last executing test programs: 20m8.041111508s ago: executing program 3 (id=136): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x0, 0xc, 0xfff, 0xc}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 20m4.235801446s ago: executing program 3 (id=139): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6048800) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) userfaultfd(0x801) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000) 19m56.606481654s ago: executing program 3 (id=148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r6, 0x80047437, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x10000000, 0x87, 0x101, 0x7, 0x7, 0xc30, 0x1, 0x6b0}, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f00000001c0)={0x97, 0xc9a, 0xfffff001, 0x6, 0x1c, "5cadf0fa59eb05000000000000005232e5d962"}) unshare(0x22020600) r8 = socket(0x22, 0x2, 0x6) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x41) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 19m54.668830676s ago: executing program 3 (id=154): socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffa1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdir(0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./file2\x00') 19m51.486885243s ago: executing program 3 (id=170): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x3, 0x5, 0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5d0, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x40002000, 0x0) 19m50.366830794s ago: executing program 3 (id=164): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x2}, 0xe) clock_getres(0x3, &(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x123280, 0x108) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000280)={0x5c73, 0x71, @name="bd4ab8a3001f4502051eeac28f1cd65f8deca203fcdeddfa347642f4edabcef8"}) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 19m35.10911113s ago: executing program 32 (id=164): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x2}, 0xe) clock_getres(0x3, &(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x123280, 0x108) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000280)={0x5c73, 0x71, @name="bd4ab8a3001f4502051eeac28f1cd65f8deca203fcdeddfa347642f4edabcef8"}) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m45.56147895s ago: executing program 5 (id=2707): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures}) 2m45.076995933s ago: executing program 5 (id=2712): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000000000000300000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a31000000000500010007000002000000185798362dec4de5d4764c61ad3f15a4e1280d319b4f22ea187ddf32b86cf64d67dc91ec1840977b9656d863c9c5b650c71bf0f225776ca0ee4e559e094518b27b6fcb7ffa52487742261bfca4cff3f35b364ae886edb6ba24f0660de3f21de7d7e886"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) unshare(0x28040600) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r7 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 2m42.482593051s ago: executing program 5 (id=2732): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r2, &(0x7f0000000100)='5\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r3, 0xffffd000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x34) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000114000/0x3000)=nil, &(0x7f00001e2000/0x1000)=nil, 0x3000, 0x1}) 2m42.429768104s ago: executing program 1 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060500000000002000000000000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 2m42.354392957s ago: executing program 1 (id=2734): socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r3, 0x109, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d", 0x3e, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) socket$inet_sctp(0x2, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 2m41.143177664s ago: executing program 5 (id=2741): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbb00019078ac1e0004ac1414aa030490781200183f2500000000000000000100007f0000017f000001"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf253b000000", @ANYRES32=r7, @ANYBLOB="0e0087ed03028700"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x2c048010) ftruncate(0xffffffffffffffff, 0xe8) 2m40.095009524s ago: executing program 5 (id=2746): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)='\\', 0x1) 2m39.643937245s ago: executing program 5 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m39.378072154s ago: executing program 1 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x8000) 2m39.288219735s ago: executing program 1 (id=2751): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, 0x0, 0x0) 2m39.268437755s ago: executing program 1 (id=2752): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000000000000300000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a31000000000500010007000002000000185798362dec4de5d4764c61ad3f15a4e1280d319b4f22ea187ddf32b86cf64d67dc91ec1840977b9656d863c9c5b650c71bf0f225776ca0ee4e559e094518b27b6fcb7ffa52487742261bfca4cff3f35b364ae886edb6ba24f0660de3f21de7d7e886b5f7dd95bf41823adfd5634986ce4f9bd9a3281b658fb78ad51165d8817ea3722e68e629221ca829878bf40000000000000000f8994b8139451f196429027ba9ae83436aa8a11f834d9e867f84b6b3c71f7f79"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) unshare(0x28040600) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r7 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 2m36.616757465s ago: executing program 1 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m23.550541242s ago: executing program 33 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m20.130079599s ago: executing program 34 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002600090025bd7000fadbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m12.323121295s ago: executing program 4 (id=3290): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x20, 0x1401, 0x1, 0x70bf2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048800}, 0x20000080) 1m12.200074937s ago: executing program 4 (id=3292): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = socket$inet(0x2, 0x801, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000061401002b"], 0x50}, 0x1, 0x0, 0x0, 0x24008005}, 0x4008050) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0xa, 0x300) sendto$inet(r3, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 1m11.716978943s ago: executing program 4 (id=3294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m11.47474696s ago: executing program 4 (id=3297): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 1m10.84669808s ago: executing program 4 (id=3300): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x130a32c0, 0x1, @qpsk={0x10, 0x18}}) 1m10.321375673s ago: executing program 4 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 53.718830561s ago: executing program 35 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 7.517397563s ago: executing program 8 (id=3737): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="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", 0x1b1}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005271700180001801400020073797a5f74756e00000000000000400005000200fc000000050006"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 7.367501441s ago: executing program 8 (id=3739): open$dir(0x0, 0x440000, 0xf0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x8000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 6.279599193s ago: executing program 8 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80), 0x0, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 6.051775676s ago: executing program 6 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}}, 0x20}}, 0x0) 5.502911728s ago: executing program 7 (id=3745): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b", 0x8) 5.434553405s ago: executing program 6 (id=3746): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 5.232665459s ago: executing program 7 (id=3748): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000380)='\x01\x00\x00\x00ce\xec\x11(\x9f\xad\x0f~4\x1d\xbcs\x02t\xa5>\xf8\xfcT8\xad\x8e\xa9\xd9\x9e\x9a-\xe9-\x17\xbd\xfe\xec8\xf6\xdc\xdfg\x18\a\xf8V\x8cVC1\xbe\xef`,\x8c\xaf\xda', &(0x7f0000000300)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\b\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8dH\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xe49\xf7o$e&1\x02\x00\x00\x00\xab\xfcKs\x06,\xd2\xc5^]\xd9\x13*\xb4\xe9\xab\x91\x15cXP\x85W\x84{Z\x0f\x88\b\x9dVsU\xe2$^\x88\xa8\xd1rT\xbci%/\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) userfaultfd(0x1) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/hci\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x659f, 0x4) write$binfmt_script(r7, &(0x7f00000000c0), 0x28) recvmmsg(r7, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 5.232374678s ago: executing program 6 (id=3749): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140015"], 0x48}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r3, &(0x7f0000000100)='5\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r4, 0xffffd000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x34) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000114000/0x3000)=nil, &(0x7f00001e2000/0x1000)=nil, 0x3000, 0x1}) 4.251128353s ago: executing program 7 (id=3754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) 3.883925942s ago: executing program 8 (id=3757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f00000000c0)='/$%-\xb6\x8a\x00', 0x800, &(0x7f0000000100)={@align=0x2, {0x3, 0xe, 0x9, 0x8}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x7}, 0x6, &(0x7f0000000780)=[{0x2, 0x0, &(0x7f00000002c0)='O\xba@\x00', &(0x7f0000000300), 0x0, 0x2}, {0x2, 0x8000, &(0x7f0000000380)='.}', &(0x7f00000003c0)="ea9989bdefef52f44bd0df76b1492e30c705a979e5ee926f4ce59780182a161b95bbc01e7e9b54b839197a6fea3a81e65b37d62b641022351795aa100520f41d41991b3b5c847e266769ae43cc7dfb41e2e52d54ec9571f698b865f8a48711a9a6350490f412fb0cefd1b11c313eb857d805430be315aa3c71c153764ee3e0836feebaed2aa7ff93d21a534ce2", 0x8d, 0x22}, {0x3, 0x6, &(0x7f00000004c0)='(\x00', &(0x7f0000000500)="dda6c8b3d195bf4308ce56e5f4d3f75b9d111c7f54adc697dd9535beb5341fe8d68fd755f854755e0d9db1f77a204d46717cb0527d8c57bb9fe294bda92270a796d8681a1025fdf3a6bbc64532d1766ba1d71a68d5c51484b844350d4e295bbdc7cd77e0e6d193e0ef6727877a72ec8f8cb2209b46ee4c6cb34d3be4d734e60c5bb96ff614bd1202b3fafb530b8ddc6d7dc716cbba3098e625f148a9fb41d475932cc86409871feb2a90ff52915b2fbb5d9fc4e2b8b9c539408234daae1694d3b5820dc1327c1dbbfedb2638d084494860ae", 0xd2, 0x22}, {0x1, 0x9, &(0x7f0000000600)='\\/-\x00', &(0x7f0000000640)="57765e04e7f83d8e6e33bcd537f322de9f57164674a97ee1c9be9241c206c0c13be285e1df56e4f61c6fc67b16c608d0bc609f289ffa611a02474085b033c8cdcae21d86aaafe911124d2b185e5c9fbb9e1e7b15c12902594802dff8a06e", 0x5e, 0xb1befbe5a366acc3}, {0x2, 0x7, &(0x7f00000006c0)=',B\'\')&\\}\x92,@^\x00', 0x0}, {0x2, 0x9, &(0x7f0000000740)='\x00', &(0x7f0000000a80)="6cb77a98dc4e4b1e0e52eb95c12f6b0f68704a3a8328fc826525cff259b29447d21a70e2f8ef03e49d18e887c7066185b5f7580d8348cbf90f3aa6c3fa87c10abef46959113ec8578208fc31cce571cb09c985bd2e0daa9eaf0d04bfc3501be515909e7293fe27ced043e3f48fbc8955fecc828424d4a2a8ebfe778215b13169c263c5d2b00a9a6e7ba99822230842d7548ff6dc6a7d6d62b2aabb055d15635f4ec62071a1222009bf260f71505e6284e4180ff72d3f5d7d0abcedf093bf193a532b2b2cd3f72b3845f4eb3bb693cee76dfdc51a6203d08f46f395bc1380177574cd3582c4027373fb6e11b890122251fb58ac73deec85934ae4eff80d9939a2938e9b81b9a71e58835dd3a0ee7a10d3df943ff50bc9ded7d12fed32830e9c1e5ca455216e6934573cd51be4b06bb44842ce6e7c6fd55c80acb4e4a2b760ed8776fda1544e57bd5f26d79eb04b1a72eb9abe47fab540fa26f746eab4eb911fb24d3ea433d4c2e16021bccf363ce10c19c03cc86ff6dc47877d3f917a6cdaf09a52d4799eea0dc2a7371a4eee3eff7b08908259c83f830d7b0343c73ac77116ca7a2c8fb09a73bb85ceba09127cbc194b578b548fa45df757fde104afc966a4d72d62f9d8b5c0811f83cb7e28d318a1f8903721479c9a7241fe4dc4a79b56bc6de1ce17c762a28981c30fc1609f3107c2245dde47cfef1bd1d09b29b0d60c28e47bfdb1f575bee52602e7c9e77a6a572f100a2d73c41b5d3bedc6bff110c74a5ba080d6f47e2993211a10b6178e59a0d4963546e7ed4c8c3a4ee43f30135bab46b082dbe59662482507cffc6957a1af4515a98decb6df0da351dff586e02f91dea315562349005f0878e3dcace456a187229778275cd0454785f0af29e9d129de34311ec15ef9c1e59f65c65880ce5fa591abe1fce6b606d1e1dedd4975000a3afcfadb6a0608db9083ff75941f393c1f94ffeabdbd45116a93d37acd6397a12fdbf6fee88ecc2cc89be0d6946c52bca3a3b0e61ead58686c1dfb4d94da0481645c550ad1523608edeb9770e8b0de2d10fcd8aa8245cf053c2b7e151f750290568844ce806af0f9daf7df0c790f39900cfc8af4df34d23cefe2f0d75da793a4aa5a3b37016bef54a230d8017684deafb859669b39f84fb9da14b0ccca97a6ce14a1ccb70aea60c087a9609ccf4235aca79e5df5bad21bf6930af6c80902904442d4b12b4793d43790002480e301f0027172e20a62ed27d73037651560ba8075fd2c77b9e6919027811ca0d460949e196bada3ad8e96bb796d9a84087eb96d55d5a332ff2f53a4152ca9808f2963e7eba5f844f590ab002ed3d76eb460263eeb895e3833be7f9fa53227620ab6ae6fb1626ca465f5c4d553a9072c5b426e5cec0e771c4ed12b6fff9f866ce98b94560c12e6b51e49555fb10c31b2d13859c6a9a73c8c8845f50055d4f7359191db8f4ee8e2ddd473dd6148f6bcfc8fd5e0b310be6ff663aa9fb5f1c0ba6119aa75488c35e27b83d39cdd3153f0f4809ccc414c9087702dfddb82d07dead6106bfb9f69f271801487fa06329022d21073dc6a1927a550526b78b741f87ad3de437459c0544d0224ef63f1102456bf1591ab4c4ca3f149d7898b8048f240ee7ca4b95a550c32725fa6321dcb76665bd0e7bb40e4caed888843f0dfe1803c96ed5f1f68b36b7e311fb50f6048660c9e076f59f5c58fbb4f683e900a09a6b6b31a98b6c7c60d21d6608f8fc4e62a23d78cf387d84de6938b65c3ee85bbf30fcd85db10cd027db9581935873141e17e64b65f8c9e90090dc120245130f0350ba647f17196e63ea72649458b066be8a87102f4297dbf29dee0c5623f0929e3d79290fb279c57b36e5614110307220fbb07f5f3aff7ace88aec4cd50aa5cb1cea60dc307bfa51496832f273cde1bffcfbfff5866e8cf5f13740007e77f3e02a702e4c1fad6c7715b29a2f873db4a624e8523085d718041a8f85038fdfb79340fd58359a705a04a5098d82d0d9455b5da20db9144a876ff7d8e97d4a07f2a474d6032b131c68e88227e3425a5fe673eb7705a0eff064ab871ca978b38a46f1488b8d8208605b673871c5b15566683a410bcb13d5192cc4f385dabdf120b74602cbf7372191a143fa89411afc7f68f25577174c3e4866a2a5b0b9886cda9c5eeb620d8e1a467844884d0252cc258003c7a3bf066d305c1f4477dae5c9e53139924bb227b163dbdf2bce44d58a3793b3310f32d5ff5813abcfd0bd28408103a7a97ca5938949bb0a939ea836a135bbb1fccfbc9936f624a28ed5f078e77422b6b6318d91d115bc74d7ce0bb4dee0bfea9c26ff042dd3bd2ae70c1644ce3d2f75618601fca6ce634ee69613589f6d100b84357df502dbbceb8b16378a5e52a9c24533b278b4b3b479e177ed7177503983c747e677077d36908dd27a4fba12a1dfeebe55481449b0b8f8894199dba49a6b4808a01e2d54acff5982484f3dd6af5a7b2f8870cc2f6e38f765e580f00eeb2eac5e9bdff261766b318311840adc60e92feb64776ca7fcd121d6cf6f98cd22036a89697de7100c07ffd7b641e2d62f26ba7abe58bd35f76a401bd76a758ecb5c5c69d7a6af8ab1c173b73408c40ff386c3ff950de6cc5a916528e9f3af72c2e4260d32041f28d9c41754bfcd88d225f1bca216ad0accdd6249b41e3603eedf0a5e283482ba4ed5e653b7946df3e80aa3c12fb7fb2bca2b71993e202748d65f3f31697bf5ab9e7b4cd8d3e2e86344392df6e512ad70fd2d0554bd08aa583f12a5be442938e741a8a5b121786ce86b3163f3f693062474f54b432702028c6fb8c5c840efda1f2d4dcb487d8dd1799338db68a03e3b8e88585209e604182882310cfc88e89cbb549f6511e1e23087e2b36004af8aaefc5b4af99315c56ce4f14f4b60358b5468d05283eecb4f82f9debf6b8ef70b71dd43774478c5890ba74b117032868e9371e9faeaf01bd8c98a2cd4cd2754a1f83850cdac4bb4d130872c0248feda4bd4564c6fff421eb156cd4cd0ad47349c4d4b986d62121aa68bf308d6ec957ca984de67ec21d9249ae81c352872561050e6e5962d01b4978d1ea5869b3bb2f305b6533f75fa42566661a84b7e09bbd6fc053e67a80eeb8109841e1ff635fcb27e48a4949fbbda4535f01e7af6c9d74bd6fa4ea3b68074bcd6564ca855ce89f2fac1d9e19fdc57596cd13fbce41a4cca3c96a9837b33615bd62d3f899ebc10e59541174a73e4684171626bd2447740af019d506fce80dcfe525a81c1667ba7eb27922c32ebd7cc0e64807e85d03e0ab57da09d19884a0d2f652a27944907742f1539c68a42d1c7c115c6e157a58ca0baf65bc3df21f14fd69cc8d8765b812bc333945aaebcff2f5d39dc0de71532336352b77b521e91d6128d4924f0503a37b0b1835e579f6c3ac85b8961222f906753d466b9d5d12d3db18f0f76e79185dc2db7ff709758a0b8e89f512e980d5f3a4801eb82add1db222b4916d36b30a416eedb1c2d182cc063ab4f92574310b2d81360881481f7e970f97c39dffe8554f10bcd9148248a0937082ac93e574b17fd41ee268b0552381a7880b4a79ffb1683c7bfe83425d054074444397278b695a12293053e4450c8a271ecc9a27d7702bc69e8e8dff9147fa2546a3bc5b22459723bf24b06227d2effce10f1f0374b997ef9909dcdeae4d1c89b01debe5f6fb2a8b36ba4c11fdc4cb8cbd93e491364a2158957b1af624432d2320623ab8cd75f31b6722fefa4a75014f5ca1dcd5d327667bfb7bb88ced60c5c25958727e35bdf3243228ec6d59c1732c3d303d573926216f5e74550b3bfc248157a193c4bb5b9d97d26ef503d44a3558919267d31e10c39861c5837f2ad14fad4821762a31977d8b23b27b49b7b3eda0936429a2d30a52e82973eef01a3d00e0ae1986f0770dc6541f1b32776253fa0c527d050da93fe0b02f7416601ff948f81da290025a8b6ed80ccfe50dd33bcd610c8625868aeb3481f6b389adeff2a0dd8610b4498464e4e9264378c9579893c78abb7e41b80ae4c6cfccc2ca5ffd5876b9f50add5519763bb903a21491e452c9ec840685d1c80983ef482ee3503458d292e45108d8aa4521727a8207de32131258c87e511077f4b58489e61db7c745e787648a39e9b3c2ce55f54d41019e33cc250bc1b71ebd00f487de91809a763d84789b55a7b00321d0c50aa2472a50e98e4de529097cde17d0d11809e0c3d74018e66260d9364146f8c3d97ab55838426881da607b3de51288a36997f5407b50635939865cabd97f902e95113c12ee1819d1a587f008c4c091c40624b8017dd283f1655695e39cd460dee7aee37dc22c0d997ad9430cabfa5c99cfa177c9d966725a21fa6691b86c6a8a880b991c86f2489114109c9ed385a1b23ac5b179fb1916742e90f2f337def3a9388d17fdd1a4e082046f0a9ebd55f22a3c45ff29e258970d83bb91ff2bda32b4333c63ffda5b67af2d1c38890470e3a0006a135fc85769c605239096a79ba3da34ec0df097b426f6a6680ee371936bd832d3eb8e1e17e3da00f1c8b2393837aec3e08f5565f2fb286d2c8be1d15bc74bd000d69a578419f088ade68f7fe97ef3c0125465d5169cbac3384400accd42747c5668161e0aabb0f448a639210944b18fd6f1b6b3a78da38680bf72cd38de1483905d38476f6fcb757a334ba66ca300c91a08f246c67416694864a6b73546265256c9c4bd6f643f0fa50aea7a372e1f0519592ba77a09e683d4dd60f49095ee798815d62d67a052180487aa552794ccf4b2380564076b93792c4a22e3e80e77bf989d0146c9b2831206c9860d8552c20f4a193ae743652d330a367d23add0f63de11c6690b7d1885376a09d7ded972718d9c1bbe39fd2154446ebab7b7e6b709d0f4bfb591e7e1c0183cd2869ad4c7f7a5775dfe0e80477e096c380cbbd178fddb740c3ae4885df796605362702de31dde7ef08ad69dce27ed9ce6e74257df8d9edca2babbcadf1450d21f7d37b1337b1bd67f659ea2fa772bb67533a25811343106177f4482028f93e30b2a49e0de8b6cacaae11d5bd54e48ee70153773dbb0aa9edd0325fbcd687428eb5fdaff91fa107bf020725e13eaf8ad2fffd02da87a6fa59d47c1ad3336cd080a6e084cf2b0fb59af3ee474955ea181d5c7af6fbaae1acb3a5e7e808d0ea1f1fd70754b6e616a3166f3d44632d6c650375805a1f12637703e29169ad9727999beee98e3858f1d6fd9368d948f598f00574131fafd1fcda43bcc50a03f0b6374a138a6f17940db4fd2d9049a0828b0c127a7e5bd788b57971582877f588237285ef6b0e715abc31a72b1f05e7b2eba1ef19a71aa2ee9be137a760173fe2061f6075fa180fb2e4e7ee61dfc2b3446943f0938b4f43561bad4b860e4db430a94b7da09b71c44503c265c76aef708d558510121e6be9ede99d5512323bc645f2cb0e66fad26b0dcd6f0fb2f6df0a801ecb432b7330247576092ddd0ca2d6d58745c403f941b45a5ea8b11d7c09be69c42c534defbe9942cb5cede2635e02bec01d63c3c91df7b4b4faaefa7c6c0e62195eb5c70c4d8b194ce077d3ce918362c2774f8dacae69243bcca2ab6cab40316bf50a808f7f7ca1e107bd2b0b093b610a209a6aabb7eca48424dfb7b4309d7d2cf05a3dfb88d6d73c9ab643f752dcc2895492100fd11de6c2dea4589b8da5289269efa99d3bf4bf3bc8a847d2f08e3b298c4f5d074e31cbb86d9d2b47423c7438f1baebe46598acb220e337805de", 