0 [ 390.815474][T17902] ? __kernel_text_address+0xd/0x30 [ 390.815488][T17902] ? unwind_get_return_address+0x59/0xa0 [ 390.815503][T17902] ? arch_stack_walk+0xa6/0xf0 [ 390.815523][T17902] ? __sigqueue_free+0xbe/0x2a0 [ 390.815541][T17902] ? stack_trace_save+0x8e/0xc0 [ 390.815558][T17902] ? __pfx_stack_trace_save+0x10/0x10 [ 390.815575][T17902] ? stack_depot_save_flags+0x27/0x9d0 [ 390.815596][T17902] ? __lock_acquire+0x4a5/0x2630 [ 390.815632][T17902] ? proc_coredump_connector+0x2d3/0x4f0 [ 390.815647][T17902] ? __pfx_proc_coredump_connector+0x10/0x10 [ 390.815664][T17902] ? rcu_is_watching+0x12/0xc0 [ 390.815681][T17902] get_signal+0x1f2a/0x21e0 [ 390.815703][T17902] ? __pfx_get_signal+0x10/0x10 [ 390.815723][T17902] arch_do_signal_or_restart+0x91/0x7a0 [ 390.815741][T17902] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 390.815763][T17902] ? do_user_addr_fault+0x8d6/0x12f0 [ 390.815782][T17902] irqentry_exit+0x1f3/0x650 [ 390.815802][T17902] asm_exc_page_fault+0x26/0x30 [ 390.815814][T17902] RIP: 0033:0x7f7306b9c821 [ 390.815828][T17902] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 390.815840][T17902] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 390.815850][T17902] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 390.815858][T17902] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 390.815865][T17902] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 390.815872][T17902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 390.815879][T17902] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 390.815894][T17902] [ 390.815899][T17902] memory: usage 307200kB, limit 307200kB, failcnt 36981 [ 390.873848][T18274] hsr_slave_0: entered promiscuous mode [ 390.907876][T17902] memory+swap: usage 412388kB, limit 9007199254740988kB, failcnt 0 [ 390.910046][T18274] hsr_slave_1: entered promiscuous mode [ 390.911016][T17902] kmem: usage 13608kB, limit 9007199254740988kB, failcnt 0 [ 390.913360][T18274] debugfs: 'hsr0' already exists in 'hsr' [ 390.915100][T17902] Memory cgroup stats for [ 390.917021][T18274] Cannot create hsr debugfs directory [ 390.919705][T17902] /syz4 [ 390.974845][T18335] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3461'. [ 390.990889][T17902] : [ 391.015758][T17902] cache 300371968 [ 391.018027][T17902] rss 114688 [ 391.019306][T17902] rss_huge 0 [ 391.020380][T17902] shmem 300371968 [ 391.021575][T17902] mapped_file 0 [ 391.022728][T17902] dirty 0 [ 391.023696][T17902] writeback 0 [ 391.024853][T17902] workingset_refault_anon 81 [ 391.026345][T17902] workingset_refault_file 4248 [ 391.028496][T17902] swap 107712512 [ 391.029914][T17902] swapcached 255856640 [ 391.031471][T17902] pgpgin 565646 [ 391.032888][T17902] pgpgout 492321 [ 391.034105][T17902] pgfault 294964 [ 391.035301][T17902] pgmajfault 89 [ 391.036489][T17902] inactive_anon 122966016 [ 391.038123][T17902] active_anon 177520640 [ 391.039462][T17902] inactive_file 0 [ 391.040649][T17902] active_file 0 [ 391.041810][T17902] unevictable 0 [ 391.042975][T17902] hierarchical_memory_limit 314572800 [ 391.044937][T17902] hierarchical_memsw_limit 9223372036854771712 [ 391.047554][T17902] total_cache 300371968 [ 391.049197][T17902] total_rss 114688 [ 391.050392][T17902] total_rss_huge 0 [ 391.051592][T17902] total_shmem 300371968 [ 391.053008][T17902] total_mapped_file 0 [ 391.054280][T17902] total_dirty 0 [ 391.055428][T17902] total_writeback 0 [ 391.056654][T17902] total_workingset_refault_anon 81 [ 391.058632][T17902] total_workingset_refault_file 4248 [ 391.060637][T17902] total_swap 107712512 [ 391.062227][T17902] total_swapcached 255856640 [ 391.063868][T17902] total_pgpgin 565646 [ 391.065301][T17902] total_pgpgout 492321 [ 391.066650][T17902] total_pgfault 294964 [ 391.068182][T17902] total_pgmajfault 89 [ 391.070528][T17902] total_inactive_anon 122966016 [ 391.072643][ T7189] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.072817][T17902] total_active_anon 177520640 [ 391.081207][T17902] total_inactive_file 0 [ 391.083040][T17902] total_active_file 0 [ 391.084840][T17902] total_unevictable 0 [ 391.086547][T17902] anon_cost 0 [ 391.089877][T17902] file_cost 0 [ 391.091361][T17902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3291,pid=17895,uid=0 [ 391.097309][T17902] Memory cgroup out of memory: Killed process 17895 (syz.4.3291) total-vm:98652kB, anon-rss:1264kB, file-rss:56576kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 391.115156][T17884] syz.4.3291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 391.133315][T17884] CPU: 1 UID: 0 PID: 17884 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.133345][T17884] Tainted: [L]=SOFTLOCKUP [ 391.133352][T17884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.133363][T17884] Call Trace: [ 391.133371][T17884] [ 391.133378][T17884] dump_stack_lvl+0x100/0x190 [ 391.133422][T17884] dump_header+0xfb/0x606 [ 391.133444][T17884] oom_kill_process.cold+0xd/0x330 [ 391.133465][T17884] out_of_memory+0x340/0x14f0 [ 391.133498][T17884] ? __pfx_out_of_memory+0x10/0x10 [ 391.133530][T17884] mem_cgroup_out_of_memory+0xc6/0x130 [ 391.133557][T17884] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 391.133580][T17884] ? find_held_lock+0x2b/0x80 [ 391.133608][T17884] ? do_raw_spin_unlock+0x145/0x1e0 [ 391.133630][T17884] ? _raw_spin_unlock+0x28/0x50 [ 391.133658][T17884] try_charge_memcg+0x652/0xc90 [ 391.133681][T17884] ? __pfx_try_charge_memcg+0x10/0x10 [ 391.133700][T17884] ? find_held_lock+0x2b/0x80 [ 391.133721][T17884] ? rcu_read_unlock+0x17/0x60 [ 391.133738][T17884] ? rcu_read_unlock+0x17/0x60 [ 391.133765][T17884] charge_memcg+0xa6/0x280 [ 391.133783][T17884] __mem_cgroup_charge+0x2b/0x1e0 [ 391.133805][T17884] shmem_alloc_and_add_folio+0x451/0xd40 [ 391.133839][T17884] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 391.133867][T17884] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 391.133899][T17884] shmem_get_folio_gfp+0x6ab/0x1900 [ 391.133931][T17884] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 391.133964][T17884] shmem_write_begin+0x1a4/0x420 [ 391.133993][T17884] ? __pfx_shmem_write_begin+0x10/0x10 [ 391.134020][T17884] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 391.134041][T17884] ? lockdep_hardirqs_on+0x78/0x100 [ 391.134070][T17884] generic_perform_write+0x292/0xa40 [ 391.134104][T17884] ? __pfx_generic_perform_write+0x10/0x10 [ 391.134133][T17884] ? file_update_time_flags+0x373/0x500 [ 391.134160][T17884] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 391.134178][T17884] shmem_file_write_iter+0x10e/0x140 [ 391.134198][T17884] __kernel_write_iter+0x2ac/0x920 [ 391.134218][T17884] ? __pfx___kernel_write_iter+0x10/0x10 [ 391.134234][T17884] ? __up_read+0x2c5/0x700 [ 391.134256][T17884] ? dump_user_range+0x73b/0xb50 [ 391.134287][T17884] dump_user_range+0x3f9/0xb50 [ 391.134317][T17884] ? __pfx_dump_user_range+0x10/0x10 [ 391.134351][T17884] ? __pfx_writenote+0x10/0x10 [ 391.134383][T17884] elf_core_dump+0x2d5f/0x3d10 [ 391.134424][T17884] ? __pfx_elf_core_dump+0x10/0x10 [ 391.134447][T17884] ? kasan_save_stack+0x3f/0x50 [ 391.134471][T17884] ? kasan_save_stack+0x30/0x50 [ 391.134494][T17884] ? __kasan_kmalloc+0xaa/0xb0 [ 391.134519][T17884] ? __kvmalloc_node_noprof+0x360/0xa00 [ 391.134546][T17884] ? vfs_coredump+0x22f5/0x5790 [ 391.134570][T17884] ? asm_exc_page_fault+0x26/0x30 [ 391.134590][T17884] ? 0xffffffffff600000 [ 391.134647][T17884] ? vfs_coredump+0x29ba/0x5790 [ 391.134669][T17884] vfs_coredump+0x29ba/0x5790 [ 391.134704][T17884] ? __pfx_vfs_coredump+0x10/0x10 [ 391.134730][T17884] ? __lock_acquire+0x4a5/0x2630 [ 391.134756][T17884] ? lock_acquire+0x1cf/0x380 [ 391.134784][T17884] ? is_bpf_text_address+0x8a/0x1a0 [ 391.134810][T17884] ? bpf_ksym_find+0x128/0x1c0 [ 391.134833][T17884] ? __kernel_text_address+0xd/0x30 [ 391.134853][T17884] ? unwind_get_return_address+0x59/0xa0 [ 391.134877][T17884] ? arch_stack_walk+0xa6/0xf0 [ 391.134907][T17884] ? __sigqueue_free+0xbe/0x2a0 [ 391.134934][T17884] ? stack_trace_save+0x8e/0xc0 [ 391.134958][T17884] ? __pfx_stack_trace_save+0x10/0x10 [ 391.134981][T17884] ? stack_depot_save_flags+0x27/0x9d0 [ 391.135011][T17884] ? __lock_acquire+0x4a5/0x2630 [ 391.135070][T17884] ? proc_coredump_connector+0x2d3/0x4f0 [ 391.135091][T17884] ? __pfx_proc_coredump_connector+0x10/0x10 [ 391.135115][T17884] ? rcu_is_watching+0x12/0xc0 [ 391.135142][T17884] get_signal+0x1f2a/0x21e0 [ 391.135175][T17884] ? __pfx_get_signal+0x10/0x10 [ 391.135204][T17884] arch_do_signal_or_restart+0x91/0x7a0 [ 391.135231][T17884] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.135262][T17884] ? do_user_addr_fault+0x8d6/0x12f0 [ 391.135291][T17884] irqentry_exit+0x1f3/0x650 [ 391.135319][T17884] asm_exc_page_fault+0x26/0x30 [ 391.135335][T17884] RIP: 0033:0x7f7306b9c821 [ 391.135350][T17884] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 391.135367][T17884] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 391.135382][T17884] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 391.135394][T17884] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 391.135408][T17884] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 391.135419][T17884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 391.135442][T17884] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 391.135468][T17884] [ 391.135569][T17884] memory: usage 307200kB, limit 307200kB, failcnt 37233 [ 391.137796][ T5947] Bluetooth: hci2: command tx timeout [ 391.144778][T17884] memory+swap: usage 412388kB, limit 9007199254740988kB, failcnt 0 [ 391.318371][T17884] kmem: usage 13568kB, limit 9007199254740988kB, failcnt 0 [ 391.320827][T17884] Memory cgroup stats for /syz4: [ 391.320928][T17884] cache 295383040 [ 391.324003][T17884] rss 114688 [ 391.325194][T17884] rss_huge 0 [ 391.326488][T17884] shmem 294543360 [ 391.329092][T17884] mapped_file 0 [ 391.330571][T17884] dirty 0 [ 391.331654][T17884] writeback 0 [ 391.332791][T17884] workingset_refault_anon 81 [ 391.334389][T17884] workingset_refault_file 4453 [ 391.336072][T17884] swap 105623552 [ 391.337332][T17884] swapcached 258535424 [ 391.339669][T17884] pgpgin 566867 [ 391.340863][T17884] pgpgout 494759 [ 391.341973][T17884] pgfault 295027 [ 391.343197][T17884] pgmajfault 90 [ 391.344471][T17884] inactive_anon 97325056 [ 391.345891][T17884] active_anon 196988928 [ 391.347293][T17884] inactive_file 0 [ 391.359058][T17884] active_file 839680 [ 391.360469][T17884] unevictable 0 [ 391.361649][T17884] hierarchical_memory_limit 314572800 [ 391.363425][T17884] hierarchical_memsw_limit 9223372036854771712 [ 391.365467][T17884] total_cache 295383040 [ 391.366908][T17884] total_rss 114688 [ 391.377765][T17884] total_rss_huge 0 [ 391.379079][T17884] total_shmem 294543360 [ 391.380438][T17884] total_mapped_file 0 [ 391.393919][T17884] total_dirty 0 [ 391.399513][T17884] total_writeback 0 [ 391.401097][T17884] total_workingset_refault_anon 81 [ 391.404034][T17884] total_workingset_refault_file 4453 [ 391.405927][T17884] total_swap 105623552 [ 391.407377][T17884] total_swapcached 258535424 [ 391.417718][T17884] total_pgpgin 566867 [ 391.419286][T17884] total_pgpgout 494759 [ 391.430325][T17884] total_pgfault 295027 [ 391.431823][T17884] total_pgmajfault 90 [ 391.438292][T17884] total_inactive_anon 97325056 [ 391.440071][T17884] total_active_anon 196988928 [ 391.441769][T17884] total_inactive_file 0 [ 391.443199][T17884] total_active_file 839680 [ 391.444624][T17884] total_unevictable 0 [ 391.487692][T17884] anon_cost 0 [ 391.488685][T17884] file_cost 0 [ 391.489675][T17884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3291,pid=17893,uid=0 [ 391.494047][T17884] Memory cgroup out of memory: Killed process 17893 (syz.4.3291) total-vm:98652kB, anon-rss:1264kB, file-rss:56576kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 392.304630][T17888] syz.4.3291 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 392.311858][T17888] CPU: 2 UID: 0 PID: 17888 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.311880][T17888] Tainted: [L]=SOFTLOCKUP [ 392.311885][T17888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.311892][T17888] Call Trace: [ 392.311898][T17888] [ 392.311903][T17888] dump_stack_lvl+0x100/0x190 [ 392.311930][T17888] dump_header+0xfb/0x606 [ 392.311944][T17888] oom_kill_process.cold+0xd/0x330 [ 392.311958][T17888] out_of_memory+0x340/0x14f0 [ 392.311980][T17888] ? __pfx_out_of_memory+0x10/0x10 [ 392.312008][T17888] mem_cgroup_out_of_memory+0xc6/0x130 [ 392.312030][T17888] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 392.312048][T17888] ? find_held_lock+0x2b/0x80 [ 392.312074][T17888] ? do_raw_spin_unlock+0x145/0x1e0 [ 392.312091][T17888] ? _raw_spin_unlock+0x28/0x50 [ 392.312118][T17888] try_charge_memcg+0x652/0xc90 [ 392.312138][T17888] ? __pfx_try_charge_memcg+0x10/0x10 [ 392.312151][T17888] ? find_held_lock+0x2b/0x80 [ 392.312166][T17888] ? rcu_read_unlock+0x17/0x60 [ 392.312179][T17888] ? rcu_read_unlock+0x17/0x60 [ 392.312197][T17888] charge_memcg+0xa6/0x280 [ 392.312209][T17888] __mem_cgroup_charge+0x2b/0x1e0 [ 392.312226][T17888] filemap_add_folio+0xe7/0x690 [ 392.312246][T17888] ? __pfx_filemap_add_folio+0x10/0x10 [ 392.312269][T17888] __filemap_get_folio_mpol+0x5d5/0xe70 [ 392.312292][T17888] filemap_fault+0x8a2/0x2eb0 [ 392.312313][T17888] ? __folio_batch_add_and_move+0x464/0xc60 [ 392.312333][T17888] ? __pfx_filemap_fault+0x10/0x10 [ 392.312355][T17888] ? __pfx_filemap_map_pages+0x10/0x10 [ 392.312375][T17888] __do_fault+0x10d/0x550 [ 392.312389][T17888] do_fault+0xabb/0x18e0 [ 392.312405][T17888] __handle_mm_fault+0x1815/0x2b60 [ 392.312425][T17888] ? __pfx___handle_mm_fault+0x10/0x10 [ 392.312441][T17888] ? pte_offset_map_lock+0x174/0x320 [ 392.312454][T17888] ? find_held_lock+0x2b/0x80 [ 392.312473][T17888] ? follow_page_pte+0x5b3/0x1400 [ 392.312490][T17888] handle_mm_fault+0x36d/0xa20 [ 392.312508][T17888] __get_user_pages+0xf9c/0x34d0 [ 392.312527][T17888] ? __pfx___get_user_pages+0x10/0x10 [ 392.312544][T17888] get_dump_page+0x27e/0x3d0 [ 392.312557][T17888] ? __pfx_get_dump_page+0x10/0x10 [ 392.312571][T17888] ? dump_user_range+0x73b/0xb50 [ 392.312591][T17888] dump_user_range+0x18d/0xb50 [ 392.312611][T17888] ? __pfx_dump_user_range+0x10/0x10 [ 392.312632][T17888] ? __pfx_writenote+0x10/0x10 [ 392.312653][T17888] elf_core_dump+0x2d5f/0x3d10 [ 392.312679][T17888] ? __pfx_elf_core_dump+0x10/0x10 [ 392.312696][T17888] ? kasan_save_stack+0x3f/0x50 [ 392.312713][T17888] ? kasan_save_stack+0x30/0x50 [ 392.312766][T17888] ? __kasan_kmalloc+0xaa/0xb0 [ 392.312784][T17888] ? __kvmalloc_node_noprof+0x360/0xa00 [ 392.312802][T17888] ? vfs_coredump+0x22f5/0x5790 [ 392.312818][T17888] ? asm_exc_page_fault+0x26/0x30 [ 392.312832][T17888] ? 