last executing test programs: 3.632023522s ago: executing program 1 (id=419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x101}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 3.552312489s ago: executing program 1 (id=420): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="b8cc000f00d80f01c865f00fba7a00e30f20d86635080000000f22d8650f38025600ba2000ecb80b008ee8baf80c66b88ac80c8966efbafc0cb000eeba4000ec66b80500000066b9008000000f01d9"}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom(r0, &(0x7f0000000040)=""/97, 0x61, 0x10100, 0x0, 0x0) shutdown(r0, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000056c0), 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="bfe5c4336d52aa4ea4f58ee4b6e510f693a5fedfcb1d464174c0ee4a0d58ad21415271326f1bc288ab2c1c16d4d393e3112d85bb5e649c757a5fe9054fc569656ae7541556a222e9f08bb39b", @ANYRES64=r5], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) listen(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) syz_usb_disconnect(r6) 2.182720715s ago: executing program 0 (id=443): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="00008af0ac7037d7d47df419d8576511629f631003be3a4ead51eaa26b4d10c91eb8e3acc42b0dcfbdec07843e67df7a523b3154b564081cb9ac8c9d8554df71365f2b228495ffca37ab987e1c4935e0d4534ae6586429ad731e4d60a81ef9a19927bc6b304c2d79893a4641190af98f2c987cd8c2e384519a05f99db427005a9c8187cb5e14fc61b7f9b7008373a7c2a5de6ded3ad18decf6808866105ff7107d123cbfb4883505caf24b82330c945a703f40f9a58fd508007aeb6aca45c81c909261e8ecbf18e7098d398395bc9a4e97c6928fe0030c3a8ffec3ebbe4d3e7ff7dadecaf7ea0a26521dbcb3d9cf7815d2e50a1b09adbae2", 0xf8}, {&(0x7f0000000100)="84cb540400000f5941f1bbf1f396fba001bf7b3fcaea59fa1c050083de1ffd811561004000000000000000000000000000000009104bc4cb8d15bc8f0cb01e4ef6228cd74682725d632fc8004a366d32ce7136f4ea3dad7fb5b25d0961e83b38f757c6ed965f93066e25b5f99ec4b1d5a6cc86280fa7cab350db8620e3aa1baa42c76dacb241ae75a22c45938b279b8257c1a39b1c96da156b2b90baf11f02ef47ea1eccb49c89b111cd43534ab49f5b2fc83fc5eeb84da4f9f9504099a4bca32840235119", 0xc5}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) close(r0) 2.102636753s ago: executing program 0 (id=444): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0xc}, @val={0x1, 0x0, 0x27, 0x1, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x580, 0x0, 0x28, {[@timestamp={0x5, 0xa, 0xfffe, 0x300}]}}}}}}, 0x42) (async) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f00000013c0)="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", 0x1000}], 0x2}, 0x4048043) (async) r5 = dup(r1) sendmmsg$inet(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (async) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104031806000000000000000300060002000000c9020000000100004000000000000000d93780a5e4001d00000100000000503800010004000000fcff030000004f69000000000080e708000000000000000080000000000000ff000000000000007f00000000008100"/121], 0x78) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.922253772s ago: executing program 0 (id=448): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x28}, 0x4040) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.907982821s ago: executing program 2 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0xfffffffe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "914ed064ecdda3d5cb8618149af7a0123765825b860190fb8a405cf396cecbb989753166d19403dc90313fd178bfe4cb04f26543e619d193ad813c99646f560f"}, 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008040) (rerun: 32) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='wg0\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="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", @ANYBLOB="8a45020000000000240012800900010066d502f98000000014000280050001f20500002387760b24cfa68707df6318cb08000200cf06b12883fddf28f11e0fbd0b5ce286a7daca321e72ab40b4854c15ddaa37", @ANYRESDEC=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 1.907281322s ago: executing program 0 (id=450): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200000, 0x0) 1.832588825s ago: executing program 0 (id=452): execve(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x200, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000200", @ANYRES16=0x0, @ANYBLOB="000200000000fddbdf25170000001400078008000100070000000800010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0xc04, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ptrace(0x11, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000100)={r6, 0x1, r5, 0x400}) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000080)='./bus\x00', 0x100, 0x179) chdir(0x0) 1.412936516s ago: executing program 3 (id=459): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001500010300000000000000000a0000007e9f8f7cd98499da87de6f87f98c32803ab8c42faffa0f8a94785d615e771b446f5e692839550c9ad681f87a8480f4be19ab6dbbe521fbeb5a85ecb70bbd16b84d7a694b32f7bbdff4c00eabf1022cd9944877dde0e487d880eec6803773ebd1cf8778e9f6abc6761efb19fabeda9175aa4d3b2b7f3bdaf499751dd60f6cc384c7b6a68b4f56ca846e9f5881f9a6eb5e4749e50f59c1f47f07a794f02cd2216758cd2277f68539c156b562691bd487525e8727509a46fafd0a"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x4000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) munlockall() setrlimit(0x1, &(0x7f0000000040)={0x7, 0x2400000}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x325543, 0x56) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x123}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2121560}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000050000842cbd7000fedbdf250a010400", @ANYRES32=r0, @ANYBLOB="140001000000000000000000000000000000000114000600040000006ba0372d020000008a640000"], 0x40}}, 0x4008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='afs_flock_op\x00', r1, 0x0, 0x7}, 0x18) 1.302995106s ago: executing program 3 (id=460): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000200)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r2, r2) r3 = geteuid() statx(r1, &(0x7f00000001c0)='./file2\x00', 0x800, 0x20, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) read$FUSE(r1, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x5, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xee01}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x5, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r7}], {0x4, 0x3}, [{0x8, 0x0, r8}, {0x8, 0x2, r9}, {0x8, 0x5, r10}], {0x10, 0x7}, {0x20, 0x1}}, 0x6c, 0x2) ioctl$KDADDIO(r1, 0x4b34, 0x9) unlink(&(0x7f00000002c0)='./file0\x00') 1.032270986s ago: executing program 2 (id=461): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) getsockname$packet(r3, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r4, &(0x7f0000000c80)={0x1d, r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000200000007f0000000900000010000400", @ANYRES32=r2, @ANYBLOB="03000000000000000000000000000000000000007e210d868b5c4d7c393170c7741f5c37619ae39bcdba79c8af6d9910714408adb02826b75d3fdc6427b715943e2f1be417d71ab15f89aa7839b41fe22820dde79d84d61f5a81fdd88d55c09ab74c16c4dc8e16c5c56b07acc7f7e12d124d5c255b45", @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="05000000040000000200"/28], 0x50) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x87a2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @bcast, @null, @default]}) 971.231211ms ago: executing program 2 (id=462): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x6, 0x33424752, 0x3, 0xc, [{0x1, 0x5}, {0x3, 0xfffffffd}, {0x80, 0x5}, {0xa, 0x4}, {0xc2, 0xabc9}, {0x386f4af5, 0x5}, {0xe, 0xfff}, {0x0, 0x3}], 0x1, 0x3, 0x0, 0x37dce441ff8db334, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100037040400"/20, @ANYRES32=r9, @ANYBLOB="4315010000000000300012800b000100697036746e68000020000280140003000988000000000000b6000000000001010500090004000000"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 970.784465ms ago: executing program 0 (id=463): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket(0x28, 0x5, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c0001628eaa270b19daa2bf2f67b8d0bf51bc7d0c1566a200000014000007000000", @ANYRES32=r5, @ANYBLOB="4000a6000a000200ffffffffffff00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @remote}}}], 0x58}}], 0x1, 0x10814) 913.029991ms ago: executing program 2 (id=464): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x40000001}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x894b, &(0x7f00000000c0)) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x4, 0x61, 0x10, 0x10, 0x2}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 912.174657ms ago: executing program 2 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0xfffffffffffffffd) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) syz_emit_ethernet(0x1015, &(0x7f0000000b40)={@remote, @local, @val={@void, {0x8100, 0x4}}, {@llc_tr={0x11, {@llc={0xd4, 0x7e, 'R', "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"}}}}}, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x8}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x82af]}, 0x8) 459.543256ms ago: executing program 1 (id=466): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x201, 0x6000006, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0xc080) 458.662532ms ago: executing program 3 (id=467): ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x9, 0x1, 0xec}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x1, 0x0, 0x8000, 0x3be, 0x6}}}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udplite\x00') ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x64) getsockname$l2tp(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='veth1_to_bond\x00', 0x10) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x3e}, {0x2, "a6559a7f2270d6189137501b2e88e9a42025719e797c6244ac7af572c93a021da8c9b5be45c5679820242b566aa54de6f1f0f362501607a182251a09"}}}, 0x41) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x10080, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000400)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000440)=0x2c) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3eba}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004020}, 0x4) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd3}, "efa0fd627bdcf89c0c8f398258cfc50ffe1da87ee2cfc3304173125979e59219dbcb9c21020c9299dabf09a0cb81520e229703fd0f9e355f008ccb132dcebe9925f6a8b9cdebefb3491a98e8023b8cdd5056b9b72d08e27996516ed6259bd64d1f29de35531b3a8a85b387348dbea1ba12977fd5cabcb9ddc737c48466fa20e4eaf7f97c490b2d63ad08b83c4dcaaa9b714c28f51af03bcc0c620a592f5e92f11883602b06feb515b52d8f5f57a49a725e809e24eec812227a958a0bbd088281ca2c9e826bff33702986131ad742134779decb"}, 0xd7) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000740)=@multiplanar_overlay={0x7, 0x4, 0x4, 0x70000, 0x3, {r4, r5/1000+10000}, {0x5, 0x8, 0x80, 0x5a, 0x9, 0x8, "d6b55e32"}, 0x6, 0x3, {&(0x7f00000006c0)=[{0x4, 0x4, {0x7}, 0x2}, {0x85d, 0x8f, {0xdf}, 0x3}]}}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_NAT={0x150, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x38}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xdca}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20044000}, 0x21) syz_emit_vhci(&(0x7f0000000a40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xb}, @l2cap_cid_signaling={{0x7}, [@l2cap_move_chan_req={{0xe, 0x53, 0x3}, {0xfffd, 0x5}}]}}, 0x10) listen(r2, 0xc) write$selinux_create(0xffffffffffffffff, &(0x7f0000000a80)=@objname={'system_u:object_r:apt_var_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x5c9cd3af, 0x20, './file0\x00'}, 0x52) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b00), 0x8000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000b40)={'\x00', 0x6, 0x3}) io_setup(0x9, &(0x7f0000000bc0)=0x0) io_getevents(r8, 0xffffffffffff8000, 0x4, &(0x7f0000000c00)=[{}, {}, {}, {}], &(0x7f0000000c80)={0x0, 0x3938700}) 458.222801ms ago: executing program 1 (id=468): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x7d) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async, rerun: 64) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000680000042bbd7000fcdbdf250000020010000000060003002d5b000f000000000000000004ef030008000500", @ANYRES32=r2, @ANYBLOB="080001000200000004000b00040002"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x804) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001dc0)=@newtaction={0x1a1c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x6e4, 0x1, [@m_nat={0x1d0, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x8, 0xfffffff9, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xad, 0x7a1, 0x0, 0x5, 0xffff8001}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x0, 0x1, 0x5}, @multicast2, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x7, 0x6}, @local, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10000000, 0x4, 