0x1000, 0x20}]}) recvfrom$rxrpc(r1, &(0x7f00000008c0)=""/218, 0xda, 0x40000000, &(0x7f00000009c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x37, 0x65]}}]}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r2) shutdown(r5, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 2.508492975s ago: executing program 7 (id=3760): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190004000000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000005000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000300000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000200000a00000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000bc0)={&(0x7f00000003c0)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c, 0x0}, 0x44890) 2.403398491s ago: executing program 7 (id=3761): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, 0x0, 0xc) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='decodes none'], 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 2.34188034s ago: executing program 7 (id=3763): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200c06"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 2.240818331s ago: executing program 8 (id=3764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) 2.094734208s ago: executing program 8 (id=3767): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 2.073976047s ago: executing program 2 (id=3768): unshare(0x28000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r2, 0x7, 0x3}) 1.976796662s ago: executing program 2 (id=3769): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.975410646s ago: executing program 0 (id=3770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.949766391s ago: executing program 6 (id=3771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1.846040156s ago: executing program 0 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0xf0, 0x3}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.833299789s ago: executing program 2 (id=3773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000043, 0x0) 1.751337262s ago: executing program 0 (id=3774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f00000000c0)='/$%-\xb6\x8a\x00', 0x800, &(0x7f0000000100)={@align=0x2, {0x3, 0xe, 0x9, 0x8}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x7}, 0x6, &(0x7f0000000780)=[{0x2, 0x0, &(0x7f00000002c0)='O\xba@\x00', &(0x7f0000000300), 0x0, 0x2}, {0x2, 0x8000, &(0x7f0000000380)='.}', &(0x7f00000003c0)="ea9989bdefef52f44bd0df76b1492e30c705a979e5ee926f4ce59780182a161b95bbc01e7e9b54b839197a6fea3a81e65b37d62b641022351795aa100520f41d41991b3b5c847e266769ae43cc7dfb41e2e52d54ec9571f698b865f8a48711a9a6350490f412fb0cefd1b11c313eb857d805430be315aa3c71c153764ee3e0836feebaed2aa7ff93d21a534ce2", 0x8d, 0x22}, {0x3, 0x6, &(0x7f00000004c0)='(\x00', &(0x7f0000000500)="dda6c8b3d195bf4308ce56e5f4d3f75b9d111c7f54adc697dd9535beb5341fe8d68fd755f854755e0d9db1f77a204d46717cb0527d8c57bb9fe294bda92270a796d8681a1025fdf3a6bbc64532d1766ba1d71a68d5c51484b844350d4e295bbdc7cd77e0e6d193e0ef6727877a72ec8f8cb2209b46ee4c6cb34d3be4d734e60c5bb96ff614bd1202b3fafb530b8ddc6d7dc716cbba3098e625f148a9fb41d475932cc86409871feb2a90ff52915b2fbb5d9fc4e2b8b9c539408234daae1694d3b5820dc1327c1dbbfedb2638d084494860ae", 0xd2, 0x22}, {0x1, 0x9, &(0x7f0000000600)='\\/-\x00', &(0x7f0000000640)="57765e04e7f83d8e6e33bcd537f322de9f57164674a97ee1c9be9241c206c0c13be285e1df56e4f61c6fc67b16c608d0bc609f289ffa611a02474085b033c8cdcae21d86aaafe911124d2b185e5c9fbb9e1e7b15c12902594802dff8a06e", 0x5e, 0xb1befbe5a366acc3}, {0x2, 0x7, &(0x7f00000006c0)=',B\'\')&\\}\x92,@^\x00', 0x0}, {0x2, 0x9, &(0x7f0000000740)='\x00', &(0x7f0000000a80)="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", 0x1000, 0x20}]}) recvfrom$rxrpc(r1, &(0x7f00000008c0)=""/218, 0xda, 0x40000000, &(0x7f00000009c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1a000, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x37, 0x65]}}]}) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ptrace(0x4208, r2) shutdown(r5, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x10001, 0x1}, &(0x7f0000002280)=0x18) 1.688269559s ago: executing program 2 (id=3775): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'ip6gre0\x00'}}, 0x1e) close(r0) 1.637051403s ago: executing program 2 (id=3776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0001000000002d000000000002000000010000000000000037b8ad06c2c9e262"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4603000701810000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000320d00000500380004"], 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="00fb1c0288b2a9bcd3a721f07f7278b2e05649599f7a94601bec2008"], 0x1c, 0x3) close(0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 504.737912ms ago: executing program 0 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x40000) 504.087525ms ago: executing program 2 (id=3778): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x40, 0x1, 0x4, "298c16ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0x14, 0x2, "859d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 449.058545ms ago: executing program 0 (id=3779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 358.448103ms ago: executing program 0 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 102.400896ms ago: executing program 6 (id=3781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 0s ago: executing program 6 (id=3782): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030c"], 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): .2023'. [ 966.357487][T15365] tipc: Enabled bearer , priority 10 [ 970.182910][T15399] overlayfs: failed to clone upperpath [ 970.212292][T15400] overlayfs: failed to clone upperpath [ 971.423613][T15412] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 973.892525][T15428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2037'. [ 973.903167][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 973.912130][T15428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2037'. [ 974.049214][ T5888] Process accounting resumed [ 974.174275][T15439] netlink: 'syz.1.2040': attribute type 21 has an invalid length. [ 975.744382][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 976.613383][T15456] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 976.945369][ T30] audit: type=1400 audit(2000000168.400:817): avc: denied { relabelto } for pid=15453 comm="syz.0.2045" name="407" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 977.078041][ T30] audit: type=1400 audit(2000000168.400:818): avc: denied { associate } for pid=15453 comm="syz.0.2045" name="407" dev="tmpfs" ino=2244 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 977.238301][ T30] audit: type=1400 audit(2000000168.681:819): avc: denied { remove_name } for pid=5812 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 977.415159][ T30] audit: type=1400 audit(2000000168.709:820): avc: denied { rmdir } for pid=5812 comm="syz-executor" name="407" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 977.785077][T15466] netlink: 'syz.0.2048': attribute type 2 has an invalid length. [ 978.404068][T15480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2051'. [ 978.414355][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 978.424357][T15480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2051'. [ 978.503713][T15483] overlayfs: failed to clone upperpath [ 978.925581][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 979.299894][T15501] netlink: 'syz.2.2054': attribute type 2 has an invalid length. [ 979.325819][T15501] netlink: 'syz.2.2054': attribute type 2 has an invalid length. [ 979.692183][T15508] openvswitch: netlink: IP tunnel dst address not specified [ 979.701399][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 979.820824][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 979.842403][T15510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 980.696160][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 980.738426][T15517] : entered promiscuous mode [ 981.284324][T15521] /dev/nullb0: Can't lookup blockdev [ 981.991074][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 982.401551][ T30] audit: type=1400 audit(2000000173.519:821): avc: denied { accept } for pid=15523 comm="syz.0.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 983.391887][T15544] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2065'. [ 983.402633][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 983.411481][T15544] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2065'. [ 983.761580][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2066'. [ 983.771298][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2066'. [ 984.230925][T12450] Process accounting resumed [ 984.313251][T12450] Process accounting resumed [ 984.561424][T15563] overlayfs: failed to clone upperpath [ 985.101779][T15568] netlink: 'syz.2.2069': attribute type 2 has an invalid length. [ 985.131954][T15568] netlink: 'syz.2.2069': attribute type 2 has an invalid length. [ 985.596697][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'. [ 985.863109][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.298634][T15581] netlink: 'syz.4.2072': attribute type 2 has an invalid length. [ 986.312358][T15581] netlink: 'syz.4.2072': attribute type 2 has an invalid length. [ 987.342262][T15593] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 987.450637][T12450] Process accounting resumed [ 987.811189][T15583] overlayfs: missing 'lowerdir' [ 989.514677][T15612] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 992.098418][T15641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2085'. [ 992.109016][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 992.118341][T15641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2085'. [ 992.130244][T15642] openvswitch: netlink: IP tunnel dst address not specified [ 992.142123][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2083'. [ 992.156658][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2083'. [ 992.167514][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2083'. [ 993.487370][T15654] overlayfs: failed to clone upperpath [ 994.639320][ T30] audit: type=1400 audit(2000000184.964:822): avc: denied { bind } for pid=15662 comm="syz.0.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 995.232246][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.586226][T15699] team_slave_1: Caught tx_queue_len zero misconfig [ 998.118724][T15703] /dev/nullb0: Can't lookup blockdev [ 998.554736][ T30] audit: type=1400 audit(2000000188.632:823): avc: denied { watch } for pid=15704 comm="syz.4.2101" path="/452/file0" dev="tmpfs" ino=2509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 999.277428][ T30] audit: type=1400 audit(2000000188.707:824): avc: denied { accept } for pid=15707 comm="syz.1.2102" path="socket:[46946]" dev="sockfs" ino=46946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 999.585921][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 1000.011454][T12450] Process accounting resumed [ 1000.633780][T15730] overlayfs: failed to clone upperpath [ 1002.093308][T15745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.693767][T15749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1002.719317][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1002.728707][T15749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1003.205561][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.215575][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.226864][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.236465][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.247705][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.257261][T15755] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1003.360038][T15755] macsec1: left promiscuous mode [ 1003.365753][T15755] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1003.865456][T15757] lo speed is unknown, defaulting to 1000 [ 1004.502168][T15757] lo speed is unknown, defaulting to 1000 [ 1005.318843][T15761] openvswitch: netlink: IP tunnel dst address not specified [ 1005.451534][T15763] __nla_validate_parse: 158 callbacks suppressed [ 1005.451552][T15763] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2115'. [ 1006.531356][T15764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15764 comm=syz.2.2113 [ 1006.835265][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 1008.993169][T15805] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1009.009976][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1009.019296][T15805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1010.611389][ T5888] Process accounting resumed [ 1012.314184][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1012.870145][T15848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2134'. [ 1013.231154][T15850] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2135'. [ 1013.241745][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 1013.251332][T15850] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2135'. [ 1013.693229][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1014.069473][T15859] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1016.236598][T15883] netlink: 'syz.2.2142': attribute type 4 has an invalid length. [ 1016.626430][T15889] openvswitch: netlink: IP tunnel dst address not specified [ 1016.899337][T15893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.913161][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2146'. [ 1016.952781][T15891] tipc: Started in network mode [ 1016.966089][T15891] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1016.986727][T15891] tipc: Enabling of bearer rejected, failed to enable media [ 1017.274563][T15897] /dev/nullb0: Can't lookup blockdev [ 1017.603238][T15906] xt_hashlimit: size too large, truncated to 1048576 [ 1017.822538][T15910] siw: device registration error -23 [ 1017.849943][T15914] netlink: 'syz.5.2151': attribute type 2 has an invalid length. [ 1017.889513][T15914] netlink: 'syz.5.2151': attribute type 2 has an invalid length. [ 1018.454905][T15922] pim6reg: entered allmulticast mode [ 1018.622772][ T30] audit: type=1326 audit(2000000207.226:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1018.812132][ T30] audit: type=1326 audit(2000000207.226:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1018.889989][ T30] audit: type=1326 audit(2000000207.226:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1018.948956][ T30] audit: type=1326 audit(2000000207.226:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1019.021071][ T30] audit: type=1326 audit(2000000207.226:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1019.606454][ T30] audit: type=1400 audit(2000000207.226:830): avc: denied { write } for pid=15915 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1019.629946][T15915] pim6reg: left allmulticast mode [ 1019.698056][ T30] audit: type=1326 audit(2000000207.226:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1020.246344][ T30] audit: type=1326 audit(2000000207.226:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1020.297476][ T30] audit: type=1326 audit(2000000207.226:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1020.440511][ T30] audit: type=1326 audit(2000000207.226:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab47b9c799 code=0x7ffc0000 [ 1020.730245][T15944] netlink: 'syz.5.2156': attribute type 21 has an invalid length. [ 1021.837394][T15948] fuse: Unknown parameter 'use00000000000000000000' [ 1023.082324][T15958] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.093513][T15958] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.159020][T15959] IPv6: sit3: Disabled Multicast