0xffffffffff600000 [ 392.312865][T17888] ? vfs_coredump+0x29ba/0x5790 [ 392.312880][T17888] vfs_coredump+0x29ba/0x5790 [ 392.312903][T17888] ? __pfx_vfs_coredump+0x10/0x10 [ 392.312941][T17888] ? __lock_acquire+0x4a5/0x2630 [ 392.312958][T17888] ? lock_acquire+0x1cf/0x380 [ 392.312975][T17888] ? is_bpf_text_address+0x8a/0x1a0 [ 392.312993][T17888] ? bpf_ksym_find+0x128/0x1c0 [ 392.313008][T17888] ? __kernel_text_address+0xd/0x30 [ 392.313021][T17888] ? unwind_get_return_address+0x59/0xa0 [ 392.313038][T17888] ? arch_stack_walk+0xa6/0xf0 [ 392.313057][T17888] ? __sigqueue_free+0xbe/0x2a0 [ 392.313076][T17888] ? stack_trace_save+0x8e/0xc0 [ 392.313097][T17888] ? __pfx_stack_trace_save+0x10/0x10 [ 392.313113][T17888] ? stack_depot_save_flags+0x27/0x9d0 [ 392.313133][T17888] ? __lock_acquire+0x4a5/0x2630 [ 392.313168][T17888] ? proc_coredump_connector+0x2d3/0x4f0 [ 392.313182][T17888] ? __pfx_proc_coredump_connector+0x10/0x10 [ 392.313198][T17888] ? rcu_is_watching+0x12/0xc0 [ 392.313215][T17888] get_signal+0x1f2a/0x21e0 [ 392.313236][T17888] ? __pfx_get_signal+0x10/0x10 [ 392.313255][T17888] arch_do_signal_or_restart+0x91/0x7a0 [ 392.313274][T17888] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 392.313295][T17888] ? do_user_addr_fault+0x8d6/0x12f0 [ 392.313314][T17888] irqentry_exit+0x1f3/0x650 [ 392.313333][T17888] asm_exc_page_fault+0x26/0x30 [ 392.313345][T17888] RIP: 0033:0x7f7306b9c821 [ 392.313356][T17888] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 392.313366][T17888] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 392.313377][T17888] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 392.313385][T17888] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 392.313391][T17888] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 392.313398][T17888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 392.313404][T17888] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 392.313419][T17888] [ 392.313501][T17888] memory: usage 307200kB, limit 307200kB, failcnt 42371 [ 392.334443][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 392.334459][ T40] audit: type=1400 audit(2000525122.552:3350): avc: denied { watch_mount watch_reads } for pid=18365 comm="syz.4.3471" path="/498" dev="tmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 392.336096][T17888] memory+swap: usage 412396kB, limit 9007199254740988kB, failcnt 0 [ 392.382248][ T40] audit: type=1400 audit(2000525122.602:3351): avc: denied { create } for pid=18368 comm="syz.2.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.385927][T17888] kmem: usage 13296kB, limit 9007199254740988kB, failcnt 0 [ 392.392621][ T88] smc: removing ib device sy‡1 [ 392.394200][T17888] Memory cgroup stats for [ 392.399369][ T40] audit: type=1400 audit(2000525122.622:3352): avc: denied { write } for pid=18368 comm="syz.2.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.399441][T18369] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.399975][T17888] /syz4 [ 392.421641][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.433298][T17888] : [ 392.435795][ T40] audit: type=1400 audit(2000525122.652:3353): avc: denied { read write } for pid=14807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.437076][T17888] cache 300670976 [ 392.439020][ T40] audit: type=1400 audit(2000525122.652:3354): avc: denied { open } for pid=14807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.439050][ T40] audit: type=1400 audit(2000525122.652:3355): avc: denied { ioctl } for pid=14807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.452700][ T40] audit: type=1400 audit(2000525122.672:3356): avc: denied { create } for pid=18370 comm="syz.2.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.454557][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 392.455927][T17888] rss 212992 [ 392.455937][T17888] rss_huge 0 [ 392.455942][T17888] shmem 300666880 [ 392.455947][T17888] mapped_file 0 [ 392.455952][T17888] dirty 0 [ 392.455957][T17888] writeback 0 [ 392.455961][T17888] workingset_refault_anon 82 [ 392.455967][T17888] workingset_refault_file 7754 [ 392.455972][T17888] swap 107720704 [ 392.455977][T17888] swapcached 274628608 [ 392.455982][T17888] pgpgin 590120 [ 392.455987][T17888] pgpgout 516698 [ 392.455992][T17888] pgfault 295810 [ 392.455997][T17888] pgmajfault 119 [ 392.456001][T17888] inactive_anon 171884544 [ 392.456007][T17888] active_anon 128995328 [ 392.456012][T17888] inactive_file 4096 [ 392.456017][T17888] active_file 0 [ 392.456022][T17888] unevictable 0 [ 392.456026][T17888] hierarchical_memory_limit 314572800 [ 392.456032][T17888] hierarchical_memsw_limit 9223372036854771712 [ 392.456038][T17888] total_cache 300670976 [ 392.456043][T17888] total_rss 212992 [ 392.456048][T17888] total_rss_huge 0 [ 392.456053][T17888] total_shmem 300666880 [ 392.456058][T17888] total_mapped_file 0 [ 392.456063][T17888] total_dirty 0 [ 392.456067][T17888] total_writeback 0 [ 392.456072][T17888] total_workingset_refault_anon 82 [ 392.456078][T17888] total_workingset_refault_file 7754 [ 392.456083][T17888] total_swap 107720704 [ 392.456088][T17888] total_swapcached 274628608 [ 392.456093][T17888] total_pgpgin 590120 [ 392.456098][T17888] total_pgpgout 516698 [ 392.456103][T17888] total_pgfault 295810 [ 392.456108][T17888] total_pgmajfault 119 [ 392.456113][T17888] total_inactive_anon 171884544 [ 392.456118][T17888] total_active_anon 128995328 [ 392.456127][T17888] total_inactive_file 4096 [ 392.456133][T17888] total_active_file 0 [ 392.456138][T17888] total_unevictable 0 [ 392.456143][T17888] anon_cost 0 [ 392.456148][T17888] file_cost 0 [ 392.456153][T17888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3291,pid=17905,uid=0 [ 392.456604][ T40] audit: type=1400 audit(2000525122.672:3357): avc: denied { write } for pid=18370 comm="syz.2.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.457730][T17888] Memory cgroup out of memory: Killed process 17905 (syz.4.3291) total-vm:98652kB, anon-rss:1264kB, file-rss:56576kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 392.665552][T17901] syz.4.3291 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 392.669966][T17901] CPU: 3 UID: 0 PID: 17901 Comm: syz.4.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.669993][T17901] Tainted: [L]=SOFTLOCKUP [ 392.669999][T17901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.670011][T17901] Call Trace: [ 392.670019][T17901] [ 392.670041][T17901] dump_stack_lvl+0x100/0x190 [ 392.670081][T17901] dump_header+0xfb/0x606 [ 392.670104][T17901] oom_kill_process.cold+0xd/0x330 [ 392.670125][T17901] out_of_memory+0x340/0x14f0 [ 392.670158][T17901] ? __pfx_out_of_memory+0x10/0x10 [ 392.670192][T17901] mem_cgroup_out_of_memory+0xc6/0x130 [ 392.670218][T17901] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 392.670241][T17901] ? find_held_lock+0x2b/0x80 [ 392.670271][T17901] ? do_raw_spin_unlock+0x145/0x1e0 [ 392.670292][T17901] ? _raw_spin_unlock+0x28/0x50 [ 392.670320][T17901] try_charge_memcg+0x652/0xc90 [ 392.670345][T17901] ? __pfx_try_charge_memcg+0x10/0x10 [ 392.670365][T17901] ? find_held_lock+0x2b/0x80 [ 392.670392][T17901] ? rcu_read_unlock+0x17/0x60 [ 392.670405][T17901] ? rcu_read_unlock+0x17/0x60 [ 392.670422][T17901] charge_memcg+0xa6/0x280 [ 392.670434][T17901] __mem_cgroup_charge+0x2b/0x1e0 [ 392.670449][T17901] shmem_alloc_and_add_folio+0x451/0xd40 [ 392.670471][T17901] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 392.670490][T17901] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 392.670511][T17901] shmem_get_folio_gfp+0x6ab/0x1900 [ 392.670531][T17901] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 392.670553][T17901] shmem_write_begin+0x1a4/0x420 [ 392.670573][T17901] ? __pfx_shmem_write_begin+0x10/0x10 [ 392.670591][T17901] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 392.670606][T17901] ? lockdep_hardirqs_on+0x78/0x100 [ 392.670625][T17901] generic_perform_write+0x292/0xa40 [ 392.670647][T17901] ? __pfx_generic_perform_write+0x10/0x10 [ 392.670666][T17901] ? file_update_time_flags+0x373/0x500 [ 392.670685][T17901] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 392.670697][T17901] shmem_file_write_iter+0x10e/0x140 [ 392.670711][T17901] __kernel_write_iter+0x2ac/0x920 [ 392.670724][T17901] ? __pfx___kernel_write_iter+0x10/0x10 [ 392.670735][T17901] ? __up_read+0x2c5/0x700 [ 392.670749][T17901] ? dump_user_range+0x73b/0xb50 [ 392.670770][T17901] dump_user_range+0x3f9/0xb50 [ 392.670789][T17901] ? __pfx_dump_user_range+0x10/0x10 [ 392.670811][T17901] ? __pfx_writenote+0x10/0x10 [ 392.670832][T17901] elf_core_dump+0x2d5f/0x3d10 [ 392.670857][T17901] ? __pfx_elf_core_dump+0x10/0x10 [ 392.670875][T17901] ? kasan_save_stack+0x3f/0x50 [ 392.670893][T17901] ? kasan_save_stack+0x30/0x50 [ 392.670910][T17901] ? __kasan_kmalloc+0xaa/0xb0 [ 392.670926][T17901] ? __kvmalloc_node_noprof+0x360/0xa00 [ 392.670944][T17901] ? vfs_coredump+0x22f5/0x5790 [ 392.670960][T17901] ? asm_exc_page_fault+0x26/0x30 [ 392.670974][T17901] ? 0xffffffffff600000 [ 392.671006][T17901] ? vfs_coredump+0x29ba/0x5790 [ 392.671021][T17901] vfs_coredump+0x29ba/0x5790 [ 392.671043][T17901] ? __pfx_vfs_coredump+0x10/0x10 [ 392.671061][T17901] ? __lock_acquire+0x4a5/0x2630 [ 392.671078][T17901] ? lock_acquire+0x1cf/0x380 [ 392.671095][T17901] ? is_bpf_text_address+0x8a/0x1a0 [ 392.671112][T17901] ? bpf_ksym_find+0x128/0x1c0 [ 392.671127][T17901] ? __kernel_text_address+0xd/0x30 [ 392.671140][T17901] ? unwind_get_return_address+0x59/0xa0 [ 392.671157][T17901] ? arch_stack_walk+0xa6/0xf0 [ 392.671176][T17901] ? __sigqueue_free+0xbe/0x2a0 [ 392.671194][T17901] ? stack_trace_save+0x8e/0xc0 [ 392.671209][T17901] ? __pfx_stack_trace_save+0x10/0x10 [ 392.671225][T17901] ? stack_depot_save_flags+0x27/0x9d0 [ 392.671244][T17901] ? __lock_acquire+0x4a5/0x2630 [ 392.671279][T17901] ? proc_coredump_connector+0x2d3/0x4f0 [ 392.671293][T17901] ? __pfx_proc_coredump_connector+0x10/0x10 [ 392.671308][T17901] ? rcu_is_watching+0x12/0xc0 [ 392.671325][T17901] get_signal+0x1f2a/0x21e0 [ 392.671346][T17901] ? __pfx_get_signal+0x10/0x10 [ 392.671364][T17901] arch_do_signal_or_restart+0x91/0x7a0 [ 392.671385][T17901] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 392.671406][T17901] ? do_user_addr_fault+0x8d6/0x12f0 [ 392.671424][T17901] irqentry_exit+0x1f3/0x650 [ 392.671442][T17901] asm_exc_page_fault+0x26/0x30 [ 392.671454][T17901] RIP: 0033:0x7f7306b9c821 [ 392.671465][T17901] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 392.671476][T17901] RSP: 002b:0000000000003b50 EFLAGS: 00010217 [ 392.671486][T17901] RAX: 0000000000000000 RBX: 00007f7306e15fa0 RCX: 00007f7306b9c819 [ 392.671493][T17901] RDX: 0000000000000000 RSI: 0000000000003b50 RDI: 0000000020000400 [ 392.671500][T17901] RBP: 00007f7306c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 392.671506][T17901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 392.671513][T17901] R13: 00007f7306e16038 R14: 00007f7306e15fa0 R15: 00007ffcb735a698 [ 392.671528][T17901] [ 392.671593][T17901] memory: usage 307200kB, limit 307200kB, failcnt 43496 [ 392.851244][T17901] memory+swap: usage 364732kB, limit 9007199254740988kB, failcnt 0 [ 392.851649][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.853786][T17901] kmem: usage 13252kB, limit 9007199254740988kB, failcnt 0 [ 392.859395][T17901] Memory cgroup stats for /syz4: [ 392.859499][T17901] cache 260870144 [ 392.862544][T17901] rss 110592 [ 392.863648][T17901] rss_huge 0 [ 392.864766][T17901] shmem 260870144 [ 392.865961][T17901] mapped_file 0 [ 392.867101][T17901] dirty 0 [ 392.868175][T17901] writeback 0 [ 392.869363][T17901] workingset_refault_anon 82 [ 392.871002][T17901] workingset_refault_file 8080 [ 392.872589][T17901] swap 98856960 [ 392.873758][T17901] swapcached 274628608 [ 392.875108][T17901] pgpgin 591863 [ 392.876313][T17901] pgpgout 528183 [ 392.877583][T17901] pgfault 295861 [ 392.879048][T17901] pgmajfault 123 [ 392.879163][ T7189] bond0 (unregistering): Released all slaves [ 392.880217][T17901] inactive_anon 141721600 [ 392.880226][T17901] active_anon 119255040 [ 392.886430][T17901] inactive_file 0 [ 392.886600][ T7189] bond1 (unregistering): Released all slaves [ 392.888261][T17901] active_file 0 [ 392.888270][T17901] unevictable 0 [ 392.888274][T17901] hierarchical_memory_limit 314572800 [ 392.888280][T17901] hierarchical_memsw_limit 9223372036854771712 [ 392.888285][T17901] total_cache 260870144 [ 392.888290][T17901] total_rss 110592 [ 392.888295][T17901] total_rss_huge 0 [ 392.888300][T17901] total_shmem 260870144 [ 392.888304][T17901] total_mapped_file 0 [ 392.888309][T17901] total_dirty 0 [ 392.888313][T17901] total_writeback 0 [ 392.888318][T17901] total_workingset_refault_anon 82 [ 392.888323][T17901] total_workingset_refault_file 8080 [ 392.888328][T17901] total_swap 98856960 [ 392.888333][T17901] total_swapcached 274628608 [ 392.888338][T17901] total_pgpgin 591863 [ 392.888343][T17901] total_pgpgout 528183 [ 392.888348][T17901] total_pgfault 295861 [ 392.888353][T17901] total_pgmajfault 123 [ 392.888357][T17901] total_inactive_anon 141721600 [ 392.888362][T17901] total_active_anon 119255040 [ 392.888368][T17901] total_inactive_file 0 [ 392.888373][T17901] total_active_file 0 [ 392.888379][T17901] total_unevictable 0 [ 392.888384][T17901] anon_cost 0 [ 392.888388][T17901] file_cost 0 [ 392.888394][T17901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg= [ 392.903025][ T7189] bond2 (unregistering): Released all slaves [ 392.904176][T17901] /syz4 [ 392.912064][ T7189] bond3 (unregistering): Released all slaves [ 392.913968][T17901] ,task=syz.4.3291,pid=17904,uid=0 [ 392.923155][ T7189] bond4 (unregistering): Released all slaves [ 392.923825][T17901] Memory cgroup out of memory: Killed process 17904 (syz.4.3291) total-vm:98652kB, anon-rss:1264kB, file-rss:56576kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 392.936287][ T7189] bond5 (unregistering): Released all slaves [ 392.988408][ T7189] bond6 (unregistering): (slave veth5): Releasing active interface [ 393.029354][ T7189] bond6 (unregistering): Released all slaves [ 393.060601][ T40] audit: type=1400 audit(2000525123.282:3358): avc: denied { prog_load } for pid=18372 comm="syz.4.