last executing test programs: 1m25.719696238s ago: executing program 3 (id=313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="130029bd7000fddbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x42c01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x10001, 0x20c200) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r2, 0xffffd000) 1m25.619926605s ago: executing program 3 (id=315): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0xf7, r1, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 1m25.6184233s ago: executing program 3 (id=317): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e65"], 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x6, 0x10008420) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0a540f5546e20fe8323c218c4c1d26e9d28701683b6ef01606c5a728552f0f859a5b963ce6dd0a189ad4de3b604379e523e79f3276e79406291c94252c0acb919c84559ab1773ff673f71830c481ddf2c1f7e40acbd1dbe6fa18e9045648e6bf9e3a161d1595d64beecedf4c3221f920e0d3ba32297b3ae85de7640454da5db07dfd785a0184d00c181963aebf88f1dbe2ed6d961559a5e4215c0a82a20c2ae1be8ada90e2c8a1c82165b3", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf25070000000800040001000000080002000500000008000c0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d80000001314"], 0xd8}}, 0x0) 1m25.538967395s ago: executing program 3 (id=319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.20438848s ago: executing program 3 (id=340): mkdir(&(0x7f0000000040)='./file1\x00', 0x160) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) (async) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) setpgid(0x0, r0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xbc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1800000072006bcdb13fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 1m23.119592114s ago: executing program 3 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000540)={0x0, 0x1, 0x1, [0x5, 0x67d, 0x5, 0x2a, 0x101], [0x7, 0x3, 0x4, 0x1, 0x1, 0x31a75449, 0x100, 0x2, 0x9, 0x401, 0x3, 0xffffffff, 0x80, 0x7, 0x0, 0x100, 0x8, 0x5, 0x8, 0x8, 0x7, 0x2826, 0x80000001, 0x7, 0xaa, 0xa249, 0xfff, 0x2, 0xfffffffffffffff4, 0x0, 0x0, 0x1, 0xfffffffffffffff8, 0x1, 0x4, 0x9, 0x1, 0x5, 0x9, 0x100000000, 0x1, 0x1, 0x191, 0x20, 0xc5, 0x7, 0x9, 0x6, 0x4, 0xbaf, 0x3ff, 0x9, 0x8, 0x10001, 0x2000000, 0x8, 0x6, 0x2, 0x2, 0x2, 0x7, 0x10000, 0x4800000000000, 0x1, 0x7, 0x69, 0x4, 0x0, 0x4, 0xb, 0x0, 0x1, 0xff, 0x100, 0x8, 0x6, 0x10000, 0x0, 0x8, 0x3ff, 0x46e2, 0xffffffff, 0x5, 0x100000000, 0x9c, 0xf, 0x6, 0x9, 0x401, 0x4, 0x4, 0x4, 0x5, 0x8, 0x380, 0x0, 0xc, 0xb1c, 0xfe9, 0x0, 0xffffffffa8ce8caa, 0x7, 0xffffffffffffffff, 0x4, 0x7, 0x8, 0x6, 0x100000001, 0x8, 0x7fffffffffffffff, 0x10001, 0x8, 0x8, 0x6, 0x3, 0x8, 0x4, 0x0, 0x7, 0x4, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002c80)={r2, 0x6, 0x2}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) (async) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000c40)={0x2020}, 0x2020) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_MTU={0x8, 0x4, 0x2266}]}, 0x54}}, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r6, r10, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.050817689s ago: executing program 32 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000540)={0x0, 0x1, 0x1, [0x5, 0x67d, 0x5, 0x2a, 0x101], [0x7, 0x3, 0x4, 0x1, 0x1, 0x31a75449, 0x100, 0x2, 0x9, 0x401, 0x3, 0xffffffff, 0x80, 0x7, 0x0, 0x100, 0x8, 0x5, 0x8, 0x8, 0x7, 0x2826, 0x80000001, 0x7, 0xaa, 0xa249, 0xfff, 0x2, 0xfffffffffffffff4, 0x0, 0x0, 0x1, 0xfffffffffffffff8, 0x1, 0x4, 0x9, 0x1, 0x5, 0x9, 0x100000000, 0x1, 0x1, 0x191, 0x20, 0xc5, 0x7, 0x9, 0x6, 0x4, 0xbaf, 0x3ff, 0x9, 0x8, 0x10001, 0x2000000, 0x8, 0x6, 0x2, 0x2, 0x2, 0x7, 0x10000, 0x4800000000000, 0x1, 0x7, 0x69, 0x4, 0x0, 0x4, 0xb, 0x0, 0x1, 0xff, 0x100, 0x8, 0x6, 0x10000, 0x0, 0x8, 0x3ff, 0x46e2, 0xffffffff, 0x5, 0x100000000, 0x9c, 0xf, 0x6, 0x9, 0x401, 0x4, 0x4, 0x4, 0x5, 0x8, 0x380, 0x0, 0xc, 0xb1c, 0xfe9, 0x0, 0xffffffffa8ce8caa, 0x7, 0xffffffffffffffff, 0x4, 0x7, 0x8, 0x6, 0x100000001, 0x8, 0x7fffffffffffffff, 0x10001, 0x8, 0x8, 0x6, 0x3, 0x8, 0x4, 0x0, 0x7, 0x4, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002c80)={r2, 0x6, 0x2}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) (async) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000c40)={0x2020}, 0x2020) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_MTU={0x8, 0x4, 0x2266}]}, 0x54}}, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r6, r10, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 41.219372421s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 37.995069359s ago: executing program 2 (id=873): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x44, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000000)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) getgid() chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 36.701563277s ago: executing program 2 (id=882): setreuid(0xee01, 0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000ffa00000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 35.782646594s ago: executing program 2 (id=887): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3) syz_open_procfs(0x0, &(0x7f00000004c0)='syscall\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='syscall\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007480)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x80c0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007480)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x80c0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$setlease(r3, 0x400, 0x1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000000)=""/22) 35.708961446s ago: executing program 2 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYRESHEX]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) chdir(&(0x7f00000002c0)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x420f, r4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) umount2(&(0x7f0000000340)='./file0\x00', 0x3) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000001c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240), 0x4000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) setresuid(r9, 0x0, r10) 35.589718301s ago: executing program 2 (id=891): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x111) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 35.003761706s ago: executing program 2 (id=894): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xfffffffffffffffc, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000002180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x1e, 0x7, 0xcd, "1e1c9859fef59341b59017a0cacea58c", "494090efdf651c14d7"}, 0x1e, 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000240)="38fd96be5b8eb4e71fdb533c433c1298b9f73c287fc1c046b05a2750f5037de994fcad468bf1e9928bdc3ac55572e6144ebb205f2c4f5e906a18a2cf53c3f04c0e74d4a8414c70e0f5925507e05de1865c3b86395fb50db176925a67f3dc08e01fffa8c4da70923082cb46a14e05349d8042838a385a988b320aca407407bc595bafbe61fff2f75b8472bc195eae84d0049ff17c7706fb", 0x97}], 0x1) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x89, &(0x7f0000000080), &(0x7f00000000c0)=0xfdb7) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) 34.958418352s ago: executing program 33 (id=894): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xfffffffffffffffc, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000002180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x1e, 0x7, 0xcd, "1e1c9859fef59341b59017a0cacea58c", "494090efdf651c14d7"}, 0x1e, 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000240)="38fd96be5b8eb4e71fdb533c433c1298b9f73c287fc1c046b05a2750f5037de994fcad468bf1e9928bdc3ac55572e6144ebb205f2c4f5e906a18a2cf53c3f04c0e74d4a8414c70e0f5925507e05de1865c3b86395fb50db176925a67f3dc08e01fffa8c4da70923082cb46a14e05349d8042838a385a988b320aca407407bc595bafbe61fff2f75b8472bc195eae84d0049ff17c7706fb", 0x97}], 0x1) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x89, &(0x7f0000000080), &(0x7f00000000c0)=0xfdb7) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) 34.039585384s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 25.956083583s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 24.301478666s ago: executing program 5 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) creat(&(0x7f0000000140)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x200800, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c3d0bd02b0975ac5c91d81ba412a150f1c266cb513ff0", @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',seclabel,\x00']) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x203, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 24.205239344s ago: executing program 5 (id=1004): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000300000009"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async) close(r1) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 24.204926528s ago: executing program 5 (id=1005): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000580)='./file0\x00', 0x181242, 0x1df2a23c5997fa5f) sendfile(r2, r2, 0x0, 0x7f04) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) 24.07689544s ago: executing program 5 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffffffe, 0x8000) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000640)=""/81, 0x51}], 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pipe2(&(0x7f0000000780), 0x4800) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x3, &(0x7f00000024c0)=0xfd, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049f5) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 23.884415414s ago: executing program 5 (id=1008): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) memfd_secret(0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r0, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r8, &(0x7f0000000300)) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000001c0)={0x1, 0x100, 0x4, {0x5, 0x81, 0x7, 0x287b}}) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='E4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080008000000000008000900000000000800020001000000"], 0x34}}, 0x0) 23.627821302s ago: executing program 5 (id=1009): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0)=0xe, 0xffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.087085859s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 12.100592442s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 7.586221891s ago: executing program 34 (id=1009): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0)=0xe, 0xffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.235827603s ago: executing program 6 (id=1165): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4) 4.235215509s ago: executing program 0 (id=260): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x68}}], 0x1, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4003, 0xffffffff, @mcast2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$xdp(&(0x7f0000960000/0x1000)=nil, 0x1000, 0x1, 0x30, r3, 0x100000000) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000878000/0x400000)=nil) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000000000080000090005", @ANYRESOCT=r2], 0x20}}, 0x40080c0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 2.618446581s ago: executing program 6 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1}) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x20080000, &(0x7f0000000840)="c89177da8e17f037d6c12d1f67", 0xd, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="21f3f20f992096e68ed6247b54fa628771cdd62aa46f79964cd80ccbf3956be217949934a93ea50cc5fbffc6655c032bc9f0fb37f01b881e9d0799b564164afb2eb91048be8c6efdb26a253f77aee74171ed832268f3eb7e1f2a91f98434f42df649b32e8fbb8e583b32ba1576087024d17e9503fc3b0cb2a35be35a12a221c02404a83dce") (async) r7 = syz_clone(0x20080000, &(0x7f0000000840)="c89177da8e17f037d6c12d1f67", 0xd, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="21f3f20f992096e68ed6247b54fa628771cdd62aa46f79964cd80ccbf3956be217949934a93ea50cc5fbffc6655c032bc9f0fb37f01b881e9d0799b564164afb2eb91048be8c6efdb26a253f77aee74171ed832268f3eb7e1f2a91f98434f42df649b32e8fbb8e583b32ba1576087024d17e9503fc3b0cb2a35be35a12a221c02404a83dce") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, {0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000001dc0), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210080000000c8"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r12 = getuid() statx(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x800, 0x200, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000001c80)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000200)="0ff8fd7f86f2ba25f20873188438233b17172e6c35a1413e873743dc70190fdd5a79959183e6b2dc1b964c4eee207936a60b1872e36f9ecc709406ee8bf9071a5538909aadbe1d37a43bd16ae12476950ec3a5ca31e29e142650ec2c1ae868adae1843ed6ecf46a4a9e802e85a350b803d7889a480f503c1827703019184f1feed4d92f5db29801d6ad162de4f5bdfbfe7879e03829bc7406660a3aa1e8f27ef9e8ea7ef8512cac7010572de03a598eac472f7050da64c", 0xb7}, {&(0x7f00000002c0)="4281eb0030033c018f1f8452d07d04243e5d9ea86b0f75c5136350e8c544d9fd970fd609a7a6869141e8692e8a872d4066868e428070c8f1f09bafd5ba2a9e96781edffd4449fcc92f4480a53251e7bd76b4e97a099b624cb5349a981c699f8b919e6be6e78654832170", 0x6a}, {&(0x7f0000000040)="c8080f059bdd476b9036080f2c0876dc8738f9538495af9ae77e239727caca72f4265aac5d51d9f212df475010eb16d678", 0x31}, {&(0x7f0000000440)="38517f5d912e064d816c808a83db04fbd59bb38708a1f881a1970079865a769a8e7bc0cb55c42fb50ed36568b6aa473408494e989b63496af9bef1592bcb8dd11672be40455e11d813514b991a4d8c63073a7fcca4a6209797e954fbeec164a141bbabb75cdf0e98cbe2ae06806950fa3cc2182459a79c7ae99426a08c81c89e8e3425fe4f636833538ac557f6ab65484d64108245447bae99c856ecd55c032e2bb819bed67af10132b02dcc7f46acf3879a21b8df7a78013152e5d74b7b2f325b59c694ef36a837a38a9e23635f", 0xce}, {&(0x7f0000000540)="85cf528f0f425493a32ab933855fb0fbb8d4ae77a5bf08ff7b314fbcd92051dbfe800e962f6045501bc19d2cfc430d77b42890020bdcc7d702a63cc9800419527074ba74a85c738322adbf12ba1fe06befaa91e282378a05874add941da6c588aef4f67261dda1997d7231d94ab136c0015168eed4f3e318b8dc28fe669cf7b23ae9534e0804dc0af6ef5fc06a3ab87eefa22c7abcea0e06672ff8a5d7c44cfb77c72cf5d568", 0xa6}, {&(0x7f0000000600)="e57089f86d528bc1b31712a63a91551215430b5ee3a7eee913e4e5d6026cb6ef5205be574e1066dd8cff21d3eb6b34ab931deedbcee232d05004824971f70ed9fdf4aeea882ede88cb24f4e1099786832262db6fba8cd104c4d50ab54a0b888b4fe2fd60f6a244b02d76d920512abec12db1e774ebe53f3d38447669965ab7d4355ced53523f30d943c90a5f5ea5c5f54d1385e973f8f6f1bec3f34fc010616f1f0fdc5412a2843858fb0ef8cacdc4345476c822c0babeb35b3bc7eb9163927b", 0xc0}, {&(0x7f0000000180)="8d712a5a3849dc7595f8056c64f0665833f60f8799f4", 0x16}, {&(0x7f00000006c0)="2404cf2f8f54b9ff34d54831977a81545585488b80733ac4650f543176abce723d8ca506e0b6521c7152c8bb421cf1248b76867e299b", 0x36}, {&(0x7f0000000700)="759bd95a4e7a5b113450476c400f982ffa1aac295842f6af16bd01896c524aba564ae6a930a6426b835488a7", 0x2c}], 0x9, &(0x7f0000000bc0)=[@rights={{0x24, 0x1, 0x1, [r0, r3, r1, r3, r3]}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r2, r1, r5, r2, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x38, 0x1, 0x1, [r1, r2, r1, r2, r3, r0, 0xffffffffffffffff, r1, r3, r2]}}], 0x100, 0x40}, 0x40) (async) sendmsg$unix(r4, &(0x7f0000001c80)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000200)="0ff8fd7f86f2ba25f20873188438233b17172e6c35a1413e873743dc70190fdd5a79959183e6b2dc1b964c4eee207936a60b1872e36f9ecc709406ee8bf9071a5538909aadbe1d37a43bd16ae12476950ec3a5ca31e29e142650ec2c1ae868adae1843ed6ecf46a4a9e802e85a350b803d7889a480f503c1827703019184f1feed4d92f5db29801d6ad162de4f5bdfbfe7879e03829bc7406660a3aa1e8f27ef9e8ea7ef8512cac7010572de03a598eac472f7050da64c", 0xb7}, {&(0x7f00000002c0)="4281eb0030033c018f1f8452d07d04243e5d9ea86b0f75c5136350e8c544d9fd970fd609a7a6869141e8692e8a872d4066868e428070c8f1f09bafd5ba2a9e96781edffd4449fcc92f4480a53251e7bd76b4e97a099b624cb5349a981c699f8b919e6be6e78654832170", 0x6a}, {&(0x7f0000000040)="c8080f059bdd476b9036080f2c0876dc8738f9538495af9ae77e239727caca72f4265aac5d51d9f212df475010eb16d678", 0x31}, {&(0x7f0000000440)="38517f5d912e064d816c808a83db04fbd59bb38708a1f881a1970079865a769a8e7bc0cb55c42fb50ed36568b6aa473408494e989b63496af9bef1592bcb8dd11672be40455e11d813514b991a4d8c63073a7fcca4a6209797e954fbeec164a141bbabb75cdf0e98cbe2ae06806950fa3cc2182459a79c7ae99426a08c81c89e8e3425fe4f636833538ac557f6ab65484d64108245447bae99c856ecd55c032e2bb819bed67af10132b02dcc7f46acf3879a21b8df7a78013152e5d74b7b2f325b59c694ef36a837a38a9e23635f", 0xce}, {&(0x7f0000000540)="85cf528f0f425493a32ab933855fb0fbb8d4ae77a5bf08ff7b314fbcd92051dbfe800e962f6045501bc19d2cfc430d77b42890020bdcc7d702a63cc9800419527074ba74a85c738322adbf12ba1fe06befaa91e282378a05874add941da6c588aef4f67261dda1997d7231d94ab136c0015168eed4f3e318b8dc28fe669cf7b23ae9534e0804dc0af6ef5fc06a3ab87eefa22c7abcea0e06672ff8a5d7c44cfb77c72cf5d568", 0xa6}, {&(0x7f0000000600)="e57089f86d528bc1b31712a63a91551215430b5ee3a7eee913e4e5d6026cb6ef5205be574e1066dd8cff21d3eb6b34ab931deedbcee232d05004824971f70ed9fdf4aeea882ede88cb24f4e1099786832262db6fba8cd104c4d50ab54a0b888b4fe2fd60f6a244b02d76d920512abec12db1e774ebe53f3d38447669965ab7d4355ced53523f30d943c90a5f5ea5c5f54d1385e973f8f6f1bec3f34fc010616f1f0fdc5412a2843858fb0ef8cacdc4345476c822c0babeb35b3bc7eb9163927b", 0xc0}, {&(0x7f0000000180)="8d712a5a3849dc7595f8056c64f0665833f60f8799f4", 0x16}, {&(0x7f00000006c0)="2404cf2f8f54b9ff34d54831977a81545585488b80733ac4650f543176abce723d8ca506e0b6521c7152c8bb421cf1248b76867e299b", 0x36}, {&(0x7f0000000700)="759bd95a4e7a5b113450476c400f982ffa1aac295842f6af16bd01896c524aba564ae6a930a6426b835488a7", 0x2c}], 0x9, &(0x7f0000000bc0)=[@rights={{0x24, 0x1, 0x1, [r0, r3, r1, r3, r3]}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r2, r1, r5, r2, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x38, 0x1, 0x1, [r1, r2, r1, r2, r3, r0, 0xffffffffffffffff, r1, r3, r2]}}], 0x100, 0x40}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x54, 0x30, 0x10, 0x70bd26, 0x0, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x54, 0x30, 0x10, 0x70bd26, 0x0, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x54}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x18000000000, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x18000000000, 0x2) 2.370134792s