RS [ 1023.169031][T15959] sit3: entered allmulticast mode [ 1023.902684][T15958] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.912934][T15958] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.095271][T15965] openvswitch: netlink: IP tunnel dst address not specified [ 1024.122588][T15958] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.132913][T15958] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.291072][T15958] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.302109][T15958] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.886247][T12955] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.906220][T12955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.915055][T12955] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.941126][T12955] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.037786][T15975] netlink: 'syz.0.2162': attribute type 2 has an invalid length. [ 1025.045773][T12955] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.045801][T12955] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.045828][T12955] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.045849][T12955] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.213387][T15979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'. [ 1025.254226][T15982] ip6_vti0: Caught tx_queue_len zero misconfig [ 1025.268293][T15982] IPv6: Can't replace route, no match found [ 1025.275081][T15982] IPv6: Can't replace route, no match found [ 1025.347534][T15985] netlink: 'syz.0.2162': attribute type 2 has an invalid length. [ 1025.570032][T15987] openvswitch: netlink: IP tunnel dst address not specified [ 1025.653988][T15988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15988 comm=syz.1.2168 [ 1026.199692][T15996] netlink: 'syz.2.2169': attribute type 21 has an invalid length. [ 1027.675911][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.373497][T16022] pim6reg: left allmulticast mode [ 1030.094035][T16033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2175'. [ 1030.377768][T16025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2177'. [ 1030.795747][T16048] openvswitch: netlink: IP tunnel dst address not specified [ 1035.802371][T16082] fuse: Bad value for 'fd' [ 1036.058082][T16086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.149045][T16086] lo speed is unknown, defaulting to 1000 [ 1036.618553][T16086] lo speed is unknown, defaulting to 1000 [ 1036.725763][T16089] lo speed is unknown, defaulting to 1000 [ 1036.832549][T16089] lo speed is unknown, defaulting to 1000 [ 1037.118481][T16094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1037.228283][T16097] netlink: 'syz.5.2191': attribute type 21 has an invalid length. [ 1037.978661][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 1038.731466][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1038.731484][ T30] audit: type=1400 audit(2000000480.945:911): avc: denied { read open } for pid=16107 comm="syz.4.2195" path="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1038.909643][T16120] netlink: 'syz.1.2197': attribute type 2 has an invalid length. [ 1038.988193][T16121] netlink: 'syz.1.2197': attribute type 2 has an invalid length. [ 1043.380236][T16143] netlink: 'syz.5.2202': attribute type 1 has an invalid length. [ 1043.394329][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'. [ 1043.885289][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1043.894285][T16161] IPVS: Unknown mcast interface: vcan0 [ 1044.231200][T16163] netlink: 'syz.1.2204': attribute type 21 has an invalid length. [ 1044.643676][ T5134] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 1044.643763][ T5134] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 1044.651358][ T5134] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1045.012480][T16173] netlink: 'syz.0.2214': attribute type 2 has an invalid length. [ 1045.171952][T16173] netlink: 'syz.0.2214': attribute type 2 has an invalid length. [ 1045.927563][T16187] netlink: 'syz.5.2209': attribute type 21 has an invalid length. [ 1050.633753][ T5134] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1050.977852][T16211] bridge0: port 3(erspan0) entered blocking state [ 1050.984834][T16211] bridge0: port 3(erspan0) entered disabled state [ 1050.991793][T16211] erspan0: entered allmulticast mode [ 1050.998125][T16211] erspan0: entered promiscuous mode [ 1051.004308][T16211] bridge0: port 3(erspan0) entered blocking state [ 1051.010754][T16211] bridge0: port 3(erspan0) entered forwarding state [ 1052.478744][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1052.863661][T16240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2221'. [ 1053.395171][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1056.196494][T16270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1056.617726][T16269] tmpfs: Bad value for 'mpol' [ 1058.012510][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 1058.109876][T16298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2236'. [ 1058.119498][T16298] openvswitch: netlink: Flow key attr not present in new flow. [ 1060.293634][T16309] sctp: [Deprecated]: syz.4.2241 (pid 16309) Use of int in max_burst socket option deprecated. [ 1060.293634][T16309] Use struct sctp_assoc_value instead [ 1061.093847][T16318] /dev/nullb0: Can't lookup blockdev [ 1063.529880][T16346] openvswitch: netlink: IP tunnel dst address not specified [ 1063.538720][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2245'. [ 1064.392786][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 1064.894322][T16364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2252'. [ 1065.701280][T16374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1065.711875][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1065.721215][T16374] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1066.371523][T16380] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 1066.399009][T16380] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 1067.735890][T16392] netlink: 'syz.5.2258': attribute type 2 has an invalid length. [ 1067.747468][T16392] netlink: 'syz.5.2258': attribute type 2 has an invalid length. [ 1067.908694][T16395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2259'. [ 1069.561642][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2264'. [ 1070.307907][T16424] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2266'. [ 1070.319143][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 1070.328436][T16424] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2266'. [ 1072.150776][T16439] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 1072.586067][T16439] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 1075.785379][T16483] netlink: 'syz.5.2277': attribute type 2 has an invalid length. [ 1076.853095][T16483] netlink: 'syz.5.2277': attribute type 2 has an invalid length. [ 1077.519523][T16491] pim6reg: entered allmulticast mode [ 1077.678409][T16498] team0: entered allmulticast mode [ 1077.695346][T16498] team_slave_0: entered allmulticast mode [ 1078.733698][T16502] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2282'. [ 1078.761517][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 1078.770419][T16502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2282'. [ 1079.049530][T16498] team_slave_1: entered allmulticast mode [ 1079.113624][T16499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.125052][T16499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.136084][T16499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1079.161500][T16491] team0: left allmulticast mode [ 1079.192521][T16491] team_slave_0: left allmulticast mode [ 1079.198005][T16491] team_slave_1: left allmulticast mode [ 1079.226304][T16491] pim6reg: left allmulticast mode [ 1079.451648][T16499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.463006][T16499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.474084][T16499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1079.662005][T16510] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.672736][T16510] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.941031][T16499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.953727][T16499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.964479][T16499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1079.980084][T16510] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.990354][T16510] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.093993][T16499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.106701][T16499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.117510][T16499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1080.138469][T16510] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.148720][T16510] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.179012][T16510] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.189467][T16510] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.223713][ T65] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.294220][ T65] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1080.316182][ T65] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1080.495088][ T65] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.503896][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1080.559244][ T65] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1080.591263][ T65] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.637622][ T65] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1080.651773][ T65] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1080.691986][ T65] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.748070][ T65] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1080.780320][ T65] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1080.803893][ T65] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.818895][ T65] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.969572][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1080.979907][ T65] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.989678][T16518] netlink: 'syz.1.2284': attribute type 2 has an invalid length. [ 1081.012369][ T65] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.467468][ T65] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.468291][T16521] netlink: 'syz.1.2284': attribute type 2 has an invalid length. [ 1081.499712][ T65] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.508291][ T65] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.644090][ T65] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.749190][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2290'. [ 1084.254917][T16565] siw: device registration error -23 [ 1084.838315][ T5134] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1084.838374][ T5134] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 1084.846863][ T5134] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 1084.853963][ T5134] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1086.356314][T16589] netlink: 'syz.2.2297': attribute type 21 has an invalid length. [ 1086.964532][ T30] audit: type=1400 audit(2000000526.369:912): avc: denied { write } for pid=16596 comm="syz.0.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1087.936044][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2301'. [ 1089.746100][ T30] audit: type=1326 audit(2000000528.961:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16621 comm="syz.5.2305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc099c799 code=0x0 [ 1090.102356][T16631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2306'. [ 1090.629305][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1091.168027][T16643] bond2: (slave lo): Releasing backup interface [ 1091.410358][T16643] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1091.499141][T16643] bridge0: port 3(batadv0) entered disabled state [ 1092.239833][T16643] bridge_slave_0: left allmulticast mode [ 1092.251306][T16643] bridge_slave_0: left promiscuous mode [ 1092.269360][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.287610][T16643] bridge_slave_1: left allmulticast mode [ 1092.293814][T16643] bridge_slave_1: left promiscuous mode [ 1092.330987][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.363025][T16643] bond0: (slave bond_slave_0): Releasing backup interface [ 1092.677292][T16643] bond0: (slave bond_slave_1): Releasing backup interface [ 1093.186080][T16643] team0: Port device team_slave_0 removed [ 1093.223388][T16643] team0: Port device team_slave_1 removed [ 1093.241156][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.259728][T16643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.283130][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.300224][T16643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.320305][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.340413][T16643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1094.139215][T16668] openvswitch: netlink: IP tunnel dst address not specified [ 1094.170218][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'. [ 1094.393336][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2317'. [ 1095.713407][T16693] netlink: 'syz.5.2320': attribute type 21 has an invalid length. [ 1096.713391][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2324'. [ 1097.013426][T16715] o2cb: This node has not been configured. [ 1097.021008][T16715] o2cb: Cluster check failed. Fix errors before retrying. [ 1097.028858][T16715] (syz.4.2325,16715,0):user_dlm_register:674 ERROR: status = -22 [ 1097.037559][T16715] (syz.4.2325,16715,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1097.052672][T16715] o2cb: This node has not been configured. [ 1097.059104][T16715] o2cb: Cluster check failed. Fix errors before retrying. [ 1097.066493][T16715] (syz.4.2325,16715,0):user_dlm_register:674 ERROR: status = -22 [ 1097.074912][T16715] (syz.4.2325,16715,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1099.112113][T16728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2328'. [ 1099.301346][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2329'. [ 1099.311183][T16733] openvswitch: netlink: Flow actions attr not present in new flow. [ 1100.424757][T16745] blktrace: Concurrent blktraces are not allowed on loop4 [ 1100.749057][T16746] netlink: 'syz.1.2331': attribute type 2 has an invalid length. [ 1100.762022][T16746] netlink: 'syz.1.2331': attribute type 2 has an invalid length. [ 1101.074865][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 1101.530800][T16757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2334'. [ 1102.221358][T16766] netlink: 'syz.0.2336': attribute type 21 has an invalid length. [ 1102.243399][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.252432][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.263022][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.278814][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1105.185221][T16794] netlink: 'syz.5.2341': attribute type 1 has an invalid length. [ 1105.258484][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'. [ 1105.310634][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'. [ 1105.323756][T16799] netlink: 'syz.2.2343': attribute type 21 has an invalid length. [ 1105.361447][T16794] macvlan2: entered promiscuous mode [ 1108.239530][T16794] macvlan2: entered allmulticast mode [ 1108.393377][T16794] bond0: entered promiscuous mode [ 1108.400407][T16794] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1108.411940][T16794] bond0: left promiscuous mode [ 1108.461290][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2342'. [ 1108.841016][T16810] lo speed is unknown, defaulting to 1000 [ 1108.924355][T16810] lo speed is unknown, defaulting to 1000 [ 1109.039999][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2346'. [ 1109.056075][T16816] openvswitch: netlink: Flow actions attr not present in new flow. [ 1110.130354][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2347'. [ 1111.032838][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2348'. [ 1111.043374][T16836] openvswitch: netlink: Flow actions attr not present in new flow. [ 1111.177951][T16839] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1111.188511][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1111.197878][T16839] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1112.069210][ T30] audit: type=1326 audit(2000000549.858:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1112.149552][ T30] audit: type=1326 audit(2000000549.858:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1112.211435][ T30] audit: type=1326 audit(2000000549.942:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1112.919786][ T30] audit: type=1326 audit(2000000549.942:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1112.991608][ T30] audit: type=1326 audit(2000000549.942:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.176202][ T30] audit: type=1326 audit(2000000549.961:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.353453][T16856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'. [ 1113.656101][ T30] audit: type=1326 audit(2000000549.961:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.680616][ T30] audit: type=1326 audit(2000000549.961:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.785759][ T30] audit: type=1326 audit(2000000549.961:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.832852][ T30] audit: type=1326 audit(2000000549.961:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16847 comm="syz.2.