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.111615][ T7189] bond7 (unregistering): Released all slaves [ 393.218125][ T5939] Bluetooth: hci2: command tx timeout [ 393.236961][ T40] audit: type=1400 audit(2000525123.452:3359): avc: denied { search } for pid=5645 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.588980][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3482'. [ 393.622753][T18389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3482'. [ 393.687294][T18389] netlink: 'syz.2.3482': attribute type 1 has an invalid length. [ 393.808192][T18389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.876915][T18394] bond3: (slave geneve2): making interface the new active one [ 393.889890][T18394] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 393.911723][ T7292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.915649][ T7292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.002380][ T7292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.006154][ T7292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.899087][T18274] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.970581][T18274] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 395.082362][T18274] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 395.113630][T18274] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 395.242644][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.253583][T18274] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.259465][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.262056][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.275032][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.277708][ T7307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.291023][T18457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3501'. [ 395.297805][ T5939] Bluetooth: hci2: command tx timeout [ 395.810940][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.816195][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.850362][T18274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.066840][T18274] veth0_vlan: entered promiscuous mode [ 396.077412][T18274] veth1_vlan: entered promiscuous mode [ 396.105162][T18274] veth0_macvtap: entered promiscuous mode [ 396.112305][T18274] veth1_macvtap: entered promiscuous mode [ 396.124730][T18274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.142065][T18274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.148783][ T7307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.152066][ T7307] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.155817][ T7307] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.161959][ T7307] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.254175][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.264482][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.291821][ T7307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.294437][ T7307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.381848][T18493] netlink: 79 bytes leftover after parsing attributes in process `syz.9.3438'. [ 396.410462][T18495] netlink: 'syz.1.3510': attribute type 5 has an invalid length. [ 396.517763][ T9741] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 396.689622][ T9741] usb 7-1: unable to get BOS descriptor or descriptor too short [ 396.692861][ T9741] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.696367][ T9741] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 396.702158][ T9741] usb 7-1: string descriptor 0 read error: -22 [ 396.704238][ T9741] usb 7-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 396.707310][ T9741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.730890][ T9741] usb 7-1: 0:2 : does not exist [ 396.732755][ T9741] usb 7-1: unit 2 not found! [ 396.734288][ T9741] usb 7-1: unit 3 not found! [ 396.791012][T12249] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 396.812099][T18507] netlink: 'syz.4.3516': attribute type 8 has an invalid length. [ 396.814586][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 396.958325][ T9741] usb 7-1: USB disconnect, device number 14 [ 396.960246][T12249] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.964163][T12249] usb 14-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.977443][T12249] usb 14-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 396.981308][T12249] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.988030][T12249] usb 14-1: config 0 descriptor?? [ 396.996524][T12249] usbhid 14-1:0.0: couldn't find an input interrupt endpoint [ 397.197997][T12249] usb 14-1: USB disconnect, device number 19 [ 397.338474][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 397.338487][ T40] audit: type=1400 audit(2000525127.562:3467): avc: denied { bind } for pid=18533 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.347715][ T40] audit: type=1400 audit(2000525127.562:3468): avc: denied { setopt } for pid=18533 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.387779][ T5939] Bluetooth: hci2: command tx timeout [ 397.388426][ T40] audit: type=1400 audit(2000525127.612:3469): avc: denied { egress } for pid=9741 comm="kworker/1:7" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 397.453597][ T40] audit: type=1400 audit(2000525127.672:3470): avc: denied { read write } for pid=14807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.466547][ T40] audit: type=1400 audit(2000525127.672:3471): avc: denied { open } for pid=14807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.479202][ T40] audit: type=1400 audit(2000525127.672:3472): avc: denied { ioctl } for pid=14807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.488832][ T40] audit: type=1400 audit(2000525127.692:3473): avc: denied { accept } for pid=18537 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.496656][ T40] audit: type=1400 audit(2000525127.702:3474): avc: denied { write } for pid=18537 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.508669][ T40] audit: type=1400 audit(2000525127.702:3475): avc: denied { read } for pid=18537 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.526772][ T40] audit: type=1400 audit(2000525127.742:3476): avc: denied { read } for pid=18539 comm="syz.2.3530" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 398.014928][T18548] Bluetooth: MGMT ver 1.23 [ 398.934604][T18576] kAFS: unparsable volume name [ 399.207814][T11487] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 399.567716][T11487] usb 14-1: Using ep0 maxpacket: 32 [ 399.570697][T11487] usb 14-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 399.574168][T11487] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.581722][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 399.590064][T11487] usb 14-1: config 0 descriptor?? [ 399.595570][T11487] gspca_main: sq930x-2.14.0 probing 041e:403c [ 400.614695][T11487] gspca_sq930x: ucbus_write failed -71 [ 400.616656][T11487] sq930x 14-1:0.0: probe with driver sq930x failed with error -71 [ 400.624349][T11487] usb 14-1: USB disconnect, device number 20 [ 400.697807][ T9741] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 400.869011][ T9741] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.873636][ T9741] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.883394][ T9741] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.887349][ T9741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.891141][ T9741] usb 7-1: Product: syz [ 400.892548][ T9741] usb 7-1: Manufacturer: syz [ 400.894602][ T9741] usb 7-1: SerialNumber: syz [ 400.894684][ T7189] hsr_slave_0: left promiscuous mode [ 400.900171][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.903405][ T9741] cdc_ncm 7-1:1.0: skipping garbage [ 400.905660][ T9741] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 400.913039][ T9741] cdc_ncm 7-1:1.0: bind() failure [ 400.914350][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.920107][ T7189] batman_adv: batadv0: Removing interface: ipvlan2 [ 400.921082][ T9741] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 400.925802][ T9741] cdc_ncm 7-1:1.1: bind() failure [ 401.102464][ T7189] team0 (unregistering): Port device team_slave_1 removed [ 401.103279][ T7901] usb 7-1: USB disconnect, device number 15 [ 401.668851][ T7189] IPVS: stop unused estimator thread 0... [ 401.987767][ T9741] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 402.147753][ T9741] usb 7-1: Using ep0 maxpacket: 16 [ 402.151287][ T9741] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.155018][ T9741] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.159298][ T9741] usb 7-1: config 0 interface 0 has no altsetting 0 [ 402.161505][ T9741] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 402.164392][ T9741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.173456][ T9741] usb 7-1: config 0 descriptor?? [ 402.190533][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3597'. [ 402.363073][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 402.363089][ T40] audit: type=1400 audit(2000525132.582:3570): avc: denied { allowed } for pid=18697 comm="syz.4.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 402.373316][ T40] audit: type=1400 audit(2000525132.582:3571): avc: denied { create } for pid=18697 comm="syz.4.3601" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.387927][ T40] audit: type=1400 audit(2000525132.582:3572): avc: denied { map } for pid=18697 comm="syz.4.3601" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=83879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.395700][ T40] audit: type=1400 audit(2000525132.582:3573): avc: denied { read write } for pid=18697 comm="syz.4.3601" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=83879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.401440][T18701] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.406439][ T40] audit: type=1400 audit(2000525132.612:3574): avc: denied { mount } for pid=18700 comm="syz.9.3602" name="/" dev="ramfs" ino=86627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 402.417522][ T40] audit: type=1400 audit(2000525132.622:3575): avc: denied { unlink } for pid=18700 comm="syz.9.3602" name="#53" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.427542][ T40] audit: type=1400 audit(2000525132.632:3576): avc: denied { mount } for pid=18700 comm="syz.9.3602" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 402.437085][ T40] audit: type=1800 audit(2000525132.642:3577): pid=18701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.3602" name="file1" dev="overlay" ino=86628 res=0 errno=0 [ 402.446657][ T40] audit: type=1400 audit(2000525132.642:3578): avc: denied { create } for pid=18703 comm="syz.4.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.454760][ T40] audit: type=1400 audit(2000525132.652:3579): avc: denied { write } for pid=18703 comm="syz.4.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.589515][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.592222][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.594479][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.597077][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.602354][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.604743][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.607248][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.611314][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.614315][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.616637][ T9741] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 402.621819][ T9741] cougar 0003:060B:500A.000E: unexpected long global item [ 402.624592][ T9741] cougar 0003:060B:500A.000E: parse failed [ 402.627296][ T9741] cougar 0003:060B:500A.000E: probe with driver cougar failed with error -22 [ 402.785301][T12249] usb 7-1: USB disconnect, device number 16 [ 403.441745][T18775] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 404.252132][T18805] batadv_slave_1: entered promiscuous mode [ 404.255892][T18804] batadv_slave_1: left promiscuous mode [ 405.369380][T18836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3659'. [ 406.211849][T18886] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3682'. [ 406.287738][ T1025] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 406.451330][ T1025] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 406.454663][ T1025] usb 7-1: config 0 has no interface number 0 [ 406.456960][ T1025] usb 7-1: config 0 interface 41 has no altsetting 0 [ 406.461541][ T1025] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 406.464532][ T1025] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.467155][ T1025] usb 7-1: Product: syz [ 406.469324][ T1025] usb 7-1: Manufacturer: syz [ 406.471216][ T1025] usb 7-1: SerialNumber: syz [ 406.474689][ T1025] usb 7-1: config 0 descriptor?? [ 407.282766][ T1025] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 407.588983][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 407.589000][ T40] audit: type=1400 audit(2000525137.812:3685): avc: denied { create } for pid=18934 comm="syz.1.