ago: executing program 6 (id=1169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x880, 0x4) shutdown(r1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000040)={0x1e, 0x1, 0xf, 0xc, 0x7, 0x2, 0x4, 0x38, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="28000000120001000000000000000011100000000c00000000a7a2bb246c4c74e7c87afbe57000000000080031"], 0x28}], 0x1}, 0x62) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x33, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004d3ed820a61b0100884901020301090212000100000000090400008077e4f900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'geneve0\x00', &(0x7f0000000600)=@ethtool_rxfh_indir={0x38, 0x1, [0xfffffffa]}}) bind$bt_l2cap(r10, &(0x7f00000001c0)={0x1f, 0x959, @none, 0xffff, 0x2}, 0xe) 1.956918691s ago: executing program 4 (id=1174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) fchdir(r0) (async) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x300, 0x0) (rerun: 64) ioctl$CDROMEJECT_SW(r2, 0x1260, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) rmdir(&(0x7f0000000040)='./control\x00') r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000240)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r6, 0x550c, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4410000010003b1503000028b63ae1afca35e91ed2d11786348aadc649100000000000000000014e9692356f2c76ffedec23c834018f", @ANYRES32=0x0, @ANYBLOB="84200000000000002400128009000100626f6e64000000001400028008000500040000000800030008000000"], 0x44}}, 0x0) 1.102672325s ago: executing program 1 (id=1175): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc7, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) (async) getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @null, @rose, @rose, @bcast, @bcast, @rose, @netrom]}, &(0x7f0000000100)=0x48) (async) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000140)={0x0, 0x1}) listen(r0, 0x7fffffff) (async) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@remote, @default, @default, @netrom, @remote, @remote, @bcast]}, &(0x7f0000000200)=0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000380)={0x2, 'netpci0\x00', {0x3}, 0xa}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x5, 0x301, 0x7, {}, {r3, r4/1000+60000}, {0x2}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "7d85db41cddbe797"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004000) (async) r5 = accept4$netrom(r0, 0x0, &(0x7f0000000540), 0x800) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={0x0, "0f7fee40c2c7eccc17b0e1b9897010ed"}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001580)={r6, "bb3a81369930f539c863537e6a77b97a"}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4060000) pipe2$watch_queue(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$qrtr(r7, &(0x7f00000026c0)={0x2a, 0x1, 0x7ffe}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000027c0)={'syztnl1\x00', &(0x7f0000002740)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x971, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x6, 0xc}}) sendmsg$nl_route_sched(r7, &(0x7f00000029c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002800)=@delqdisc={0x180, 0x25, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xd}, {0x6, 0xfff1}, {0x1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x140, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8d8a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}]}]}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x22, 0xf9}}]}, 0x180}}, 0xc000) read(r7, &(0x7f0000002a00)=""/4096, 0x1000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000003a00)=0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000003a40)={0x40000000}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r7) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0xa00910}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x30, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x22}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}}, 0x440480c0) r10 = accept4$nfc_llcp(r7, 0x0, &(0x7f0000003bc0), 0x80800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000003c00)=0x0) bind$nfc_llcp(r10, &(0x7f0000003c40)={0x27, r11, 0x1, 0x3, 0x7, 0xe, "88d1420043c3523efdea17e4a3b39412548a087996173f8097b5fa213618a8bd7c9b7c8d1aa7969f8e2205556473450ee63c9fc8a64a98706dfbf8674f8031", 0x20}, 0x60) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x73}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 578.769797ms ago: executing program 4 (id=1176): syz_emit_ethernet(0x16, &(0x7f0000000700)={@empty, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x88f7, 0x4, 0x1, 0x3}}, {@generic={0x6002}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200b7402ba17412c55948e8157c00"/40], 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x3, 0xfffffc01, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000002780)=ANY=[@ANYBLOB="b4140000260000032dbd7000fbdbdf2511000000f900708004005f8004003580dcda528acf7fbf277b72246f2c505fb398b453b8bf56e74ece595a8429138e1e3829e4c70f681e35d527d88c9ca702437a3d33e46c5a3975ce8cc8210b24236741d8d42b681abea97f18ac381508625a8d3efce851480df5d2d40a8066f01a6eb445c558b5b819bef742de33a0d2607f680cfc9f16d98325eab4ebbe5f56cec6207334552a5d1690f2df25df716456e06a0072e42f678f59b759a71cfbc0ef4becb73517b467339e6b10122cc6e627a9b799083c39d49feac4e6ec061cd8b757b3df0fc606e9fd8478e766aad4463a3b3e0a104f274f0ee691c3af716efd54486d7c8298623383d6ef04009f800000006701a68004004080ec226fe194ffdbc2d7e2e4d9b978abab708eeeae74ad92fa064f420e4cbb8de043fb02c460c1f5c0c2829ac72b5b8d923bf453956a16f9a13d4a2bcf045cf61ea24f3a57827de0ae5bd2324b630cf4d96269b08babb633773cd1826dc48a0ed3de549a4ad088e999f775aa0d27b77f1182c1c7b2d4da9283307c4331970a93feecdadda7e574c5615682b60acd28bd07a8c7b2f8f9722eee3b6b5e311d562924f8364be0f353f9184d3a63b870dc31343884815ef80261f4ba0a1964f99e98bf612f953de62f066f8db859138e94db4e978e49f4beee9ff51812e9ddf29562e80c919a9ff509f9e48fb29b11bae58c50537dc8fa54978aa82b380d740c001900090000000000000008001100", @ANYRES32=r1, @ANYBLOB="08001200", @ANYRES32=r2, @ANYBLOB="6a0d1bc50b2bdcf1ee9d9df1177e7f12e0f007cecc9c829ac45e82a22fb6652db2b2d34d8f830bd69a6243e33120613606aee04aba3c0400048000050053000000000008003800"/84, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="310094803b665e285b8f936c6b5fec7f90b0d52038adb7ea3473c60e214a286a8cee2aa533861892dc8d3a94f80400f880000000162468e8af7f4598d4147904fb23bf224b9b79b1c9fdcdd095087b4fe94c63028decd902eae183a72936b76d7958265cb04c116147d1b4fd0dd209c5188dc4eaa016cee602cab7350237259c8c831903db3b0eed549054678dafc73ddba71ca4c1c6251e565e0edbc9476a42be8ead21fd7b42ea3ca7a4fc59ab2715f6ca5f54e3e00d66717fab3f24bbded3cbf51cad368b3ea58e7253ea52858db07b6d0abb0e7a1f933d8d7051e16ece096881779892e8baa84e704707830bb8884fef62da97299150e8473f7565cd5091cdd88e522cde523c22b6181b759e755a6d6d76a30482e4a40a52246ca0b2b85fe44c1c8cffb47c5e5dcd511c22eab359d1000000"], 0x14b4}, 0x1, 0x0, 0x0, 0x4004000}, 0x24048080) 574.397078ms ago: executing program 1 (id=1177): setuid(0xee00) ioprio_set$pid(0x3, 0x0, 0x0) (async) ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c920180014000500180110"], 0x1d) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340), &(0x7f00000000c0)) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./bus/file0\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x2, {{0x2a, 0x4, 0x3, 0x30, 0xa8, 0x64, 0x0, 0x86, 0x0, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x1f, 0x3, 0xa, [{@loopback, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xdac0}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x47, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xf5b}, {@broadcast, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x4}, {@remote, 0xc}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xfd, [@rand_addr=0x64010101, @local, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x8b, 0x3, 0x5, [{@private=0xa010101, 0x800}, {@empty, 0x7}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x98, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x2, {{0x2a, 0x4, 0x3, 0x30, 0xa8, 0x64, 0x0, 0x86, 0x0, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x1f, 0x3, 0xa, [{@loopback, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xdac0}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x47, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xf5b}, {@broadcast, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x4}, {@remote, 0xc}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xfd, [@rand_addr=0x64010101, @local, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x8b, 0x3, 0x5, [{@private=0xa010101, 0x800}, {@empty, 0x7}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x98, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x4, 0x2, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x67, 0x0, 0x6, 0x2d, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x88, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xec13489946febcf1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000225f8e4ee90170cf0267ba8d8519d291e6b27eaf14de8dae24c0a51f4d36d0b75082bad099616c2afbb5f59cd5fb3d8734560ef378a9ba8df351a4cd6b14936b972fce2a00571525a058e0876c06b64a08b60fbb9673d21929a68acd5a9ba1a2e437c3d1a73a5c5c6d3a03640506e32ceb5660062f980feb445708e7d8b6a3e7774f89803db599943ad8ecbcb6f0d5a5bfd0ddc53c1bf6", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kvm_mmio\x00', r14, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x2800, 0xfffffffffffffe4c, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r14, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x2800, 0xfffffffffffffe4c, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r14, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r15) (async) close(r15) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r16, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r15, 0x4010744d, &(0x7f0000000180)) 573.911185ms ago: executing program 4 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r1, 0x5, 0x70bd31, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x2000) 451.015241ms ago: executing program 1 (id=1179): syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000773511a5f353c6494d3385", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast1, 0x0, "79eeb6f2f54ac94fc0738f33e5c4cd99f26272029e3903a9f9b81ed7d808e566", 0x10001, 0x0, 0xff, 0x9}, 0x3c) 450.646568ms ago: executing program 4 (id=1180): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xc, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff0000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa72e34ab7e483ce3}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 450.095878ms ago: executing program 1 (id=1181): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350c000000440f22c00f01f80f01b88113f6d164400f210966470f2115b9800000c00f32350008000067640f01c9c4a1c5594cf6280f2186c4a15de1ec66b818000f00d0", 0x48}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 382.384902ms ago: executing program 1 (id=1182): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2e, 0x0, &(0x7f0000000300)=0x4f) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001b00)={&(0x7f0000001940)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x142}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xffffffffffffff65}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x142}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xffffffffffffff65}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 269.685472ms ago: executing program 1 (id=1183): setreuid(0xee01, 0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000c0ff0000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 268.094299ms ago: executing program 4 (id=1184): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000040)={0x0, 0xe7b7, 0x3501, 0x3}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/18, @ANYRES32, @ANYBLOB="01000000000002004c0012"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r3, 0x8, &(0x7f0000000180)=[&(0x7f000073c000/0x3000)=nil, &(0x7f00003e2000/0x2000)=nil, &(0x7f00005f5000/0x1000)=nil, &(0x7f0000025000/0x1000)=nil, &(0x7f00001b5000/0x2000)=nil, &(0x7f0000ebf000/0x3000)=nil, &(0x7f000028c000/0x3000)=nil, &(0x7f0000dd2000/0x2000)=nil], &(0x7f00000001c0)=[0xc84, 0x5c7], &(0x7f0000000200)=[0x0], 0x0) madvise(&(0x7f0000e7b000/0x3000)=nil, 0x3000, 0x16) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 64.992785ms ago: executing program 4 (id=1185): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000010000000000000001"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(r1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000010000000000000001"]) (async) pipe2$watch_queue(&(0x7f0000000540), 0x80) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) (async) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) close(r1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) 63.988421ms ago: executing program 6 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x29, 0xb, 0x70bd27, 0x4000, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="78a449a0"]}]}, 0x1c}}, 0x4040080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x44, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c091}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x4, 0x9, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_loaded', 0x40c000, 0x1) io_uring_enter(r5, 0x4b62, 0x43a3, 0x45, &(0x7f0000000280)={[0x7]}, 0x8) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket(0x11, 0x800000003, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) (async) r11 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r11, 0x0) (async) syz_io_uring_setup(0xe8f, &(0x7f0000002680)={0x0, 0x1a0e, 0x4005, 0x3, 0x166}, 0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000005c0)={0x6, {{0xa, 0x4e23, 0xec4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) 1.552606ms ago: executing program 6 (id=1187): mount(0x0, 0x0, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 6 (id=1188): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="36de878762fc79e223f881caf586113b98", 0x11}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}, 0x40000) (async) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (async) fcntl$getflags(r0, 0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000001c0)={r7, r7, 0x0, 0x100010001, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000140)={&(0x7f0000000040)=[r7], &(0x7f0000000100)=[0x3], 0x80, 0x3ffffffffffffc8d, 0x1}) (async) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="40001300", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a3100000000"], 0x40}}, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x1000200, 0xfffffffd, 0x80000000, 0xffff, 0x0, "4a073b267df2e98c69ba36c5095c911abad88f", 0x4}) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) kernel console output (not intermixed with test programs): icast mode [ 112.146444][ T8231] bridge_slave_1: entered promiscuous mode [ 112.217087][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.222771][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.304476][ T8231] team0: Port device team_slave_0 added [ 112.307782][ T8231] team0: Port device team_slave_1 added [ 112.349516][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.351773][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.360150][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.366675][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.370463][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.378507][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.451382][ T8282] 9pnet_fd: Insufficient options for proto=fd [ 112.454042][ T8231] hsr_slave_0: entered promiscuous mode [ 112.458440][ T8231] hsr_slave_1: entered promiscuous mode [ 112.460555][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.462863][ T8231] Cannot create hsr debugfs directory [ 112.483569][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 112.496222][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 112.498411][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.499756][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.500800][ T5299] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.507179][ T8286] warning: `syz.4.600' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.558603][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.603'. [ 112.571111][ T8293] netlink: 'syz.4.603': attribute type 7 has an invalid length. [ 112.573953][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 112.708334][ T8308] 9pnet: Found fid 0 not clunked [ 112.712955][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'. [ 112.798916][ T8320] ip6t_rpfilter: unknown options [ 112.801839][ T8320] ip6t_rpfilter: unknown options [ 112.803668][ T8320] ip6t_rpfilter: unknown options [ 112.805898][ T8320] ip6t_rpfilter: unknown options [ 112.807725][ T8320] ip6t_rpfilter: unknown options [ 112.809637][ T8320] ip6t_rpfilter: unknown options [ 112.812027][ T8320] ip6t_rpfilter: unknown options [ 112.814377][ T8320] ip6t_rpfilter: unknown options [ 112.818059][ T8320] ip6t_rpfilter: unknown options [ 112.821430][ T8320] ip6t_rpfilter: unknown options [ 112.843507][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.890974][ T8330] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 112.894881][ T8330] overlayfs: missing 'lowerdir' [ 112.898065][ T8330] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 112.900861][ T8330] overlayfs: missing 'lowerdir' [ 112.911559][ T8332] cgroup: Name too long [ 112.954252][ T1147] bridge_slave_1: left allmulticast mode [ 112.956553][ T1147] bridge_slave_1: left promiscuous mode [ 112.960601][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.964601][ T1147] bridge_slave_0: left allmulticast mode [ 112.967064][ T1147] bridge_slave_0: left promiscuous mode [ 112.968916][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.023666][ T8336] nfs: Unknown parameter 'Ñ' [ 113.205085][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.210277][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.214766][ T1147] bond0 (unregistering): Released all slaves [ 113.236556][ T8338] @: renamed from vlan0 (while UP) [ 113.395948][ T8350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.625'. [ 113.395955][ T8351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.625'. [ 113.395976][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 