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9ed9c799 code=0x7ffc0000 [ 1113.862249][T16860] bond1: option mode: unable to set because the bond device has slaves [ 1113.874632][T16860] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1114.077284][T16866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1114.222858][T16870] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1114.363877][T16880] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2362'. [ 1114.374747][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 1114.384073][T16880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2362'. [ 1114.655822][T16887] netlink: 'syz.4.2363': attribute type 21 has an invalid length. [ 1116.668484][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'. [ 1117.041536][T16914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2369'. [ 1117.918326][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1117.928144][T16918] openvswitch: netlink: Flow actions attr not present in new flow. [ 1118.156274][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1118.156287][ T30] audit: type=1400 audit(2000000555.547:926): avc: denied { getopt } for pid=16923 comm="syz.5.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1118.290204][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2374'. [ 1118.492655][T16932] /dev/nullb0: Can't lookup blockdev [ 1119.301815][T16942] netlink: 'syz.5.2376': attribute type 21 has an invalid length. [ 1120.902479][T16951] ceph: No mds server is up or the cluster is laggy [ 1120.938143][ T792] libceph: connect (1)[c::]:6789 error -13 [ 1120.948197][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 1122.377072][T16979] netlink: 'syz.2.2381': attribute type 2 has an invalid length. [ 1122.389046][T16979] netlink: 'syz.2.2381': attribute type 2 has an invalid length. [ 1123.237288][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2385'. [ 1123.369203][T16989] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2386'. [ 1123.865765][T16999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2388'. [ 1124.537565][T17005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1124.926799][T16688] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 1124.970359][ T30] audit: type=1326 audit(2000000561.892:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f139c799 code=0x7fc00000 [ 1126.123859][ T30] audit: type=1326 audit(2000000563.006:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89f135cfce code=0x7fc00000 [ 1126.974680][T17042] fuse: Unknown parameter 'euid<00000000000000000000' [ 1127.001911][ T30] audit: type=1400 audit(2000000563.810:929): avc: denied { getopt } for pid=17036 comm="syz.4.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1127.126227][T16688] Bluetooth: hci3: command 0x0c1a tx timeout [ 1127.582444][T17050] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2397'. [ 1127.708238][T17048] lo speed is unknown, defaulting to 1000 [ 1127.973432][T17048] lo speed is unknown, defaulting to 1000 [ 1129.054229][T17069] openvswitch: netlink: Flow actions attr not present in new flow. [ 1129.225287][T16688] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1129.234162][T16688] Bluetooth: hci2: Injecting HCI hardware error event [ 1129.242565][T16688] Bluetooth: hci2: hardware error 0x00 [ 1129.978853][T17071] xfrm0: Caught tx_queue_len zero misconfig [ 1130.641602][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2406'. [ 1131.447129][T16688] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1132.212476][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2412'. [ 1132.350157][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2411'. [ 1132.836300][T17111] /dev/nullb0: Can't lookup blockdev [ 1133.437139][T17119] veth0: entered promiscuous mode [ 1133.943511][T16688] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 1134.031358][ T30] audit: type=1400 audit(2000000570.408:930): avc: denied { ioctl } for pid=17126 comm="syz.5.2420" path="socket:[52872]" dev="sockfs" ino=52872 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1134.111749][T17116] veth0: left promiscuous mode [ 1134.241401][T17131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1134.537292][T17137] netlink: 'syz.5.2421': attribute type 2 has an invalid length. [ 1135.051867][T17137] netlink: 'syz.5.2421': attribute type 2 has an invalid length. [ 1136.123686][T17142] 9pnet_fd: p9_fd_create_tcp (17142): problem connecting socket to 127.0.0.1 [ 1136.800433][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2426'. [ 1136.809494][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2426'. [ 1137.145342][T17158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1137.467659][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 1137.912635][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2431'. [ 1138.892503][T17186] netlink: 'syz.1.2433': attribute type 2 has an invalid length. [ 1138.902674][T17186] netlink: 'syz.1.2433': attribute type 2 has an invalid length. [ 1140.455239][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1141.273496][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1141.283233][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1142.278399][T17238] /dev/nullb0: Can't lookup blockdev [ 1143.975828][T17265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1145.778277][T17291] netlink: 'syz.5.2466': attribute type 1 has an invalid length. [ 1145.787605][T17291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1146.143602][T17293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1146.167346][T17293] openvswitch: netlink: Flow actions attr not present in new flow. [ 1146.576795][T17309] netlink: 'syz.4.2472': attribute type 21 has an invalid length. [ 1146.584789][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 1146.597029][T17308] netlink: 'syz.1.2468': attribute type 2 has an invalid length. [ 1147.394867][T17318] /dev/nullb0: Can't lookup blockdev [ 1148.720834][T17353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1148.741399][T17353] openvswitch: netlink: Flow actions attr not present in new flow. [ 1148.923775][T17358] netlink: 'syz.2.2485': attribute type 2 has an invalid length. [ 1148.935647][T17358] netlink: 'syz.2.2485': attribute type 2 has an invalid length. [ 1149.704566][ T30] audit: type=1400 audit(2000000584.763:931): avc: denied { setattr } for pid=17367 comm="syz.4.2493" name="L2TP/IP" dev="sockfs" ino=53236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1149.736212][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2492'. [ 1149.810900][T17375] xt_hashlimit: max too large, truncated to 1048576 [ 1152.000115][T17412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1153.222476][ T30] audit: type=1400 audit(2000000588.366:932): avc: denied { getopt } for pid=17436 comm="syz.5.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1153.311449][T17440] openvswitch: netlink: IP tunnel dst address not specified [ 1153.320090][T17440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'. [ 1153.423885][T17442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'. [ 1153.454351][T17442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2515'. [ 1153.590412][T17448] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1154.864764][T17475] netlink: 'syz.5.2530': attribute type 2 has an invalid length. [ 1154.877873][T17475] netlink: 'syz.5.2530': attribute type 2 has an invalid length. [ 1155.473652][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1155.483363][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1156.039915][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2542'. [ 1156.289915][T17510] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1156.727714][T17524] netlink: 'syz.5.2546': attribute type 21 has an invalid length. [ 1156.739945][T17523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.069997][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 1158.372993][T17554] netlink: 'syz.2.2560': attribute type 3 has an invalid length. [ 1158.387977][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2560'. [ 1158.662985][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1158.995365][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1159.159723][T17555] netlink: 'syz.4.2556': attribute type 2 has an invalid length. [ 1159.777614][T17555] netlink: 'syz.4.2556': attribute type 2 has an invalid length. [ 1160.352985][T17600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2577'. [ 1161.754933][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1161.764074][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2585'. [ 1162.357940][T17633] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 1162.368746][T17633] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 1162.515371][T17637] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1162.585756][T17638] netlink: 'syz.4.2588': attribute type 2 has an invalid length. [ 1162.615593][ T30] audit: type=1400 audit(2000000597.144:933): avc: denied { connect } for pid=17639 comm="syz.1.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1162.694444][T17638] netlink: 'syz.4.2588': attribute type 2 has an invalid length. [ 1162.868083][T17647] netlink: 772 bytes leftover after parsing attributes in process `syz.0.2592'. [ 1162.885248][T17647] netlink: del zone limit has 4 unknown bytes [ 1162.976644][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 1164.140294][T17659] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1164.283652][T17659] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1164.975407][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2608'. [ 1166.182781][T17703] netlink: 'syz.4.2611': attribute type 21 has an invalid length. [ 1166.551540][T17701] netlink: 'syz.0.2610': attribute type 2 has an invalid length. [ 1166.668917][T17709] netlink: 'syz.0.2610': attribute type 2 has an invalid length. [ 1166.776196][T17712] openvswitch: netlink: IP tunnel dst address not specified [ 1166.785304][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2613'. [ 1168.162896][T17737] openvswitch: netlink: IP tunnel dst address not specified [ 1168.171354][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1168.242015][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1168.252081][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1168.682748][T14360] Process accounting resumed [ 1169.615347][T17777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1170.520485][T17800] netlink: 'syz.5.2644': attribute type 2 has an invalid length. [ 1170.537404][T17800] netlink: 'syz.5.2644': attribute type 2 has an invalid length. [ 1170.637324][T17811] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1170.648169][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1170.657612][T17811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1171.162676][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1171.406648][T17827] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2655'. [ 1171.419190][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 1171.521401][T17830] tmpfs: Bad value for 'mpol' [ 1173.072261][T17860] netlink: 'syz.5.2667': attribute type 21 has an invalid length. [ 1173.630225][T17877] __nla_validate_parse: 2 callbacks suppressed [ 1173.630256][T17877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1173.929493][T17878] /dev/nullb0: Can't lookup blockdev [ 1175.240034][T17909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2684'. [ 1175.250410][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 1175.259739][T17909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2684'. [ 1175.477670][T17913] netlink: 'syz.5.2683': attribute type 2 has an invalid length. [ 1175.498895][T17913] netlink: 'syz.5.2683': attribute type 2 has an invalid length. [ 1175.543008][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2689'. [ 1175.570538][T17927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2690'. [ 1175.580804][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 1175.590296][T17927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2690'. [ 1175.723825][T17933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2691'. [ 1176.567836][T17941] /dev/nullb0: Can't lookup blockdev [ 1178.039450][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1180.055920][T17995] __nla_validate_parse: 4 callbacks suppressed [ 1180.055956][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2712'. [ 1180.214268][T18000] ceph: No source [ 1180.634572][T18014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2718'. [ 1180.716747][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2718'. [ 1181.604415][T18033] /dev/nullb0: Can't lookup blockdev [ 1182.106541][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2731'. [ 1183.396228][T18073] netlink: 'syz.2.2743': attribute type 61 has an invalid length. [ 1183.506519][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2741'. [ 1183.894161][T18076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.893119][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2748'. [ 1184.902602][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2748'. [ 1185.127199][ T30] audit: type=1326 audit(2000000618.227:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f139c799 code=0x7ffc0000 [ 1185.198314][ T30] audit: type=1326 audit(2000000618.255:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f139c799 code=0x7ffc0000 [ 1185.244471][T18107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1185.267356][ T30] audit: type=1326 audit(2000000618.255:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f89f139c799 code=0x7ffc0000 [ 1185.586830][T18114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1185.919364][ T30] audit: type=1326 audit(2000000618.255:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f139c799 code=0x7ffc0000 [ 1185.981388][T18116] /dev/nullb0: Can't lookup blockdev [ 1186.012503][T16688] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 1186.048729][ T30] audit: type=1326 audit(2000000618.255:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.4.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f139c799 code=0x7ffc0000 [ 1186.670725][ T30] audit: type=1400 audit(2000000619.668:939): avc: denied { connect } for pid=18128 comm="syz.2.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1188.304670][T18161] openvswitch: netlink: IP tunnel dst address not specified [ 1188.402694][T18161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1188.567666][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1188.585478][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1188.657401][T18163] 9p: Bad value for 'rfdno' [ 1189.018940][T18175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2775'. [ 1189.307675][T18180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2777'. [ 1189.991771][T18187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.349014][T16688] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1190.359310][T16688] Bluetooth: hci3: Injecting HCI hardware error event [ 1190.367485][T13059] Bluetooth: hci3: hardware error 0x00 [ 1190.892750][T18201] openvswitch: netlink: Flow actions attr not present in new flow. [ 1191.670262][T14359] Process accounting resumed [ 1192.527676][T18231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.570287][T13059] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1193.190536][T18239] openvswitch: netlink: Flow actions attr not present in new flow. [ 1193.518690][T18246] netlink: 'syz.2.2800': attribute type 2 has an invalid length. [ 1193.541134][T18246] netlink: 'syz.2.2800': attribute type 2 has an invalid length. [ 1193.732657][T18256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1193.744362][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1193.753766][T18256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1194.083675][T18263] netlink: 'syz.4.2806': attribute type 2 has an invalid length. [ 1194.130945][T18263] netlink: 'syz.4.2806': attribute type 2 has an invalid length. [ 1195.082316][T18279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.224416][T18280] openvswitch: netlink: IP tunnel dst address not specified [ 1195.234344][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1195.310587][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1195.323877][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1195.470705][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1196.070719][T18299] openvswitch: netlink: IP tunnel dst address not specified [ 1196.079958][T18299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1196.150937][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1196.161027][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2818'. [ 1196.756803][T18307] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 1196.779910][T18307] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 1197.200367][T18312] netlink: 'syz.4.2821': attribute type 2 has an invalid length. [ 1197.486704][T18312] netlink: 'syz.4.2821': attribute type 2 has an invalid length. [ 1198.847646][T18338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1200.032082][T18351] __nla_validate_parse: 1 callbacks suppressed [ 1200.032101][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1200.073636][T18352] openvswitch: netlink: IP tunnel dst address not specified [ 1200.083620][T18352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1200.153812][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1200.164586][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1200.233872][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2835'. [ 1200.413931][T18361] /dev/nullb0: Can't lookup blockdev [ 1201.326766][T16688] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1201.345386][T16688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1201.379244][T16688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1201.418213][T18377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2842'. [ 1201.495302][T16688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1201.502660][T16688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1201.544317][T18370] lo speed is unknown, defaulting to 1000 [ 1201.954729][T18370] lo speed is unknown, defaulting to 1000 [ 1202.298117][T18370] chnl_net:caif_netlink_parms(): no params data found [ 1202.427247][T18402] netlink: 'syz.0.2850': attribute type 21 has an invalid length. [ 1202.456316][T18370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.463483][T18370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.471447][T18370] bridge_slave_0: entered allmulticast mode [ 1202.488053][T18370] bridge_slave_0: entered promiscuous mode [ 1202.510189][T18370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.517352][T18370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.551556][T18370] bridge_slave_1: entered allmulticast mode [ 1202.586349][T18370] bridge_slave_1: entered promiscuous mode [ 1202.859421][T18370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.888072][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1202.900881][T18370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.941831][T18370] team0: Port device team_slave_0 added [ 1202.966667][T18409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2853'. [ 1202.971287][T18370] team0: Port device team_slave_1 added [ 1203.019256][T18370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.027478][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.070918][T18370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.258350][T18370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.397118][T18370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.485385][T18370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.505829][T18418] netlink: 'syz.2.2854': attribute type 2 has an invalid length. [ 1203.660931][T18424] netlink: 'syz.2.2854': attribute type 2 has an invalid length. [ 1203.685796][T16688] Bluetooth: hci5: command tx timeout [ 1203.729543][T18370] hsr_slave_0: entered promiscuous mode [ 1203.740754][T18370] hsr_slave_1: entered promiscuous mode [ 1204.196501][T18427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 1204.205807][T18427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 1204.540703][T18432] CIFS mount error: No usable UNC path provided in device string! [ 1204.540703][T18432] [ 1204.557144][T18432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1204.753175][T13059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1204.773498][T13059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1204.781147][T13059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1204.790628][T13059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1204.799395][T13059] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1204.917235][T18370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1204.959176][T18370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1205.030375][T18435] lo speed is unknown, defaulting to 1000 [ 1205.030758][T18370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1205.096219][T18370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.266080][T18370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.304781][T18370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.358038][T18457] /dev/nullb0: Can't lookup blockdev [ 1205.437183][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.444258][ T7613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.463187][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.470284][ T7613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.501502][T18370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1205.584391][T18370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.796148][T18435] lo speed is unknown, defaulting to 1000 [ 1205.908551][T13059] Bluetooth: hci5: command tx timeout [ 1205.927811][T18473] openvswitch: netlink: IP tunnel dst address not specified [ 1206.539595][T18473] __nla_validate_parse: 1 callbacks suppressed [ 1206.539614][T18473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1206.662005][T18370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.724481][T18481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1206.848009][T18481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1206.968261][T18435] chnl_net:caif_netlink_parms(): no params data found [ 1207.037042][T13059] Bluetooth: hci6: command tx timeout [ 1207.134166][T18435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.144095][T18435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.152836][T18435] bridge_slave_0: entered allmulticast mode [ 1207.165128][T18435] bridge_slave_0: entered promiscuous mode [ 1207.175315][T18435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.184226][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.193440][T18435] bridge_slave_1: entered allmulticast mode [ 1207.204527][T18435] bridge_slave_1: entered promiscuous mode [ 1207.261137][T18435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.293185][T18435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.370905][T18435] team0: Port device team_slave_0 added [ 1207.465185][T18435] team0: Port device team_slave_1 added [ 1208.037876][T18435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.055331][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.105189][T18435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.122250][T18370] veth0_vlan: entered promiscuous mode [ 1208.131893][T18435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.140198][T13059] Bluetooth: hci5: command tx timeout [ 1208.148516][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.175650][T18435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.235613][T18370] veth1_vlan: entered promiscuous mode [ 1208.750838][T18435] hsr_slave_0: entered promiscuous mode [ 1208.764948][T18435] hsr_slave_1: entered promiscuous mode [ 1208.783655][T18435] debugfs: 'hsr0' already exists in 'hsr' [ 1208.789589][T18435] Cannot create hsr debugfs directory [ 1208.824879][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2879'. [ 1208.965475][T18370] veth0_macvtap: entered promiscuous mode [ 1208.979441][T18370] veth1_macvtap: entered promiscuous mode [ 1209.132166][T18370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.172344][T18370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.219205][ T65] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.241084][T13059] Bluetooth: hci6: command tx timeout [ 1209.249147][ T65] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.324064][T18530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.359535][ T65] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.382938][T18435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1209.407118][ T65] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.417480][T18435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1209.427903][T18435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1209.544419][T18435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1209.641878][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.650373][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.750935][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.779121][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.971503][T18435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.012737][T18550] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 1210.024831][T18435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.062460][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.069660][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.138339][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.145533][T12961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.262251][T18559] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1210.352051][T13059] Bluetooth: hci5: command tx timeout [ 1210.374372][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2840'. [ 1210.707254][T18574] netlink: 'syz.0.2897': attribute type 2 has an invalid length. [ 1210.723834][T18574] netlink: 'syz.0.2897': attribute type 2 has an invalid length. [ 1210.806355][T18435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.502768][T13059] Bluetooth: hci6: command tx timeout [ 1211.610469][T18590] netlink: 'syz.2.2903': attribute type 2 has an invalid length. [ 1211.640267][T18590] netlink: 'syz.2.2903': attribute type 2 has an invalid length. [ 1213.037017][T18435] veth0_vlan: entered promiscuous mode [ 1213.082128][T18435] veth1_vlan: entered promiscuous mode [ 1213.159447][T18435] veth0_macvtap: entered promiscuous mode [ 1213.203189][T18435] veth1_macvtap: entered promiscuous mode [ 1213.346436][T18435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.398974][T18435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.453825][T12961] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.464308][T12961] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.494267][T12961] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.537710][T12961] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.555207][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2909'. [ 1213.564346][T18614] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2909'. [ 1213.688913][T13059] Bluetooth: hci6: command tx timeout [ 1213.788329][T18614] vlan2: entered allmulticast mode [ 1213.794755][T18614] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1213.922739][T18617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1214.939902][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.949061][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.297335][T12955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.553629][T12955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.603174][T18633] netlink: 'syz.4.2914': attribute type 2 has an invalid length. [ 1215.622641][T18633] netlink: 'syz.4.2914': attribute type 2 has an invalid length. [ 1215.744738][T18635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.760184][ T30] audit: type=1400 audit(2000000647.827:940): avc: denied { accept } for pid=18654 comm="syz.7.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1217.125646][T18663] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1217.157504][T18664] netlink: 'syz.7.2925': attribute type 21 has an invalid length. [ 1217.173521][ T48] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.200960][ T48] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.241984][ T48] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.267708][ T48] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.452693][T18674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.196132][T18690] Invalid argument reading file caps for ./file0 [ 1218.260530][ T30] audit: type=1400 audit(2000000649.146:941): avc: denied { connect } for pid=18687 comm="syz.6.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1218.710823][T18692] openvswitch: netlink: IP tunnel dst address not specified [ 1218.720874][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1218.785104][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1218.796215][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1218.966369][T18704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.643358][T18723] ISOFS: Unable to identify CD-ROM format. [ 1219.699309][T18722] netlink: 'syz.4.2948': attribute type 21 has an invalid length. [ 1220.226315][T18733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.479004][T18737] ISOFS: Unable to identify CD-ROM format. [ 1221.534538][ T30] audit: type=1400 audit(2000000652.300:942): avc: denied { listen } for pid=18748 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1221.581098][T18752] netlink: 'syz.0.2956': attribute type 21 has an invalid length. [ 1221.737568][T18743] ISOFS: Unable to identify CD-ROM format. [ 1222.426186][ T30] audit: type=1326 audit(2000000653.114:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18765 comm="syz.7.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0179c799 code=0x7ffc0000 [ 1222.481778][ T30] audit: type=1326 audit(2000000653.114:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18765 comm="syz.7.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0179c799 code=0x7ffc0000 [ 1222.591230][ T30] audit: type=1326 audit(2000000653.161:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18765 comm="syz.7.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffa0179c799 code=0x7ffc0000 [ 1222.720851][ T30] audit: type=1326 audit(2000000653.161:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18765 comm="syz.7.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0179c799 code=0x7ffc0000 [ 1222.749984][ T30] audit: type=1326 audit(2000000653.161:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18765 comm="syz.7.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0179c799 code=0x7ffc0000 [ 1222.973433][T16958] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1222.997002][T18801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1223.607003][T16958] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1223.623751][T16958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1223.638301][T16958] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1223.648726][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1223.657015][T16958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.665385][T16958] usb 7-1: Product: syz [ 1223.671331][T16958] usb 7-1: Manufacturer: syz [ 1223.676254][T16958] usb 7-1: SerialNumber: syz [ 1223.683828][T16958] usb 7-1: config 0 descriptor?? [ 1223.736050][T18814] openvswitch: netlink: IP tunnel dst address not specified [ 1223.745361][T18814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1223.814616][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1223.834196][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1223.836617][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1223.865976][ T24] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1223.877686][ T24] usb 8-1: config 0 has no interface number 0 [ 1223.885709][ T24] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1223.900059][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1223.919247][T16958] powermate: unknown product id 0240 [ 1223.929147][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.942700][T16958] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input29 [ 1223.967734][ T24] usb 8-1: Product: syz [ 1223.976957][ T24] usb 8-1: Manufacturer: syz [ 1223.994713][ C1] powermate: config urb returned -71 [ 1224.001112][ C1] powermate: config urb returned -71 [ 1224.007238][ C1] powermate: config urb returned -71 [ 1224.013088][ C1] powermate: config urb returned -71 [ 1224.041471][ T24] usb 8-1: SerialNumber: syz [ 1224.063061][ T24] usb 8-1: config 0 descriptor?? [ 1224.070778][T18797] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1224.096366][T16958] usb 7-1: USB disconnect, device number 2 [ 1224.102267][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1224.183739][T18826] Cannot find del_set index 1 as target [ 1224.301069][T18797] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1224.460062][T18840] netlink: 'syz.2.2995': attribute type 21 has an invalid length. [ 1224.593170][ T24] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1224.633286][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1224.920783][T18843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1224.933319][ T24] asix 8-1:0.188: probe with driver asix failed with error -71 [ 1224.953094][ T24] usb 8-1: USB disconnect, device number 2 [ 1226.259797][T18871] openvswitch: netlink: IP tunnel dst address not specified [ 1226.269498][T18871] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1226.346785][T18879] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1226.392602][T18879] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1226.976955][T18892] netlink: 'syz.4.3014': attribute type 21 has an invalid length. [ 1227.795407][T18908] openvswitch: netlink: IP tunnel dst address not specified [ 1227.813408][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3020'. [ 1228.071036][T18921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3023'. [ 1228.442314][T18929] netlink: 'syz.2.3031': attribute type 3 has an invalid length. [ 1228.453998][T18929] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 1229.103053][T18936] openvswitch: netlink: Flow actions attr not present in new flow. [ 1229.233857][T18941] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1229.292406][T18942] netlink: 'syz.0.3033': attribute type 21 has an invalid length. [ 1229.809768][T18958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3042'. [ 