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.601586][ T40] audit: type=1400 audit(2000525137.822:3686): avc: denied { write } for pid=18934 comm="syz.1.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.698496][ T40] audit: type=1400 audit(2000525137.922:3687): avc: denied { egress } for pid=18937 comm="syz.1.3704" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 407.709144][ T40] audit: type=1400 audit(2000525137.922:3688): avc: denied { sendto } for pid=18937 comm="syz.1.3704" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 407.755309][ T40] audit: type=1400 audit(2000525137.972:3689): avc: denied { write } for pid=18940 comm="syz.9.3706" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 407.762827][ T40] audit: type=1400 audit(2000525137.972:3690): avc: denied { open } for pid=18940 comm="syz.9.3706" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 407.770619][ T40] audit: type=1400 audit(2000525137.982:3691): avc: denied { ioctl } for pid=18940 comm="syz.9.3706" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 407.947840][ T40] audit: type=1400 audit(2000525138.152:3692): avc: denied { create } for pid=18937 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.957253][ T40] audit: type=1400 audit(2000525138.162:3693): avc: denied { write } for pid=18937 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.964925][ T40] audit: type=1400 audit(2000525138.162:3694): avc: denied { read } for pid=18937 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.048053][ T7901] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 408.208015][ T7901] usb 14-1: Using ep0 maxpacket: 32 [ 408.213787][ T7901] usb 14-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 408.218337][ T7901] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.222088][ T7901] usb 14-1: Product: syz [ 408.223994][ T7901] usb 14-1: Manufacturer: syz [ 408.226014][ T7901] usb 14-1: SerialNumber: syz [ 408.238200][ T7901] usb 14-1: config 0 descriptor?? [ 408.298074][ T1025] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 408.302952][ T1025] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 408.307283][ T1025] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 408.317405][ T1025] usb 7-1: USB disconnect, device number 17 [ 408.449329][ T7901] RobotFuzz Open Source InterFace, OSIF 14-1:0.0: version d4.15 found at bus 014 address 021 [ 408.631469][T18957] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3713'. [ 408.650463][ T8252] usb 14-1: USB disconnect, device number 21 [ 408.710166][T18959] IPVS: Scheduler module ip_vs_sip not found [ 409.831021][T19025] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 410.557758][ T7901] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 410.737775][ T7901] usb 7-1: Using ep0 maxpacket: 16 [ 410.743762][ T7901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.750510][ T7901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.755483][ T7901] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 410.760116][ T7901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.768430][ T7901] usb 7-1: config 0 descriptor?? [ 411.184987][ T7901] hid-multitouch 0003:1FD2:6007.000F: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x98000) [ 411.351016][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 411.354116][ T1115] ata1: failed to read log page 10h (errno=-5) [ 411.356694][ T1115] ata1.00: NCQ disabled due to excessive errors [ 411.367727][ T1115] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 411.371203][ T1115] ata1.00: irq_stat 0x41000000 [ 411.373196][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 411.376210][ T1115] ata1.00: cmd 60/c0:f0:76:91:03/04:00:00:00:00/40 tag 30 ncq dma 622592 in [ 411.376210][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 411.383066][ T7901] usb 7-1: USB disconnect, device number 18 [ 411.383898][ T1115] ata1.00: status: { DRDY } [ 411.387908][ T1115] ata1.00: error: { ABRT } [ 411.390830][ T1115] ata1.00: configured for UDMA/100 [ 411.393605][ T1115] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 411.403451][ T1115] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 411.407453][ T1115] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 411.411306][ T1115] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 91 76 00 04 c0 00 [ 411.414862][ T1115] blk_print_req_error: 177 callbacks suppressed [ 411.414879][ T1115] I/O error, dev sda, sector 233846 op 0x0:(READ) flags 0x80700 phys_seg 152 prio class 2 [ 411.422073][ T1115] ata1: EH complete [ 411.516133][T19084] fido_id[19084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 411.562393][T19081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.565768][T19081] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 411.784945][T19081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.788240][T19081] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 412.190329][T19131] netlink: set zone limit has 4 unknown bytes [ 412.615773][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 412.615791][ T40] audit: type=1400 audit(2000525142.832:3804): avc: denied { read } for pid=19151 comm="syz.9.3793" dev="nsfs" ino=4026533551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.628089][ T40] audit: type=1400 audit(2000525142.842:3805): avc: denied { open } for pid=19151 comm="syz.9.3793" path="net:[4026533551]" dev="nsfs" ino=4026533551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.644173][ T40] audit: type=1400 audit(2000525142.852:3806): avc: denied { create } for pid=19153 comm="syz.4.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.652806][ T40] audit: type=1400 audit(2000525142.862:3807): avc: denied { map } for pid=19153 comm="syz.4.3794" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 412.665054][ T40] audit: type=1400 audit(2000525142.862:3808): avc: denied { read write } for pid=19153 comm="syz.4.3794" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 412.904224][ T40] audit: type=1400 audit(2000525143.122:3809): avc: denied { write } for pid=19162 comm="syz.9.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.911529][ T40] audit: type=1400 audit(2000525143.132:3810): avc: denied { read write } for pid=19164 comm="syz.2.3799" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 412.922125][ T40] audit: type=1400 audit(2000525143.132:3811): avc: denied { open } for pid=19164 comm="syz.2.3799" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 412.932987][ T40] audit: type=1400 audit(2000525143.132:3812): avc: denied { mounton } for pid=19164 comm="syz.2.3799" path="/304/file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 412.940497][ T40] audit: type=1400 audit(2000525143.132:3813): avc: denied { mount } for pid=19164 comm="syz.2.3799" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 413.174961][T19184] loop2: detected capacity change from 0 to 7 [ 413.185583][T19184] Dev loop2: unable to read RDB block 7 [ 413.191510][T19184] loop2: unable to read partition table [ 413.193910][T19184] loop2: partition table beyond EOD, truncated [ 413.199314][T19184] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.268990][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3810'. [ 413.852123][T19229] program syz.2.3826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.918412][T19233] loop8: detected capacity change from 0 to 8 [ 413.940674][T19233] Dev loop8: unable to read RDB block 8 [ 413.947501][T19233] loop8: unable to read partition table [ 413.954142][T19233] loop8: partition table beyond EOD, truncated [ 413.960214][T19233] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 414.327822][ T29] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 414.431813][T19255] overlayfs: failed to clone upperpath [ 414.487860][ T29] usb 14-1: Using ep0 maxpacket: 16 [ 414.491693][ T29] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.495480][ T29] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.504569][ T29] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.510751][ T29] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.514573][ T29] usb 14-1: Product: syz [ 414.515972][ T29] usb 14-1: Manufacturer: syz [ 414.517511][ T29] usb 14-1: SerialNumber: syz [ 414.717739][ T8252] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 414.740162][ T29] usb 14-1: 0:2 : does not exist [ 414.757370][ T29] usb 14-1: 5:0: failed to get current value for ch 0 (-22) [ 414.878551][ T8252] usb 7-1: Using ep0 maxpacket: 16 [ 414.886825][ T8252] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.886882][ T29] usb 14-1: USB disconnect, device number 22 [ 414.896111][ T8252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.906057][ T8252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.916782][ T8252] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.924069][ T8252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.931934][ T8252] usb 7-1: Product: syz [ 414.936031][ T8252] usb 7-1: Manufacturer: syz [ 414.940436][ T8252] usb 7-1: SerialNumber: syz [ 415.359311][T19279] netlink: 'syz.4.3850': attribute type 8 has an invalid length. [ 415.363552][T19279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3850'. [ 415.373228][ T8252] usb 7-1: 0:2 : does not exist [ 415.373543][T19279] veth1_to_team: entered promiscuous mode [ 415.379799][T19279] batadv_slave_0: entered promiscuous mode [ 415.382461][T19279] batadv_slave_0: left promiscuous mode [ 415.388589][T19279] veth1_to_team: left promiscuous mode [ 415.569081][T19291] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 415.680750][T19298] netlink: 'syz.9.3859': attribute type 4 has an invalid length. [ 415.734293][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.742998][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.749277][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.753729][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.762408][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.770708][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.773853][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.776526][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.779895][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.782831][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.794640][ T8252] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 415.821294][T19300] wg1 speed is unknown, defaulting to 1000 [ 416.078838][ T8252] usb 7-1: USB disconnect, device number 19 [ 416.203509][T19309] udevd[19309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.338012][T19300] chnl_net:caif_netlink_parms(): no params data found [ 416.457476][T19300] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.462920][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.465343][T19300] bridge_slave_0: entered allmulticast mode [ 416.469341][T19300] bridge_slave_0: entered promiscuous mode [ 416.473665][T19300] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.476187][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.480081][T19300] bridge_slave_1: entered allmulticast mode [ 416.483082][T19300] bridge_slave_1: entered promiscuous mode [ 416.500885][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.506700][T19300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.523455][T19300] team0: Port device team_slave_0 added [ 416.526848][T19300] team0: Port device team_slave_1 added [ 416.527917][ T29] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 416.575247][T19300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.577700][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.586823][T19300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.615035][T19300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.618375][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.631920][T19300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.719983][T19300] hsr_slave_0: entered promiscuous mode [ 416.723682][T19300] hsr_slave_1: entered promiscuous mode [ 416.729964][T19300] debugfs: 'hsr0' already exists in 'hsr' [ 416.731234][ T29] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 416.731982][T19300] Cannot create hsr debugfs directory [ 416.735657][ T29] usb 14-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 416.742081][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.749009][ T29] usb 14-1: config 0 descriptor?? [ 416.751389][T19318] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 417.057108][T19360] netlink: 'syz.1.3881': attribute type 27 has an invalid length. [ 417.168071][ T29] hid_parser_main: 457 callbacks suppressed [ 417.168087][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.172226][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.174388][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.187880][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.190110][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.192361][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.194521][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.196730][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.199311][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.201901][ T29] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 417.216165][ T29] asus 0003:0B05:1ABE.0010: hidraw1: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.9-1/input0 [ 417.231666][ T107] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 417.335387][ T107] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 417.363767][ T29] usb 14-1: USB disconnect, device number 23 [ 417.463051][ T107] bond5 (unregistering): (slave geneve2): Releasing active interface [ 417.732685][ T107] bond1 (unregistering): Released all slaves [ 417.747552][ T107] bond2 (unregistering): Released all slaves [ 417.758725][ T107] bond3 (unregistering): Released all slaves [ 417.766566][ T107] bond4 (unregistering): Released all slaves [ 417.776982][ T107] bond5 (unregistering): Released all slaves [ 417.795957][ T107] bond0 (unregistering): Released all slaves [ 417.814053][ T107] bond6 (unregistering): Released all slaves [ 417.869777][ T5947] Bluetooth: hci0: command tx timeout [ 417.880016][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 417.880030][ T40] audit: type=1400 audit(2000525148.102:3989): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 417.941149][ T107] : left promiscuous mode [ 417.943230][ T40] audit: type=1400 audit(2000525148.152:3990): avc: denied { search } for pid=19377 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.975971][ T40] audit: type=1400 audit(2000525148.192:3991): avc: denied { read open } for pid=19379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.005877][ T40] audit: type=1400 audit(2000525148.192:3992): avc: denied { getattr } for pid=19379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.027967][ T40] audit: type=1400 audit(2000525148.222:3993): avc: denied { add_name } for pid=19378 comm="dhcpcd-run-hook" name="resolv.conf.eth15.