0x8000}, @broadcast, @remote, 0xffffffff, 0x1}}]}, {0xdd, 0x6, "fec8807f0b2136b021f61de770eaab274829bf3013fba215e5f73180e960bf5f3e8861a42e91f1d003912215c1695999ecdad4ab87775c31d8781874ba22d67d5b36f2a50c06da27f582527508434a3d27a0e27bdad4b9f6041d188e570efdf113daa01350f7260508eabcda33bb3a9ef511a89ce917272b2f9f6531b694b4a68f91084d49bd3caceb5f18ff68b3e22b440241612aef5e92e6f9c02f4943265cf317a2881473ca05ebd3c33ab90ab8333719e99b31880a40ffb0cc4fc940cf01bb717bed2525cffa1890de7bf94d1c8b31aaf7c01cdf4b59f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x14c, 0x4, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x7, 0x3, 0x2, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x4, 0x0, 0x7ff}, 0x68}}]}, {0xe7, 0x6, "4573dc6b665c4ac0c9f748361cd8c3dfc1cff9e0b849726c6b0c3bd093fdd106aea4f803d47f2340fe531b2ad2fcc07ec2fe2bbcb23bd4e0f23f201aa51cf63f6e3dc10e7b705e2027f58e6817f646b421df842141cbd2ce8fe1fdd91b2c39f7ece5eeb7d29f9c27bc6520c4447cd2bae7dfbd1e5cd03c07d9a9845249a75a6e6e888529218a913cdf056cbab3a71b86aa61e7f95438908f109ce17d9ece8120a5caedb5c75b5684c5ddb32a476fee0f36f30fc6cf7f3995405e687d880770393c59f57bc310a8d9c8947e9256b6281d15065cc4116e053812be59d5465af432657512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x184, 0x8, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x21e9, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x22e, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x8, 0x5, 0x42b, 0xc980}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x20000000, 0x87d, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21f2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xd, 0x7, 0xfffffff9, 0x8001}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ea, 0x9d371ac1f5d63f1a}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2016, 0x2}}]}, {0xd1, 0x6, "9f986612c7875799c2e05fba75838a80ec5c57394bd07c249ef118d93d18506346c71642f1bdf917e85ac04418790bc2aa1f23292553a93c79e7268fb73fab2613f6405d138dac096f21971adf90a9835e98773adb6bf2423f5ec2ac583327aedf7551fc5aa61c4e19b1c13a9f1e5a1314147c1ffba35b0b3e946ce6478ba3530e3750f747670e96bad3ca826c5133297317b97818cbb7f8f94f894e8f631b51e8d1ebd2e8a08cdf3c4a21f5318ba49b10539173a49649ffe360e7ad7e94237c9dc2a784c8cfd5fb349fed6c86"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x78, 0x10, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7915}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}]}, {0x1b, 0x6, "38eb2228750e2784f834c7b2974d329a538e51bcb148ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x11c, 0x13, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfe0, 0x0, 0x10000007, 0x25, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff6, 0x2, 0x2, 0x7f, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x95, 0x6, "43da58cab9839fb3b40a356903a05391181d5e1e78e8283fa732f4617ea5611a633fa940408427fde052e3fd1b7fc6a1d16c34bd52803006a45666ae2493c1b1e55222281420cdc952504c05a5b8a75714678fd839d6e9bfe0933b4b84e3ede7173cf1a9b1c58eefc1dcdf02664afe60fa21aa28149d11035fae24f2d3bc03b4f84e14c41b536050ad995690c04ab953cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0xac, 0x1a, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x95}]}, {0x75, 0x6, "179bc43d1164edaa0a6fa27161b3dc35f989c0d0232b60cfdeca57f7f4c198997021a3d298d20fb82a29d6db5fa528e3ee2c80c8860e8ae3ea81d657cea056155f59cc4a997ae467370704a495e540aed1795731c736af665e01d8cfd5bd3b5671ff404de5e33315a575df72948366887e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x12f0, 0x1, [@m_skbedit={0x98, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x61, 0x6, "762a8fe5578d46c3bcd63d73c9784a55150b6850757627b79b8474085ee9b2c1c150a6e695e5b56e8c468b901b9425449e30d2032228710e553b75a29cad473438846e0b4a65c5e7f4e536457f074f91c78787d0f3baac9f0420c84af1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0xe30, 0x6, 0x0, 0x0, {{0xb}, {0xd28, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x2, 0x8001, 0x8, {0x9e, 0x1, 0x2, 0x8001, 0x0, 0x5}, {0xcd, 0x0, 0x5c19, 0x7f, 0x5, 0x8}, 0x101, 0x1, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffffff, 0x20d6, 0x272c, 0x7, 0xffffffd8, 0x3, 0x6, 0xda, 0x7, 0x46, 0x65, 0x401, 0x5, 0x4, 0xbb8, 0x20f, 0xd79c, 0x2, 0x100000, 0x10, 0x3, 0x4, 0x7, 0x80c5, 0x3, 0x3, 0xcea7, 0x2, 0x80000000, 0x7fffffff, 0x4, 0x80, 0x0, 0x0, 0x9, 0xffff0000, 0xffff, 0xc2b4, 0x3e, 0xe, 0x8, 0x8, 0xfffffffa, 0x3ff, 0x281, 0x100, 0x7fff, 0x4, 0x0, 0x1775, 0x1, 0x4, 0x38, 0x8, 0x5, 0x8, 0x4, 0x9, 0x6, 0x80000000, 0x3, 0x9, 0xfffffff2, 0xffff6562, 0xffff7fff, 0x9, 0x3f, 0x0, 0xe, 0xaa, 0x4, 0x5, 0xfffffffc, 0x3, 0x7, 0x6, 0xfff, 0x6, 0x7, 0x5, 0x6, 0x25baec83, 0x5, 0x9, 0x1, 0x9, 0x3, 0x9, 0x5, 0x3, 0x3, 0x5, 0x13c, 0xd2, 0x5, 0x6, 0x40, 0x8, 0x0, 0x29, 0x5, 0x100, 0x4, 0x4, 0x7, 0xde, 0x5f, 0x4, 0x7ff, 0x6, 0x400, 0xa4ff, 0x3ff, 0x8, 0x8, 0x7, 0xb8, 0x6, 0x0, 0x0, 0xff, 0xb, 0x5, 0xb31f, 0x4, 0x800, 0xffff, 0x0, 0x0, 0x10, 0x5, 0x101, 0xf, 0x400, 0xfffffff6, 0xd, 0x8000b, 0x2, 0x0, 0x2, 0x4, 0x2, 0x8, 0x2, 0x7, 0x0, 0x3, 0x8, 0xb43, 0xeb, 0x1714, 0x80000001, 0x9, 0x8, 0x3ff, 0x7, 0x0, 0x3, 0x2, 0xa, 0x4, 0x5, 0x9, 0x6, 0x6, 0x9, 0x9, 0x8, 0x6, 0x0, 0x900000, 0x6a, 0x8, 0x7, 0x5, 0x4, 0x3ff, 0x8001, 0x27, 0xab6c, 0x0, 0x6, 0x3ff, 0x4, 0x6, 0x10, 0x0, 0xa67c, 0x2, 0x7, 0x0, 0x23, 0x800, 0x1, 0x800000, 0x3849, 0x6, 0x3, 0x2, 0x2e6, 0x1, 0x6, 0x7fff, 0xffff8001, 0x2, 0x4, 0xffffffff, 0xd43, 0x5, 0x5, 0x1, 0x8000, 0x7ff, 0x3, 0x3, 0x7, 0x49a5, 0x9, 0x4, 0x3, 0x81, 0x3, 0x5, 0x7, 0x46c, 0xc, 0xffffffff, 0xffffffff, 0x2, 0x0, 0x4, 0x1, 0x0, 0x95, 0x0, 0x8000, 0x2, 0x3, 0x64d7, 0x6, 0x5, 0x0, 0x3, 0x7, 0x4, 0x0, 0x1, 0xd0fd, 0x7, 0xffff, 0x0, 0x5, 0xfffffff8, 0x8, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x58}, @TCA_POLICE_RATE={0x404, 0x2, [0x87f, 0x7, 0x5, 0x1000, 0x7f, 0x0, 0x0, 0x3ffc00, 0x7806, 0x1, 0x1, 0x0, 0x3, 0x400, 0x0, 0x3, 0xc14, 0x5, 0x5, 0x0, 0x3, 0x7, 0x92, 0x3, 0xffffbbfb, 0x7, 0x2, 0x1, 0x2, 0x0, 0x1a7, 0xfffffff1, 0x2, 0x1, 0x6, 0x6, 0x9, 0xbd, 0x6, 0x5, 0x48, 0x2800, 0x9f, 0x6, 0x4be, 0x5fa, 0x100, 0x2a4, 0x10000, 0x1, 0x8000, 0xc35, 0x2, 0x16ac, 0xfffffeff, 0x8000, 0x1, 0xfff, 0x7, 0x9, 0x2, 0x400, 0x2, 0x59a, 0x1, 0x7fff, 0x8, 0x7f, 0xe, 0x1ff, 0x3, 0x1, 0x8, 0x7f, 0x80000000, 0x5, 0x1954df55, 0x0, 0x12, 0x8, 0x1405, 0x2, 0x4, 0x7fff, 0x4, 0x8, 0x9, 0xfe2, 0x4, 0x4, 0xa021, 0x10, 0x2, 0xe16, 0x10000, 0xac, 0x8, 0x8a, 0x3, 0x5, 0x3ff, 0x5, 0xa75, 0x5, 0x9, 0x2e, 0x5, 0x10001, 0x3, 0x0, 0x4, 0xba0c4689, 0x3, 0x1, 0x4, 0x140000, 0x1ba, 0x113e, 0x8, 0x3, 0x1, 0x5a, 0x3, 0x7, 0x1, 0x8, 0x7, 0x3d8dc9ad, 0x0, 0x5, 0x2, 0x7fff, 0x10, 0xffffffff, 0x6, 0x4, 0x2, 0x4, 0x1, 0x10001, 0x3, 0x0, 0xb, 0xdd8f, 0xbaad, 0xb4aa, 0x8e6c, 0x4, 0x400, 0x6, 0x4, 0x100, 0x2561, 0x8, 0xffffffff, 0x3, 0x1000, 0x400, 0x9a, 0x7fff, 0x0, 0x3, 0x1, 0x400, 0xdd, 0x0, 0x5, 0xe, 0x7, 0x9, 0x0, 0x6, 0x5, 0x958, 0x1, 0x8000, 0x9, 0x1, 0x2, 0xe, 0xffffffff, 0x3585, 0x6, 0x4, 0x6, 0x1c, 0xf, 0x8, 0x0, 0xffffffd2, 0x101, 0x3b, 0x4, 0x401, 0xe0000000, 0x9128, 0xc, 0x1ff, 0x40, 0x2, 0x0, 0x1, 0x3, 0x101, 0x2, 0x1, 0x9, 0x6, 0x8, 0x0, 0x2000, 0x24c7f696, 0x3, 0x1, 0x101, 0x2, 0x5, 0x401, 0xfff, 0xd, 0x7b, 0x1, 0x5, 0x7ff, 0x87, 0xe118, 0xfff, 0x4, 0x1, 0x7, 0x5, 0x7fff, 0x2ff, 0x9, 0x401, 0x6, 0x2, 0xffff, 0x5, 0x3, 0x42f0409a, 0xffffffff, 0x6, 0x80000001, 0x2, 0x101, 0x800000, 0x1, 0x8000, 0x6, 0x3, 0x52d, 0x4, 0x4, 0x10001, 0xffffffff]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x61}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x6, 0x1000, 0x1964, {0x2, 0x0, 0x0, 0x8, 0x8fcd, 0x63}, {0xe, 0x1, 0x9, 0x8, 0xd90, 0x8}, 0x8, 0x10000, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x36af, 0x9bd, 0xfffffc00, 0x4cc, 0x3, 0x6, 0x2, 0x1000, 0x7, 0x400, 0x2, 0x3ff, 0x8, 0xffffff7f, 0xffffffb0, 0x8, 0x2, 0xd336, 0x3, 0x3, 0x5, 0x10, 0x2, 0x10000, 0x60e, 0x0, 0x8, 0x7f, 0x8, 0x3, 0x800, 0x1d, 0x0, 0x4, 0x7, 0x10, 0x8, 0x81, 0x2, 0x1, 0x10000101, 0x9, 0xf, 0x9, 0xa9, 0x0, 0x6124, 0x0, 0x0, 0xa, 0xffffffff, 0x1, 0x1, 0x3ff, 0xfffffff8, 0x5, 0xd4, 0x6, 0xf, 0x3, 0x5, 0xffff, 0x2, 0x0, 0x0, 0x3, 0x2, 0x4, 0x40, 0x1ff, 0x7, 0x74f6, 0x400, 0x9, 0x71, 0x3, 0x3, 0x9, 0x2, 0x1, 0x0, 0x6, 0x2, 0x1, 0x8, 0x10001, 0x73b8, 0x8, 0x78, 0xc8ab, 0xfffff24b, 0x9, 0x7, 0x5, 0xd1, 0xfffffff9, 0xf792, 0x2, 0x4, 0x5, 0x8001, 0x8, 0xd4bd, 0x800, 0x2, 0x4, 0x1, 0x5, 0x0, 0x2, 0x9, 0x2, 0x9, 0x149, 0xb, 0x0, 0x2d410607, 0x5, 0xfffffff6, 0x8, 0x3, 0xfffffffe, 0x1, 0x9, 0x8, 0x7, 0x9, 0xa, 0x1, 0xfffff800, 0x0, 0x3, 0x42cb, 0xc00000, 0x4, 0x1, 0x81, 0x7, 0x6706, 0x9, 0x8, 0x7fffffff, 0x7, 0x6, 0x3ff, 0xffffffff, 0x4, 0x2, 0xa9, 0x6, 0x24, 0xb38, 0x4, 0x4, 0x3, 0x6, 0xf, 0xb87ca960, 0xffffffff, 0xff, 0x5, 0x3, 0x451, 0x401, 0x401, 0xbe9, 0x0, 0x4, 0x6b9, 0x7, 0x7, 0x4, 0xf, 0xb8a, 0x2, 0x3ff, 0x8, 0x85, 0x8, 0x3, 0x4, 0x9, 0x10001, 0x7, 0x2, 0x8, 0x4d8, 0x6, 0xe0000, 0x5, 0x7, 0x9, 0xff, 0x1, 0x5, 0xeff3, 0x4, 0x81, 0xd0, 0x1, 0x8, 0x7fffffff, 0x850e, 0x6, 0xfffffffc, 0x8, 0x4, 0x7, 0x40, 0x4, 0x4, 0x6, 0xd321, 0x0, 0x3, 0x5, 0x5, 0x1, 0x3, 0x2, 0x8, 0x6, 0x34ba, 0x8, 0x4, 0x3, 0x1, 0x7fffffff, 0x6, 0x7ff, 0x0, 0x3, 0x5, 0x7, 0x1, 0x8f, 0x80, 0x80000000, 0x4, 0x7, 0x8, 0x7, 0x5, 0x6, 0x4, 0x3, 0x800, 0x9, 0x3, 0x6, 0x2, 0xfffeffff, 0x6, 0x3, 0x1bee]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7c9}]]}, {0xdf, 0x6, "6da57d69ff76b8175f5a1c3d072301c85b3ac341c3f77d934f02d194d3b765717cc32214ecb3ba7509e18087763f5374ec0224872c83b7ef5fac50175b0b7b1fe6909b232a00626954c8c91c86ff1aeceb0aee6836d7bda83bed98c9e106e2fb208aaa0dbe3647c4308a0871ca1f03d31c817dd8672c8c04d5042bc2ca70f9c28d5d4bdf59faa6c6df6ba14901b562b65e905824efbfe147fa104df12e7bf163c9fd30888472ff0f0c0ec095c990c1e66d192bcdd9b51fc3682f62c1baf4fa7c4131cb7986700a9fdd2805e26d96d9c693100d1b198fbc2330553a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1b8, 0xe, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3b, 0x7, 0x9f, 0x1}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x2, 0xab59, 0x48ef}, 0xf7d1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1f4b, 0x10000002, 0x8, 0xf4e1}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x8001, 0x1, 0xffffff59, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xf6, 0x0, 0x4, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x5, 0x1b1f}, 0xa0f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x65d, 0x3, 0x0, 0x6, 0x5}, 0xa7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffc3, 0x8, 0x20000000, 0xd6d5, 0xfffffffc}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x10000000, 0x6, 0x1f}, 0x6}}]}, {0x89, 0x6, "53dfb3b42172a58a000e9cf117fee1d1ec0bd3fd79d855ae4202ada5dacd0d469f2cefb00d679530ad080de7849d2924bfd9e9c6f2a5f0234b86c13de31c2240c632bc009cbf564dfbb97f7723dbac20d49035886682dcb0878c11e1000ea33ef400b07ee795ffe8834f45a7c36d6efd2e63bf222c97613ec138afa58d1df9662993845871"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x114, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x2, 0x0, 0x1000, 0x6}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x20000000, 0x1ff}, 0x1}}]}, {0xa6, 0x6, "bb86199fa6fbdefa5bf106137ebca33a24049de402d573bd7c39d9faa739c97c2f06690da3f788fa9284df95f4f921cf89fb1f9c7e0801609c35e11e9e7c93d479eb4e075b35c44a80c654c843a11799fcd3372938c67d306f808cc62aa2972818f7b7fbaef84222d0d2a6f284d644fe00d15a3a3da20d7679ce47ec3a2fc5c79b57908e96f89ed2e4c19d45f41b56bb06627433b19cfe508dfbd193ca9d8e2b5fdf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_tunnel_key={0x60, 0xe, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x1a, 0x6, "df7d90303004f0daab426bda0cdc376b64660993c1fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xf8, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x40000004, 0x900c2d5d, 0x5}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xf, 0x5, 0x8, 0x1}, 0x75}}]}, {0x94, 0x6, "007d20b80013e298484b81075511605ba5d2b8bd4b66176f2033b05e4fff57d47cb19b903d2a9da9e164da65d132a4b9d5d6dc4a4b8b0cd2a81a3497507e7823d33dcc4dfc9ca9d65305a826022fdcb4006915bf8e9d5076001145740dd3397da27494f8f955389f768bc808e54fa09ee71726f26ce92a61532c21cf949cf5f0aa2333d5579f177554d9d391047f7e43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1a1c}, 0x1, 0x0, 0x0, 0x200000a0}, 0x0) 366.143928ms ago: executing program 1 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x5922, 0x10000, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x4000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 292.887079ms ago: executing program 3 (id=470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x1, 0x0, @scatter={0x25, 0x0, 0x0}, &(0x7f0000000240)="a8", 0x0, 0x7fffffff, 0x0, 0x1, 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0xfffffffffffff801) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0x6804, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0x6805, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) 211.323471ms ago: executing