1229.974269][T18964] /dev/nullb0: Can't lookup blockdev [ 1230.106602][T18969] netlink: 'syz.7.3044': attribute type 21 has an invalid length. [ 1230.228597][T18970] openvswitch: netlink: IP tunnel dst address not specified [ 1230.249432][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3041'. [ 1231.715372][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3047'. [ 1231.947302][T18992] openvswitch: netlink: Flow actions attr not present in new flow. [ 1232.314149][T19000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1232.418007][T19002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3054'. [ 1233.537198][T19016] openvswitch: netlink: IP tunnel dst address not specified [ 1233.546621][T19016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1235.879776][T19059] ISOFS: Unable to identify CD-ROM format. [ 1236.325317][T19067] openvswitch: netlink: VXLAN extension 111 out of range max 1 [ 1236.468096][T19073] Invalid argument reading file caps for ./file0 [ 1236.872269][T19075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.065110][ T792] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1239.127584][T19101] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3087'. [ 1239.145361][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3087'. [ 1239.155375][T19101] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3087'. [ 1239.218914][T19101] vlan2: entered allmulticast mode [ 1239.224235][T19101] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1239.328874][T19103] /dev/nullb0: Can't lookup blockdev [ 1239.334236][ T792] usb 7-1: Using ep0 maxpacket: 16 [ 1239.390110][ T792] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1239.482494][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.496267][T19105] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1239.523739][ T792] usb 7-1: Product: syz [ 1239.546573][ T792] usb 7-1: Manufacturer: syz [ 1239.573627][ T792] usb 7-1: SerialNumber: syz [ 1240.011728][ T792] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1240.228669][ T792] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1240.338670][ T792] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1240.432375][ T792] usb 7-1: media controller created [ 1241.016955][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.091706][ T792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1241.140053][ T792] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1241.356121][T19118] affs: No valid root block on device nullb0 [ 1241.907694][ T792] usb 7-1: USB disconnect, device number 3 [ 1242.435134][T19132] syz.0.3099: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1242.451276][T19132] CPU: 0 UID: 0 PID: 19132 Comm: syz.0.3099 Tainted: G L syzkaller #0 PREEMPT(full) [ 1242.451308][T19132] Tainted: [L]=SOFTLOCKUP [ 1242.451315][T19132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1242.451326][T19132] Call Trace: [ 1242.451332][T19132] [ 1242.451338][T19132] dump_stack_lvl+0x100/0x190 [ 1242.451366][T19132] warn_alloc.cold+0x95/0x1c1 [ 1242.451391][T19132] ? __pfx_warn_alloc+0x10/0x10 [ 1242.451419][T19132] ? kasan_save_stack+0x3f/0x50 [ 1242.451440][T19132] ? kasan_save_stack+0x30/0x50 [ 1242.451459][T19132] ? kasan_save_track+0x14/0x30 [ 1242.451480][T19132] ? xskq_create+0xfb/0x1d0 [ 1242.451499][T19132] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1242.451524][T19132] ? xskq_create+0xfb/0x1d0 [ 1242.451547][T19132] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1242.451574][T19132] ? xskq_create+0xfb/0x1d0 [ 1242.451591][T19132] vmalloc_user_noprof+0x9e/0xe0 [ 1242.451608][T19132] ? xskq_create+0xfb/0x1d0 [ 1242.451633][T19132] xskq_create+0xfb/0x1d0 [ 1242.451653][T19132] xsk_setsockopt+0x743/0xab0 [ 1242.451671][T19132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1242.451689][T19132] ? find_held_lock+0x2b/0x80 [ 1242.451709][T19132] ? __fget_files+0x215/0x3d0 [ 1242.451729][T19132] ? selinux_socket_setsockopt+0x6a/0x80 [ 1242.451750][T19132] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1242.451768][T19132] do_sock_setsockopt+0xf3/0x1d0 [ 1242.451793][T19132] __sys_setsockopt+0x195/0x220 [ 1242.451818][T19132] __x64_sys_setsockopt+0xbd/0x160 [ 1242.451836][T19132] ? do_syscall_64+0x95/0xf80 [ 1242.451857][T19132] ? lockdep_hardirqs_on+0x78/0x100 [ 1242.451881][T19132] do_syscall_64+0x106/0xf80 [ 1242.451903][T19132] ? clear_bhb_loop+0x40/0x90 [ 1242.451924][T19132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.451942][T19132] RIP: 0033:0x7f4961f9c799 [ 1242.451957][T19132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.451974][T19132] RSP: 002b:00007f4962f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1242.451991][T19132] RAX: ffffffffffffffda RBX: 00007f4962215fa0 RCX: 00007f4961f9c799 [ 1242.452002][T19132] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1242.452012][T19132] RBP: 00007f4962032c99 R08: 0000000000000004 R09: 0000000000000000 [ 1242.452022][T19132] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.452033][T19132] R13: 00007f4962216038 R14: 00007f4962215fa0 R15: 00007ffda540ef48 [ 1242.452058][T19132] [ 1242.723111][T19132] Mem-Info: [ 1242.750239][T19132] active_anon:33046 inactive_anon:3163 isolated_anon:0 [ 1242.750239][T19132] active_file:8066 inactive_file:50573 isolated_file:0 [ 1242.750239][T19132] unevictable:768 dirty:155 writeback:0 [ 1242.750239][T19132] slab_reclaimable:9199 slab_unreclaimable:121202 [ 1242.750239][T19132] mapped:44611 shmem:28063 pagetables:1623 [ 1242.750239][T19132] sec_pagetables:0 bounce:0 [ 1242.750239][T19132] kernel_misc_reclaimable:0 [ 1242.750239][T19132] free:1228024 free_pcp:8280 free_cma:0 [ 1242.807277][T19139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1243.020156][T19132] Node 0 active_anon:136184kB inactive_anon:12652kB active_file:32168kB inactive_file:202056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:182400kB dirty:616kB writeback:0kB shmem:110716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13932kB pagetables:6360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1243.045916][T19140] /dev/nullb0: Can't lookup blockdev [ 1243.114871][T19132] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1243.149943][T19132] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.243366][T19132] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1243.299292][T19132] Node 0 DMA32 free:942172kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:123384kB inactive_anon:12652kB active_file:32168kB inactive_file:202056kB unevictable:1536kB writepending:616kB zspages:552kB present:3129332kB managed:2537072kB mlocked:0kB bounce:0kB free_pcp:47952kB local_pcp:20660kB free_cma:0kB [ 1243.390650][T19132] lowmem_reserve[]: 0 0 1 1 1 [ 1243.406988][T19132] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1044kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.577796][T19132] lowmem_reserve[]: 0 0 0 0 0 [ 1243.591924][T19132] Node 1 Normal free:3946436kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:236kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.174269][T19132] lowmem_reserve[]: 0 0 0 0 0 [ 1244.194489][T19132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1244.273783][T19132] Node 0 DMA32: 1742*4kB (UE) 2685*8kB (UME) 2072*16kB (UM) 805*32kB (UME) 440*64kB (UME) 238*128kB (UME) 86*256kB (UME) 22*512kB (UME) 15*1024kB (UME) 4*2048kB (ME) 178*4096kB (UM) = 931904kB [ 1244.312826][T19132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1244.332582][T19132] Node 1 Normal: 1*4kB (M) 4*8kB (U) 10*16kB (UM) 8*32kB (UM) 8*64kB (UM) 2*128kB (U) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3946436kB [ 1244.359425][T19132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1244.369915][T19132] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1244.380086][T19132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1244.392558][T19132] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1244.402641][T19132] 86697 total pagecache pages [ 1244.407658][T19132] 0 pages in swap cache [ 1244.426191][T19132] Free swap = 124744kB [ 1244.431595][T19132] Total swap = 124996kB [ 1244.435760][T19132] 2097051 pages RAM [ 1244.441624][T19132] 0 pages HighMem/MovableOnly [ 1244.446376][T19132] 430907 pages reserved [ 1244.514983][T19132] 0 pages cma reserved [ 1245.254030][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1245.323119][T19185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.817036][T19196] affs: No valid root block on device nullb0 [ 1247.855884][ T30] audit: type=1400 audit(2000000676.930:948): avc: denied { accept } for pid=19222 comm="syz.7.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1248.020110][T14360] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1248.511610][T14360] usb 7-1: Using ep0 maxpacket: 16 [ 1248.522892][T14360] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1248.540064][T14360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.556775][T14360] usb 7-1: Product: syz [ 1248.561124][T14360] usb 7-1: Manufacturer: syz [ 1248.585585][T14360] usb 7-1: SerialNumber: syz [ 1248.785321][T19245] Invalid argument reading file caps for ./file0 [ 1249.175303][T14360] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1249.189370][T14360] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1249.201521][T14360] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1249.205090][T19248] tipc: Can't bind to reserved service type 1 [ 1249.211704][T14360] usb 7-1: media controller created [ 1249.339076][T14360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1249.526227][T14360] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1249.613561][T14360] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1249.711785][T19260] ISOFS: Unable to identify CD-ROM format. [ 1249.883952][T14360] usb 7-1: USB disconnect, device number 4 [ 1249.925775][T19267] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1249.929244][T19268] cgroup: Name too long [ 1250.711610][T19284] binder: 19283:19284 ioctl 40046210 0 returned -14 [ 1250.881938][T19294] netlink: 'syz.0.3158': attribute type 1 has an invalid length. [ 1251.061164][T19302] netlink: 'syz.0.3163': attribute type 21 has an invalid length. [ 1251.208442][T19309] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3162'. [ 1251.364140][T14360] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1251.603018][T19315] openvswitch: netlink: Key 6 has unexpected len 23 expected 2 [ 1252.494941][T14360] usb 7-1: Using ep0 maxpacket: 16 [ 1252.512321][T14360] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1252.522987][T14360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.531820][T14360] usb 7-1: Product: syz [ 1252.536001][T14360] usb 7-1: Manufacturer: syz [ 1252.555515][T14360] usb 7-1: SerialNumber: syz [ 1252.737938][T19326] netlink: 'syz.4.3167': attribute type 2 has an invalid length. [ 1252.760052][T12450] Process accounting resumed [ 1252.766110][T19326] netlink: 'syz.4.3167': attribute type 2 has an invalid length. [ 1252.792001][T14360] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1252.808712][T14360] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1252.842119][T14360] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1252.872787][T14360] usb 7-1: media controller created [ 1252.900041][T14360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1253.017662][T14360] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1253.117796][T14360] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1253.147039][T14360] usb 7-1: USB disconnect, device number 5 [ 1253.162561][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3169'. [ 1253.656919][T19335] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1254.111018][T19340] affs: No valid root block on device nullb0 [ 1254.153653][T19340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1254.973167][T19351] netlink: 'syz.0.3176': attribute type 21 has an invalid length. [ 1255.242053][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3174'. [ 1255.385669][T19361] openvswitch: netlink: IP tunnel dst address not specified [ 1255.394686][T19361] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3175'. [ 1256.667068][T19370] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1256.698491][T19370] fuse: Bad value for 'fd' [ 1258.241460][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1258.697579][T19415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3194'. [ 1258.818799][T19417] Invalid argument reading file caps for ./file0 [ 1259.643631][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3196'. [ 1259.808863][T19431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.892801][T19421] openvswitch: netlink: IP tunnel dst address not specified [ 1259.997165][T19421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1260.253663][T19443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1260.264400][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1260.274260][T19443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1260.355842][T19445] openvswitch: netlink: Key type 31 is not supported [ 1260.653567][T19452] ISOFS: Unable to identify CD-ROM format. [ 1261.090467][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3207'. [ 1261.661135][T19462] ieee802154 phy1 wpan1: encryption failed: -22 [ 1261.803900][T19467] delete_channel: no stack [ 1261.831191][ T30] audit: type=1400 audit(2000000689.919:949): avc: denied { map } for pid=19465 comm="syz.6.3212" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1261.870709][ T30] audit: type=1400 audit(2000000689.994:950): avc: denied { execute } for pid=19465 comm="syz.6.3212" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1262.098733][T19480] netlink: 'syz.6.3215': attribute type 2 has an invalid length. [ 1262.115757][T19480] !: entered promiscuous mode [ 1262.124502][T19480] netlink: 'syz.6.3215': attribute type 2 has an invalid length. [ 1262.294788][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.745638][T19474] openvswitch: netlink: IP tunnel dst address not specified [ 1262.753617][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1262.819064][T19486] 9p: Bad value for 'rfdno' [ 1265.386028][T19529] openvswitch: netlink: IP tunnel dst address not specified [ 1265.396790][T19545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.459985][T19529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1265.526472][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1265.551906][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1266.437870][T19564] ISOFS: Unable to identify CD-ROM format. [ 1266.604909][T19568] openvswitch: netlink: Multiple metadata blocks provided [ 1267.132598][T19585] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1267.156717][T19585] fuse: Bad value for 'fd' [ 1267.861039][T19595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.005185][T19602] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3265'. [ 1268.256721][T19614] openvswitch: netlink: IP tunnel dst address not specified [ 1268.265809][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3259'. [ 1268.417305][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1268.427363][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1268.809639][ T30] audit: type=1400 audit(2000000696.217:951): avc: denied { connect } for pid=19607 comm="syz.6.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1268.833956][T19617] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3259'. [ 1268.843728][T19617] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3259'. [ 1269.366740][T19629] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1269.392272][T19629] fuse: Bad value for 'fd' [ 1269.971968][T19633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1270.578570][T19647] openvswitch: netlink: IP tunnel dst address not specified [ 1271.902383][T19668] __nla_validate_parse: 2 callbacks suppressed [ 1271.902401][T19668] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.3285'. [ 1272.281549][T19682] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3288'. [ 1272.321162][T19680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3292'. [ 1272.685777][ T30] audit: type=1400 audit(2000000700.166:952): avc: denied { accept } for pid=19689 comm="syz.2.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1272.933670][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1272.943760][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1273.658415][T19709] /dev/nullb0: Can't lookup blockdev [ 1273.720587][T19716] overlayfs: missing 'lowerdir' [ 1273.735202][T19717] random: crng reseeded on system resumption [ 1273.806396][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1273.828322][T19715] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3302'. [ 1274.102672][T19729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3305'. [ 1274.972107][T19753] netlink: 'syz.0.3316': attribute type 2 has an invalid length. [ 1275.277139][T19759] dvmrp12: entered allmulticast mode [ 1276.450693][ T30] audit: type=1400 audit(2000000703.685:953): avc: denied { read } for pid=19781 comm="syz.6.