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.036702][ T40] audit: type=1400 audit(2000525148.222:3994): avc: denied { create } for pid=19378 comm="dhcpcd-run-hook" name="resolv.conf.eth15.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.051678][ T40] audit: type=1400 audit(2000525148.222:3995): avc: denied { write open } for pid=19378 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth15.link" dev="tmpfs" ino=12224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.062159][ T40] audit: type=1400 audit(2000525148.222:3996): avc: denied { append } for pid=19378 comm="dhcpcd-run-hook" name="resolv.conf.eth15.link" dev="tmpfs" ino=12224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.070054][ T40] audit: type=1400 audit(2000525148.222:3997): avc: denied { getattr } for pid=19378 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.079891][ T40] audit: type=1400 audit(2000525148.242:3998): avc: denied { setopt } for pid=19381 comm="syz.2.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.458123][ T5998] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 418.559986][ T8252] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 418.613724][ T5998] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 418.617249][ T5998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.625827][ T5998] usb 7-1: config 0 has no interface number 0 [ 418.629618][ T5998] usb 7-1: config 0 interface 237 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.638871][ T5998] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 418.643014][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 418.646497][ T5998] usb 7-1: Product: syz [ 418.649135][ T5998] usb 7-1: Manufacturer: syz [ 418.651139][ T5998] usb 7-1: SerialNumber: syz [ 418.655938][ T5998] usb 7-1: config 0 descriptor?? [ 418.727777][ T8252] usb 14-1: Using ep0 maxpacket: 16 [ 418.739340][ T8252] usb 14-1: unable to get BOS descriptor or descriptor too short [ 418.760741][ T8252] usb 14-1: config 3 has an invalid interface number: 11 but max is 0 [ 418.764942][ T8252] usb 14-1: config 3 has no interface number 0 [ 418.771733][ T8252] usb 14-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 418.777168][ T8252] usb 14-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 418.797693][ T8252] usb 14-1: config 3 interface 11 has no altsetting 0 [ 418.802733][ T8252] usb 14-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 418.806634][ T8252] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.810598][ T8252] usb 14-1: Product: syz [ 418.812575][ T8252] usb 14-1: Manufacturer: syz [ 418.814846][ T8252] usb 14-1: SerialNumber: syz [ 418.875621][ T10] usb 7-1: USB disconnect, device number 20 [ 418.928004][ T107] hsr_slave_0: left promiscuous mode [ 418.940691][ T107] hsr_slave_1: left promiscuous mode [ 418.944263][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.949822][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.187185][ T107] team0 (unregistering): Port device team_slave_1 removed [ 419.214282][ T107] team0 (unregistering): Port device team_slave_0 removed [ 419.340586][ T107] team0 (unregistering): Port device dummy0 removed [ 419.341539][ T8252] appletouch 14-1:3.11: Could not find int-in endpoint [ 419.345811][ T8252] appletouch 14-1:3.11: probe with driver appletouch failed with error -5 [ 419.349156][ T8252] usbhid 14-1:3.11: couldn't find an input interrupt endpoint [ 419.355481][ T8252] usb 14-1: USB disconnect, device number 24 [ 419.391219][T19434] tipc: Started in network mode [ 419.393786][T19434] tipc: Node identity , cluster identity 4711 [ 419.396381][T19434] tipc: Failed to obtain node identity [ 419.398905][T19434] tipc: Enabling of bearer rejected, failed to enable media [ 419.477512][T19300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.493069][T19300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.519448][T19300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.524792][T19300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.624760][T19300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.640797][T19300] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.649786][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.654046][ T7292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.663681][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.666611][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.823127][ T107] IPVS: stop unused estimator thread 0... [ 419.839366][T19300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.957822][ T5947] Bluetooth: hci0: command tx timeout [ 420.301007][T19300] veth0_vlan: entered promiscuous mode [ 420.314336][T19300] veth1_vlan: entered promiscuous mode [ 420.353949][T19300] veth0_macvtap: entered promiscuous mode [ 420.362216][T19300] veth1_macvtap: entered promiscuous mode [ 420.387705][T19300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.403723][T19300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.419043][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.426463][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.440495][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.454941][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.576312][ T7189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.587916][ T7189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.634312][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.636925][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.666776][T19482] wg1 speed is unknown, defaulting to 1000 [ 421.313444][T19524] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 421.320854][T19524] overlayfs: missing 'lowerdir' [ 421.434516][T19532] overlayfs: conflicting options: userxattr,metacopy=on [ 421.527762][ T829] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 421.757960][ T829] usb 7-1: Using ep0 maxpacket: 32 [ 421.765740][ T829] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.807138][ T829] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.810692][ T829] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.813773][ T829] usb 7-1: Product: syz [ 421.815210][ T829] usb 7-1: Manufacturer: syz [ 421.816786][ T829] usb 7-1: SerialNumber: syz [ 421.834607][ T829] usb 7-1: config 0 descriptor?? [ 421.840380][T19522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.851457][ T829] hub 7-1:0.0: bad descriptor, ignoring hub [ 421.853568][ T829] hub 7-1:0.0: probe with driver hub failed with error -5 [ 421.917876][ T5998] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 422.017870][ T5947] Bluetooth: hci0: command tx timeout [ 422.071374][ T5998] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.075780][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.082124][ T5998] usb 9-1: config 0 descriptor?? [ 422.099397][ T5998] cp210x 9-1:0.0: cp210x converter detected [ 422.167977][ T6560] usb 7-1: USB disconnect, device number 21 [ 422.494840][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.498432][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.504341][ T5998] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 422.515015][ T5998] usb 9-1: cp210x converter now attached to ttyUSB0 [ 422.713261][ T10] usb 9-1: USB disconnect, device number 13 [ 422.720166][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 422.725860][ T10] cp210x 9-1:0.0: device disconnected [ 422.908875][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 422.908889][ T40] audit: type=1400 audit(2000525153.132:4154): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=35254 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 422.927024][ T40] audit: type=1400 audit(2000525153.142:4155): avc: denied { write } for pid=19564 comm="syz.2.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.952860][ T40] audit: type=1400 audit(2000525153.172:4156): avc: denied { bpf } for pid=19568 comm="syz.9.3954" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.972720][ T40] audit: type=1400 audit(2000525153.192:4157): avc: denied { write } for pid=19570 comm="syz.2.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.978920][ T40] audit: type=1400 audit(2000525153.192:4158): avc: denied { connect } for pid=19570 comm="syz.2.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.985179][ T40] audit: type=1400 audit(2000525153.192:4159): avc: denied { name_connect } for pid=19570 comm="syz.2.3955" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 423.039659][ T40] audit: type=1400 audit(2000525153.262:4160): avc: denied { read write } for pid=19576 comm="syz.2.3958" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.047099][ T40] audit: type=1400 audit(2000525153.262:4161): avc: denied { open } for pid=19576 comm="syz.2.3958" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.064909][ T40] audit: type=1400 audit(2000525153.272:4162): avc: denied { ioctl } for pid=19576 comm="syz.2.3958" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.089639][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'. [ 423.227816][ T40] audit: type=1400 audit(2000525153.412:4163): avc: denied { append } for pid=19595 comm="syz.2.3967" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.300103][T19601] overlayfs: failed to clone lowerpath [ 423.361009][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 423.614373][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3973'. [ 423.917858][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 424.094649][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.098335][ T5947] Bluetooth: hci0: command tx timeout [ 424.099260][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.105019][ T29] usb 7-1: Product: syz [ 424.107456][ T29] usb 7-1: Manufacturer: syz [ 424.110298][ T29] usb 7-1: SerialNumber: syz [ 424.603679][T19612] binder: 19610:19612 ioctl c0046209 0 returned -22 [ 424.811307][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 424.826243][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 424.835532][ T29] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 424.924568][ T29] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 424.935717][ T29] usb 7-1: USB disconnect, device number 22 [ 425.850412][T19658] tipc: Failed to remove unknown binding: 66,0,0/0:2737787415/2737787416 [ 425.860375][T19658] tipc: Failed to remove unknown binding: 66,0,0/0:2737787415/2737787416 [ 426.097792][ T5998] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 426.247840][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 426.248416][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3994'. [ 426.251928][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.261468][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.266422][ T5998] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.271613][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.278071][ T5998] usb 7-1: config 0 descriptor?? [ 426.282058][ T5998] hub 7-1:0.0: USB hub found [ 426.491263][ T5998] hub 7-1:0.0: 1 port detected [ 426.719394][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 426.729457][T19679] hsr0: entered promiscuous mode [ 426.837391][T19683] wg1 speed is unknown, defaulting to 1000 [ 426.856472][T19689] overlayfs: failed to clone lowerpath [ 427.093821][T19715] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 427.099152][ T5998] hub 7-1:0.0: activate --> -90 [ 427.151772][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4020'. [ 427.895050][ T5998] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 427.899573][ T7901] usb 7-1: USB disconnect, device number 23 [ 427.902423][ T5998] usb 7-1-port1: cannot disable (err = -71) [ 427.978224][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 427.978244][ T40] audit: type=1326 audit(2000525158.192:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 427.992721][ T40] audit: type=1326 audit(2000525158.202:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.004263][ T40] audit: type=1326 audit(2000525158.202:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.016394][ T40] audit: type=1326 audit(2000525158.202:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.027749][ T40] audit: type=1326 audit(2000525158.202:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.036235][ T40] audit: type=1326 audit(2000525158.212:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.097504][ T40] audit: type=1326 audit(2000525158.212:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.107988][ T40] audit: type=1326 audit(2000525158.212:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.176386][ T40] audit: type=1326 audit(2000525158.212:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19739 comm="syz.1.4025" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7d4e19c819 code=0x7ffc0000 [ 428.184637][ T40] audit: type=1400 audit(2000525158.332:4269): avc: denied { map_read map_write } for pid=19744 comm="syz.9.