113.398694][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 113.514609][ T8354] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 113.517127][ T8354] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 113.535315][ T8354] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 113.537775][ T8354] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 113.614449][ T1147] hsr_slave_0: left promiscuous mode [ 113.617506][ T1147] hsr_slave_1: left promiscuous mode [ 113.620471][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.623701][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.627870][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.630940][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.663287][ T1147] veth1_macvtap: left promiscuous mode [ 113.665735][ T1147] veth0_macvtap: left promiscuous mode [ 113.668312][ T1147] veth1_vlan: left promiscuous mode [ 113.670383][ T1147] veth0_vlan: left promiscuous mode [ 113.755913][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 113.755925][ T40] audit: type=1400 audit(113.074:505): avc: denied { create } for pid=8357 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.774428][ T40] audit: type=1400 audit(113.084:506): avc: denied { connect } for pid=8357 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.784679][ T40] audit: type=1400 audit(113.084:507): avc: denied { write } for pid=8357 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.817964][ T40] audit: type=1400 audit(113.131:508): avc: denied { execute } for pid=8357 comm="syz.4.627" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.044042][ T5299] Bluetooth: hci0: command tx timeout [ 114.046746][ T40] audit: type=1400 audit(113.346:509): avc: denied { bind } for pid=8365 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.318431][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 114.383077][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 114.716494][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.717702][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.717718][ T63] Bluetooth: hci2: command 0x0419 tx timeout [ 114.882499][ T8376] netlink: 'syz.4.634': attribute type 2 has an invalid length. [ 114.885568][ T8376] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 114.968171][ T40] audit: type=1400 audit(114.208:510): avc: denied { map } for pid=8388 comm="syz.2.637" path="/dev/video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.974087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.974457][ T8231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.986197][ T8231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.996440][ T8231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.001106][ T8231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.071912][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.083528][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.089766][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.092051][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.098442][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.100739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.115745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.141869][ T40] audit: type=1400 audit(114.367:511): avc: denied { read } for pid=8412 comm="syz.4.642" path="socket:[24887]" dev="sockfs" ino=24887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.246716][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.247534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.271281][ T8231] veth0_vlan: entered promiscuous mode [ 115.276739][ T8231] veth1_vlan: entered promiscuous mode [ 115.293352][ T8231] veth0_macvtap: entered promiscuous mode [ 115.297038][ T8231] veth1_macvtap: entered promiscuous mode [ 115.309219][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.315363][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.319315][ T8231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.322034][ T8231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.324742][ T8231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.327852][ T8231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.368537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.374186][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.385958][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.442406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.457682][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.460180][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.527021][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.578978][ T40] audit: type=1400 audit(114.779:512): avc: denied { read } for pid=8440 comm="syz.4.648" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.587222][ T40] audit: type=1400 audit(114.779:513): avc: denied { open } for pid=8440 comm="syz.4.648" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.598743][ T40] audit: type=1400 audit(114.788:514): avc: denied { ioctl } for pid=8440 comm="syz.4.648" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.629349][ T8444] netlink: zone id is out of range [ 115.631067][ T8444] netlink: get zone limit has 8 unknown bytes [ 115.637673][ T8446] netlink: zone id is out of range [ 115.639836][ T8446] netlink: zone id is out of range [ 115.641972][ T8446] netlink: zone id is out of range [ 115.644173][ T8446] netlink: zone id is out of range [ 115.646517][ T8446] netlink: zone id is out of range [ 115.648489][ T8446] netlink: get zone limit has 8 unknown bytes [ 115.746514][ T8450] misc userio: The device must be registered before sending interrupts [ 116.376590][ T8462] __nla_validate_parse: 9 callbacks suppressed [ 116.376603][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 116.381419][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.472877][ T8469] overlay: Bad value for 'uuid' [ 116.904400][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 116.907316][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 116.917914][ T8484] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 116.938872][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.938903][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 116.948558][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.352603][ T8489] netlink: 'syz.1.663': attribute type 30 has an invalid length. [ 117.468952][ T8502] capability: warning: `syz.1.667' uses 32-bit capabilities (legacy support in use) [ 117.563239][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.392607][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 118.446074][ T8516] xt_hashlimit: size too large, truncated to 1048576 [ 118.503170][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.507789][ T5299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.510754][ T5299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.513415][ T5299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.516308][ T5299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.563168][ T8527] sp0: Synchronizing with TNC [ 118.569562][ T8527] binfmt_misc: register: failed to install interpreter file ./file0 [ 118.572440][ T8526] [U] è [ 118.657520][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 118.744746][ T8539] deleting an unspecified loop device is not supported. [ 118.756490][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.759063][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.762273][ T8520] bridge_slave_0: entered allmulticast mode [ 118.764559][ T8533] netlink: 165 bytes leftover after parsing attributes in process `syz.4.676'. [ 118.766777][ T8520] bridge_slave_0: entered promiscuous mode [ 118.780701][ T8533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.783235][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.785742][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.789062][ T8520] bridge_slave_1: entered allmulticast mode [ 118.792103][ T8520] bridge_slave_1: entered promiscuous mode [ 118.832681][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.837485][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.880504][ T8520] team0: Port device team_slave_0 added [ 118.885111][ T8520] team0: Port device team_slave_1 added [ 118.960688][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.962900][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.971588][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.985236][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.987503][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.995685][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.051531][ T8520] hsr_slave_0: entered promiscuous mode [ 119.055822][ T8520] hsr_slave_1: entered promiscuous mode [ 119.058569][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.061476][ T8520] Cannot create hsr debugfs directory [ 119.134784][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 119.134799][ T40] audit: type=1400 audit(118.111:528): avc: denied { write } for pid=8547 comm="syz.2.680" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 119.146123][ T40] audit: type=1400 audit(118.111:527): avc: denied { write } for pid=8547 comm="syz.2.680" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 119.161607][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 119.396013][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.438980][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.483900][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 119.547251][ T8572] netlink: 52 bytes leftover after parsing attributes in process `syz.1.687'. [ 119.576985][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.618229][ T8578] netlink: 'syz.1.689': attribute type 10 has an invalid length. [ 119.621654][ T40] audit: type=1400 audit(118.560:529): avc: denied { mount } for pid=8574 comm="syz.2.688" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.627596][ T8578] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.628697][ T40] audit: type=1400 audit(118.569:530): avc: denied { mounton } for pid=8574 comm="syz.2.688" path="/237/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 119.662696][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 119.662882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.665563][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 119.667061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.669400][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.677190][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.680146][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.683125][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.691994][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.695540][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.718740][ T1152] bridge_slave_1: left allmulticast mode [ 119.720486][ T1152] bridge_slave_1: left promiscuous mode [ 119.722271][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.727158][ T1152] bridge_slave_0: left allmulticast mode [ 119.729549][ T1152] bridge_slave_0: left promiscuous mode [ 119.731655][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.732769][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 119.736728][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 119.845569][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 119.914873][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 119.916672][ T29] usbtmc 9-1:16.0: can't read capabilities [ 119.995725][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.000703][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.005437][ T1152] bond0 (unregistering): Released all slaves [ 120.133089][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.136601][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.139712][ T9] usb 9-1: USB disconnect, device number 2 [ 120.190283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.354227][ T1152] hsr_slave_0: left promiscuous mode [ 120.356463][ T1152] hsr_slave_1: left promiscuous mode [ 120.359072][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.361453][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.364191][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.366606][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.385268][ T1152] veth1_macvtap: left promiscuous mode [ 120.387139][ T1152] veth0_macvtap: left promiscuous mode [ 120.389028][ T1152] veth1_vlan: left promiscuous mode [ 120.391917][ T1152] veth0_vlan: left promiscuous mode [ 120.471856][ T40] audit: type=1400 audit(119.365:531): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.564389][ T8604] futex_wake_op: syz.2.696 tries to shift op by -1; fix this program [ 120.569674][ T8604] netlink: 14 bytes leftover after parsing attributes in process `syz.2.696'. [ 120.701609][ T5949] Bluetooth: hci0: command tx timeout [ 121.019705][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 121.073966][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 121.605692][ T8604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.611843][ T8604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.615828][ T8604] bond0 (unregistering): Released all slaves [ 121.688607][ T40] audit: type=1400 audit(120.497:532): avc: denied { getopt } for pid=8618 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.695919][ T8619] net_ratelimit: 405 callbacks suppressed [ 121.695930][ T8619] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 121.700217][ T8617] ipvlan2: entered promiscuous mode [ 121.755710][ T8520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.774070][ T8520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.781438][ T8520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.793623][ T8520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.878806][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.887966][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.893290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.896614][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.904520][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.907610][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.012073][ T8646] __nla_validate_parse: 2 callbacks suppressed [ 122.012091][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 122.053233][ T8650] syz.2.706: attempt to access beyond end of device [ 122.053233][ T8650] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 122.058470][ T8650] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 122.063353][ T8652] binder: 8649:8652 ioctl c0306201 200000000a00 returned -14 [ 122.085114][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.113049][ T8520] veth0_vlan: entered promiscuous mode [ 122.119423][ T8520] veth1_vlan: entered promiscuous mode [ 122.137007][ T8520] veth0_macvtap: entered promiscuous mode [ 122.139281][ T8655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 122.141041][ T8520] veth1_macvtap: entered promiscuous mode [ 122.152260][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.162878][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.167839][ T8520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.170627][ T8520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.173422][ T8520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.177888][ T8520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.202632][ T52] hid (null): unknown global tag 0xc [ 122.209553][ T52] hid-generic 683C:0002:0008.0006: unexpected long global item [ 122.212263][ T52] hid-generic 683C:0002:0008.0006: probe with driver hid-generic failed with error -22 [ 122.216213][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.219274][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.234735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.237557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.259923][ T40] audit: type=1400 audit(121.030:533): avc: denied { mount } for pid=8520 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.380452][ T8678] affs: No valid root block on device nullb0 [ 122.520900][ T40] audit: type=1400 audit(121.283:534): avc: denied { setopt } for pid=8687 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.148770][ T8733] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 123.193155][ T8737] netlink: 464 bytes leftover after parsing attributes in process `syz.4.718'. [ 123.193155][ T8736] netlink: 684 bytes leftover after parsing attributes in process `syz.4.718'. [ 124.006990][ T40] audit: type=1400 audit(122.667:535): avc: denied { connect } for pid=8750 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.274886][ T8759] @: renamed from vlan0 (while UP) [ 124.276971][ T8765] 9pnet: Could not find request transport: vir [ 124.279680][ T8765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.293807][ T40] audit: type=1400 audit(122.938:536): avc: denied { name_bind } for pid=8764 comm="syz.4.727" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.372850][ T8774] overlay: Unknown parameter 'smackfstransmute' [ 124.455348][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.474396][ T8778] tmpfs: Unknown parameter 'grpquoti_inode_hardlimit' [ 124.501028][ T40] audit: type=1400 audit(123.135:537): avc: denied { unmount } for pid=7950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 125.389894][ T8792] autofs: Bad value for 'fd' [ 125.391651][ T8792] autofs: Bad value for 'fd' [ 125.395204][ T8795] 9pnet_virtio: no channels available for device syz [ 125.398088][ T8795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.735'. [ 125.475039][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.481014][ T5299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.484418][ T5299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.487427][ T5299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.496818][ T5299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.547207][ T40] audit: type=1400 audit(124.108:538): avc: denied { append } for pid=8811 comm="syz.4.742" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.555754][ T8813] dlm: no local IP address has been set [ 125.557957][ T8813] dlm: cannot start dlm midcomms -107 [ 125.560429][ T8813] tmpfs: Bad value for 'mpol' [ 125.781907][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 125.878151][ T40] audit: type=1400 