program 1 (id=471): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e28dc278000000000000000000"], 0xd) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x6, 0x5}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560211820fffff5bab4e210200000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000240)="0f20d86635080000000f22d80f01c336640f787798660f3a16540080440f20c0663501000000440f22c0e3593ef40f0f8b0070b0baf80c66b866d8138f66efbafc0ced7fdd", 0x45}], 0x1, 0x2c, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180011af59bd7000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x5) add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 210.87109ms ago: executing program 3 (id=472): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x84042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}], 0x1) read$msr(r1, 0x0, 0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000000)={0xbd, 0x4, 0x6, 0xe5, 0x7, 0xb8}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x19, 0x14, "ffb3d741dd17c1ac0d38ef0200000000000000000000000000000000000000000000000000fe00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xffffffffffffbffe, 0x53e]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896000000000100", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc]}) 62.419303ms ago: executing program 3 (id=473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = semget(0x2, 0x4, 0x3a8) semtimedop(r1, &(0x7f0000001000)=[{0x3, 0xffff}], 0x1, &(0x7f0000001040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002380)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='devtmpfs\x00', 0x208c9b, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000401, r5, &(0x7f0000000100)) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f00000001c0)=0x6, 0x4) bind$can_raw(r7, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000001400)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f00000007c0)={0x1e0, 0x140, 0x2000, 0x240, 0x74fc, 0x7, 0x2, 0x0, {0x6, 0x8}, {0x6, 0x401, 0x1}, {0x800, 0x40000000, 0x1}, {0x7, 0x75d00000}, 0x3, 0x1dd, 0x5, 0x1, 0x0, 0xffffffff, 0x5, 0x9, 0xff, 0x6, 0x1, 0x4, 0x3, 0x3e, 0x2, 0x462be122f10b40b4}) 0s ago: executing program 2 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x7, 0x480000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x11f, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000044, 0x8, 0x0, 0x0}}, 0xffffffffffffff50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000500), 0x0}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0x3}, &(0x7f00000001c0)=0x90) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00'}) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000000)={0x2, 0x3ff, 0x2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xeeef0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) kernel console output (not intermixed with test programs): [ 44.113193][ T40] audit: type=1400 audit(1765898035.876:61): avc: denied { siginh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:45756' (ED25519) to the list of known hosts. [ 46.465333][ T40] audit: type=1400 audit(1765898038.256:62): avc: denied { name_bind } for pid=5888 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.492984][ T40] audit: type=1400 audit(1765898038.276:63): avc: denied { execute } for pid=5890 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.503618][ T40] audit: type=1400 audit(1765898038.276:64): avc: denied { execute_no_trans } for pid=5890 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.718273][ T40] audit: type=1400 audit(1765898040.506:65): avc: denied { mounton } for pid=5890 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.725961][ T40] audit: type=1400 audit(1765898040.516:66): avc: denied { mount } for pid=5890 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.728098][ T5890] cgroup: Unknown subsys name 'net' [ 48.915861][ T5890] cgroup: Unknown subsys name 'cpuset' [ 48.920907][ T5890] cgroup: Unknown subsys name 'rlimit' [ 49.085274][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 49.085285][ T40] audit: type=1400 audit(1765898040.876:68): avc: denied { setattr } for pid=5890 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.103352][ T40] audit: type=1400 audit(1765898040.886:69): avc: denied { create } for pid=5890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.110816][ T40] audit: type=1400 audit(1765898040.886:70): avc: denied { write } for pid=5890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.117433][ T40] audit: type=1400 audit(1765898040.886:71): avc: denied { read } for pid=5890 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.126264][ T40] audit: type=1400 audit(1765898040.886:72): avc: denied { mounton } for pid=5890 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.136442][ T40] audit: type=1400 audit(1765898040.886:73): avc: denied { mount } for pid=5890 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.144027][ T40] audit: type=1400 audit(1765898040.906:74): avc: denied { read } for pid=5647 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.148302][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.151568][ T40] audit: type=1400 audit(1765898040.906:75): avc: denied { read } for pid=5647 comm="dhcpcd" name="n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.163424][ T40] audit: type=1400 audit(1765898040.906:76): avc: denied { open } for pid=5647 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.171174][ T40] audit: type=1400 audit(1765898040.906:77): avc: denied { getattr } for pid=5647 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1960 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 49.848061][ T5890] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.900130][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.904675][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.907618][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.907637][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.910716][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.912542][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.915482][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.918922][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.920370][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.921608][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.922606][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.928495][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.931814][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.941362][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.944898][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.950301][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.954272][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.964408][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.969980][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.973941][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.208996][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 53.252812][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.292020][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.362519][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.365321][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.367665][ T5933] bridge_slave_0: entered allmulticast mode [ 53.370367][ T5933] bridge_slave_0: entered promiscuous mode [ 53.376111][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.378359][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.380705][ T5933] bridge_slave_1: entered allmulticast mode [ 53.383325][ T5933] bridge_slave_1: entered promiscuous mode [ 53.418871][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 53.466814][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.469587][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.471925][ T5932] bridge_slave_0: entered allmulticast mode [ 53.474810][ T5932] bridge_slave_0: entered promiscuous mode [ 53.478925][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.488663][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.498683][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.500997][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.503516][ T5941] bridge_slave_0: entered allmulticast mode [ 53.506162][ T5941] bridge_slave_0: entered promiscuous mode [ 53.508870][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.511047][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.513556][ T5932] bridge_slave_1: entered allmulticast mode [ 53.516180][ T5932] bridge_slave_1: entered promiscuous mode [ 53.555603][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.558210][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.560468][ T5941] bridge_slave_1: entered allmulticast mode [ 53.563356][ T5941] bridge_slave_1: entered promiscuous mode [ 53.587062][ T5933] team0: Port device team_slave_0 added [ 53.610649][ T5933] team0: Port device team_slave_1 added [ 53.613898][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.618003][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.632617][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.637504][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.641217][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.643797][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.646086][ T5946] bridge_slave_0: entered allmulticast mode [ 53.648678][ T5946] bridge_slave_0: entered promiscuous mode [ 53.662162][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.664631][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.672539][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.687751][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.690857][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.693132][ T5946] bridge_slave_1: entered allmulticast mode [ 53.695983][ T5946] bridge_slave_1: entered promiscuous mode [ 53.698909][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.701100][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.709086][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.724782][ T5932] team0: Port device team_slave_0 added [ 53.733176][ T5941] team0: Port device team_slave_0 added [ 53.737739][ T5932] team0: Port device team_slave_1 added [ 53.740498][ T5941] team0: Port device team_slave_1 added [ 53.778698][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.797361][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.799589][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.808484][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.813694][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.817644][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.819885][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.828266][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.835044][ T5933] hsr_slave_0: entered promiscuous mode [ 53.837680][ T5933] hsr_slave_1: entered promiscuous mode [ 53.840296][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.843078][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.853503][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.862623][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.865656][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.876263][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.901589][ T5946] team0: Port device team_slave_0 added [ 53.905740][ T5946] team0: Port device team_slave_1 added [ 53.965863][ T5941] hsr_slave_0: entered promiscuous mode [ 53.968161][ T5941] hsr_slave_1: entered promiscuous mode [ 53.970255][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 53.972109][ T5941] Cannot create hsr debugfs directory [ 53.979946][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.982173][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.990307][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.997229][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.999382][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.007546][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.039945][ T5932] hsr_slave_0: entered promiscuous mode [ 54.042229][ T5932] hsr_slave_1: entered promiscuous mode [ 54.044488][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 54.046359][ T5932] Cannot create hsr debugfs directory [ 54.086909][ T5946] hsr_slave_0: entered promiscuous mode [ 54.089983][ T5946] hsr_slave_1: entered promiscuous mode [ 54.092148][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 54.094133][ T5946] Cannot create hsr debugfs directory [ 