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1276.624982][T19787] openvswitch: netlink: IP tunnel dst address not specified [ 1276.634174][T19787] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1276.685751][ T30] audit: type=1400 audit(2000000703.909:954): avc: denied { append } for pid=19789 comm="syz.6.3334" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1276.721744][T19794] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1277.341132][T19816] affs: No valid root block on device nullb0 [ 1277.390544][T19816] __nla_validate_parse: 3 callbacks suppressed [ 1277.390575][T19816] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1278.123869][ T30] audit: type=1400 audit(2000000705.257:955): avc: denied { setopt } for pid=19826 comm="syz.6.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1278.331908][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3353'. [ 1278.478298][T19849] openvswitch: netlink: IP tunnel dst address not specified [ 1278.487756][T19849] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1278.601494][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1278.611639][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1278.963165][T19857] openvswitch: netlink: IP tunnel dst address not specified [ 1278.972953][T19857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1279.080665][T19858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1279.090735][T19858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1279.261205][T19860] openvswitch: netlink: IP tunnel dst address not specified [ 1279.272371][T19860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3359'. [ 1279.346919][T19861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3359'. [ 1279.818670][T19865] netlink: 'syz.2.3361': attribute type 21 has an invalid length. [ 1279.931680][T19871] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 1281.078021][T19894] netlink: 'syz.6.3372': attribute type 4 has an invalid length. [ 1281.402436][ T30] audit: type=1400 audit(2000000708.317:956): avc: denied { ioctl } for pid=19905 comm="syz.6.3378" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1283.177508][T19950] __nla_validate_parse: 3 callbacks suppressed [ 1283.177529][T19950] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3395'. [ 1283.271002][T19952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1283.287906][T19952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1284.142262][T19954] Invalid argument reading file caps for ./file0 [ 1285.941170][T19980] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3405'. [ 1286.776766][T19982] netlink: 'syz.7.3406': attribute type 4 has an invalid length. [ 1287.281671][T19992] affs: No valid root block on device nullb0 [ 1287.298189][T19992] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3409'. [ 1288.490467][T20020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'. [ 1288.508418][T20020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'. [ 1288.611060][T20024] Invalid argument reading file caps for ./file0 [ 1288.677307][T20028] nftables ruleset with unbound chain [ 1288.879345][T20030] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3423'. [ 1289.276029][T20039] netlink: 'syz.2.3425': attribute type 21 has an invalid length. [ 1289.350616][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3427'. [ 1290.157197][T20047] affs: No valid root block on device nullb0 [ 1290.571910][T20045] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1290.589767][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1291.295905][T16688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1291.313220][T16688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1291.324261][T16688] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1291.333501][T16688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1291.342011][T16688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1291.772655][T20054] lo speed is unknown, defaulting to 1000 [ 1292.192737][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1292.212242][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1292.284758][T20074] netlink: 'syz.6.3436': attribute type 2 has an invalid length. [ 1292.294512][T20074] netlink: 'syz.6.3436': attribute type 1 has an invalid length. [ 1292.307972][T20054] lo speed is unknown, defaulting to 1000 [ 1292.948897][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3440'. [ 1293.714842][T16688] Bluetooth: hci7: command tx timeout [ 1293.743347][T20054] chnl_net:caif_netlink_parms(): no params data found [ 1293.801425][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1293.821943][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1294.135469][T20054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.171417][T20054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.212108][T20054] bridge_slave_0: entered allmulticast mode [ 1294.244017][T20054] bridge_slave_0: entered promiscuous mode [ 1294.263778][T20054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.295767][T20054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.328108][T20054] bridge_slave_1: entered allmulticast mode [ 1294.367129][T20054] bridge_slave_1: entered promiscuous mode [ 1294.453404][T20054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.622467][T20054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.821698][T20054] team0: Port device team_slave_0 added [ 1294.839908][T20054] team0: Port device team_slave_1 added [ 1294.874688][T20054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.885038][T20054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.927005][T20054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.952207][T20054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.967266][T20054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.020735][T20054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.058320][T20130] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1295.241542][T20054] hsr_slave_0: entered promiscuous mode [ 1295.260503][T20054] hsr_slave_1: entered promiscuous mode [ 1295.720226][T20054] debugfs: 'hsr0' already exists in 'hsr' [ 1295.727093][T20054] Cannot create hsr debugfs directory [ 1295.880075][T20133] openvswitch: netlink: IP tunnel dst address not specified [ 1295.915744][T20133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1295.926072][T16688] Bluetooth: hci7: command tx timeout [ 1296.004627][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1296.577880][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1296.734637][T20054] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1296.764107][T20054] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1296.789993][T20054] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1296.905261][T20054] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1297.160566][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1297.219047][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1297.365563][T20054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.398067][T20054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.410961][T18318] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1297.885370][T12953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.892520][T12953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.908958][T12953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.916044][T12953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.001249][T18318] usb 8-1: Using ep0 maxpacket: 16 [ 1298.012900][T18318] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1298.030617][T18318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.060819][T18318] usb 8-1: Product: syz [ 1298.073526][T18318] usb 8-1: Manufacturer: syz [ 1298.128195][T18318] usb 8-1: SerialNumber: syz [ 1298.183037][T16688] Bluetooth: hci7: command tx timeout [ 1298.426430][T20054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.433926][T18318] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1298.472255][T18318] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1298.516947][T18318] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1298.566168][T18318] usb 8-1: media controller created [ 1298.636494][T18318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1298.879117][T18318] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1299.505989][T18318] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1299.519875][T18318] usb 8-1: USB disconnect, device number 3 [ 1299.598975][T20054] veth0_vlan: entered promiscuous mode [ 1299.625809][T20054] veth1_vlan: entered promiscuous mode [ 1300.044881][T20054] veth0_macvtap: entered promiscuous mode [ 1300.097232][T20054] veth1_macvtap: entered promiscuous mode [ 1300.183403][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1300.211851][T20054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.250498][T20054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.281471][T12955] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.314205][T12955] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.335267][T12955] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.372221][T16688] Bluetooth: hci7: command tx timeout [ 1300.384445][T12955] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.406530][T20229] openvswitch: netlink: IP tunnel dst address not specified [ 1300.416847][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3473'. [ 1300.631938][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3473'. [ 1300.657466][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1300.667697][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1300.727910][T12961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.742980][T12961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.811370][T12961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.822209][T12961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.041897][T20263] __nla_validate_parse: 2 callbacks suppressed [ 1302.041915][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3490'. [ 1302.098038][T20265] Invalid argument reading file caps for ./file0 [ 1302.132289][T20266] netlink: 'syz.8.3489': attribute type 21 has an invalid length. [ 1302.346314][T18616] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.356254][T18616] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.452017][T18616] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.485536][T18616] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.264878][T20302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.461523][T20308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1306.346579][T20319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.087703][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1307.492667][T20348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3519'. [ 1307.863275][ T30] audit: type=1400 audit(2000000733.087:957): avc: denied { shutdown } for pid=20355 comm="syz.8.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1308.140561][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1308.151709][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1309.440554][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3530'. [ 1309.948694][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1310.196865][T20405] tipc: Enabling of bearer rejected, failed to enable media [ 1310.849001][ T30] audit: type=1400 audit(2000000735.876:958): avc: denied { getopt } for pid=20397 comm="syz.8.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1310.921415][T20420] xt_hashlimit: size too large, truncated to 1048576 [ 1311.063052][T20424] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1311.076128][T20424] macsec1: entered allmulticast mode [ 1311.082385][T20424] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 1311.132929][T20421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1311.160171][T20421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1311.356219][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3554'. [ 1311.374446][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3554'. [ 1311.389539][T20437] netlink: 'syz.7.3554': attribute type 7 has an invalid length. [ 1311.397397][T20437] netlink: 'syz.7.3554': attribute type 13 has an invalid length. [ 1313.240969][T12450] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1313.386838][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1313.421570][T12450] usb 9-1: Using ep0 maxpacket: 8 [ 1313.445988][T12450] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1313.458539][T12450] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1313.474009][T12450] usb 9-1: string descriptor 0 read error: -22 [ 1313.480546][T12450] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1313.529770][T12450] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1313.568875][T20494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1313.579424][T20494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1313.588757][T14359] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1313.634317][T12450] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1313.792887][T14359] usb 8-1: Using ep0 maxpacket: 16 [ 1313.805739][T14359] usb 8-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 1313.820679][T20497] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1313.838758][T20497] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1313.861901][T12450] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1314.015852][T14359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.545117][T14359] usb 8-1: config 0 descriptor?? [ 1314.842815][T12450] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1314.850635][T12450] usb 9-1: media controller created [ 1314.870455][T12450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1314.895647][T12450] zl10353_read_register: readreg error (reg=127, ret==0) [ 1314.970512][T12450] usb 9-1: USB disconnect, device number 2 [ 1315.082909][T14359] hid_parser_main: 4007 callbacks suppressed [ 1315.082933][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.102418][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.140453][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.171542][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.218340][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.239267][T20509] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1315.255813][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.796387][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.842129][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.854149][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.861898][T14359] wacom 0003:056A:00CE.0005: unknown main item tag 0x0 [ 1315.897816][T14359] usb 8-1: USB disconnect, device number 4 [ 1315.974629][T20516] bridge_slave_1: default FDB implementation only supports local addresses [ 1316.585641][T20538] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3592'. [ 1316.601055][T20538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3592'. [ 1316.611242][T20538] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3592'. [ 1316.621272][T20538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3592'. [ 1316.708756][T20541] netlink: 'syz.8.3594': attribute type 14 has an invalid length. [ 1316.746067][T20541] netlink: 'syz.8.3594': attribute type 12 has an invalid length. [ 1318.802008][T20573] xt_hashlimit: size too large, truncated to 1048576 [ 1318.899640][T20580] __nla_validate_parse: 3 callbacks suppressed [ 1318.899667][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3605'. [ 1319.207227][T20586] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3609'. [ 1320.666542][T20608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3615'. [ 1321.840712][T20630] netlink: 'syz.6.3625': attribute type 1 has an invalid length. [ 1322.152764][T20630] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1322.582235][T20630] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1322.646821][T20630] netlink: 'syz.6.3625': attribute type 1 has an invalid length. [ 1322.713615][T20630] netlink: 'syz.6.3625': attribute type 8 has an invalid length. [ 1322.751847][T20630] netlink: 606 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1323.237632][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3630'. [ 1325.692056][ T792] IPVS: starting estimator thread 0... [ 1325.889244][T20685] IPVS: using max 79 ests per chain, 189600 per kthread [ 1326.004611][T20690] futex_wake_op: syz.2.3644 tries to shift op by -1; fix this program [ 1326.105748][T20695] random: crng reseeded on system resumption [ 1326.167211][T20700] netlink: 'syz.7.3645': attribute type 21 has an invalid length. [ 1326.374400][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3651'. [ 1326.936815][T20710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1327.079953][T20714] syzkaller1: entered promiscuous mode [ 1327.109857][T20714] syzkaller1: entered allmulticast mode [ 1327.560742][T20736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.866520][T20745] binder: 20742:20745 ioctl ae01 30 returned -22 [ 1327.876247][ T5888] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1328.052548][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.355972][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.367406][ T5888] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1328.383151][ T5888] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.393421][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.406574][ T5888] usb 8-1: config 0 descriptor?? [ 1328.917008][T20282] kernel read not supported for file /dsp (pid: 20282 comm: kworker/0:6) [ 1329.368970][ T5888] hid_parser_main: 28 