audit(124.416:539): avc: denied { mounton } for pid=8824 comm="syz.4.744" path="/proc/202/task" dev="proc" ino=26949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 125.947692][ T40] audit: type=1400 audit(124.482:540): avc: denied { search } for pid=8824 comm="syz.4.744" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.956269][ T40] audit: type=1400 audit(124.482:541): avc: denied { search } for pid=8824 comm="syz.4.744" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.005442][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.007722][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.009963][ T8802] bridge_slave_0: entered allmulticast mode [ 126.013667][ T8802] bridge_slave_0: entered promiscuous mode [ 126.016795][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.019066][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.021273][ T8802] bridge_slave_1: entered allmulticast mode [ 126.024587][ T8802] bridge_slave_1: entered promiscuous mode [ 126.069857][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.074583][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.113603][ T8802] team0: Port device team_slave_0 added [ 126.117673][ T8802] team0: Port device team_slave_1 added [ 126.152525][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.155085][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.164692][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.169246][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.171488][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.179550][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.204395][ T6000] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 126.219733][ T8802] hsr_slave_0: entered promiscuous mode [ 126.221897][ T8802] hsr_slave_1: entered promiscuous mode [ 126.223900][ T8802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.226240][ T8802] Cannot create hsr debugfs directory [ 126.342852][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.365046][ T6000] usb 7-1: device descriptor read/64, error -71 [ 126.448185][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.530038][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.631030][ T1147] bridge_slave_1: left allmulticast mode [ 126.633503][ T1147] bridge_slave_1: left promiscuous mode [ 126.635974][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.641879][ T1147] bridge_slave_0: left allmulticast mode [ 126.643345][ T6000] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 126.645275][ T1147] bridge_slave_0: left promiscuous mode [ 126.649537][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.704531][ T8846] /dev/nullb0: Can't lookup blockdev [ 126.774746][ T8851] x_tables: duplicate underflow at hook 2 [ 126.792901][ T6000] usb 7-1: device descriptor read/64, error -71 [ 126.899685][ T6000] usb usb7-port1: attempt power cycle [ 126.916514][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.920490][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.924116][ T1147] bond0 (unregistering): Released all slaves [ 127.109992][ T40] audit: type=1400 audit(125.567:542): avc: denied { bind } for pid=8874 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.117695][ T40] audit: type=1400 audit(125.567:543): avc: denied { remount } for pid=8874 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.127827][ T8875] binder: 8874:8875 ioctl c0306201 200000000640 returned -22 [ 127.168303][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 127.171003][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 127.173921][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 127.177171][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 127.257059][ T8884] tmpfs: Bad value for 'mpol' [ 127.259494][ T1147] hsr_slave_0: left promiscuous mode [ 127.262325][ T1147] hsr_slave_1: left promiscuous mode [ 127.263658][ T6000] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 127.265280][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.269808][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.273540][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.276616][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.285735][ T6000] usb 7-1: device descriptor read/8, error -71 [ 127.304930][ T1147] veth1_macvtap: left promiscuous mode [ 127.308147][ T1147] veth0_macvtap: left promiscuous mode [ 127.309952][ T1147] veth1_vlan: left promiscuous mode [ 127.311585][ T1147] veth0_vlan: left promiscuous mode [ 127.315808][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 127.318631][ T8885] binder: 8883:8885 ioctl 4018620d 2000000001c0 returned -16 [ 127.323591][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 127.326080][ T8885] binder: 8883:8885 ioctl 4018620d 200000000040 returned -16 [ 127.329700][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 127.544822][ T6000] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 127.565916][ T6000] usb 7-1: device descriptor read/8, error -71 [ 127.680177][ T6000] usb usb7-port1: unable to enumerate USB device [ 127.712508][ T5949] Bluetooth: hci0: command tx timeout [ 127.875847][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 127.941365][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 128.439647][ T8885] team0: Port device team_slave_0 removed [ 128.555738][ T8802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.566698][ T8802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.570977][ T8802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.574962][ T8802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.615523][ T8915] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 128.617655][ T8915] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.620592][ T8915] vhci_hcd vhci_hcd.0: Device attached [ 128.625964][ T8915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.765'. [ 128.629393][ T8916] vhci_hcd: connection closed [ 128.629757][ T13] vhci_hcd: stop threads [ 128.632860][ T13] vhci_hcd: release socket [ 128.634284][ T13] vhci_hcd: disconnect device [ 128.645840][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.655467][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.660705][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.662751][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.676982][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.679426][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.808533][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.832097][ T8802] veth0_vlan: entered promiscuous mode [ 128.840485][ T8802] veth1_vlan: entered promiscuous mode [ 128.860399][ T8802] veth0_macvtap: entered promiscuous mode [ 128.864073][ T8802] veth1_macvtap: entered promiscuous mode [ 128.875284][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.882468][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.887698][ T8802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.890922][ T8802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.893966][ T8802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.896708][ T8802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.942734][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.945300][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.970984][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.973749][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.203719][ T8935] overlay: Unknown parameter '/' [ 129.206024][ T40] audit: type=1400 audit(127.531:544): avc: denied { read append } for pid=8932 comm="syz.2.769" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.215314][ T40] audit: type=1400 audit(127.531:545): avc: denied { open } for pid=8932 comm="syz.2.769" path="/dev/btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.238802][ T40] audit: type=1400 audit(127.560:546): avc: denied { unmount } for pid=7950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.245453][ T5949] Bluetooth: hci1: unexpected event for opcode 0x080e [ 129.320653][ T8944] program syz.4.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.327960][ T8940] program syz.2.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.455362][ T8957] program syz.2.777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.500129][ T8962] netlink: 76 bytes leftover after parsing attributes in process `syz.2.779'. [ 129.654320][ T8960] kvm: kvm [8959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 129.658769][ T8960] kvm: kvm [8959]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd801 [ 129.680140][ T8960] kvm: kvm [8959]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 129.803803][ T8969] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.781'. [ 129.808693][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 129.857339][ T8971] sysfs: Unknown parameter '@Í [ 129.857339][ T8971] š eº' [ 129.866111][ T8972] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 1, id = 0 [ 129.925139][ T59] Process accounting resumed [ 130.125470][ T8990] program syz.4.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.132517][ T8991] program syz.4.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.779520][ T9020] rdma_op ffff88802c12b1f0 conn xmit_rdma 0000000000000000 [ 130.785409][ T40] audit: type=1400 audit(129.009:547): avc: denied { ioctl } for pid=9018 comm="syz.1.795" path="socket:[31752]" dev="sockfs" ino=31752 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.835908][ T9025] netlink: 'syz.1.797': attribute type 7 has an invalid length. [ 130.838839][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 130.849092][ T9025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.797'. [ 130.969797][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 130.974251][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 130.976997][ T9039] netlink: 'syz.2.803': attribute type 12 has an invalid length. [ 131.019042][ T9046] netlink: 'syz.1.805': attribute type 5 has an invalid length. [ 131.025108][ T40] audit: type=1326 audit(129.234:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.2.806" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0fe78e929 code=0x0 [ 131.287264][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 131.294156][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.303325][ T9078] Cannot find del_set index 4 as target [ 131.307383][ T9078] netlink: 180 bytes leftover after parsing attributes in process `syz.4.814'. [ 132.330661][ T9085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9085 comm=syz.2.816 [ 132.424116][ T40] audit: type=1400 audit(130.544:549): avc: denied { read } for pid=9099 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.426891][ T9104] openvswitch: netlink: EtherType 0 is less than min 600 [ 132.442735][ T5299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.446432][ T5299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.450213][ T5299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.454314][ T5299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.457024][ T5299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.556674][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 132.636545][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.638998][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.644077][ T9105] bridge_slave_0: entered allmulticast mode [ 132.646707][ T9105] bridge_slave_0: entered promiscuous mode [ 132.650190][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.652493][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.654779][ T9105] bridge_slave_1: entered allmulticast mode [ 132.657381][ T9105] bridge_slave_1: entered promiscuous mode [ 132.694873][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.699389][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.734929][ T9105] team0: Port device team_slave_0 added [ 132.740689][ T9105] team0: Port device team_slave_1 added [ 132.772615][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.774848][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.783159][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.787337][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.789539][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.797621][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.839282][ T9105] hsr_slave_0: entered promiscuous mode [ 132.841497][ T9105] hsr_slave_1: entered promiscuous mode [ 132.846634][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.849167][ T9105] Cannot create hsr debugfs directory [ 132.866653][ T9158] batadv_slave_1: entered promiscuous mode [ 132.893131][ T9159] batadv_slave_1: left promiscuous mode [ 133.027266][ T40] audit: type=1400 audit(131.114:550): avc: denied { ioctl } for pid=9176 comm="syz.1.837" path="socket:[29902]" dev="sockfs" ino=29902 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 133.027672][ T9176] delete_channel: no stack [ 133.304230][ T9205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.307703][ T9205] IPv6: NLM_F_CREATE should be set when creating new route [ 133.357488][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.381428][ T9211] netlink: 'syz.4.843': attribute type 7 has an invalid length. [ 133.420255][ T9218] veth0: entered promiscuous mode [ 133.423626][ T9218] veth0: left promiscuous mode [ 133.453988][ T9223] fuse: Bad value for 'fd' [ 133.468639][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.585008][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.609365][ T40] audit: type=1326 audit(131.647:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9234 comm="syz.1.850" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f695c38e929 code=0x0 [ 133.700669][ T40] audit: type=1400 audit(131.741:552): avc: denied { module_load } for pid=9241 comm="syz.1.852" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951F306202864656C6574656429 dev="tmpfs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 133.714511][ T9246] Invalid ELF header magic: != ELF [ 133.783044][ T1147] bridge_slave_1: left allmulticast mode [ 133.787003][ T1147] bridge_slave_1: left promiscuous mode [ 133.789933][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.797388][ T1147] bridge_slave_0: left allmulticast mode [ 133.799240][ T1147] bridge_slave_0: left promiscuous mode [ 133.801106][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.040544][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.045366][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.049020][ T1147] bond0 (unregistering): Released all slaves [ 134.074308][ T9256] tipc: Enabling of bearer rejected, failed to enable media [ 134.160269][ T40] audit: type=1400 audit(132.171:553): avc: denied { append } for pid=9270 comm="syz.4.860" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 134.346382][ T9300] __nla_validate_parse: 3 callbacks suppressed [ 134.346395][ T9300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'. [ 134.357703][ T5299] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 134.383677][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 134.464060][ T9310] batadv1: entered promiscuous mode [ 134.472398][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.474433][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.493729][ T9312] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.514571][ T1147] hsr_slave_0: left promiscuous mode [ 134.516859][ T1147] hsr_slave_1: left promiscuous mode [ 134.518960][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.521338][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.525301][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.532244][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.576976][ T1147] veth1_macvtap: left promiscuous mode [ 134.579476][ T1147] veth0_macvtap: left promiscuous mode [ 134.582024][ T1147] veth1_vlan: left promiscuous mode [ 134.584180][ T1147] veth0_vlan: left promiscuous mode [ 134.649878][ T5299] Bluetooth: hci0: command tx timeout [ 134.716313][ T9331] cgroup2: Unknown parameter 'subj_type' [ 134.717462][ T40] audit: type=1400 audit(132.695:554): avc: denied { mounton } for pid=9330 comm="syz.4.877" path="/100/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 134.895541][ T40] audit: type=1400 audit(132.854:555): avc: denied { lock } for pid=9340 comm="syz.4.879" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.215737][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 135.273380][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 135.711560][ T9343] bridge0: entered promiscuous mode [ 135.713503][ T9343] macvlan2: entered promiscuous mode [ 135.733052][ T40] audit: type=1400 audit(133.640:556): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 135.793930][ T9105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.803997][ T9105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.810697][ T9105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.816696][ T9105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.870103][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.877875][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.885848][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.888196][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.894919][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.897316][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.927625][ T9105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.016426][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.045288][ T9105] veth0_vlan: entered promiscuous mode [ 136.050307][ T9105] veth1_vlan: entered promiscuous mode [ 136.064500][ T9105] veth0_macvtap: entered promiscuous mode [ 136.068452][ T9105] veth1_macvtap: entered promiscuous mode [ 136.076487][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.086236][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.109099][ T9105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.111840][ T9105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.115270][ T9105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.118090][ T9105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.151364][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.155230][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.173115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.176052][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.660738][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 