54.323483][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.332241][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.339274][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.350498][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.393192][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.401647][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.407969][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.416219][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.460271][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.481642][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.490055][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.498038][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.532522][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.546427][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.551428][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.556378][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.602012][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.625247][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.638446][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.649720][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.652102][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.657087][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.659324][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.667234][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.676741][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.678998][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.687747][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.690034][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.720095][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.738424][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.744992][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.762352][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.773168][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.775755][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 54.775933][ T40] audit: type=1400 audit(1765898046.556:94): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.776177][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.794706][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.801407][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.803781][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.809764][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.811992][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.820705][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.823004][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.882931][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.914067][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.953965][ T5939] Bluetooth: hci0: command tx timeout [ 54.957024][ T5941] veth0_vlan: entered promiscuous mode [ 54.965695][ T5934] Bluetooth: hci1: command tx timeout [ 54.967595][ T5939] Bluetooth: hci2: command tx timeout [ 54.972254][ T5941] veth1_vlan: entered promiscuous mode [ 54.979940][ T5933] veth0_vlan: entered promiscuous mode [ 54.988325][ T5933] veth1_vlan: entered promiscuous mode [ 55.008341][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.030131][ T5941] veth0_macvtap: entered promiscuous mode [ 55.033492][ T5939] Bluetooth: hci3: command tx timeout [ 55.042729][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.049904][ T5933] veth0_macvtap: entered promiscuous mode [ 55.053068][ T5941] veth1_macvtap: entered promiscuous mode [ 55.063000][ T5933] veth1_macvtap: entered promiscuous mode [ 55.086395][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.094375][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.103542][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.111075][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.124804][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.128149][ T5946] veth0_vlan: entered promiscuous mode [ 55.132440][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.136319][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.145764][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.148638][ T1013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.154784][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.162450][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.166242][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.171779][ T5946] veth1_vlan: entered promiscuous mode [ 55.190082][ T5932] veth0_vlan: entered promiscuous mode [ 55.201884][ T5932] veth1_vlan: entered promiscuous mode [ 55.237817][ T5946] veth0_macvtap: entered promiscuous mode [ 55.252871][ T5946] veth1_macvtap: entered promiscuous mode [ 55.264650][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.267682][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.280437][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.284074][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.287593][ T5932] veth0_macvtap: entered promiscuous mode [ 55.313192][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.324065][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.326800][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.327010][ T5932] veth1_macvtap: entered promiscuous mode [ 55.329060][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.340429][ T1259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.340787][ T40] audit: type=1400 audit(1765898047.126:95): avc: denied { mount } for pid=5933 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.352089][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.355158][ T1259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.355774][ T40] audit: type=1400 audit(1765898047.126:96): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzkaller.ZmchZS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.363942][ T1259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.368019][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.368118][ T40] audit: type=1400 audit(1765898047.126:97): avc: denied { mount } for pid=5933 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.368146][ T40] audit: type=1400 audit(1765898047.136:98): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzkaller.ZmchZS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.368174][ T40] audit: type=1400 audit(1765898047.136:99): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/syzkaller.ZmchZS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.368203][ T40] audit: type=1400 audit(1765898047.146:100): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.404534][ T40] audit: type=1400 audit(1765898047.196:101): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.413795][ T40] audit: type=1400 audit(1765898047.196:102): avc: denied { mount } for pid=5933 comm="syz-executor" name="/" dev="gadgetfs" ino=9625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 55.421643][ T40] audit: type=1400 audit(1765898047.196:103): avc: denied { mount } for pid=5933 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.424319][ T1259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.439723][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.451644][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.459173][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.475124][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.491695][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.503506][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.516521][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.550973][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.557987][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.563649][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.566907][ T6023] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 55.569358][ T6023] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 55.571779][ T6023] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.575507][ T6023] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 55.577982][ T6023] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 55.580362][ T6023] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.610851][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.612780][ T6027] Zero length message leads to an empty skb [ 55.615866][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.639495][ T6023] netlink: 5168 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.646001][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.649423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.695512][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.698000][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.702639][ T6034] ======================================================= [ 55.702639][ T6034] WARNING: The mand mount option has been deprecated and [ 55.702639][ T6034] and is ignored by this kernel. Remove the mand [ 55.702639][ T6034] option from the mount to silence this warning. [ 55.702639][ T6034] ======================================================= [ 55.704161][ T6036] nbd: couldn't find device at index -2127233020 [ 55.716685][ T6037] nbd: couldn't find device at index -2127233020 [ 55.832958][ T6046] loop6: detected capacity change from 0 to 2640 [ 55.838431][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.841329][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.877089][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.895312][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.898521][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902210][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902250][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902272][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902284][ T6024] ldm_validate_partition_table(): Disk read failed. [ 55.902302][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902322][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.902353][ T6024] Dev loop6: unable to read RDB block 0 [ 55.902469][ T6024] loop6: unable to read partition table [ 55.909648][ T6046] ldm_validate_partition_table(): Disk read failed. [ 55.909684][ T6046] Dev loop6: unable to read RDB block 0 [ 55.912100][ T6046] loop6: unable to read partition table [ 55.913062][ T6046] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 56.034830][ T6019] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.077305][ T6064] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 56.111423][ T6064] kvm: pic: level sensitive irq not supported [ 56.111886][ T6064] kvm: pic: non byte read [ 56.183332][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 56.188223][ T6019] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.191045][ T6019] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 56.203353][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.208501][ T6019] usb 8-1: config 0 descriptor?? [ 56.461005][ T6075] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 56.520466][ T6087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.538125][ T6087] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.545460][ T6087] overlayfs: conflicting lowerdir path [ 56.549616][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7f [ 56.551471][ T6072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.636478][ T6019] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 56.824570][ T6095] binder: 6094:6095 ioctl 40189429 200000000280 returned -22 [ 56.832193][ T61] IPVS: starting estimator thread 0... [ 56.835299][ T6095] binder: BINDER_SET_CONTEXT_MGR already set [ 56.837882][ T6095] binder: 6094:6095 ioctl 4018620d 200000004a80 returned -16 [ 56.936706][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 56.965046][ T6096] IPVS: using max 46 ests per chain, 110400 per kthread [ 56.973077][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 57.033579][ T5939] Bluetooth: hci2: command tx timeout [ 57.033712][ T5934] Bluetooth: hci1: command tx timeout [ 57.034205][ T64] Bluetooth: hci0: command tx timeout [ 57.043853][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 57.044921][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 57.123421][ T5934] Bluetooth: hci3: command tx timeout [ 57.291264][ T6126] loop6: detected capacity change from 0 to 2640 [ 57.293955][ T6126] ldm_validate_partition_table(): Disk read failed. [ 57.296080][ T6126] Dev loop6: unable to read RDB block 0 [ 57.297960][ T6126] loop6: unable to read partition table [ 57.299817][ T6126] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 57.387221][ T6130] fuse: Bad value for 'fd' [ 57.445980][ T6132] binder: 6131:6132 unknown command 0 [ 57.447731][ T6132] binder: 6131:6132 ioctl c0306201 2000000005c0 returned -22 [ 57.455931][ T6132] binder: 6131:6132 ioctl 8010aa01 200000000000 returned -22 [ 58.265446][ T6151] qnx6: unable to read the first superblock [ 58.268240][ T6151] qnx6: unable to read the first superblock [ 58.270758][ T6151] qnx6: unable to read the first superblock [ 58.273331][ T6019] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.424590][ T6019] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.428203][ T6019] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.431336][ T6019] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.434549][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.439610][ T6149] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.451376][ T6019] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.772300][ T6179] xt_l2tp: v2 doesn't support IP mode [ 58.803867][ T61] usb 5-1: USB disconnect, device number 2 [ 58.817702][ T6019] usb 8-1: USB disconnect, device number 2 [ 58.853210][ T6186] syz.3.