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 428.195270][T19749] ip6t_REJECT: ECHOREPLY is not supported [ 428.373581][T19752] No control pipe specified [ 431.968114][T19961] loop8: detected capacity change from 0 to 8 [ 431.975807][T19961] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 431.979252][T19961] loop8: p1 start 1699656721 is beyond EOD, truncated [ 431.981416][T19961] loop8: p2 start 1168965624 is beyond EOD, truncated [ 431.983526][T19961] loop8: p3 start 409935385 is beyond EOD, truncated [ 431.985646][T19961] loop8: p4 start 139668047 is beyond EOD, truncated [ 431.997526][T19961] loop8: p5 start 594780962 is beyond EOD, truncated [ 432.001237][T19961] loop8: p6 start 407045244 is beyond EOD, truncated [ 432.003540][T19961] loop8: p7 start 3779104556 is beyond EOD, truncated [ 432.005886][T19961] loop8: p8 start 457232425 is beyond EOD, truncated [ 432.008669][T19961] loop8: p9 start 2999000759 is beyond EOD, truncated [ 432.010737][T19961] loop8: p10 start 2374217572 is beyond EOD, truncated [ 432.012883][T19961] loop8: p11 start 669387191 is beyond EOD, truncated [ 432.015029][T19961] loop8: p12 start 791778471 is beyond EOD, truncated [ 432.693519][T20028] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 432.857943][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'. [ 433.170048][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 433.170133][ T40] audit: type=1400 audit(2000525163.392:4412): avc: denied { sys_module } for pid=20026 comm="syz.2.4151" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 433.179114][T20045] tun0: tun_chr_ioctl cmd 1074025677 [ 433.181344][T20045] tun0: linktype set to 1 [ 433.267185][ T40] audit: type=1400 audit(2000525163.482:4413): avc: denied { create } for pid=20050 comm="syz.1.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 433.283037][ T40] audit: type=1400 audit(2000525163.502:4414): avc: denied { sys_admin } for pid=20050 comm="syz.1.4159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 433.343238][ T40] audit: type=1400 audit(2000525163.562:4415): avc: denied { create } for pid=20056 comm="syz.1.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.351972][ T40] audit: type=1400 audit(2000525163.572:4416): avc: denied { write } for pid=20056 comm="syz.1.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.359298][ T40] audit: type=1400 audit(2000525163.572:4417): avc: denied { read } for pid=20056 comm="syz.1.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.376680][ T40] audit: type=1400 audit(2000525163.572:4418): avc: denied { recv } for pid=20026 comm="syz.2.4151" saddr=127.0.0.1 src=35254 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.412917][T20062] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 433.459227][ T40] audit: type=1400 audit(2000525163.682:4419): avc: denied { read } for pid=20065 comm="syz.4.4166" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.469086][ T40] audit: type=1400 audit(2000525163.682:4420): avc: denied { open } for pid=20065 comm="syz.4.4166" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.478142][ T40] audit: type=1400 audit(2000525163.702:4421): avc: denied { ioctl } for pid=20065 comm="syz.4.4166" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.942185][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'. [ 434.353657][T20099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4179'. [ 434.626332][T20113] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4186'. [ 434.646372][T20125] tipc: Started in network mode [ 434.646389][T20125] tipc: Node identity fff, cluster identity 10 [ 434.646397][T20125] tipc: Node number set to 4095 [ 434.866054][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.869780][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.870879][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.879757][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.880713][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.985137][T20137] wg1 speed is unknown, defaulting to 1000 [ 435.092257][T19741] syz_tun (unregistering): left promiscuous mode [ 435.094673][T19741] bridge0: port 3(syz_tun) entered disabled state [ 435.128081][T20154] fuse: root generation should be zero [ 435.231995][T20137] chnl_net:caif_netlink_parms(): no params data found [ 435.232871][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4209'. [ 435.315066][T20137] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.317838][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.321430][T20137] bridge_slave_0: entered allmulticast mode [ 435.327249][T20137] bridge_slave_0: entered promiscuous mode [ 435.333609][T20137] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.337373][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.339766][T20168] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 435.341093][T20137] bridge_slave_1: entered allmulticast mode [ 435.343151][T20168] overlayfs: failed to set xattr on upper [ 435.347237][T20137] bridge_slave_1: entered promiscuous mode [ 435.347862][T20168] overlayfs: ...falling back to redirect_dir=nofollow. [ 435.352436][T20168] overlayfs: ...falling back to index=off. [ 435.354440][T20168] overlayfs: ...falling back to uuid=null. [ 435.384957][T20137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.394027][T20137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.424675][T20137] team0: Port device team_slave_0 added [ 435.431379][T20137] team0: Port device team_slave_1 added [ 435.448942][T20137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.460431][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.470296][T20137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.475165][T20137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.477888][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.486244][T20137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.516739][T20137] hsr_slave_0: entered promiscuous mode [ 435.519251][T20137] hsr_slave_1: entered promiscuous mode [ 435.612755][T20137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 435.722691][T20137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 435.805818][T20137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 435.882463][T20137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 436.044233][T20191] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4218'. [ 436.140771][T20137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.152892][T20137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.167120][T20137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.172094][T20137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.221039][T20137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.237799][T20137] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.251379][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.254341][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.284486][T20195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.302334][T20195] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.310335][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.313138][ T7307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.349572][T20195] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.370450][T20195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.373249][T20195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.399488][T20195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.654353][T20137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.696610][T20137] veth0_vlan: entered promiscuous mode [ 436.702697][T20137] veth1_vlan: entered promiscuous mode [ 436.724706][T20137] veth0_macvtap: entered promiscuous mode [ 436.735483][T20137] veth1_macvtap: entered promiscuous mode [ 436.749299][T20137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.771137][T20137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.783951][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4227'. [ 436.793919][ T7307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.819659][ T7163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.837505][ T107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.856515][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.298285][ T829] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 437.449544][ T829] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 437.453607][ T829] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.457898][ T829] usb 9-1: config 0 has no interfaces? [ 437.459968][ T829] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 437.463124][ T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.470709][ T829] usb 9-1: config 0 descriptor?? [ 437.732446][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.735924][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.789048][ T7239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.793080][ T7239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.210147][ T40] kauditd_printk_skb: 130 callbacks suppressed [ 438.210161][ T40] audit: type=1400 audit(2000525168.432:4552): avc: denied { create } for pid=20260 comm="syz.1.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 438.218531][ T40] audit: type=1400 audit(2000525168.432:4553): avc: denied { ioctl } for pid=20260 comm="syz.1.4240" path="socket:[94520]" dev="sockfs" ino=94520 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 438.258066][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.418331][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 439.091591][ T29] IPVS: starting estimator thread 0... [ 439.097370][ T40] audit: type=1400 audit(2000525169.312:4554): avc: denied { prog_load } for pid=20268 comm="syz.2.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 439.106561][ T40] audit: type=1400 audit(2000525169.322:4555): avc: denied { bpf } for pid=20268 comm="syz.2.4242" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.227724][T20269] IPVS: using max 42 ests per chain, 100800 per kthread [ 439.228925][ T40] audit: type=1400 audit(2000525169.322:4556): avc: denied { append } for pid=20268 comm="syz.2.4242" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 439.236217][T20273] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4241'. [ 439.447732][ T40] audit: type=1400 audit(2000525169.552:4557): avc: denied { write } for pid=20268 comm="syz.2.4242" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 439.461746][ T40] audit: type=1400 audit(2000525169.552:4558): avc: denied { ioctl } for pid=20268 comm="syz.2.4242" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 439.695927][ T40] audit: type=1400 audit(2000525169.912:4559): avc: denied { read } for pid=20277 comm="syz.1.4245" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.704576][ T40] audit: type=1400 audit(2000525169.912:4560): avc: denied { open } for pid=20277 comm="syz.1.4245" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.713117][ T40] audit: type=1400 audit(2000525169.912:4561): avc: denied { ioctl } for pid=20277 comm="syz.1.4245" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.755189][T20278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 439.890914][ T829] usb 9-1: string descriptor 0 read error: -71 [ 439.897874][ T829] usb 9-1: USB disconnect, device number 14 [ 439.933080][T20283] binder: 20282:20283 ioctl c0306201 200000000540 returned -22 [ 440.150476][T20300] netlink: 220 bytes leftover after parsing attributes in process `syz.9.4255'. [ 440.154507][T20300] tc_dump_action: action bad kind [ 440.227809][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 440.337793][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.387924][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 440.395225][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.400772][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.404992][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.410946][ T29] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 440.416862][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.427127][ T29] usb 6-1: config 0 descriptor?? [ 440.440247][T20314] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4261'. [ 440.497833][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 440.950834][ T29] shield 0003:0955:7214.0011: ignoring exceeding usage max [ 440.962524][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 441.039662][ T29] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 441.043299][ T29] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 441.045429][T20324] random: crng reseeded on system resumption [ 441.145164][ T5973] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 441.147222][ T10] usb 6-1: USB disconnect, device number 19 [ 441.157959][ T5973] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.163927][ T5973] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.169254][ T5973] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 441.296803][T20330] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4264'. [ 441.300344][T20330] tc_dump_action: action bad kind [ 441.437890][ T6560] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 441.645819][ T6560] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 441.652189][ T6560] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 441.656912][ T6560] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 441.668339][ T6560] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.671799][ T6560] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.674906][ T6560] usb 9-1: SerialNumber: syz [ 441.726211][T20329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.740182][T20329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.966530][T20329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.969886][T20329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.398379][ T6560] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 442.417785][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.418407][ T5973] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 442.578695][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 442.594842][ T6560] usb 9-1: USB disconnect, device number 15 [ 442.597691][ T5973] usb 7-1: Using ep0 maxpacket: 32 [ 442.602311][ T5973] usb 7-1: config 0 has no interfaces? [ 442.607053][ T6560] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 442.610236][ T5973] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 442.614529][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.619215][ T5973] usb 7-1: Product: syz [ 442.621202][ T5973] usb 7-1: Manufacturer: syz [ 442.623275][ T5973] usb 7-1: SerialNumber: syz [ 442.643068][ T5973] usb 7-1: config 0 descriptor?? [ 442.672660][T20367] netlink: 220 bytes leftover after parsing attributes in process `syz.9.4284'. [ 442.676397][T20367] tc_dump_action: action bad kind [ 442.942774][ T6560] usb 7-1: USB disconnect, device number 24 [ 443.052081][T20385] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.266346][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 443.266359][ T40] audit: type=1400 audit(2000525173.482:4620): avc: denied { create } for pid=20400 comm="syz.4.