136.660753][ T40] audit: type=1400 audit(134.510:558): avc: denied { unmount } for pid=7950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 136.775700][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 136.779734][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 136.781469][ T40] audit: type=1400 audit(134.622:559): avc: denied { mounton } for pid=9408 comm="syz.2.888" path="/288/file0/file0" dev="9p" ino=36831339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.791062][ T40] audit: type=1400 audit(134.622:560): avc: denied { name_connect } for pid=9404 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 136.978657][ T5999] libceph: connect (1)[c::]:6789 error -22 [ 136.983443][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 136.988022][ T5999] libceph: connect (1)[b::]:6789 error -22 [ 136.990013][ T5999] libceph: mon0 (1)[b::]:6789 connect error [ 137.260018][ T5999] libceph: connect (1)[c::]:6789 error -22 [ 137.262377][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 137.281286][ T5999] libceph: connect (1)[b::]:6789 error -22 [ 137.283112][ T5999] libceph: mon0 (1)[b::]:6789 connect error [ 137.397913][ T6394] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 137.557645][ T6394] usb 9-1: Using ep0 maxpacket: 32 [ 137.629179][ T6394] usb 9-1: unable to get BOS descriptor or descriptor too short [ 137.636099][ T6394] usb 9-1: no configurations [ 137.637703][ T6394] usb 9-1: can't read configurations, error -22 [ 137.671369][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.675393][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.678644][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.681882][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.684781][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.806847][ T5999] libceph: connect (1)[c::]:6789 error -22 [ 137.808867][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 137.818208][ T9429] chnl_net:caif_netlink_parms(): no params data found [ 137.827496][ T5999] libceph: connect (1)[b::]:6789 error -22 [ 137.830150][ T5999] libceph: mon0 (1)[b::]:6789 connect error [ 137.856248][ T9420] ceph: No mds server is up or the cluster is laggy [ 137.856988][ T9421] ceph: No mds server is up or the cluster is laggy [ 137.948725][ T9429] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.951033][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.953684][ T9429] bridge_slave_0: entered allmulticast mode [ 137.956332][ T9429] bridge_slave_0: entered promiscuous mode [ 137.959512][ T9429] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.961945][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.964493][ T9429] bridge_slave_1: entered allmulticast mode [ 137.967258][ T9429] bridge_slave_1: entered promiscuous mode [ 138.014357][ T9429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.019507][ T9429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.056656][ T9429] team0: Port device team_slave_0 added [ 138.060521][ T9429] team0: Port device team_slave_1 added [ 138.094160][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.096366][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.104837][ T9429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.109091][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.111272][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.119526][ T9429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.157850][ T9429] hsr_slave_0: entered promiscuous mode [ 138.160159][ T9429] hsr_slave_1: entered promiscuous mode [ 138.162258][ T9429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.164608][ T9429] Cannot create hsr debugfs directory [ 138.297494][ T9429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.305171][ T9429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.307747][ T9443] loop2: detected capacity change from 0 to 7 [ 138.312812][ T9429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.318798][ T9429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.318935][ T6705] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.323178][ T6705] loop2: partition table partially beyond EOD, truncated [ 138.325585][ T6705] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 138.338776][ T9429] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.341136][ T9429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.343551][ T9429] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.344353][ T9443] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.345766][ T9429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.347487][ T9443] loop2: partition table partially beyond EOD, truncated [ 138.352975][ T9443] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 138.372035][ T6705] udevd[6705]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.385292][ T9429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.393410][ T6705] udevd[6705]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.396322][ T9429] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.414806][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.420545][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.470873][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.481673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.484012][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.491669][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.494034][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.608321][ T9429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.738859][ T9429] veth0_vlan: entered promiscuous mode [ 138.743672][ T9429] veth1_vlan: entered promiscuous mode [ 138.759905][ T9429] veth0_macvtap: entered promiscuous mode [ 138.763687][ T9429] veth1_macvtap: entered promiscuous mode [ 138.774841][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.782461][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.786905][ T9429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.790361][ T9429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.793068][ T9429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.795753][ T9429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.828889][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.832642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.844907][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.847812][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.740965][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.747696][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.753256][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.762737][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.767668][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.856163][ T5299] Bluetooth: hci0: command tx timeout [ 139.867817][ T9503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 139.918138][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 140.013083][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 140.157833][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.162463][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.164930][ T9489] bridge_slave_0: entered allmulticast mode [ 140.169330][ T9489] bridge_slave_0: entered promiscuous mode [ 140.172540][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.174878][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.177287][ T9489] bridge_slave_1: entered allmulticast mode [ 140.179984][ T9489] bridge_slave_1: entered promiscuous mode [ 140.226270][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.234023][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.238712][ T40] audit: type=1400 audit(137.849:561): avc: denied { bind } for pid=9540 comm="syz.4.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.300406][ T9545] syz.4.921: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.307525][ T9545] CPU: 2 UID: 0 PID: 9545 Comm: syz.4.921 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 140.307541][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.307548][ T9545] Call Trace: [ 140.307552][ T9545] [ 140.307556][ T9545] dump_stack_lvl+0x16c/0x1f0 [ 140.307593][ T9545] warn_alloc+0x248/0x3a0 [ 140.307609][ T9545] ? __pfx_warn_alloc+0x10/0x10 [ 140.307628][ T9545] ? hash_netportnet_create+0x3ec/0x1250 [ 140.307643][ T9545] ? __vmalloc_node_noprof+0xad/0xf0 [ 140.307657][ T9545] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 140.307668][ T9545] ? nfnetlink_rcv_msg+0x9f9/0x1200 [ 140.307687][ T9545] ? hash_netportnet_create+0x3ec/0x1250 [ 140.307703][ T9545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.307716][ T9545] ? __alloc_pages_noprof+0xb/0x1b0 [ 140.307729][ T9545] ? ___kmalloc_large_node+0x84/0x1e0 [ 140.307743][ T9545] __kvmalloc_node_noprof+0x30a/0x620 [ 140.307757][ T9545] ? hash_netportnet_create+0x3ec/0x1250 [ 140.307770][ T9545] ? hash_netportnet_create+0x3ec/0x1250 [ 140.307786][ T9545] ? hash_netportnet_create+0x3ec/0x1250 [ 140.307803][ T9545] hash_netportnet_create+0x3ec/0x1250 [ 140.307816][ T9545] ? __nla_parse+0x54/0x60 [ 140.307830][ T9545] ? __pfx_hash_netportnet_create+0x10/0x10 [ 140.307844][ T9545] ip_set_create+0x7e1/0x14d0 [ 140.307863][ T9545] ? __pfx_ip_set_create+0x10/0x10 [ 140.307889][ T9545] ? find_held_lock+0x2b/0x80 [ 140.307907][ T9545] nfnetlink_rcv_msg+0x9f9/0x1200 [ 140.307925][ T9545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.307941][ T9545] ? __lock_acquire+0x622/0x1c90 [ 140.307981][ T9545] ? avc_has_perm_noaudit+0x149/0x3b0 [ 140.308005][ T9545] netlink_rcv_skb+0x155/0x420 [ 140.308024][ T9545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.308047][ T9545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.308077][ T9545] ? ns_capable+0xd7/0x110 [ 140.308100][ T9545] nfnetlink_rcv+0x1b3/0x430 [ 140.308121][ T9545] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 140.308142][ T9545] ? netlink_deliver_tap+0x1ae/0xd30 [ 140.308164][ T9545] netlink_unicast+0x53d/0x7f0 [ 140.308186][ T9545] ? __pfx_netlink_unicast+0x10/0x10 [ 140.308212][ T9545] netlink_sendmsg+0x8d1/0xdd0 [ 140.308234][ T9545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.308261][ T9545] ____sys_sendmsg+0xa95/0xc70 [ 140.308283][ T9545] ? copy_msghdr_from_user+0x10a/0x160 [ 140.308306][ T9545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.308329][ T9545] ? page_table_check_set+0x631/0x750 [ 140.308359][ T9545] ___sys_sendmsg+0x134/0x1d0 [ 140.308385][ T9545] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.308408][ T9545] ? __lock_acquire+0x622/0x1c90 [ 140.308463][ T9545] __sys_sendmsg+0x16d/0x220 [ 140.308489][ T9545] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.308513][ T9545] ? find_held_lock+0x2b/0x80 [ 140.308558][ T9545] ? do_user_addr_fault+0x843/0x1370 [ 140.308591][ T9545] do_syscall_64+0xcd/0x4c0 [ 140.308619][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.308638][ T9545] RIP: 0033:0x7f6d36f8e929 [ 140.308652][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.308669][ T9545] RSP: 002b:00007f6d37e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.308689][ T9545] RAX: ffffffffffffffda RBX: 00007f6d371b6160 RCX: 00007f6d36f8e929 [ 140.308702][ T9545] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 140.308712][ T9545] RBP: 00007f6d37010b39 R08: 0000000000000000 R09: 0000000000000000 [ 140.308723][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.308733][ T9545] R13: 0000000000000001 R14: 00007f6d371b6160 R15: 00007ffdf8c92608 [ 140.308757][ T9545] [ 140.308849][ T9545] Mem-Info: [ 140.314518][ T9489] team0: Port device team_slave_0 added [ 140.316919][ T9545] active_anon:20490 inactive_anon:0 isolated_anon:0 [ 140.316919][ T9545] active_file:13786 inactive_file:40633 isolated_file:0 [ 140.316919][ T9545] unevictable:1768 dirty:39 writeback:0 [ 140.316919][ T9545] slab_reclaimable:11968 slab_unreclaimable:75707 [ 140.316919][ T9545] mapped:24506 shmem:6504 pagetables:1125 [ 140.316919][ T9545] sec_pagetables:303 bounce:0 [ 140.316919][ T9545] kernel_misc_reclaimable:0 [ 140.316919][ T9545] free:437874 free_pcp:14558 free_cma:0 [ 140.323608][ T9489] team0: Port device team_slave_1 added [ 140.323908][ T9545] Node 0 active_anon:81956kB inactive_anon:0kB active_file:55144kB inactive_file:162328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98024kB dirty:148kB writeback:0kB shmem:22476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:4300kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 140.468296][ T9545] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:200kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 140.479964][ T9545] Node 0 DMA free:15200kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:104kB free_cma:0kB [ 140.489136][ T9545] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 140.490987][ T9545] Node 0 DMA32 free:138300kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81956kB inactive_anon:0kB active_file:55144kB inactive_file:162328kB unevictable:3536kB writepending:148kB present:2080628kB managed:1264716kB mlocked:0kB bounce:0kB free_pcp:26540kB local_pcp:3220kB free_cma:0kB [ 140.502251][ T9545] lowmem_reserve[]: 0 0 0 0 0 [ 140.503938][ T9545] Node 1 Normal free:1597996kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:31844kB local_pcp:9780kB free_cma:0kB [ 140.515702][ T9545] lowmem_reserve[]: 0 0 0 0 0 [ 140.517673][ T9545] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 6*16kB (UME) 6*32kB (UME) 6*64kB (UME) 7*128kB (UME) 3*256kB (UE) 5*512kB (UME) 6*1024kB [ 140.517836][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.517848][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.522181][ T9545] (UME) 2*2048kB (U) 0*4096kB = 15200kB [ 140.522206][ T9545] Node 0 DMA32: 913*4kB (M) 305*8kB (UM) 197*16kB (ME) 160*32kB (UME) 118*64kB (UME) 36*128kB (UME) 45*256kB (UM) 43*512kB (UM) 38*1024kB (UM) 11*2048kB (UM) 4*4096kB (UM) = 137884kB [ 140.522298][ T9545] Node 1 Normal: 25*4kB (UME) 19*8kB (UME) 17*16kB (UME) 13*32kB (UME) 10*64kB (ME) 8*128kB (UME) 2*256kB [ 140.525490][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.532916][ T9545] (UE) [ 140.536049][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.539935][ T9545] 7*512kB [ 140.544957][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.547504][ T9545] (UME) 8*1024kB (UME) [ 140.548750][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.550912][ T9545] 5*2048kB (UM) 384*4096kB (UM) = 1597996kB [ 140.551013][ T9545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.551022][ T9545] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.551031][ T9545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.551039][ T9545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 140.551048][ T9545] 60920 total pagecache pages [ 140.587351][ T9545] 0 pages in swap cache [ 140.589037][ T9545] Free swap = 124996kB [ 140.590682][ T9545] Total swap = 124996kB [ 140.592343][ T9545] 1048443 pages RAM [ 140.594191][ T9545] 0 pages HighMem/MovableOnly [ 140.596134][ T9545] 282937 pages reserved [ 140.597850][ T9545] 0 pages cma reserved [ 140.601031][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.661983][ T9548] syz.4.922 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.686062][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.705012][ T9489] hsr_slave_0: entered promiscuous mode [ 140.707337][ T9489] hsr_slave_1: entered promiscuous mode [ 140.709434][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.712529][ T9489] Cannot create hsr debugfs directory [ 140.723058][ T9550] xt_l2tp: v2 tid > 0xffff: 150994944 [ 140.791123][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.848020][ T5299] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 140.909122][ T46] bridge_slave_1: left allmulticast mode [ 140.911330][ T46] bridge_slave_1: left promiscuous mode [ 140.913403][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.920095][ T46] bridge_slave_0: left allmulticast mode [ 140.921949][ T46] bridge_slave_0: left promiscuous mode [ 140.923788][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.949001][ T40] audit: type=1400 audit(138.523:562): avc: denied { ioctl } for pid=9570 comm="syz.5.931" path="socket:[32998]" dev="sockfs" ino=32998 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.987924][ T9578] binder: 9576:9578 ioctl c0306201 200000000100 returned -22 [ 141.161323][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 141.207947][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.212203][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.216813][ T46] bond0 (unregistering): Released all slaves [ 141.311693][ T40] audit: type=1400 audit(138.859:563): avc: denied { ioctl } for pid=9593 comm="syz.5.939" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.345969][ T40] audit: type=1400 audit(138.887:564): avc: denied { getopt } for pid=9593 comm="syz.5.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.505628][ T9615] syzkaller0: entered promiscuous mode [ 141.508076][ T9615] syzkaller0: entered allmulticast mode [ 141.568457][ T9631] netlink: 'syz.1.947': attribute type 21 has an invalid length. [ 141.996093][ T5299] Bluetooth: hci1: command tx timeout [ 142.079824][ T5299] Bluetooth: hci0: command tx timeout [ 142.556393][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 142.560234][ T9643] netlink: 1 bytes leftover after parsing attributes in process `syz.1.950'. [ 142.590266][ T46] hsr_slave_0: left promiscuous mode [ 142.592362][ T46] hsr_slave_1: left promiscuous mode [ 142.594578][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.596935][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.599914][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.602540][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.622669][ T46] veth1_macvtap: left promiscuous mode [ 142.624518][ T46] veth0_macvtap: left promiscuous mode [ 142.627131][ T46] veth1_vlan: left promiscuous mode [ 142.628914][ T46] veth0_vlan: left promiscuous mode [ 142.641797][ T9662] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.641844][ T9663] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.658178][ T9653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.660220][ T9653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.662604][ T9653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.665175][ T9653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.670082][ T9653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.675271][ T9653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.679451][ T9653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.696664][ T9653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.760312][ T40] audit: type=1400 audit(140.216:565): avc: denied { accept } for pid=9673 comm="syz.5.