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.860514][ T6186] bridge1: entered promiscuous mode [ 58.862755][ T6186] bridge1: entered allmulticast mode [ 59.113773][ T5939] Bluetooth: hci1: command tx timeout [ 59.115676][ T5934] Bluetooth: hci2: command tx timeout [ 59.193835][ T5934] Bluetooth: hci3: command tx timeout [ 59.324325][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.61'. [ 59.334405][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 59.356183][ T6233] binder: BINDER_SET_CONTEXT_MGR already set [ 59.358375][ T6233] binder: 6223:6233 ioctl 4018620d 200000000380 returned -16 [ 59.429034][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 59.736337][ T6246] SELinux: policydb version 223760602 does not match my version range 15-35 [ 59.739289][ T6246] SELinux: failed to load policy [ 59.815795][ T6252] capability: warning: `syz.0.69' uses 32-bit capabilities (legacy support in use) [ 59.981255][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 59.981266][ T40] audit: type=1400 audit(1765898051.766:254): avc: denied { connect } for pid=6259 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.029291][ T6267] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 60.085262][ T40] audit: type=1400 audit(1765898051.876:255): avc: denied { write } for pid=6266 comm="syz.3.74" name="dev_mcast" dev="proc" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.148421][ T40] audit: type=1400 audit(1765898051.936:256): avc: denied { watch_mount watch_reads } for pid=6273 comm="syz.1.76" path="/23" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.202075][ T40] audit: type=1400 audit(1765898051.986:257): avc: denied { create } for pid=6277 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.231203][ T6280] tipc: Enabling of bearer rejected, failed to enable media [ 60.235442][ T40] audit: type=1400 audit(1765898052.026:258): avc: denied { getopt } for pid=6277 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.235470][ T40] audit: type=1400 audit(1765898052.026:259): avc: denied { setopt } for pid=6277 comm="syz.1.77" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.255318][ T6278] dvmrp6: entered allmulticast mode [ 60.258262][ T40] audit: type=1400 audit(1765898052.046:260): avc: denied { create } for pid=6277 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.304558][ T40] audit: type=1400 audit(1765898052.046:261): avc: denied { setopt } for pid=6277 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.310820][ T40] audit: type=1400 audit(1765898052.046:262): avc: denied { write } for pid=6277 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.319044][ T40] audit: type=1400 audit(1765898052.096:263): avc: denied { create } for pid=6282 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.452644][ T6297] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 60.869963][ T6305] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 60.877205][ T6305] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 60.911676][ T6312] __nla_validate_parse: 5 callbacks suppressed [ 60.911686][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 61.029049][ T6319] GUP no longer grows the stack in syz.3.89 (6319): 200000007000-20000000a000 (200000004000) [ 61.037791][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT(full) [ 61.037830][ T6319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.037842][ T6319] Call Trace: [ 61.037850][ T6319] [ 61.037857][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 61.037887][ T6319] gup_vma_lookup+0x1d2/0x220 [ 61.037911][ T6319] __get_user_pages+0x241/0x3590 [ 61.037940][ T6319] ? __x64_sys_setsockopt+0xbd/0x160 [ 61.037966][ T6319] ? do_syscall_64+0xcd/0xf80 [ 61.037986][ T6319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.038004][ T6319] ? __pfx___get_user_pages+0x10/0x10 [ 61.038033][ T6319] __gup_longterm_locked+0x2dd/0x17e0 [ 61.038056][ T6319] ? __lock_acquire+0x410/0x2890 [ 61.038080][ T6319] ? __pfx___gup_longterm_locked+0x10/0x10 [ 61.038116][ T6319] pin_user_pages+0x13c/0x160 [ 61.038140][ T6319] ? __pfx_pin_user_pages+0x10/0x10 [ 61.038172][ T6319] xdp_umem_create+0x741/0x1270 [ 61.038197][ T6319] xsk_setsockopt+0x9cf/0xc00 [ 61.038224][ T6319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 61.038259][ T6319] ? selinux_socket_setsockopt+0x6a/0x80 [ 61.038280][ T6319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 61.038308][ T6319] do_sock_setsockopt+0xf3/0x1d0 [ 61.038329][ T6319] __sys_setsockopt+0x1a0/0x230 [ 61.038360][ T6319] __x64_sys_setsockopt+0xbd/0x160 [ 61.038386][ T6319] ? do_syscall_64+0x91/0xf80 [ 61.038406][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.038427][ T6319] do_syscall_64+0xcd/0xf80 [ 61.038448][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.038466][ T6319] RIP: 0033:0x7f960238f7c9 [ 61.038481][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.038498][ T6319] RSP: 002b:00007f960318d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.038515][ T6319] RAX: ffffffffffffffda RBX: 00007f96025e5fa0 RCX: 00007f960238f7c9 [ 61.038526][ T6319] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 61.038535][ T6319] RBP: 00007f9602413f91 R08: 0000000000000020 R09: 0000000000000000 [ 61.038545][ T6319] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 61.038554][ T6319] R13: 00007f96025e6038 R14: 00007f96025e5fa0 R15: 00007ffc13d250c8 [ 61.038578][ T6319] [ 61.171096][ T6334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.200415][ T5939] Bluetooth: hci1: command tx timeout [ 61.202216][ T5934] Bluetooth: hci2: command tx timeout [ 61.251104][ T6332] infiniband syz1: set active [ 61.253475][ T6332] infiniband syz1: added syz_tun [ 61.257328][ T6332] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 61.259064][ T6332] infiniband syz1: Couldn't open port 1 [ 61.285190][ T6332] RDS/IB: syz1: added [ 61.286667][ T6332] smc: adding ib device syz1 with port count 1 [ 61.288656][ T6332] smc: ib device syz1 port 1 has no pnetid [ 61.290653][ T5934] Bluetooth: hci3: command tx timeout [ 61.353314][ T5934] Bluetooth: hci0: command tx timeout [ 61.762505][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 61.852772][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 61.860435][ T6349] netlink: 'syz.1.99': attribute type 11 has an invalid length. [ 61.863009][ T6349] netlink: 'syz.1.99': attribute type 11 has an invalid length. [ 61.863364][ T827] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.865862][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 61.877657][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.877706][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 61.880889][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.883903][ T6349] netlink: 'syz.1.99': attribute type 11 has an invalid length. [ 61.890061][ T6349] netlink: 'syz.1.99': attribute type 11 has an invalid length. [ 61.890086][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.892484][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 61.900550][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.018900][ T827] usb 8-1: Using ep0 maxpacket: 16 [ 62.080913][ T827] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 62.083897][ T827] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.086857][ T827] usb 8-1: Product: syz [ 62.088414][ T827] usb 8-1: Manufacturer: syz [ 62.090135][ T827] usb 8-1: SerialNumber: syz [ 62.094992][ T827] usb 8-1: config 0 descriptor?? [ 62.244488][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 62.247848][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.250269][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.253663][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.255969][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.305867][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.309253][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.314095][ T61] usb 8-1: USB disconnect, device number 3 [ 62.431716][ T6323] Set syz1 is full, maxelem 65536 reached [ 62.497792][ T6361] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 62.504369][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.507836][ T6361] bridge_slave_1: left allmulticast mode [ 62.509646][ T6361] bridge_slave_1: left promiscuous mode [ 62.511559][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.516694][ T6360] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 62.520290][ T6360] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 62.524148][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 62.525416][ T6361] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 62.533794][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 62.617596][ T6366] capability: warning: `syz.0.106' uses deprecated v2 capabilities in a way that may be insecure [ 62.667912][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 62.728959][ T6375] syzkaller0: entered promiscuous mode [ 62.730727][ T6375] syzkaller0: entered allmulticast mode [ 62.735841][ T6377] netlink: 'syz.1.110': attribute type 83 has an invalid length. [ 62.785675][ T6379] Illegal XDP return value 4294967274 on prog (id 11) dev syz_tun, expect packet loss! [ 62.802586][ T6379] QAT: failed to copy from user cfg_data. [ 62.871929][ T6381] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 62.873317][ T827] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.019730][ T6402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6402 comm=syz.1.120 [ 63.035045][ T827] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.038496][ T827] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.041566][ T827] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.047790][ T827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.062056][ T6366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.067448][ T827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.098222][ T6410] 9p: Bad value for 'rfdno' [ 63.132966][ T6410] 9pnet_fd: Insufficient options for proto=fd [ 63.306180][ T61] usb 5-1: USB disconnect, device number 3 [ 63.335712][ T6432] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 63.408133][ T6432] input: syz1 as /devices/virtual/input/input6 [ 63.420098][ T6443] IPVS: length: 24 != 219046824984 [ 63.458874][ T6446] netlink: 'syz.3.134': attribute type 21 has an invalid length. [ 63.520885][ T6451] usb usb8: usbfs: process 6451 (syz.2.133) did not claim interface 0 before use [ 63.594333][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.598501][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.601358][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.607078][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.618899][ T6464] vlan2: entered promiscuous mode [ 63.620630][ T6464] bridge0: entered promiscuous mode [ 63.682875][ T6469] openvswitch: netlink: Flow key attribute not present in set flow. [ 63.691678][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=6469 comm=syz.1.141 [ 64.279075][ T6505] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 64.285561][ T6505] team0: Device gtp0 is up. Set it down before adding it as a team port [ 64.451837][ T6510] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.461573][ T6510] openvswitch: netlink: Flow key attr not present in new flow. [ 64.621768][ T6519] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 64.766468][ T6519] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 64.793529][ T53] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.868339][ T6552] trusted_key: encrypted_key: key trusted:syz not found [ 64.912601][ T6552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.953436][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 64.956653][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 64.959195][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.962944][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.966979][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.970969][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.978290][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 64.980673][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.993276][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.997103][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.000563][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.016207][ T53] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 65.019058][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.022808][ T53] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.026742][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.030499][ T53] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.037440][ T53] usb 7-1: string descriptor 0 read error: -22 [ 65.039478][ T53] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.048822][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.058114][ T6571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.070569][ T53] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.101099][ T6571] vlan3: entered promiscuous mode [ 65.102882][ T6571] bond1: entered promiscuous mode [ 65.112557][ T6572] gretap1: entered promiscuous mode [ 65.118419][ T6572] bond1: (slave gretap1): making interface the new active one [ 65.121658][ T6572] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 65.136071][ T6583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=6583 comm=syz.1.170 [ 65.137292][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.254908][ T6595] warning: `syz.3.