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 443.275693][ T40] audit: type=1400 audit(2000525173.492:4621): avc: denied { prog_load } for pid=20400 comm="syz.4.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 443.282146][ T40] audit: type=1400 audit(2000525173.492:4622): avc: denied { read } for pid=20400 comm="syz.4.4300" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.289900][ T40] audit: type=1400 audit(2000525173.492:4623): avc: denied { open } for pid=20400 comm="syz.4.4300" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.297711][ T40] audit: type=1400 audit(2000525173.492:4624): avc: denied { ioctl } for pid=20400 comm="syz.4.4300" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.394851][ T40] audit: type=1400 audit(2000525173.612:4625): avc: denied { read } for pid=20404 comm="syz.4.4302" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.403607][ T40] audit: type=1400 audit(2000525173.612:4626): avc: denied { open } for pid=20404 comm="syz.4.4302" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.439473][ T40] audit: type=1400 audit(2000525173.662:4627): avc: denied { read write } for pid=20406 comm="syz.4.4303" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 443.448356][ T40] audit: type=1400 audit(2000525173.672:4628): avc: denied { open } for pid=20406 comm="syz.4.4303" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 443.456561][ T40] audit: type=1400 audit(2000525173.672:4629): avc: denied { mounton } for pid=20406 comm="syz.4.4303" path="/84/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 444.659149][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 445.370468][T20444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4315'. [ 445.411253][T20444] overlayfs: missing 'lowerdir' [ 445.419738][T20444] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 445.423722][T20444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 445.651721][T19309] udevd[19309]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 446.100657][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.103968][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.312218][T20464] [ 446.313325][T20464] ===================================================== [ 446.316236][T20464] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 446.319815][T20464] syzkaller #0 Tainted: G L [ 446.322303][T20464] ----------------------------------------------------- [ 446.325131][T20464] syz.2.4323/20464 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 446.328397][T20464] ffff8880255f0360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 446.333055][T20464] [ 446.333055][T20464] and this task is already holding: [ 446.336274][T20464] ffff888035d6b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 446.340762][T20464] which would create a new lock dependency: [ 446.343187][T20464] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 446.345957][T20464] [ 446.345957][T20464] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 446.349321][T20464] (&dev->event_lock#2){..-.}-{3:3} [ 446.349347][T20464] [ 446.349347][T20464] ... which became SOFTIRQ-irq-safe at: [ 446.353615][T20464] lock_acquire+0x1cf/0x380 [ 446.355267][T20464] _raw_spin_lock_irqsave+0x3a/0x60 [ 446.357440][T20464] input_inject_event+0x9f/0x3b0 [ 446.359843][T20464] led_set_brightness+0x221/0x2a0 [ 446.362631][T20464] led_trigger_event+0xda/0x270 [ 446.364755][T20464] kbd_bh+0x243/0x330 [ 446.366733][T20464] tasklet_action_common+0x2de/0x3d0 [ 446.368641][T20464] handle_softirqs+0x1eb/0x9e0 [ 446.370338][T20464] run_ksoftirqd+0x38/0x60 [ 446.371976][T20464] smpboot_thread_fn+0x3d3/0xaa0 [ 446.373997][T20464] kthread+0x370/0x450 [ 446.375355][T20464] ret_from_fork+0x72b/0xd50 [ 446.377149][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.379374][T20464] [ 446.379374][T20464] to a SOFTIRQ-irq-unsafe lock: [ 446.382445][T20464] (tasklist_lock){.+.+}-{3:3} [ 446.382480][T20464] [ 446.382480][T20464] ... which became SOFTIRQ-irq-unsafe at: [ 446.388089][T20464] ... [ 446.388159][T20464] lock_acquire+0x1cf/0x380 [ 446.391152][T20464] _raw_read_lock+0x5f/0x70 [ 446.393134][T20464] __do_wait+0x13b/0x8b0 [ 446.394979][T20464] do_wait+0x1ec/0x5a0 [ 446.396730][T20464] kernel_wait+0xa1/0x160 [ 446.398350][T20464] call_usermodehelper_exec_work+0xf6/0x180 [ 446.400729][T20464] process_one_work+0xa23/0x19a0 [ 446.402647][T20464] worker_thread+0x5ef/0xe50 [ 446.404236][T20464] kthread+0x370/0x450 [ 446.405730][T20464] ret_from_fork+0x72b/0xd50 [ 446.407549][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.409397][T20464] [ 446.409397][T20464] other info that might help us debug this: [ 446.409397][T20464] [ 446.413054][T20464] Chain exists of: [ 446.413054][T20464] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 446.413054][T20464] [ 446.417394][T20464] Possible interrupt unsafe locking scenario: [ 446.417394][T20464] [ 446.420477][T20464] CPU0 CPU1 [ 446.422688][T20464] ---- ---- [ 446.425047][T20464] lock(tasklist_lock); [ 446.426672][T20464] local_irq_disable(); [ 446.429174][T20464] lock(&dev->event_lock#2); [ 446.431835][T20464] lock(&new->fa_lock); [ 446.434325][T20464] [ 446.435711][T20464] lock(&dev->event_lock#2); [ 446.437757][T20464] [ 446.437757][T20464] *** DEADLOCK *** [ 446.437757][T20464] [ 446.440962][T20464] 6 locks held by syz.2.4323/20464: [ 446.442911][T20464] #0: ffff888035d68118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x200/0x610 [ 446.446393][T20464] #1: ffff888035d6b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 446.450140][T20464] #2: ffffffff8e7e6b20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 446.453829][T20464] #3: ffffffff8e7e6b20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 446.457352][T20464] #4: ffffffff8e7e6b20 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x32/0xa30 [ 446.461046][T20464] #5: ffffffff8e7e6b20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 446.464951][T20464] [ 446.464951][T20464] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 446.469147][T20464] -> (&dev->event_lock#2){..-.}-{3:3} { [ 446.471160][T20464] IN-SOFTIRQ-W at: [ 446.472716][T20464] lock_acquire+0x1cf/0x380 [ 446.474973][T20464] _raw_spin_lock_irqsave+0x3a/0x60 [ 446.477469][T20464] input_inject_event+0x9f/0x3b0 [ 446.479904][T20464] led_set_brightness+0x221/0x2a0 [ 446.482812][T20464] led_trigger_event+0xda/0x270 [ 446.485858][T20464] kbd_bh+0x243/0x330 [ 446.487876][T20464] tasklet_action_common+0x2de/0x3d0 [ 446.490405][T20464] handle_softirqs+0x1eb/0x9e0 [ 446.492787][T20464] run_ksoftirqd+0x38/0x60 [ 446.494998][T20464] smpboot_thread_fn+0x3d3/0xaa0 [ 446.497497][T20464] kthread+0x370/0x450 [ 446.499846][T20464] ret_from_fork+0x72b/0xd50 [ 446.502653][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.505310][T20464] INITIAL USE at: [ 446.506825][T20464] lock_acquire+0x1cf/0x380 [ 446.509286][T20464] _raw_spin_lock_irqsave+0x3a/0x60 [ 446.511752][T20464] input_inject_event+0x9f/0x3b0 [ 446.514175][T20464] led_set_brightness+0x221/0x2a0 [ 446.516622][T20464] kbd_led_trigger_activate+0xcb/0x110 [ 446.519520][T20464] led_trigger_set+0x66b/0xbe0 [ 446.522366][T20464] led_trigger_set_default+0x1e2/0x2f0 [ 446.525139][T20464] led_classdev_register_ext+0x72b/0x990 [ 446.527776][T20464] input_leds_connect+0x5af/0x8b0 [ 446.530396][T20464] input_attach_handler.isra.0+0x177/0x1e0 [ 446.533140][T20464] input_register_device.cold+0x139/0x375 [ 446.536203][T20464] atkbd_connect+0x685/0xa00 [ 446.539067][T20464] serio_driver_probe+0x7f/0xd0 [ 446.541791][T20464] really_probe+0x241/0xa60 [ 446.544123][T20464] __driver_probe_device+0x1de/0x400 [ 446.546626][T20464] driver_probe_device+0x4c/0x1b0 [ 446.549039][T20464] __driver_attach+0x21f/0x5d0 [ 446.551361][T20464] bus_for_each_dev+0x13e/0x1d0 [ 446.553839][T20464] serio_handle_event+0x281/0x9e0 [ 446.557005][T20464] process_one_work+0xa23/0x19a0 [ 446.559867][T20464] worker_thread+0x5ef/0xe50 [ 446.562224][T20464] kthread+0x370/0x450 [ 446.564281][T20464] ret_from_fork+0x72b/0xd50 [ 446.566545][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.568887][T20464] } [ 446.569877][T20464] ... key at: [] __key.7+0x0/0x40 [ 446.573132][T20464] [ 446.573132][T20464] the dependencies between the lock to be acquired [ 446.573141][T20464] and SOFTIRQ-irq-unsafe lock: [ 446.578496][T20464] -> (tasklist_lock){.+.+}-{3:3} { [ 446.580777][T20464] HARDIRQ-ON-R at: [ 446.582342][T20464] lock_acquire+0x1cf/0x380 [ 446.584786][T20464] _raw_read_lock+0x5f/0x70 [ 446.587506][T20464] __do_wait+0x13b/0x8b0 [ 446.590045][T20464] do_wait+0x1ec/0x5a0 [ 446.592339][T20464] kernel_wait+0xa1/0x160 [ 446.594665][T20464] call_usermodehelper_exec_work+0xf6/0x180 [ 446.597560][T20464] process_one_work+0xa23/0x19a0 [ 446.600165][T20464] worker_thread+0x5ef/0xe50 [ 446.602754][T20464] kthread+0x370/0x450 [ 446.605065][T20464] ret_from_fork+0x72b/0xd50 [ 446.607674][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.610272][T20464] SOFTIRQ-ON-R at: [ 446.612048][T20464] lock_acquire+0x1cf/0x380 [ 446.614742][T20464] _raw_read_lock+0x5f/0x70 [ 446.617139][T20464] __do_wait+0x13b/0x8b0 [ 446.619419][T20464] do_wait+0x1ec/0x5a0 [ 446.621520][T20464] kernel_wait+0xa1/0x160 [ 446.623638][T20464] call_usermodehelper_exec_work+0xf6/0x180 [ 446.626754][T20464] process_one_work+0xa23/0x19a0 [ 446.629685][T20464] worker_thread+0x5ef/0xe50 [ 446.632202][T20464] kthread+0x370/0x450 [ 446.634788][T20464] ret_from_fork+0x72b/0xd50 [ 446.637212][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.639732][T20464] INITIAL USE at: [ 446.641423][T20464] lock_acquire+0x1cf/0x380 [ 446.644037][T20464] _raw_write_lock_irq+0x36/0x50 [ 446.646620][T20464] copy_process+0x71dd/0x7e30 [ 446.649059][T20464] kernel_clone+0xfc/0x9a0 [ 446.651365][T20464] user_mode_thread+0xcc/0x110 [ 446.654059][T20464] rest_init+0x21/0x260 [ 446.656773][T20464] start_kernel+0x47f/0x480 [ 446.659391][T20464] x86_64_start_reservations+0x24/0x30 [ 446.662541][T20464] x86_64_start_kernel+0x12b/0x130 [ 446.665106][T20464] common_startup_64+0x13e/0x148 [ 446.667836][T20464] INITIAL READ USE at: [ 446.669754][T20464] lock_acquire+0x1cf/0x380 [ 446.672550][T20464] _raw_read_lock+0x5f/0x70 [ 446.675125][T20464] __do_wait+0x13b/0x8b0 [ 446.677535][T20464] do_wait+0x1ec/0x5a0 [ 446.679872][T20464] kernel_wait+0xa1/0x160 [ 446.682342][T20464] call_usermodehelper_exec_work+0xf6/0x180 [ 446.685929][T20464] process_one_work+0xa23/0x19a0 [ 446.688822][T20464] worker_thread+0x5ef/0xe50 [ 446.691719][T20464] kthread+0x370/0x450 [ 446.694184][T20464] ret_from_fork+0x72b/0xd50 [ 446.696751][T20464] ret_from_fork_asm+0x1a/0x30 [ 446.699576][T20464] } [ 446.700698][T20464] ... key at: [] tasklist_lock+0x18/0x40 [ 446.704234][T20464] ... acquired at: [ 446.705750][T20464] _raw_read_lock+0x5f/0x70 [ 446.707519][T20464] send_sigurg+0xed/0xc80 [ 446.709280][T20464] sk_send_sigurg+0x76/0x370 [ 446.711608][T20464] unix_stream_sendmsg+0xbbf/0x1310 [ 446.714317][T20464] ____sys_sendmsg+0x9e1/0xb70 [ 446.716227][T20464] ___sys_sendmsg+0x190/0x1e0 [ 446.718037][T20464] __sys_sendmmsg+0x205/0x430 [ 446.720083][T20464] __x64_sys_sendmmsg+0x9c/0x100 [ 446.722003][T20464] do_syscall_64+0x10b/0xf80 [ 446.723769][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.726040][T20464] [ 446.726995][T20464] -> (&f_owner->lock){....}-{3:3} { [ 446.729210][T20464] INITIAL USE at: [ 446.730919][T20464] lock_acquire+0x1cf/0x380 [ 446.733404][T20464] _raw_write_lock_irq+0x36/0x50 [ 446.735913][T20464] __f_setown+0x65/0x390 [ 446.737974][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 446.738200][T20464] tty_fasync+0x232/0x350 [ 446.743573][T20464] do_fcntl+0x4b7/0x1670 [ 446.745935][T20464] __x64_sys_fcntl+0x163/0x200 [ 446.748301][T20464] do_syscall_64+0x10b/0xf80 [ 446.750682][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.754001][T20464] INITIAL READ USE at: [ 446.755645][T20464] lock_acquire+0x1cf/0x380 [ 446.758030][T20464] _raw_read_lock_irqsave+0x74/0x90 [ 446.760365][T20464] send_sigurg+0x5f/0xc80 [ 446.762495][T20464] sk_send_sigurg+0x76/0x370 [ 446.764634][T20464] unix_stream_sendmsg+0xbbf/0x1310 [ 446.767024][T20464] ____sys_sendmsg+0x9e1/0xb70 [ 446.769213][T20464] ___sys_sendmsg+0x190/0x1e0 [ 446.771447][T20464] __sys_sendmmsg+0x205/0x430 [ 446.773929][T20464] __x64_sys_sendmmsg+0x9c/0x100 [ 446.776307][T20464] do_syscall_64+0x10b/0xf80 [ 446.778390][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.780863][T20464] } [ 446.781709][T20464] ... key at: [] __key.1+0x0/0x40 [ 446.784636][T20464] ... acquired at: [ 446.786032][T20464] _raw_read_lock_irqsave+0x74/0x90 [ 446.787830][T20464] send_sigio+0x31/0x3e0 [ 446.789284][T20464] kill_fasync+0x214/0x510 [ 446.790760][T20464] sock_wake_async+0x132/0x160 [ 446.792436][T20464] sock_def_readable+0x53f/0x630 [ 446.794147][T20464] unix_stream_sendmsg+0xbf7/0x1310 [ 446.795985][T20464] ____sys_sendmsg+0x9e1/0xb70 [ 446.797727][T20464] ___sys_sendmsg+0x190/0x1e0 [ 446.799325][T20464] __sys_sendmmsg+0x205/0x430 [ 446.800977][T20464] __x64_sys_sendmmsg+0x9c/0x100 [ 446.802658][T20464] do_syscall_64+0x10b/0xf80 [ 446.804157][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.806087][T20464] [ 446.806863][T20464] -> (&new->fa_lock){....