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 142.813517][ T9679] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.815680][ T9679] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.258327][ T46] team0 (unregistering): Port device team_slave_1 removed [ 143.323102][ T46] team0 (unregistering): Port device team_slave_0 removed [ 143.865982][ T9489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.877124][ T9489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.882722][ T9489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.886985][ T9489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.941424][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.953768][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.962480][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.964568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.973872][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.975962][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.105692][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.125298][ T9489] veth0_vlan: entered promiscuous mode [ 144.130114][ T9489] veth1_vlan: entered promiscuous mode [ 144.156606][ T9489] veth0_macvtap: entered promiscuous mode [ 144.164879][ T9489] veth1_macvtap: entered promiscuous mode [ 144.178744][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.184080][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.188454][ T9489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.190944][ T9489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.193369][ T9489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.195861][ T9489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.232901][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.235409][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.249231][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.252391][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.442380][ T6000] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 144.602849][ T6000] usb 10-1: Invalid ep0 maxpacket: 32 [ 144.763431][ T6000] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 144.827427][ T5299] Bluetooth: hci0: command 0x0419 tx timeout [ 144.827524][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 144.831149][ T5299] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.920225][ T9762] overlayfs: failed to clone upperpath [ 144.935255][ T6000] usb 10-1: Invalid ep0 maxpacket: 32 [ 144.937249][ T6000] usb usb10-port1: attempt power cycle [ 145.011743][ T9773] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.983'. [ 145.309830][ T6000] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 145.333384][ T6000] usb 10-1: Invalid ep0 maxpacket: 32 [ 145.468735][ T6000] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 145.491166][ T6000] usb 10-1: Invalid ep0 maxpacket: 32 [ 145.493634][ T6000] usb usb10-port1: unable to enumerate USB device [ 146.553765][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.040331][ T5299] Bluetooth: hci0: command 0x0419 tx timeout [ 147.799094][ T9792] netlink: 'syz.5.989': attribute type 3 has an invalid length. [ 147.801593][ T9792] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 147.803951][ T9792] netlink: 220 bytes leftover after parsing attributes in process `syz.5.989'. [ 147.808116][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.989'. [ 147.812950][ T9792] netlink: 68 bytes leftover after parsing attributes in process `syz.5.989'. [ 147.815770][ T9792] netlink: 68 bytes leftover after parsing attributes in process `syz.5.989'. [ 147.872244][ T9801] tmpfs: Unknown parameter 'sizeS%' [ 147.913742][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.917475][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.923007][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.927026][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.929924][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.030795][ T9831] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 148.041409][ T9833] netlink: 'syz.1.999': attribute type 13 has an invalid length. [ 148.054663][ T9833] gretap0: refused to change device tx_queue_len [ 148.057173][ T9833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.077922][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1000'. [ 148.080911][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1000'. [ 148.084623][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1000'. [ 148.103734][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 148.156870][ T9844] 9pnet_fd: Insufficient options for proto=fd [ 148.264149][ T9854] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 148.274378][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.278870][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.282232][ T9808] bridge_slave_0: entered allmulticast mode [ 148.286143][ T9808] bridge_slave_0: entered promiscuous mode [ 148.300555][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.320215][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.323096][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.325550][ T9808] bridge_slave_1: entered allmulticast mode [ 148.328227][ T9808] bridge_slave_1: entered promiscuous mode [ 148.367678][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.372917][ T9856] 9pnet: Found fid 0 not clunked [ 148.374822][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.417179][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.441093][ T9808] team0: Port device team_slave_0 added [ 148.445178][ T9808] team0: Port device team_slave_1 added [ 148.475965][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.478450][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.487117][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.491233][ T9858] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1007'. [ 148.491389][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.496510][ T40] audit: type=1400 audit(145.585:566): avc: denied { write } for pid=9857 comm="syz.5.1007" name="file0" dev="9p" ino=36831339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.496728][ T40] audit: type=1400 audit(145.585:567): avc: denied { open } for pid=9857 comm="syz.5.1007" path="/31/file0/file0" dev="9p" ino=36831339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.511593][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.520851][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.543092][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.588444][ T9808] hsr_slave_0: entered promiscuous mode [ 148.591292][ T9808] hsr_slave_1: entered promiscuous mode [ 148.595166][ T9808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.597550][ T9808] Cannot create hsr debugfs directory [ 148.631316][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 148.737724][ T1147] bridge_slave_1: left allmulticast mode [ 148.739814][ T1147] bridge_slave_1: left promiscuous mode [ 148.742244][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.746551][ T1147] bridge_slave_0: left allmulticast mode [ 148.748350][ T1147] bridge_slave_0: left promiscuous mode [ 148.750285][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.988792][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.993118][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.996767][ T1147] bond0 (unregistering): Released all slaves [ 149.230390][ T9876] kvm: apic: phys broadcast and lowest prio [ 149.234556][ T9876] mac80211_hwsim hwsim20 `ëÿÿ: renamed from wlan1 (while UP) [ 149.274632][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 149.283448][ T9878] PKCS8: Unsupported PKCS#8 version [ 149.291851][ T40] audit: type=1400 audit(146.324:568): avc: denied { create } for pid=9877 comm="syz.1.1016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 149.367045][ T9882] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 149.429793][ T1147] hsr_slave_0: left promiscuous mode [ 149.432040][ T1147] hsr_slave_1: left promiscuous mode [ 149.435817][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.438295][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.441924][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.444982][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.468412][ T1147] veth1_macvtap: left promiscuous mode [ 149.470214][ T1147] veth0_macvtap: left promiscuous mode [ 149.471985][ T1147] veth1_vlan: left promiscuous mode [ 149.473654][ T1147] veth0_vlan: left promiscuous mode [ 149.489917][ T9899] netlink: 'syz.1.1021': attribute type 21 has an invalid length. [ 149.664464][ T40] audit: type=1400 audit(146.670:569): avc: denied { setopt } for pid=9896 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 150.063915][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 150.119671][ T63] Bluetooth: hci1: command tx timeout [ 150.129488][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 150.598360][ T9899] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1021'. [ 150.613455][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.617361][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.722334][ T9808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.727327][ T9808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.731716][ T9808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.736327][ T9808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.790019][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.799758][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.804659][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.807007][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.812426][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.814785][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.854067][ T9808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.859254][ T9808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.876144][ T9929] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 150.896521][ T9929] bond4: entered promiscuous mode [ 150.898226][ T9929] bond4: entered allmulticast mode [ 150.905428][ T9929] geneve2: entered allmulticast mode [ 150.912485][ T9929] bond4: (slave geneve2): making interface the new active one [ 150.915581][ T9929] geneve2: entered promiscuous mode [ 150.918848][ T9929] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 150.977439][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.981465][ T9935] 9pnet_fd: Insufficient options for proto=fd [ 150.983968][ T63] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 150.986633][ T9935] overlayfs: failed to clone upperpath [ 151.018141][ T63] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 151.018739][ T9808] veth0_vlan: entered promiscuous mode [ 151.020031][ T40] audit: type=1400 audit(147.942:570): avc: denied { append } for pid=9936 comm="syz.4.1031" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.037470][ T9808] veth1_vlan: entered promiscuous mode [ 151.066875][ T9808] veth0_macvtap: entered promiscuous mode [ 151.070711][ T9808] veth1_macvtap: entered promiscuous mode [ 151.079375][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.089116][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.094279][ T9808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.097034][ T9808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.099826][ T9808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.104351][ T9808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.140262][ T40] audit: type=1400 audit(148.054:571): avc: denied { wake_alarm } for pid=9955 comm="syz.4.1036" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.154189][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.158287][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.177117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.180081][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.488599][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 152.343602][ T9989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9989 comm=syz.4.1047 [ 152.366912][ T40] audit: type=1400 audit(149.205:572): avc: denied { read } for pid=9988 comm="syz.4.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.367110][ T9989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9989 comm=syz.4.1047 [ 152.543176][T10008] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.607596][T10017] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 152.822202][T10039] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 153.060462][T10043] Bluetooth: MGMT ver 1.23 [ 153.066956][ T40] audit: type=1400 audit(149.850:573): avc: denied { read } for pid=10042 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.119658][T10045] tmpfs: Unknown parameter 'quoþ†|>ûG[ota_block_haJ@¢O蹃à."-y€rdlimit' [ 153.119664][ T40] audit: type=1400 audit(149.897:574): avc: denied { mounton } for pid=10044 comm="syz.4.1064" path="/162/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.130023][ T40] audit: type=1400 audit(149.897:575): avc: denied { bind } for pid=10044 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 153.368272][T10054] __nla_validate_parse: 3 callbacks suppressed [ 153.368315][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 153.410380][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.907443][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 154.907454][ T40] audit: type=1400 audit(151.571:577): avc: denied { create } for pid=10066 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.915619][ T40] audit: type=1400 audit(151.571:578): avc: denied { bind } for pid=10066 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.921836][ T5299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.926372][ T5299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.929292][ T5299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.935302][ T5299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.942269][ T5299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.002902][T10077] x_tables: duplicate underflow at hook 1 [ 155.019296][T10077] x_tables: duplicate underflow at hook 1 [ 155.054998][T10068] chnl_net:caif_netlink_parms(): no params data found [ 155.068887][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 155.117133][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.119401][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.121711][T10068] bridge_slave_0: entered allmulticast mode [ 155.124685][T10068] bridge_slave_0: entered promiscuous mode [ 155.129439][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.132189][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.134575][T10068] bridge_slave_1: entered allmulticast mode [ 155.137119][T10068] bridge_slave_1: entered promiscuous mode [ 155.172647][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.177996][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.219471][T10068] team0: Port device team_slave_0 added [ 155.224174][T10068] team0: Port device team_slave_1 added [ 155.230893][ T10] usb 9-1: config 0 has no interfaces? [ 155.241520][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.245259][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.248602][ T10] usb 9-1: Product: syz [ 155.250377][ T10] usb 9-1: Manufacturer: syz [ 155.252690][ T10] usb 9-1: SerialNumber: syz [ 155.256847][ T10] usb 9-1: config 0 descriptor?? [ 155.281259][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.287111][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.289390][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.298891][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.303167][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.305529][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.314576][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.354099][T10068] hsr_slave_0: entered promiscuous mode [ 155.356111][T10068] hsr_slave_1: entered promiscuous mode [ 155.359228][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.361278][T10068] Cannot create hsr debugfs directory [ 155.373245][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.469047][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.478455][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.481496][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.490324][ T72] usb 9-1: USB disconnect, device number 5 [ 155.576471][ T12] bridge_slave_1: left allmulticast mode [ 155.578469][ T12] bridge_slave_1: left promiscuous mode [ 155.580412][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.585227][ T12] bridge_slave_0: left allmulticast mode [ 155.587232][ T12] bridge_slave_0: left promiscuous mode [ 155.589180][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.824897][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.829285][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.832890][ T12] bond0 (unregistering): Released all slaves [ 156.058067][T10094] trusted_key: encrypted_key: insufficient parameters specified [ 156.109873][ T40] audit: type=1400 audit(152.703:579): avc: denied { read } for pid=5333 comm="acpid" name="event7" dev="devtmpfs" ino=2964 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.118022][ T40] audit: type=1400 audit(152.703:580): avc: denied { open } for pid=5333 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2964 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.124848][ T40] audit: type=1400 audit(152.703:581): avc: denied { ioctl } for pid=5333 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2964 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.163932][ T12] hsr_slave_0: left promiscuous mode [ 156.168134][ T12] hsr_slave_1: left promiscuous mode [ 156.170243][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.172713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.173063][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 