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.318044][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.323406][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.327924][ T61] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 65.332446][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.338094][ T61] usb 5-1: config 0 descriptor?? [ 65.394877][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.480415][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 65.480426][ T40] audit: type=1400 audit(1765898057.266:340): avc: denied { bind } for pid=6609 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.488644][ T40] audit: type=1400 audit(1765898057.266:341): avc: denied { name_bind } for pid=6609 comm="syz.3.175" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.495671][ T40] audit: type=1400 audit(1765898057.266:342): avc: denied { node_bind } for pid=6609 comm="syz.3.175" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 65.502255][ T40] audit: type=1400 audit(1765898057.276:343): avc: denied { bind } for pid=6609 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.533390][ T53] usb 6-1: device descriptor read/64, error -71 [ 65.542977][ T40] audit: type=1400 audit(1765898057.326:344): avc: denied { create } for pid=6553 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.554764][ T40] audit: type=1400 audit(1765898057.346:345): avc: denied { create } for pid=6614 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.560935][ T40] audit: type=1400 audit(1765898057.346:346): avc: denied { connect } for pid=6614 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.567726][ T40] audit: type=1400 audit(1765898057.346:347): avc: denied { write } for pid=6614 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.575807][ T40] audit: type=1400 audit(1765898057.346:348): avc: denied { connect } for pid=6614 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.585157][ T40] audit: type=1400 audit(1765898057.356:349): avc: denied { ioctl } for pid=6614 comm="syz.3.177" path="socket:[13422]" dev="sockfs" ino=13422 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.626989][ T6619] comedi comedi4: bad chanlist[0]=0x000005e7 chan=1511 range length=2 [ 65.711961][ T6621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.793424][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.798987][ T61] usb 5-1: string descriptor 0 read error: -71 [ 65.805463][ T61] usbhid 5-1:0.0: can't add hid device: -71 [ 65.807510][ T61] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.811709][ T61] usb 5-1: USB disconnect, device number 4 [ 65.933911][ T53] usb 6-1: device descriptor read/64, error -71 [ 66.054030][ T53] usb usb6-port1: attempt power cycle [ 66.392464][ T6634] dlm: non-version read from control device 0 [ 66.403340][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.433916][ T53] usb 6-1: device descriptor read/8, error -71 [ 66.546438][ T6639] __nla_validate_parse: 20 callbacks suppressed [ 66.546449][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.185'. [ 66.684130][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.704035][ T53] usb 6-1: device descriptor read/8, error -71 [ 66.815684][ T53] usb usb6-port1: unable to enumerate USB device [ 66.859089][ T6652] bridge2: entered promiscuous mode [ 66.860818][ T6652] bridge2: entered allmulticast mode [ 67.417771][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 67.423958][ T6661] nbd: must specify at least one socket [ 67.436105][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 67.441271][ T6661] nbd: must specify at least one socket [ 67.563426][ T6019] usb 7-1: USB disconnect, device number 2 [ 67.645914][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 67.845002][ T6024] udevd[6024]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 68.013303][ T53] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 68.175541][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.179282][ T53] usb 7-1: not running at top speed; connect to a high speed hub [ 68.184369][ T53] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 68.194674][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.198347][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.201557][ T53] usb 7-1: Product: syz [ 68.203173][ T53] usb 7-1: Manufacturer: syz [ 68.207866][ T53] usb 7-1: SerialNumber: syz [ 68.408437][ T6682] Bluetooth: MGMT ver 1.23 [ 68.432082][ T53] usb 7-1: USB disconnect, device number 3 [ 68.432555][ T6682] team0 (unregistering): Port device team_slave_0 removed [ 68.445782][ T6682] team0 (unregistering): Port device team_slave_1 removed [ 68.595601][ T6692] XFS (nullb0): Invalid superblock magic number [ 68.813324][ T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.943353][ T53] usb 8-1: device descriptor read/64, error -71 [ 68.944454][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 69.019695][ T6708] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 69.021483][ T6708] dvmrp1: persist enabled [ 69.023026][ T6708] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 69.025287][ T6708] dvmrp1: persist disabled [ 69.176199][ T6719] bridge_slave_0: left allmulticast mode [ 69.178137][ T6719] bridge_slave_0: left promiscuous mode [ 69.180067][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.185430][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.313312][ T53] usb 8-1: device descriptor read/64, error -71 [ 69.423851][ T53] usb usb8-port1: attempt power cycle [ 69.773297][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 69.798866][ T6746] Device name not specified. [ 69.798866][ T6746] [ 69.802617][ T6746] validate_nla: 5 callbacks suppressed [ 69.802629][ T6746] netlink: 'syz.0.216': attribute type 2 has an invalid length. [ 69.808093][ T53] usb 8-1: device descriptor read/8, error -71 [ 69.814550][ T6747] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.841648][ T6750] fuse: Bad value for 'user_id' [ 69.844306][ T6750] fuse: Bad value for 'user_id' [ 69.998339][ T6758] trusted_key: syz.0.219 sent an empty control message without MSG_MORE. [ 70.053326][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 70.073951][ T53] usb 8-1: device descriptor read/8, error -71 [ 70.183891][ T53] usb usb8-port1: unable to enumerate USB device [ 70.473765][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.474750][ T5934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.643333][ T6019] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.793351][ T6019] usb 7-1: Using ep0 maxpacket: 8 [ 70.798829][ T6019] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 70.801808][ T6019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.804685][ T6019] usb 7-1: Product: syz [ 70.806313][ T6019] usb 7-1: Manufacturer: syz [ 70.807877][ T6019] usb 7-1: SerialNumber: syz [ 70.810923][ T6019] usb 7-1: config 0 descriptor?? [ 70.970682][ T40] kauditd_printk_skb: 68047 callbacks suppressed [ 70.970693][ T40] audit: type=1326 audit(1765898062.756:68397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.0.221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cd38f7c9 code=0x7fc00000 [ 71.015108][ T6019] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.017991][ T5934] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 71.050156][ T40] audit: type=1400 audit(1765898062.836:68398): avc: denied { create } for pid=6780 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.058791][ T40] audit: type=1400 audit(1765898062.836:68399): avc: denied { bind } for pid=6780 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.064798][ T40] audit: type=1400 audit(1765898062.836:68400): avc: denied { listen } for pid=6780 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.070481][ T40] audit: type=1400 audit(1765898062.836:68401): avc: denied { connect } for pid=6780 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.078200][ T6781] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 71.092177][ T6781] bridge_slave_0: left allmulticast mode [ 71.094281][ T6781] bridge_slave_0: left promiscuous mode [ 71.096222][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.101910][ T6781] bridge_slave_1: left allmulticast mode [ 71.104616][ T6781] bridge_slave_1: left promiscuous mode [ 71.107136][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.119124][ T6781] bond0: (slave bond_slave_0): Releasing backup interface [ 71.125110][ T6781] bond0: (slave bond_slave_1): Releasing backup interface [ 71.133943][ T6781] team0: Port device team_slave_0 removed [ 71.138410][ T6782] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 71.140530][ T6781] team0: Port device team_slave_1 removed [ 71.145346][ T6781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.155929][ T6782] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 71.160280][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.164778][ T6782] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.172708][ T40] audit: type=1400 audit(1765898062.956:68402): avc: denied { accept } for pid=6780 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.179190][ T40] audit: type=1400 audit(1765898062.956:68403): avc: denied { write } for pid=6780 comm="syz.0.226" path="socket:[14406]" dev="sockfs" ino=14406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.215281][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 71.224130][ T6019] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 71.230473][ T6019] usb 7-1: USB disconnect, device number 4 [ 71.327681][ T6792] 9pnet_fd: Insufficient options for proto=fd [ 71.438536][ T40] audit: type=1400 audit(1765898063.226:68404): avc: denied { read write } for pid=6795 comm="syz.0.230" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.448503][ T40] audit: type=1400 audit(1765898063.226:68405): avc: denied { open } for pid=6795 comm="syz.0.230" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.456838][ T40] audit: type=1400 audit(1765898063.226:68406): avc: denied { ioctl } for pid=6795 comm="syz.0.230" path="socket:[13137]" dev="sockfs" ino=13137 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.578058][ T6802] tipc: Started in network mode [ 71.580161][ T6802] tipc: Node identity 3a4ac7529c72, cluster identity 4711 [ 71.584490][ T6802] tipc: Enabled bearer , priority 0 [ 71.595495][ T6805] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 71.641579][ T6801] tipc: Resetting bearer [ 72.397389][ T6801] tipc: Disabling bearer [ 72.484872][ T6827] fuse: Bad value for 'fd' [ 72.657903][ T6844] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.245'. [ 72.782540][ T6861] comedi comedi3: c6xdigio: I/O port conflict (0x7f,3) [ 72.792994][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 72.797107][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 72.802962][ T6854] syzkaller0: entered promiscuous mode [ 72.805676][ T6854] syzkaller0: entered allmulticast mode [ 72.840541][ T6865] loop2: detected capacity change from 0 to 7 [ 72.846331][ T6024] Dev loop2: unable to read RDB block 7 [ 72.848472][ T6024] loop2: unable to read partition table [ 72.850773][ T6024] loop2: partition table