}-{3:3} { [ 446.808523][T20464] INITIAL USE at: [ 446.809862][T20464] lock_acquire+0x1cf/0x380 [ 446.812331][T20464] _raw_write_lock_irq+0x36/0x50 [ 446.814834][T20464] fasync_remove_entry+0xb2/0x1e0 [ 446.817483][T20464] fasync_helper+0xaf/0xd0 [ 446.819378][T20464] tty_fasync+0x279/0x350 [ 446.821254][T20464] __fput+0x95a/0xb50 [ 446.823111][T20464] task_work_run+0x150/0x240 [ 446.825058][T20464] exit_to_user_mode_loop+0x100/0x4a0 [ 446.827320][T20464] do_syscall_64+0x706/0xf80 [ 446.829457][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.832201][T20464] INITIAL READ USE at: [ 446.833635][T20464] lock_acquire+0x1cf/0x380 [ 446.835811][T20464] _raw_read_lock_irqsave+0x74/0x90 [ 446.838186][T20464] kill_fasync+0x138/0x510 [ 446.840206][T20464] sock_wake_async+0xf1/0x160 [ 446.842360][T20464] sk_send_sigurg+0x17e/0x370 [ 446.844583][T20464] unix_stream_sendmsg+0xbbf/0x1310 [ 446.847204][T20464] ____sys_sendmsg+0x9e1/0xb70 [ 446.849750][T20464] ___sys_sendmsg+0x190/0x1e0 [ 446.852190][T20464] __sys_sendmmsg+0x205/0x430 [ 446.854329][T20464] __x64_sys_sendmmsg+0x9c/0x100 [ 446.856528][T20464] do_syscall_64+0x10b/0xf80 [ 446.858617][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.861310][T20464] } [ 446.862317][T20464] ... key at: [] __key.0+0x0/0x40 [ 446.864865][T20464] ... acquired at: [ 446.866159][T20464] lock_acquire+0x1cf/0x380 [ 446.867670][T20464] _raw_read_lock_irqsave+0x74/0x90 [ 446.869381][T20464] kill_fasync+0x138/0x510 [ 446.870863][T20464] mousedev_notify_readers+0x6d9/0xa30 [ 446.872718][T20464] mousedev_event+0x84e/0x14a0 [ 446.874319][T20464] input_handle_events_default+0x119/0x1b0 [ 446.876412][T20464] input_pass_values+0x753/0x880 [ 446.878373][T20464] input_handle_event+0x7e4/0x1500 [ 446.880304][T20464] input_inject_event+0x1f1/0x3b0 [ 446.882023][T20464] evdev_write+0x3ef/0x610 [ 446.883510][T20464] vfs_write+0x2aa/0x1070 [ 446.884965][T20464] ksys_write+0x1f8/0x250 [ 446.886895][T20464] do_syscall_64+0x10b/0xf80 [ 446.888399][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.890382][T20464] [ 446.891186][T20464] [ 446.891186][T20464] stack backtrace: [ 446.893414][T20464] CPU: 1 UID: 0 PID: 20464 Comm: syz.2.4323 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.893434][T20464] Tainted: [L]=SOFTLOCKUP [ 446.893439][T20464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.893448][T20464] Call Trace: [ 446.893454][T20464] [ 446.893461][T20464] dump_stack_lvl+0x100/0x190 [ 446.893486][T20464] check_irq_usage+0x7aa/0x810 [ 446.893511][T20464] ? check_noncircular+0x97/0x160 [ 446.893532][T20464] ? __lock_acquire+0x14cf/0x2630 [ 446.893544][T20464] __lock_acquire+0x14cf/0x2630 [ 446.893558][T20464] lock_acquire+0x1cf/0x380 [ 446.893569][T20464] ? kill_fasync+0x138/0x510 [ 446.893590][T20464] _raw_read_lock_irqsave+0x74/0x90 [ 446.893609][T20464] ? kill_fasync+0x138/0x510 [ 446.893627][T20464] kill_fasync+0x138/0x510 [ 446.893646][T20464] mousedev_notify_readers+0x6d9/0xa30 [ 446.893666][T20464] mousedev_event+0x84e/0x14a0 [ 446.893681][T20464] ? __pfx_mousedev_event+0x10/0x10 [ 446.893696][T20464] ? lock_acquire+0x1cf/0x380 [ 446.893708][T20464] input_handle_events_default+0x119/0x1b0 [ 446.893722][T20464] input_pass_values+0x753/0x880 [ 446.893740][T20464] input_handle_event+0x7e4/0x1500 [ 446.893757][T20464] ? _raw_spin_lock_irqsave+0x52/0x60 [ 446.893776][T20464] input_inject_event+0x1f1/0x3b0 [ 446.893794][T20464] evdev_write+0x3ef/0x610 [ 446.893813][T20464] ? __pfx_evdev_write+0x10/0x10 [ 446.893831][T20464] ? bpf_lsm_file_permission+0x9/0x10 [ 446.893918][T20464] ? security_file_permission+0x76/0x210 [ 446.893985][T20464] ? rw_verify_area+0xce/0x6d0 [ 446.894005][T20464] vfs_write+0x2aa/0x1070 [ 446.894017][T20464] ? __pfx_evdev_write+0x10/0x10 [ 446.894035][T20464] ? __pfx_vfs_write+0x10/0x10 [ 446.894046][T20464] ? find_held_lock+0x2b/0x80 [ 446.894062][T20464] ? __fget_files+0x215/0x3d0 [ 446.894078][T20464] ? __fget_files+0x215/0x3d0 [ 446.894093][T20464] ? __fget_files+0x21f/0x3d0 [ 446.894108][T20464] ksys_write+0x1f8/0x250 [ 446.894119][T20464] ? __pfx_ksys_write+0x10/0x10 [ 446.894133][T20464] do_syscall_64+0x10b/0xf80 [ 446.894152][T20464] ? clear_bhb_loop+0x40/0x90 [ 446.894167][T20464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.894181][T20464] RIP: 0033:0x7f85b1d9c819 [ 446.894194][T20464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.894206][T20464] RSP: 002b:00007f85b2bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.894300][T20464] RAX: ffffffffffffffda RBX: 00007f85b2015fa0 RCX: 00007f85b1d9c819 [ 446.894308][T20464] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 446.894316][T20464] RBP: 00007f85b1e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 446.894324][T20464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.894332][T20464] R13: 00007f85b2016038 R14: 00007f85b2015fa0 R15: 00007fffdb3390f8 [ 446.894343][T20464] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.680868][ T107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.731525][ T107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.771869][ T107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.821254][ T107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.986414][ T107] bridge_slave_1: left allmulticast mode [ 447.988528][ T107] bridge_slave_1: left promiscuous mode [ 447.990539][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.994699][ T107] bridge_slave_0: left allmulticast mode [ 447.996709][ T107] bridge_slave_0: left promiscuous mode [ 447.999223][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.226971][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.259638][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.308975][ T107] bond0 (unregistering): Released all slaves [ 448.319475][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 448.319489][ T40] audit: type=1400 audit(2000525178.542:4685): avc: denied { search } for pid=5645 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.329381][ T40] audit: type=1400 audit(2000525178.552:4686): avc: denied { search } for pid=5645 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.336923][ T40] audit: type=1400 audit(2000525178.552:4687): avc: denied { search } for pid=5645 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.347711][ T40] audit: type=1400 audit(2000525178.562:4688): avc: denied { read } for pid=5645 comm="dhcpcd" name="n172" dev="tmpfs" ino=12511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.355358][ T40] audit: type=1400 audit(2000525178.562:4689): avc: denied { open } for pid=5645 comm="dhcpcd" path="/run/udev/data/n172" dev="tmpfs" ino=12511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.365027][ T40] audit: type=1400 audit(2000525178.562:4690): avc: denied { getattr } for pid=5645 comm="dhcpcd" path="/run/udev/data/n172" dev="tmpfs" ino=12511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.397004][ T40] audit: type=1400 audit(2000525178.612:4691): avc: denied { read open } for pid=20484 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.405395][ T40] audit: type=1400 audit(2000525178.622:4692): avc: denied { getattr } for pid=20484 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.414397][ T40] audit: type=1400 audit(2000525178.632:4693): avc: denied { add_name } for pid=20483 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.423295][ T40] audit: type=1400 audit(2000525178.632:4694): avc: denied { create } for pid=20483 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.031888][ T107] hsr_slave_0: left promiscuous mode [ 449.034966][ T107] hsr_slave_1: left promiscuous mode [ 449.037704][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.040364][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.044014][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.046959][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.062800][ T107] hsr0: left promiscuous mode [ 449.065072][ T107] veth1_macvtap: left promiscuous mode [ 449.067353][ T107] veth0_macvtap: left promiscuous mode [ 449.070745][ T107] veth1_vlan: left promiscuous mode [ 449.188528][ T107] team0 (unregistering): Port device team_slave_1 removed [ 449.195758][ T107] team0 (unregistering): Port device team_slave_0 removed [ 450.342353][ T107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.392089][ T107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.441863][ T107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.502297][ T107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.652250][ T107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.787229][ T107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.880681][ T107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.933883][ T107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.076517][ T107] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.163799][ T107] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.214862][ T107] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.303702][ T107] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.463196][ T107] bridge_slave_1: left allmulticast mode [ 451.465167][ T107] bridge_slave_1: left promiscuous mode [ 451.467463][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.472890][ T107] bridge_slave_0: left allmulticast mode [ 451.474720][ T107] bridge_slave_0: left promiscuous mode [ 451.476675][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.481909][ T107] bridge_slave_1: left allmulticast mode [ 451.484120][ T107] bridge_slave_1: left promiscuous mode [ 451.486087][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.489949][ T107] bridge_slave_0: left allmulticast mode [ 451.491790][ T107] bridge_slave_0: left promiscuous mode [ 451.493744][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.499802][ T107] bridge_slave_1: left allmulticast mode [ 451.502943][ T107] bridge_slave_1: left promiscuous mode [ 451.505625][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.510249][ T107] bridge_slave_0: left allmulticast mode [ 451.512685][ T107] bridge_slave_0: left promiscuous mode [ 451.515142][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.873029][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.912202][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.962787][ T107] bond0 (unregistering): Released all slaves [ 452.034969][ T107] dvmrp0 (unregistering): left allmulticast mode [ 452.040277][ T107] bond3 (unregistering): (slave geneve2): Releasing active interface [ 452.253353][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.268314][ T107] bond_slave_0: left allmulticast mode [ 452.270874][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.318479][ T107] bond_slave_1: left allmulticast mode [ 452.322218][ T107] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 452.358581][ T107] batadv0: left allmulticast mode [ 452.362587][ T107] bond0 (unregistering): Released all slaves [ 452.367342][ T107] bond1 (unregistering): Released all slaves [ 452.374270][ T107] bond2 (unregistering): Released all slaves [ 452.380449][ T107] bond3 (unregistering): Released all slaves [ 452.493456][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.539511][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.558872][ T107] bond0 (unregistering): Released all slaves [ 452.669449][ T107] tipc: Left network mode [ 452.680734][ T107] tipc: Left network mode [ 453.919002][ T107] hsr_slave_0: left promiscuous mode [ 453.921198][ T107] hsr_slave_1: left promiscuous mode [ 453.923232][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.925580][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.929615][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.932026][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.937230][ T107] hsr_slave_0: left promiscuous mode [ 453.939724][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.942336][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.946711][ T107] hsr_slave_0: left promiscuous mode [ 453.949507][ T107] hsr_slave_1: left promiscuous mode [ 453.952240][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.955299][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.958931][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.961984][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.970009][ T107] veth1_macvtap: left promiscuous mode [ 453.972306][ T107] veth0_macvtap: left promiscuous mode [ 453.974628][ T107] veth1_vlan: left promiscuous mode [ 453.976829][ T107] veth0_vlan: left promiscuous mode [ 453.981537][ T107] veth1_macvtap: left promiscuous mode [ 453.983905][ T107] veth0_macvtap: left promiscuous mode [ 453.986216][ T107] veth1_vlan: left promiscuous mode [ 454.084610][ T107] team0 (unregistering): Port device team_slave_1 removed [ 454.093572][ T107] team0 (unregistering): Port device team_slave_0 removed [ 454.237079][ T107] team0 (unregistering): Port device team_slave_1 removed [ 454.245393][ T107] team0 (unregistering): Port device team_slave_0 removed [ 454.365445][ T107] team0 (unregistering): Port device team_slave_1 removed [ 454.378242][ T107] team0 (unregistering): Port device team_slave_0 removed [ 455.514151][ T107] IPVS: stop unused estimator thread 0... [ 455.517282][ T107] IPVS: stop unused estimator thread 0...