156.178900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.181419][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.201757][ T12] veth1_macvtap: left promiscuous mode [ 156.203802][ T12] veth0_macvtap: left promiscuous mode [ 156.205594][ T12] veth1_vlan: left promiscuous mode [ 156.207319][ T12] veth0_vlan: left promiscuous mode [ 156.814174][ T12] team0 (unregistering): Port device team_slave_1 removed [ 156.884847][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.062101][ T40] audit: type=1400 audit(153.592:582): avc: denied { getopt } for pid=10106 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 157.132409][ T5299] Bluetooth: hci1: command tx timeout [ 157.430199][T10114] netlink: 'syz.4.1088': attribute type 2 has an invalid length. [ 157.544454][T10068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.548723][T10068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.568535][T10068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.572998][T10068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.625238][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.636269][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.641386][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.643717][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.663019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.665825][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.722348][T10137] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 157.724683][T10137] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1092'. [ 157.798327][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.820523][T10068] veth0_vlan: entered promiscuous mode [ 157.827712][T10068] veth1_vlan: entered promiscuous mode [ 157.844500][T10068] veth0_macvtap: entered promiscuous mode [ 157.848267][T10068] veth1_macvtap: entered promiscuous mode [ 157.857702][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.867072][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.870786][ T40] audit: type=1400 audit(154.340:583): avc: denied { write } for pid=10151 comm="syz.4.1096" name="file0" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.872029][T10152] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 157.877604][ T40] audit: type=1400 audit(154.340:584): avc: denied { open } for pid=10151 comm="syz.4.1096" path="/181/file0" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.890400][T10068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.894814][T10068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.897519][T10068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.899377][ T40] audit: type=1400 audit(154.340:585): avc: denied { ioctl } for pid=10151 comm="syz.4.1096" path="/181/file0" dev="tmpfs" ino=972 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.900434][T10068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.949601][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.952064][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.981567][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.984032][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.053141][ T40] audit: type=1400 audit(154.518:586): avc: denied { getopt } for pid=10158 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.421117][T10172] gfs2: gfs2 mount does not exist [ 158.452090][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1105'. [ 159.684305][T10211] bond0: option ad_select: unable to set because the bond device is up [ 160.425039][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.012929][ T5949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.017669][ T5949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.020905][ T5949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.026483][ T5949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.030878][ T5949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.140994][T10238] chnl_net:caif_netlink_parms(): no params data found [ 162.207467][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.209820][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.213234][T10238] bridge_slave_0: entered allmulticast mode [ 162.215895][T10238] bridge_slave_0: entered promiscuous mode [ 162.234302][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.242077][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.245997][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.248348][T10238] bridge_slave_1: entered allmulticast mode [ 162.251305][T10238] bridge_slave_1: entered promiscuous mode [ 162.283170][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.287857][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.299630][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.347368][T10238] team0: Port device team_slave_0 added [ 162.351808][T10238] team0: Port device team_slave_1 added [ 162.381145][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.384318][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.392284][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.412498][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.420120][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.422656][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.430848][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.468922][T10238] hsr_slave_0: entered promiscuous mode [ 162.471230][T10238] hsr_slave_1: entered promiscuous mode [ 162.473283][T10238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.475644][T10238] Cannot create hsr debugfs directory [ 162.557056][ T1142] bridge_slave_1: left allmulticast mode [ 162.558912][ T1142] bridge_slave_1: left promiscuous mode [ 162.560870][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.566140][ T1142] bridge_slave_0: left allmulticast mode [ 162.567973][ T1142] bridge_slave_0: left promiscuous mode [ 162.569875][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.831514][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.837337][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.842440][ T1142] bond0 (unregistering): Released all slaves [ 162.962729][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.214696][ T1142] hsr_slave_0: left promiscuous mode [ 163.217315][ T1142] hsr_slave_1: left promiscuous mode [ 163.219342][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.221777][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.224887][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.227419][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.262081][ T1142] veth1_macvtap: left promiscuous mode [ 163.264300][ T1142] veth0_macvtap: left promiscuous mode [ 163.266253][ T1142] veth1_vlan: left promiscuous mode [ 163.269346][ T1142] veth0_vlan: left promiscuous mode [ 163.273061][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 163.273571][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 163.868885][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 163.933834][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 164.072928][ T5299] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 164.073145][ T63] Bluetooth: hci1: command 0xfc11 tx timeout [ 164.175049][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'. [ 164.230783][ T5299] Bluetooth: hci4: command tx timeout [ 164.518910][T10282] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1140'. [ 164.523891][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 164.545384][T10283] batman_adv: batadv0: Adding interface: dummy0 [ 164.548159][T10283] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.558533][T10283] batman_adv: batadv0: Interface activated: dummy0 [ 164.572326][T10283] batadv0: mtu less than device minimum [ 164.577093][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.580942][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.584662][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.588362][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.592060][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.595818][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.599505][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.603201][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.606921][T10283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.695067][T10238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.703125][T10238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.707369][T10238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.711906][T10238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.713022][T10289] 9pnet_fd: Insufficient options for proto=fd [ 164.764107][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.773900][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.783142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.786098][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.789781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.792016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.916435][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.943758][T10238] veth0_vlan: entered promiscuous mode [ 164.951539][T10238] veth1_vlan: entered promiscuous mode [ 164.966996][T10238] veth0_macvtap: entered promiscuous mode [ 164.973160][T10238] veth1_macvtap: entered promiscuous mode [ 164.985013][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.005052][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.030424][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.032631][T10238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.035684][T10238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.036137][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.038393][T10238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.038412][T10238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.048499][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.056041][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.059735][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.090334][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.092794][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.126497][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.129956][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.198884][T10318] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 165.201002][T10318] syzkaller1: linktype set to 802 [ 165.250693][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.288587][T10312] chnl_net:caif_netlink_parms(): no params data found [ 165.376530][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.378924][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.381316][T10312] bridge_slave_0: entered allmulticast mode [ 165.384041][T10312] bridge_slave_0: entered promiscuous mode [ 165.395580][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.401072][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.403340][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.405619][T10312] bridge_slave_1: entered allmulticast mode [ 165.408708][T10312] bridge_slave_1: entered promiscuous mode [ 165.442363][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.447473][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.505545][T10312] team0: Port device team_slave_0 added [ 165.519447][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.528427][T10312] team0: Port device team_slave_1 added [ 165.567931][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.570925][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.578078][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 165.581360][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.595915][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.598743][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.608830][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.626333][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.670925][T10312] hsr_slave_0: entered promiscuous mode [ 165.673105][T10312] hsr_slave_1: entered promiscuous mode [ 165.675251][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.677606][T10312] Cannot create hsr debugfs directory [ 165.796624][ T46] bridge_slave_1: left allmulticast mode [ 165.798501][ T46] bridge_slave_1: left promiscuous mode [ 165.800378][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.804127][ T46] bridge_slave_0: left allmulticast mode [ 165.806019][ T46] bridge_slave_0: left promiscuous mode [ 165.807848][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.192281][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.196864][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.200700][ T46] bond0 (unregistering): Released all slaves [ 166.222065][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 166.248388][T10312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.253234][T10312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.260018][T10312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.266395][T10312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.349359][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.362067][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.367210][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.369566][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.378074][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.380484][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.467909][ T40] audit: type=1400 audit(162.394:587): avc: denied { mounton } for pid=10350 comm="syz.4.1155" path="/proc/641/cgroup" dev="proc" ino=38410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 166.523519][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.571113][ T46] hsr_slave_0: left promiscuous mode [ 166.574897][ T46] hsr_slave_1: left promiscuous mode [ 166.576927][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.579238][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.581966][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.585362][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.605881][ T46] veth1_macvtap: left promiscuous mode [ 166.607680][ T46] veth0_macvtap: left promiscuous mode [ 166.609525][ T46] veth1_vlan: left promiscuous mode [ 166.611312][ T46] veth0_vlan: left promiscuous mode [ 167.187012][ T46] team0 (unregistering): Port device team_slave_1 removed [ 167.237427][ T63] Bluetooth: hci0: command tx timeout [ 167.255290][ T46] team0 (unregistering): Port device team_slave_0 removed [ 167.756423][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1162'. [ 167.870177][T10312] veth0_vlan: entered promiscuous mode [ 167.875603][T10312] veth1_vlan: entered promiscuous mode [ 167.892209][T10312] veth0_macvtap: entered promiscuous mode [ 167.895992][T10312] veth1_macvtap: entered promiscuous mode [ 167.905147][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.913086][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.917491][T10312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.920264][T10312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.922993][T10312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.925701][T10312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.964584][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.967069][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.984436][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.987055][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.094499][T10388] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.140586][T10391] netlink: 'syz.4.1164': attribute type 11 has an invalid length. [ 168.145429][T10391] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1164'. [ 168.217370][T10391] netlink: 'syz.4.1164': attribute type 10 has an invalid length. [ 168.241113][T10391] team0: Port device `ëÿÿ added [ 168.244879][T10390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.314232][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.447952][ T63] Bluetooth: hci0: command tx timeout [ 169.461658][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.520122][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.589891][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.691602][ T1142] bridge_slave_1: left allmulticast mode [ 169.693624][ T1142] bridge_slave_1: left promiscuous mode [ 169.695529][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.699463][ T1142] bridge_slave_0: left allmulticast mode [ 169.701300][ T1142] bridge_slave_0: left promiscuous mode [ 169.703283][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.848089][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1167'. [ 169.850989][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1167'. [ 169.903474][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1168'. [ 169.964615][ T5299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.981940][ T5299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.986121][ T5299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.993090][ T5299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.995638][ T5299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.005964][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.010295][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.013835][ T1142] bond0 (unregistering): Released all slaves [ 170.044237][T10403] batadv_slave_1: entered promiscuous mode [ 170.046956][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 170.090053][ T40] audit: type=1400 audit(165.780:588): avc: denied { write } for pid=10416 comm="syz.6.1169" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.166720][T10403] team0 (unregistering): Port device team_slave_1 removed [ 170.181129][T10403] team0 (unregistering): Port device `ëÿÿ removed [ 170.213122][T10417] vivid-000: ================= START STATUS ================= [ 170.218275][T10417] vivid-000: Test Pattern: 75% Colorbar [ 170.220588][T10417] vivid-000: Fill Percentage of Frame: 100 [ 170.224282][T10417] vivid-000: Horizontal Movement: No Movement [ 170.226777][T10417] vivid-000: Vertical Movement: No Movement [ 170.229480][T10417] vivid-000: OSD Text Mode: All [ 170.231481][T10417] vivid-000: Show Border: false [ 170.233482][T10417] vivid-000: Show Square: false [ 170.235503][T10417] vivid-000: Sensor Flipped Horizontally: false [ 170.238447][T10417] vivid-000: Sensor Flipped