beyond EOD, truncated [ 72.857877][ T6865] Dev loop2: unable to read RDB block 7 [ 72.859767][ T6865] loop2: unable to read partition table [ 72.861682][ T6865] loop2: partition table beyond EOD, truncated [ 72.863948][ T6865] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.990327][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 72.995834][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 73.045058][ T6879] syz.0.257 (6879): drop_caches: 0 [ 73.083389][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 73.175463][ T6898] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.233410][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 73.239636][ T6911] hfs: can't find a HFS filesystem on dev sr0 [ 73.249058][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.252514][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.255440][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.263490][ T34] usb 8-1: config 0 descriptor?? [ 73.287866][ T6901] kvm: pic: non byte write [ 73.289535][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 73.463630][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6924 comm=syz.1.268 [ 73.470293][ T6924] netlink: 116 bytes leftover after parsing attributes in process `syz.1.268'. [ 73.474993][ T34] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 73.611602][ T6946] nbd: must specify a size in bytes for the device [ 73.614989][ T6943] nbd: must specify a size in bytes for the device [ 73.723615][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 73.764365][ T827] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.774053][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.800577][ T6956] lo: entered allmulticast mode [ 73.848520][ T6955] lo: left allmulticast mode [ 73.903384][ T827] usb 7-1: device descriptor read/64, error -71 [ 73.943083][ T9] usb 8-1: USB disconnect, device number 8 [ 74.063358][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 74.142185][ T6969] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 74.143386][ T827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.283349][ T827] usb 7-1: device descriptor read/64, error -71 [ 74.393584][ T827] usb usb7-port1: attempt power cycle [ 74.642185][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.290'. [ 74.763344][ T827] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.793880][ T827] usb 7-1: device descriptor read/8, error -71 [ 74.959104][ T7011] fuse: Bad value for 'fd' [ 75.012944][ T7012] fuse: Bad value for 'fd' [ 75.033404][ T827] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 75.053993][ T827] usb 7-1: device descriptor read/8, error -71 [ 75.163973][ T827] usb usb7-port1: unable to enumerate USB device [ 75.206084][ T6976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.208980][ T6976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.216453][ T6976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.220273][ T6976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.222604][ T6976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.226722][ T6976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.230485][ T6976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.232583][ T6976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.236728][ T6976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.242297][ T6976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.244752][ T6976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.248721][ T6976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.294257][ T7015] SQUASHFS error: Failed to read block 0x0: -5 [ 75.303550][ T7015] unable to read squashfs_super_block [ 75.512781][ T7039] /dev/sg0: Can't lookup blockdev [ 75.523962][ T5934] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 75.526928][ T7041] sp0: Synchronizing with TNC [ 75.543934][ T7040] [U] è [ 75.575239][ T5934] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 75.579325][ T7047] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 75.582270][ T7047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.604515][ T7049] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 75.607478][ T7049] overlayfs: missing 'lowerdir' [ 75.732979][ T7062] kAFS: No cell specified [ 75.737731][ T7060] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.740147][ T7060] overlayfs: failed to set xattr on upper [ 75.741971][ T7060] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.744732][ T7060] overlayfs: ...falling back to index=off. [ 75.746740][ T7060] overlayfs: ...falling back to uuid=null. [ 75.748767][ T7060] overlayfs: ...falling back to xino=off. [ 75.750738][ T7060] overlayfs: conflicting lowerdir path [ 75.810645][ T7069] overlayfs: conflicting lowerdir path [ 76.057290][ T7083] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 76.193337][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.246549][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.248833][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.375423][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.378975][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 76.383165][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 76.387740][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 76.392310][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 76.398855][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 76.401748][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 76.406891][ T34] usb 5-1: Product: syz [ 76.408479][ T34] usb 5-1: Manufacturer: syz [ 76.415515][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 76.417703][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 76.421458][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 76.425191][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 76.483383][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.616061][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 76.616072][ T40] audit: type=1400 audit(1765898068.406:68443): avc: denied { read write } for pid=7076 comm="syz.0.315" name="cdc-wdm0" dev="devtmpfs" ino=2949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 76.628273][ T40] audit: type=1400 audit(1765898068.406:68444): avc: denied { open } for pid=7076 comm="syz.0.315" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 76.636727][ T40] audit: type=1400 audit(1765898068.406:68445): avc: denied { block_suspend } for pid=7076 comm="syz.0.315" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.643541][ T7107] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.644155][ T40] audit: type=1400 audit(1765898068.426:68446): avc: denied { mount } for pid=7106 comm="syz.2.324" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.653930][ T40] audit: type=1400 audit(1765898068.436:68447): avc: denied { write } for pid=7106 comm="syz.2.324" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.661946][ T40] audit: type=1400 audit(1765898068.446:68448): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.848473][ T7116] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 76.903847][ T7119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25365 sclass=netlink_route_socket pid=7119 comm=syz.2.327 [ 77.185651][ T7139] KVM: debugfs: duplicate directory 7139-5 [ 77.273776][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.273789][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.346595][ T7146] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.428223][ T7149] afs: Unknown parameter 'dy‡þ' [ 77.458571][ T40] audit: type=1400 audit(1765898069.246:68449): avc: denied { mount } for pid=7150 comm="syz.1.337" name="/" dev="pstore" ino=6347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 77.516072][ T40] audit: type=1400 audit(1765898069.306:68451): avc: denied { create } for pid=7152 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.522222][ T40] audit: type=1400 audit(1765898069.296:68450): avc: denied { setattr } for pid=7154 comm="syz.2.339" path="socket:[16880]" dev="sockfs" ino=16880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.533866][ T40] audit: type=1400 audit(1765898069.326:68452): avc: denied { read } for pid=7152 comm="syz.1.338" path="socket:[16101]" dev="sockfs" ino=16101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 77.823349][ T827] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 77.887048][ T7164] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 77.895257][ T7164] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 77.985310][ T827] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x6E, changing to 0xE [ 77.989045][ T827] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xE has invalid maxpacket 8201, setting to 64 [ 77.992491][ T827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.996349][ T827] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.999152][ T827] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.001876][ T827] usb 7-1: Product: syz [ 78.003697][ T827] usb 7-1: Manufacturer: syz [ 78.005256][ T827] usb 7-1: SerialNumber: syz [ 78.008736][ T827] usb 7-1: config 0 descriptor?? [ 78.014284][ T827] usb 7-1: selecting invalid altsetting 0 [ 78.215339][ T7161] program syz.2.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.219523][ T7160] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 78.224220][ T61] usb 7-1: USB disconnect, device number 9 [ 78.553372][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.910127][ T827] usb 5-1: USB disconnect, device number 5 [ 78.955399][ T7187] x_tables: duplicate underflow at hook 2 [ 78.997269][ T7197] __nla_validate_parse: 8 callbacks suppressed [ 78.997280][ T7197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'. [ 79.353996][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.354111][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.387009][ T7237] overlay: ./file1 is not a directory [ 79.557115][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 79.558531][ T7247] binder: 7246:7247 ioctl c018620c 200000000140 returned -22 [ 79.560542][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 79.569693][ T7245] netlink: 9 bytes leftover after parsing attributes in process `syz.3.364'. [ 79.572846][ T7245] 0·: renamed from hsr0 (while UP) [ 79.576959][ T7245] 0·: entered allmulticast mode [ 79.578507][ T7245] hsr_slave_0: entered allmulticast mode [ 79.580285][ T7245] hsr_slave_1: entered allmulticast mode [ 79.582300][ T7245] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 79.589606][ T7245] netlink: 536 bytes leftover after parsing attributes in process `syz.3.364'. [ 79.592492][ T7245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 79.737724][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 79.740526][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 80.124721][ T7261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.239572][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'. [ 80.328873][ T7292] usb usb8: usbfs: process 7292 (syz.0.378) did not claim interface 0 before use [ 80.580174][ T7319] nfs4: Unknown parameter 'pvfs2' [ 80.582401][ T7317] macvtap1: entered promiscuous mode [ 80.585641][ T7317] macvtap1: entered allmulticast mode [ 80.587440][ T7317] team0: Device macvtap1 is already an upper device of the team interface [ 80.589142][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.383'. [ 80.643378][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.926887][ T7353] openvswitch: netlink: Flow actions attr not present in new flow. [ 81.024056][ T7363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.026659][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 81.029063][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 81.031389][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 81.034733][ T7363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.178797][ T7365] mmap: syz.2.401 (7365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.220322][ T7376] input: syz0 as /devices/virtual/input/input11 [ 81.285985][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 81.301643][ T7382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.443400][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 81.443494][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.445385][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.447351][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.452607][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 81.464172][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.484320][ T34] usb 8-1: config 0 descriptor?? [ 81.516355][ T5934] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 81.725983][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 81.725994][ T40] audit: type=1400 audit(1765898073.516:68482): avc: denied { write } for pid=7424 comm="syz.2.417" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 81.898473][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 81.930709][ T40] audit: type=1400 audit(1765898073.716:68483): avc: denied { read } for pid=7441 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.941850][ T5934] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 81.983694][ T40] audit: type=1400 audit(1765898073.766:68484): avc: denied { shutdown } for pid=7441 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.129386][ T6017] usb 8-1: USB disconnect, device number 9 [ 82.201059][ T7468] overlayfs: statfs failed on './file0' [ 82.223643][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.353554][ T61] usb 6-1: device descriptor read/64, error -71 [ 82.356328][ T7478] binder: 7477:7478 ioctl 4002f516 200000000100 returned -22 [ 82.409911][ T7482] binder: 7477:7482 ioctl c0306201 200000000640 returned -22 [ 82.487050][ T7485] binder: 7483:7485 ioctl c0306201 200000000480 returned -14 [ 82.593369][ T61] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 82.659752][ T7487] 9pnet_fd: p9_fd_create_tcp (7487): problem binding to privport [ 82.698161][ T40] audit: type=1400 audit(1765898074.486:68485): avc: denied { bind } for pid=7486 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.723381][ T61] usb 6-1: device descriptor read/64, error -71 [ 82.833523][ T61] usb usb6-port1: attempt power cycle [ 83.080081][ T40] audit: type=1400 audit(1765898074.866:68486): avc: denied { lock } for pid=7511 comm="syz.3.440" path="socket:[17231]" dev="sockfs" ino=17231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.089295][ T40] audit: type=1800 audit(1765898074.876:68487): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.440" name="file0" dev="tmpfs" ino=3 res=0 errno=0 [ 83.096208][ T40] audit: type=1804 audit(1765898074.876:68488): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.440" name="/newroot/98/file1/file0" dev="tmpfs" ino=3 res=1 errno=0 [ 83.173513][ T61] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.193738][ T61] usb 6-1: device descriptor read/8, error -71 [ 83.349056][ T7526] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 52 [ 83.353913][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.354008][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.356233][ T53] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 83.402945][ T7536] program syz.2.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.406471][ T7536] ata1.00: invalid service action 31 [ 83.433377][ T61] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 83.453765][ T7536] batadv_slave_1: entered promiscuous mode [ 83.454896][ T61] usb 6-1: device descriptor read/8, error -71 [ 83.457840][ T7536] ntfs3(nullb0): Primary boot signature is not NTFS. [ 83.461213][ T7536] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 83.467248][ T7535] batadv_slave_1: left promiscuous mode [ 83.522765][ T7548] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 83.523433][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.534628][ T7546] bond0: (slave wg0): Error: Device can not be enslaved while up [ 83.564225][ T40] audit: type=1400 audit(1765898075.356:68489): avc: denied { wake_alarm } for pid=7551 comm="syz.3.451" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.565223][ T61] usb usb6-port1: unable to enumerate USB device [ 83.578871][ T7555] 9pnet_virtio: no channels available for device syz [ 83.853384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.928879][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.080999][ T7609] xt_hashlimit: max too large, truncated to 1048576 [ 84.263368][ T40] audit: type=1400 audit(1765898076.046:68490): avc: denied { create } for pid=7608 comm="syz.3.460" name="#15" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.269963][ T40] audit: type=1400 audit(1765898076.056:68491): avc: denied { link } for pid=7608 comm="syz.3.460" name="#15" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.499012][ T7638] __nla_validate_parse: 8 callbacks suppressed [ 84.499022][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 84.529407][ T7640] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 84.561325][ T7640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.576899][ T7640] bond1: (slave erspan1): making interface the new active one [ 84.580066][ T7640] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 84.955821][ T5934] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 84.956170][ T5934] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 85.107337][ T7657] binder: 7655:7657 ioctl c00c6211 200000000080 returned -14 [ 85.221946][ T7662] syz.3.472 (7662): /proc/7661/oom_adj is deprecated, please use /proc/7661/oom_score_adj instead. [ 85.223087][ T7662] loop6: detected capacity change from 0 to 524279808 [ 85.273933][ T7662] loop6: detected capacity change from 524279808 to 1 [ 85.285517][ T6024] Dev loop6: unable to read RDB block 1 [ 85.287506][ T6024] loop6: unable to read partition table [ 85.289470][ T6024] loop6: partition table beyond EOD, truncated [ 85.293855][ T7662] Dev loop6: unable to read RDB block 1 [ 85.296431][ T7662] loop6: unable to read partition table [ 85.299122][ T7662] loop6: partition table beyond EOD, truncated [ 85.301812][ T7662] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 85.309096][ T5345] Dev loop6: unable to read RDB block 1 [ 85.311377][ T5345] loop6: unable to read partition table [ 85.314258][ T5345] loop6: partition table beyond EOD, truncated [ 85.433410][ T53] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 85.433449][ T53] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 85.433546][ C1] ------------[ cut here ]------------ [ 85.433619][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 85.433659][ C1] WARNING: kernel/workqueue.c:2251 at __queue_work+0xc9d/0x10e0, CPU#1: ksoftirqd/1/28 [ 85.433693][ C1] Modules linked in: [ 85.433731][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.433756][ C1] Tainted: [L]=SOFTLOCKUP [ 85.433763][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.433789][ C1] RIP: 0010:__queue_work+0xca1/0x10e0 [ 85.433813][ C1] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 63 ee 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 f0 31 3a 00 90 0f 0b 90 e9 15 f6 [ 85.433828][ C1] RSP: 0018:ffffc900006779a8 EFLAGS: 00010046 [ 85.433844][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100746d951 [ 85.433856][ C1] RDX: ffff8880126c7178 RSI: ffffffff8a6b6aa0 RDI: ffffffff908ba0e0 [ 85.433867][ C1] RBP: ffff88803a36ca70 R08: 0000000000000005 R09: 0000000000000000 [ 85.433878][ C1] R10: 0000000000000100 R11: ffff88801e2e54b0 R12: 1ffff920000cef47 [ 85.433890][ C1] R13: ffffffff8184c3c0 R14: 0000000000000100 R15: ffff8880126c7000 [ 85.433902][ C1] FS: 0000000000000000(0000) GS:ffff8880d69f6000(0000) knlGS:0000000000000000 [ 85.433935][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.433949][ C1] CR2: 00007f960316bf98 CR3: 0000000056e58000 CR4: 0000000000352ef0 [ 85.433961][ C1] Call Trace: [ 85.433968][ C1] [ 85.433983][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.434008][ C1] call_timer_fn+0x19a/0x5a0 [ 85.434031][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 85.434056][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.434079][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.434102][ C1] ? __run_timers+0x559/0xae0 [ 85.434124][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.434148][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.434171][ C1] __run_timers+0x569/0xae0 [ 85.434199][ C1] ? __pfx___run_timers+0x10/0x10 [ 85.434229][ C1] ? __schedule+0x10b9/0x6150 [ 85.434248][ C1] ? __schedule+0x114c/0x6150 [ 85.434269][ C1] run_timer_base+0x114/0x190 [ 85.434290][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 85.434309][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.434328][ C1] run_timer_softirq+0x1a/0x40 [ 85.434350][ C1] handle_softirqs+0x219/0x950 [ 85.434379][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.434408][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.434432][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 85.434451][ C1] run_ksoftirqd+0x3a/0x60 [ 85.434475][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 85.434498][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.434518][ C1] kthread+0x3c5/0x780 [ 85.434540][ C1] ? __pfx_kthread+0x10/0x10 [ 85.434564][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.434587][ C1] ? __pfx_kthread+0x10/0x10 [ 85.434610][ C1] ret_from_fork+0x983/0xb10 [ 85.434631][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 85.434654][ C1] ? __switch_to+0x7af/0x10d0 [ 85.434677][ C1] ? __pfx_kthread+0x10/0x10 [ 85.434699][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.434735][ C1] [ 85.434744][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.434758][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.434780][ C1] Tainted: [L]=SOFTLOCKUP [ 85.434787][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.434797][ C1] Call Trace: [ 85.434805][ C1] [ 85.434812][ C1] dump_stack_lvl+0x3d/0x1f0 [ 85.434833][ C1] vpanic+0x640/0x6f0 [ 85.434854][ C1] ? __queue_work+0xc9d/0x10e0 [ 85.434876][ C1] panic+0xca/0xd0 [ 85.434895][ C1] ? __pfx_panic+0x10/0x10 [ 85.434923][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 85.434944][ C1] check_panic_on_warn+0xab/0xb0 [ 85.434966][ C1] __warn+0x108/0x3c0 [ 85.434989][ C1] __report_bug+0x2a0/0x520 [ 85.435006][ C1] ? __queue_work+0xc9d/0x10e0 [ 85.435029][ C1] ? __pfx___report_bug+0x10/0x10 [ 85.435049][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 85.435073][ C1] ? try_to_wake_up+0xa5d/0x1860 [ 85.435096][ C1] ? look_up_lock_class+0x59/0x130 [ 85.435118][ C1] report_bug_entry+0xe1/0x290 [ 85.435132][ C1] ? __queue_work+0xca1/0x10e0 [ 85.435145][ C1] handle_bug+0x18a/0x260 [ 85.435158][ C1] exc_invalid_op+0x17/0x50 [ 85.435172][ C1] asm_exc_invalid_op+0x1a/0x20 [ 85.435182][ C1] RIP: 0010:__queue_work+0xca1/0x10e0 [ 85.435194][ C1] Code: 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 0c 04 00 00 48 8d 3d 63 ee 06 0f 48 8b 75 18 <67> 48 0f b9 3a e9 90 f7 ff ff e8 f0 31 3a 00 90 0f 0b 90 e9 15 f6 [ 85.435203][ C1] RSP: 0018:ffffc900006779a8 EFLAGS: 00010046 [ 85.435211][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100746d951 [ 85.435217][ C1] RDX: ffff8880126c7178 RSI: ffffffff8a6b6aa0 RDI: ffffffff908ba0e0 [ 85.435223][ C1] RBP: ffff88803a36ca70 R08: 0000000000000005 R09: 0000000000000000 [ 85.435228][ C1] R10: 0000000000000100 R11: ffff88801e2e54b0 R12: 1ffff920000cef47 [ 85.435234][ C1] R13: ffffffff8184c3c0 R14: 0000000000000100 R15: ffff8880126c7000 [ 85.435241][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435257][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 85.435268][ C1] ? __queue_work+0xc70/0x10e0 [ 85.435283][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435296][ C1] call_timer_fn+0x19a/0x5a0 [ 85.435308][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 85.435321][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435333][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435346][ C1] ? __run_timers+0x559/0xae0 [ 85.435357][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435370][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 85.435384][ C1] __run_timers+0x569/0xae0 [ 85.435399][ C1] ? __pfx___run_timers+0x10/0x10 [ 85.435415][ C1] ? __schedule+0x10b9/0x6150 [ 85.435425][ C1] ? __schedule+0x114c/0x6150 [ 85.435438][ C1] run_timer_base+0x114/0x190 [ 85.435449][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 85.435461][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.435471][ C1] run_timer_softirq+0x1a/0x40 [ 85.435482][ C1] handle_softirqs+0x219/0x950 [ 85.435499][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.435515][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 85.435528][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 85.435537][ C1] run_ksoftirqd+0x3a/0x60 [ 85.435550][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 85.435562][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 85.435577][ C1] kthread+0x3c5/0x780 [ 85.435588][ C1] ? __pfx_kthread+0x10/0x10 [ 85.435600][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.435609][ C1] ? __pfx_kthread+0x10/0x10 [ 85.435620][ C1] ret_from_fork+0x983/0xb10 [ 85.435632][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 85.435643][ C1] ? __switch_to+0x7af/0x10d0 [ 85.435655][ C1] ? __pfx_kthread+0x10/0x10 [ 85.435667][ C1] ret_from_fork_asm+0x1a/0x30 [ 85.435687][ C1] [ 85.436379][ C1] Kernel Offset: disabled