callbacks suppressed [ 1329.368991][ T5888] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x4 [ 1329.383967][T20282] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1329.435011][T20768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3675'. [ 1329.452813][ T5888] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1329.543994][T20282] usb 9-1: Using ep0 maxpacket: 8 [ 1329.550467][T20282] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1329.561477][T20282] usb 9-1: config 179 has no interface number 0 [ 1329.569065][T20282] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1329.582088][T20282] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1329.594727][T20282] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1329.607718][T20282] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1329.622297][T20282] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1329.637444][T20282] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1329.647996][T20282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.659541][T20754] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1329.695961][ T792] usb 8-1: USB disconnect, device number 5 [ 1330.047980][T20282] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input30 [ 1330.460906][T20754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.522646][T20754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.887963][ T5937] usb 9-1: USB disconnect, device number 3 [ 1330.887963][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1330.888098][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1331.087124][T20796] netlink: 'syz.0.3687': attribute type 1 has an invalid length. [ 1331.258680][T20800] openvswitch: netlink: IP tunnel dst address not specified [ 1331.269078][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1331.307649][ T5937] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1331.339259][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1331.351592][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1331.478110][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 1331.490519][ T5937] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 1331.501939][ T5937] usb 8-1: config 2 has no interface number 0 [ 1331.508280][ T5937] usb 8-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1331.519142][ T5937] usb 8-1: config 2 interface 88 has no altsetting 0 [ 1331.528171][ T5937] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1331.538131][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.546819][ T5937] usb 8-1: Product: syz [ 1331.551035][ T5937] usb 8-1: Manufacturer: syz [ 1331.556390][ T5937] usb 8-1: SerialNumber: syz [ 1331.566687][T20794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1332.190223][T20810] netlink: 'syz.8.3689': attribute type 2 has an invalid length. [ 1332.239812][T20810] !: entered promiscuous mode [ 1332.245274][T20794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1332.309582][T20810] netlink: 'syz.8.3689': attribute type 2 has an invalid length. [ 1332.750478][ T5937] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1332.783424][ T5937] asix 8-1:2.88: probe with driver asix failed with error -71 [ 1332.814364][ T5937] usb 8-1: USB disconnect, device number 6 [ 1334.413123][T20857] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1336.452821][T13059] Bluetooth: hci5: command 0x0406 tx timeout [ 1337.016363][T20925] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1337.031279][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1337.041646][T20925] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1338.828623][T20944] netlink: 'syz.8.3742': attribute type 2 has an invalid length. [ 1338.841040][T20944] netlink: 'syz.8.3742': attribute type 2 has an invalid length. [ 1339.853020][T20966] netlink: 'syz.6.3749': attribute type 21 has an invalid length. [ 1339.926742][T12961] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.949347][T12961] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.984020][T12961] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.009899][T12961] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.891921][ T30] audit: type=1400 audit(2000000764.933:959): avc: denied { read append } for pid=20991 comm="syz.7.3761" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1341.923622][T20992] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1341.952703][ T30] audit: type=1400 audit(2000000764.961:960): avc: denied { open } for pid=20991 comm="syz.7.3761" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1342.011887][T20997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1342.249940][ T5937] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1342.443785][ T5937] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1342.455736][ T5937] usb 8-1: config 0 has no interface number 0 [ 1342.462201][ T5937] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1342.476586][ T5937] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.488923][ T5937] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.503580][ T5937] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1342.511785][ T5937] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1342.525414][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.559303][T12450] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1342.594510][ T5937] usb 8-1: config 0 descriptor?? [ 1342.619559][T21020] netlink: 'syz.6.3771': attribute type 2 has an invalid length. [ 1342.635654][T21020] netlink: 'syz.6.3771': attribute type 2 has an invalid length. [ 1342.901448][T12450] usb 9-1: Using ep0 maxpacket: 8 [ 1342.908061][T12450] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1343.810516][ T5937] uclogic 0003:145F:0212.0007: pen parameters not found [ 1343.842041][ T5937] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 1343.854458][T12450] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1343.874811][T12450] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.918946][T12450] usb 9-1: config 0 descriptor?? [ 1344.040292][ T5937] usb 8-1: USB disconnect, device number 7 [ 1344.164906][T12450] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1344.240509][T21042] netlink: 'syz.0.3780': attribute type 2 has an invalid length. [ 1344.251894][T21042] netlink: 'syz.0.3780': attribute type 2 has an invalid length. [ 1344.312945][ T31] INFO: task syz.1.2765:18145 blocked for more than 143 seconds. [ 1344.327793][ T31] Tainted: G L syzkaller #0 [ 1344.340138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1344.350301][ T31] task:syz.1.2765 state:D stack:28232 pid:18145 tgid:18142 ppid:5808 task_flags:0x400140 flags:0x00080002 [ 1344.366267][ T31] Call Trace: [ 1344.370689][ T31] [ 1344.387175][ T31] __schedule+0xfee/0x6120 [ 1344.392612][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1344.401724][ T31] ? __pfx___schedule+0x10/0x10 [ 1344.431456][ T31] ? find_held_lock+0x2b/0x80 [ 1344.440312][ T31] ? schedule+0x2bf/0x390 [ 1344.445292][ T31] schedule+0xdd/0x390 [ 1344.453124][ T31] schedule_preempt_disabled+0x13/0x30 [ 1344.458696][ T31] __mutex_lock+0xc9a/0x1b90 [ 1344.464355][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1344.471055][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1344.477991][ T31] ? net_generic+0xea/0x2a0 [ 1344.483306][ T31] ? net_generic+0xea/0x2a0 [ 1344.488002][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1344.494572][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1344.500207][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1344.507195][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1344.513357][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1344.519626][ T31] ? security_capable+0x80/0x260 [ 1344.527947][ T31] genl_rcv_msg+0x560/0x800 [ 1344.534023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.539797][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1344.546113][ T31] netlink_rcv_skb+0x159/0x420 [ 1344.551395][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.557728][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1344.563454][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1344.571869][ T31] genl_rcv+0x28/0x40 [ 1344.576511][ T31] netlink_unicast+0x5aa/0x870 [ 1344.582156][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1344.589018][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1344.589787][ T5937] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1344.604623][ T24] usb 9-1: USB disconnect, device number 4 [ 1344.631203][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.637638][ T31] ? __might_fault+0xa0/0x140 [ 1344.642898][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1344.647718][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.653122][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.659706][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1344.666327][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1344.671111][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.677427][ T31] __sys_sendmsg+0x170/0x220 [ 1344.682390][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.689331][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1344.694658][ T31] do_syscall_64+0x106/0xf80 [ 1344.700807][ T31] ? clear_bhb_loop+0x40/0x90 [ 1344.705579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.712338][ T31] RIP: 0033:0x7fab47b9c799 [ 1344.716819][ T31] RSP: 002b:00007fab48a56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.726718][ T31] RAX: ffffffffffffffda RBX: 00007fab47e15fa0 RCX: 00007fab47b9c799 [ 1344.735849][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1344.745511][ T31] RBP: 00007fab47c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1344.754992][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.764003][ T31] R13: 00007fab47e16038 R14: 00007fab47e15fa0 R15: 00007ffe5c0faed8 [ 1344.773048][ T31] [ 1344.776498][ T31] [ 1344.776498][ T31] Showing all locks held in the system: [ 1344.785374][ T31] 1 lock held by rcu_preempt/16: [ 1344.797020][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.809516][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.820042][ T31] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1344.831778][ T31] 1 lock held by khungtaskd/31: [ 1344.839773][ T5937] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1344.851498][ T5937] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1344.860953][ T5937] usb 7-1: Manufacturer: syz [ 1344.868188][ T5937] usb 7-1: config 0 descriptor?? [ 1344.873465][ T31] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1344.921892][ T31] 5 locks held by kworker/u8:8/2991: [ 1344.927916][ T31] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1344.941122][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1344.951038][ T31] #2: ffff888043070788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x5c0 [ 1344.961653][ T31] #3: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 1344.972493][ T31] #4: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 1344.982385][ T31] 2 locks held by getty/5567: [ 1344.987761][ T31] #0: ffff888034bd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1345.001553][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1345.013576][ T31] 5 locks held by kworker/1:6/5937: [ 1345.020704][ T31] #0: ffff8880212c0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1345.035087][ T31] #1: ffffc90004937d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1345.053334][ T31] #2: ffff88802b6341e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1345.064387][ T31] #3: ffff88802b9f51e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1345.074297][ T31] #4: ffff88807bac71a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1345.084295][ T31] 2 locks held by syz.5.2747/18088: [ 1345.089593][ T31] #0: ffffffff906bf7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1345.098354][ T31] #1: ffffffff8ec59908 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1345.109365][ T31] 2 locks held by syz.1.2765/18145: [ 1345.115488][ T31] #0: ffffffff906bf7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1345.128952][ T31] #1: ffffffff8ec59908 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1345.140010][ T31] 4 locks held by udevd/19108: [ 1345.145333][ T31] #0: ffff88804611b2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1345.154297][ T31] #1: ffff8880598dc888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1345.165296][ T31] #2: ffff88802a9365a8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1345.175551][ T31] #3: ffff88802b9f51e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1345.196149][ T31] 2 locks held by syz.4.3307/19728: [ 1345.202092][ T31] #0: ffffffff906bf7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1345.211299][ T31] #1: ffffffff8ec59908 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1345.221932][ T31] [ 1345.224276][ T31] ============================================= [ 1345.224276][ T31] [ 1345.239460][ T31] NMI backtrace for cpu 1 [ 1345.239471][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.239487][ T31] Tainted: [L]=SOFTLOCKUP [ 1345.239491][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1345.239497][ T31] Call Trace: [ 1345.239501][ T31] [ 1345.239505][ T31] dump_stack_lvl+0x100/0x190 [ 1345.239536][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1345.239555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1345.239576][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1345.239591][ T31] sys_info+0x141/0x190 [ 1345.239601][ T31] watchdog+0xd25/0x1050 [ 1345.239623][ T31] ? __pfx_watchdog+0x10/0x10 [ 1345.239639][ T31] ? __kthread_parkme+0x18c/0x230 [ 1345.239657][ T31] ? kthread+0x13a/0x450 [ 1345.239666][ T31] ? __pfx_watchdog+0x10/0x10 [ 1345.239681][ T31] kthread+0x370/0x450 [ 1345.239691][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.239702][ T31] ret_from_fork+0x754/0xd80 [ 1345.239714][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.239727][ T31] ? __switch_to+0x7b4/0x1120 [ 1345.239741][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.239752][ T31] ret_from_fork_asm+0x1a/0x30 [ 1345.239772][ T31] [ 1345.239785][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1345.371744][ C0] NMI backtrace for cpu 0 [ 1345.371759][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.371779][ C0] Tainted: [L]=SOFTLOCKUP [ 1345.371783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1345.371791][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1345.371815][ C0] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1345.371828][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1345.371839][ C0] RAX: 0000000004a79745 RBX: ffffffff8e4975c0 RCX: ffffffff8b90fc75 [ 1345.371848][ C0] RDX: 0000000000000000 RSI: ffffffff8de7978e RDI: ffffffff8c1b17a0 [ 1345.371856][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 1345.371866][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 1345.371875][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9c010 [ 1345.371884][ C0] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 1345.371902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1345.371913][ C0] CR2: 00007f636abe92f8 CR3: 0000000079216000 CR4: 00000000003526f0 [ 1345.371922][ C0] Call Trace: [ 1345.371927][ C0] [ 1345.371932][ C0] default_idle+0x9/0x10 [ 1345.371945][ C0] default_idle_call+0x6c/0xb0 [ 1345.371957][ C0] do_idle+0x464/0x590 [ 1345.371975][ C0] ? __pfx_do_idle+0x10/0x10 [ 1345.371994][ C0] cpu_startup_entry+0x4f/0x60 [ 1345.372012][ C0] rest_init+0x251/0x260 [ 1345.372026][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1345.372045][ C0] start_kernel+0x47f/0x480 [ 1345.372061][ C0] x86_64_start_reservations+0x24/0x30 [ 1345.372078][ C0] x86_64_start_kernel+0x12b/0x130 [ 1345.372095][ C0] common_startup_64+0x13e/0x148 [ 1345.372116][ C0] [ 1345.570429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1345.577264][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.587922][ T31] Tainted: [L]=SOFTLOCKUP [ 1345.592218][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1345.602252][ T31] Call Trace: [ 1345.605513][ T31] [ 1345.608431][ T31] dump_stack_lvl+0x100/0x190 [ 1345.613098][ T31] vpanic+0x552/0x970 [ 1345.617053][ T31] ? __pfx_vpanic+0x10/0x10 [ 1345.621529][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1345.627665][ T31] panic+0xd1/0xe0 [ 1345.631371][ T31] ? __pfx_panic+0x10/0x10 [ 1345.635768][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1345.641902][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1345.648036][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1345.654172][ T31] ? watchdog.cold+0x198/0x1ca [ 1345.658916][ T31] ? watchdog+0xd35/0x1050 [ 1345.663321][ T31] watchdog.cold+0x1a9/0x1ca [ 1345.667896][ T31] ? __pfx_watchdog+0x10/0x10 [ 1345.672556][ T31] ? __kthread_parkme+0x18c/0x230 [ 1345.677566][ T31] ? kthread+0x13a/0x450 [ 1345.681789][ T31] ? __pfx_watchdog+0x10/0x10 [ 1345.686453][ T31] kthread+0x370/0x450 [ 1345.690507][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.695086][ T31] ret_from_fork+0x754/0xd80 [ 1345.699664][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1345.704754][ T31] ? __switch_to+0x7b4/0x1120 [ 1345.709414][ T31] ? __pfx_kthread+0x10/0x10 [ 1345.713992][ T31] ret_from_fork_asm+0x1a/0x30 [ 1345.718757][ T31] [ 1345.722032][ T31] Kernel Offset: disabled [ 1345.726331][ T31] Rebooting in 86400 seconds..