Vertically: false [ 170.240910][T10417] vivid-000: Insert SAV Code in Image: false [ 170.243299][T10417] vivid-000: Insert EAV Code in Image: false [ 170.245698][T10417] vivid-000: Insert Video Guard Band: false [ 170.248109][T10417] vivid-000: Reduced Framerate: false [ 170.253086][T10417] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 170.256651][T10417] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 170.259533][T10417] vivid-000: Enable Capture Cropping: true [ 170.260696][T10401] batadv_slave_1: left promiscuous mode [ 170.280040][T10417] vivid-000: Enable Capture Composing: true [ 170.282315][T10417] vivid-000: Enable Capture Scaler: true [ 170.284256][T10417] vivid-000: Timestamp Source: End of Frame [ 170.286688][T10417] vivid-000: Colorspace: SMPTE 170M [ 170.288758][T10417] vivid-000: Transfer Function: Default [ 170.290723][T10417] vivid-000: Y'CbCr Encoding: Default [ 170.292639][T10417] vivid-000: HSV Encoding: Hue 0-179 [ 170.296205][T10417] vivid-000: Quantization: Default [ 170.297860][T10417] vivid-000: Apply Alpha To Red Only: false [ 170.300020][T10417] vivid-000: Standard Aspect Ratio: 4x3 [ 170.302250][T10417] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 170.304989][T10417] vivid-000: DV Timings: 640x480p59 inactive [ 170.307075][T10417] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 170.310032][T10417] vivid-000: Maximum EDID Blocks: 2 [ 170.311890][T10417] vivid-000: Limited RGB Range (16-235): false [ 170.315674][T10417] vivid-000: Rx RGB Quantization Range: Automatic [ 170.318180][T10417] vivid-000: Power Present: 0x00000001 [ 170.321159][T10417] tpg source WxH: 720x576 (Y'CbCr) [ 170.323036][T10417] tpg field: 4 [ 170.324574][T10417] tpg crop: (0,0)/64x36 [ 170.325993][T10417] tpg compose: (0,0)/16x9 [ 170.327445][T10417] tpg colorspace: 1 [ 170.328893][T10417] tpg transfer function: 0/1 [ 170.330660][T10417] tpg Y'CbCr encoding: 0/1 [ 170.332157][T10417] tpg quantization: 0/2 [ 170.333569][T10417] tpg RGB range: 0/2 [ 170.335254][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1169'. [ 170.339372][T10417] vivid-000: ================== END STATUS ================== [ 170.345161][ T5299] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 170.501352][ T1142] hsr_slave_0: left promiscuous mode [ 170.509152][ T1142] hsr_slave_1: left promiscuous mode [ 170.511708][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.514055][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.525077][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.531987][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.557599][ T1142] veth1_macvtap: left promiscuous mode [ 170.562417][ T1142] veth0_macvtap: left promiscuous mode [ 170.564342][ T1142] veth1_vlan: left promiscuous mode [ 170.566517][ T1142] veth0_vlan: left promiscuous mode [ 170.581066][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 170.741328][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 170.748826][ T9] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 170.753570][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 170.761122][ T9] usb 11-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 170.767664][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.771100][ T9] usb 11-1: Product: syz [ 170.772940][ T9] usb 11-1: Manufacturer: syz [ 170.775211][ T9] usb 11-1: SerialNumber: syz [ 170.781401][ T9] usb 11-1: config 0 descriptor?? [ 170.792808][ T9] as10x_usb: device has been detected [ 170.796377][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 170.829685][ T9] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 170.913214][ T9] as10x_usb: error during firmware upload part1 [ 170.915674][ T9] Registered device Abilis Systems DVB-Titan [ 171.219611][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 171.294402][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 171.673812][ T5299] Bluetooth: hci0: command tx timeout [ 171.823213][ T1471] usb 11-1: USB disconnect, device number 2 [ 171.846206][ T1471] Unregistered device Abilis Systems DVB-Titan [ 171.849685][ T1471] as10x_usb: device has been disconnected [ 171.849790][T10410] chnl_net:caif_netlink_parms(): no params data found [ 171.863685][ T5299] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 172.002883][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.008184][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.010745][T10410] bridge_slave_0: entered allmulticast mode [ 172.018631][T10410] bridge_slave_0: entered promiscuous mode [ 172.021707][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.037160][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.039522][T10410] bridge_slave_1: entered allmulticast mode [ 172.042439][T10410] bridge_slave_1: entered promiscuous mode [ 172.050407][T10471] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 172.064090][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 172.068551][T10473] netlink: 'syz.4.1180': attribute type 5 has an invalid length. [ 172.082426][T10471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.087010][T10476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1182'. [ 172.087127][T10472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1182'. [ 172.104155][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.113489][T10473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.117134][T10473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.120864][T10473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.124212][T10473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.128756][T10473] vxlan0: entered promiscuous mode [ 172.134667][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.180385][T10410] team0: Port device team_slave_0 added [ 172.184006][T10410] team0: Port device team_slave_1 added [ 172.184673][ T5299] Bluetooth: hci1: command tx timeout [ 172.219239][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.221458][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.229557][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.233779][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.235952][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.244691][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.283254][T10410] hsr_slave_0: entered promiscuous mode [ 172.285515][T10410] hsr_slave_1: entered promiscuous mode [ 172.287603][T10410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.291093][T10410] Cannot create hsr debugfs directory [ 172.402242][T10486] nbd: couldn't find a device at index -1605786504 [ 172.436218][T10491] Bluetooth: MGMT ver 1.23 [ 172.437751][T10491] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 172.480060][T10496] ------------[ cut here ]------------ [ 172.482211][T10496] WARNING: CPU: 0 PID: 10496 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 172.486271][T10496] Modules linked in: [ 172.487929][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.6.1188 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 172.493323][T10496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.496922][T10496] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 172.499004][T10496] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 172.505249][T10496] RSP: 0018:ffffc900040a7868 EFLAGS: 00010246 [ 172.507112][T10496] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 172.509613][T10496] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 172.509622][T10496] RBP: 00000003fffff234 R08: 0000000000000005 R09: 0000000000000000 [ 172.509629][T10496] R10: 00000000fffffc8d R11: 0000000000000001 R12: 0000000000000016 [ 172.509636][T10496] R13: 1ffff92000814f22 R14: 00000003fffff234 R15: 0000000000000016 [ 172.509644][T10496] FS: 00007fdcb93966c0(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 172.509667][T10496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.509677][T10496] CR2: 00007fdcb9375d58 CR3: 000000002c348000 CR4: 0000000000352ef0 [ 172.509684][T10496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.509691][T10496] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.509698][T10496] Call Trace: [ 172.509702][T10496] [ 172.509712][T10496] ? stack_trace_save+0x8e/0xc0 [ 172.509730][T10496] ? __pfx_stack_trace_save+0x10/0x10 [ 172.509745][T10496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.509774][T10496] ? drm_syncobj_array_find+0x35/0x3c0 [ 172.509790][T10496] __alloc_pages_noprof+0xb/0x1b0 [ 172.509804][T10496] ___kmalloc_large_node+0x84/0x1e0 [ 172.509817][T10496] ? drm_syncobj_array_find+0x35/0x3c0 [ 172.509833][T10496] __kmalloc_large_node_noprof+0x1c/0x70 [ 172.509845][T10496] __kmalloc_noprof.cold+0xc/0x61 [ 172.509862][T10496] ? __lock_acquire+0xb8a/0x1c90 [ 172.509882][T10496] drm_syncobj_array_find+0x35/0x3c0 [ 172.509900][T10496] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 172.509919][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.509937][T10496] ? find_held_lock+0x2b/0x80 [ 172.509950][T10496] ? drm_dev_exit+0x41/0x60 [ 172.509969][T10496] drm_ioctl_kernel+0x1f4/0x3e0 [ 172.509984][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.510003][T10496] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 172.510023][T10496] drm_ioctl+0x5c9/0xc30 [ 172.510040][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.510059][T10496] ? __pfx_drm_ioctl+0x10/0x10 [ 172.510080][T10496] ? selinux_file_ioctl+0x180/0x270 [ 172.510095][T10496] ? selinux_file_ioctl+0xb4/0x270 [ 172.510111][T10496] ? __pfx_drm_ioctl+0x10/0x10 [ 172.510127][T10496] __x64_sys_ioctl+0x18b/0x210 [ 172.510141][T10496] do_syscall_64+0xcd/0x4c0 [ 172.510160][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.510172][T10496] RIP: 0033:0x7fdcb858e929 [ 172.510182][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.510193][T10496] RSP: 002b:00007fdcb9396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.510204][T10496] RAX: ffffffffffffffda RBX: 00007fdcb87b6080 RCX: 00007fdcb858e929 [ 172.510211][T10496] RDX: 0000200000000140 RSI: 00000000c03064ca RDI: 0000000000000007 [ 172.510218][T10496] RBP: 00007fdcb8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.510225][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.510232][T10496] R13: 0000000000000000 R14: 00007fdcb87b6080 R15: 00007ffe9fbfb0b8 [ 172.510246][T10496] [ 172.510251][T10496] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.510260][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.6.1188 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 172.510274][T10496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.510281][T10496] Call Trace: [ 172.510285][T10496] [ 172.510289][T10496] dump_stack_lvl+0x3d/0x1f0 [ 172.510306][T10496] panic+0x71c/0x800 [ 172.510322][T10496] ? __pfx_panic+0x10/0x10 [ 172.510339][T10496] ? show_trace_log_lvl+0x29b/0x3e0 [ 172.510359][T10496] ? check_panic_on_warn+0x1f/0xb0 [ 172.510376][T10496] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 172.510396][T10496] check_panic_on_warn+0xab/0xb0 [ 172.510413][T10496] __warn+0xf6/0x3c0 [ 172.510429][T10496] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 172.510444][T10496] report_bug+0x3c3/0x580 [ 172.510459][T10496] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 172.510474][T10496] handle_bug+0x184/0x210 [ 172.510484][T10496] exc_invalid_op+0x17/0x50 [ 172.510495][T10496] asm_exc_invalid_op+0x1a/0x20 [ 172.510505][T10496] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 172.510520][T10496] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 172.510530][T10496] RSP: 0018:ffffc900040a7868 EFLAGS: 00010246 [ 172.510538][T10496] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 172.510544][T10496] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 172.510551][T10496] RBP: 00000003fffff234 R08: 0000000000000005 R09: 0000000000000000 [ 172.510557][T10496] R10: 00000000fffffc8d R11: 0000000000000001 R12: 0000000000000016 [ 172.510564][T10496] R13: 1ffff92000814f22 R14: 00000003fffff234 R15: 0000000000000016 [ 172.510582][T10496] ? stack_trace_save+0x8e/0xc0 [ 172.510596][T10496] ? __pfx_stack_trace_save+0x10/0x10 [ 172.510611][T10496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.510637][T10496] ? drm_syncobj_array_find+0x35/0x3c0 [ 172.510652][T10496] __alloc_pages_noprof+0xb/0x1b0 [ 172.510665][T10496] ___kmalloc_large_node+0x84/0x1e0 [ 172.510678][T10496] ? drm_syncobj_array_find+0x35/0x3c0 [ 172.510693][T10496] __kmalloc_large_node_noprof+0x1c/0x70 [ 172.510704][T10496] __kmalloc_noprof.cold+0xc/0x61 [ 172.510721][T10496] ? __lock_acquire+0xb8a/0x1c90 [ 172.510739][T10496] drm_syncobj_array_find+0x35/0x3c0 [ 172.510757][T10496] drm_syncobj_timeline_wait_ioctl+0x238/0x390 [ 172.510775][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.510792][T10496] ? find_held_lock+0x2b/0x80 [ 172.510805][T10496] ? drm_dev_exit+0x41/0x60 [ 172.510823][T10496] drm_ioctl_kernel+0x1f4/0x3e0 [ 172.510838][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.510856][T10496] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 172.510875][T10496] drm_ioctl+0x5c9/0xc30 [ 172.510892][T10496] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 172.510910][T10496] ? __pfx_drm_ioctl+0x10/0x10 [ 172.510931][T10496] ? selinux_file_ioctl+0x180/0x270 [ 172.510945][T10496] ? selinux_file_ioctl+0xb4/0x270 [ 172.510961][T10496] ? __pfx_drm_ioctl+0x10/0x10 [ 172.510977][T10496] __x64_sys_ioctl+0x18b/0x210 [ 172.510989][T10496] do_syscall_64+0xcd/0x4c0 [ 172.511007][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.511017][T10496] RIP: 0033:0x7fdcb858e929 [ 172.511025][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.511036][T10496] RSP: 002b:00007fdcb9396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.511045][T10496] RAX: ffffffffffffffda RBX: 00007fdcb87b6080 RCX: 00007fdcb858e929 [ 172.511052][T10496] RDX: 0000200000000140 RSI: 00000000c03064ca RDI: 0000000000000007 [ 172.511058][T10496] RBP: 00007fdcb8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.511065][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.511071][T10496] R13: 0000000000000000 R14: 00007fdcb87b6080 R15: 00007ffe9fbfb0b8 [ 172.511084][T10496] [ 172.511763][T10496] Kernel Offset: disabled VM DIAGNOSIS: 14:58:51 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc900040a71d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdcb93966c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdcb9375d58 CR3=000000002c348000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8784488 00007fdcb8784480 00007fdcb8784478 00007fdcb8784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb92ed100 00007fdcb8784440 00007fdcb8784458 00007fdcb87844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcb8784498 00007fdcb8784490 00007fdcb8784488 00007fdcb8784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900069e0000 RBX=ffff888106658000 RCX=ffffffff819c9c07 RDX=1ffff11020ccb25a RSI=ffffffff86a8430f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a81260 R13=dffffc0000000000 R14=ffff8881066592d0 R15=0000000000000000 RIP=ffffffff86a84337 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdcb9374f98 CR3=00000000272ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000020eb365d DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c584488 00007f695c584480 00007f695c584478 00007f695c584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695d0ed100 00007f695c584440 00007f695c580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f695c584498 00007f695c584490 00007f695c584488 00007f695c584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88806a633228 RCX=0000000000000002 RDX=1ffff1100d4c6645 RSI=ffffffff8c157960 RDI=ffffffff8df26db0 RBP=0000000000000002 RSP=ffffc900047df1d0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000003d12b R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a15d2c RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6d37e5d6c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6d37e5cf98 CR3=00000000567ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefef800 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000020400004 Opmask04=00000000fffffbff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620a6d24c20 00005620a6d24c20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620a6cf5f90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620a6cfa9e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff616bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4641f044a39b9503 73732556b7b677e5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff616bf1b30 0048544150564544 0000000000000021 000000302e303a31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400000000000002 0000001e00000006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620a6ce3c90 fffffffffffffffc 44007ff616abfd68 00007fe33eee44ae ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82ccffffb7ffffff fffffffffffffffc 44007ff6fefbfff9 fffffffffffffffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000055 0000000000000000 0000000000001011 00004e2053414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea000184db80 RCX=ffffffff820f02fa RDX=ffff88802986c880 RSI=ffffffff820f0325 RDI=0000000000000007 RBP=ffffea000184db80 RSP=ffffc9000326f7a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=ffffea000184db48 RIP=ffffffff820f0325 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feac54e7d60 CR3=000000002193d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feac49846a3 00007feac49846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde1295330 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555578e276d4 0000555578e27000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555578e213c1 0000555578e20a00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14100006106fd605 80040882e2d0da08 0001000002080606 01269200080005d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102800402d0a408 0001000002080606 0127841202000280 03039380040fffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff045c0800 0c08000100001008 060a010ba6000200 0700080003938003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000210001410 0006106fd6058004 0882e2d0da080001 0000020806060126 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9200080005d00308 080005c8038fd8ba 1a915c09c536ba69 8ce9f27d263b074a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000