last executing test programs: 2m17.697067073s ago: executing program 1 (id=929): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000180)={0x5}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x440b0) 2m17.557448935s ago: executing program 1 (id=931): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x3510}], 0x1, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1004000}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x0, r4, r5, 0x3, 0x8, 0x7fff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m16.732563105s ago: executing program 1 (id=940): r0 = socket$inet(0x2, 0x6, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00100000000d6287e298e38b8"], 0x10) 2m16.666943748s ago: executing program 1 (id=942): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x5) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r4, &(0x7f0000004800)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000040)=0x8, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x1, 0x0, 0x2, 0x0}) (async) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340), 0x2000002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 2m16.605912895s ago: executing program 1 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1100, 0x4004a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2m16.456889811s ago: executing program 1 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x200440d4) r9 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) write$selinux_user(r6, 0x0, 0x0) 2m16.354983661s ago: executing program 32 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/98, 0x62}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x200440d4) r9 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) write$selinux_user(r6, 0x0, 0x0) 2m10.47247652s ago: executing program 3 (id=1019): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000003c0)="eaf03a3aac9d6905149ea64668d2ed4e0c0ff0a8663bbce6fbd7e1547fce37fd07ea3746dbcb5bf7ec7f578cfbbe9b62e382023899dca93e2ea82de9f26644d3028fc9acf9c4f1dfadaca0d17b1b8db6442cdb90c40cedf1ef2ad8d0f3d4a461c54bfe5ff033519cb8f0b979997bc3ad2ec3be71845ca0c19011831c1d7e38b7431b2370fe858245944b9334a7c6fc312f71772ee22455058bba5512341f7aa6f37eea2d7417206e3fb8f6757171fc53877d468ee478993fe9a3a5f38afdf3a8777453", 0xc3, 0x4040004, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0xb, 0x6, @random="83c2fda40382"}, 0x14) (async) sendto$packet(r1, &(0x7f00000003c0)="eaf03a3aac9d6905149ea64668d2ed4e0c0ff0a8663bbce6fbd7e1547fce37fd07ea3746dbcb5bf7ec7f578cfbbe9b62e382023899dca93e2ea82de9f26644d3028fc9acf9c4f1dfadaca0d17b1b8db6442cdb90c40cedf1ef2ad8d0f3d4a461c54bfe5ff033519cb8f0b979997bc3ad2ec3be71845ca0c19011831c1d7e38b7431b2370fe858245944b9334a7c6fc312f71772ee22455058bba5512341f7aa6f37eea2d7417206e3fb8f6757171fc53877d468ee478993fe9a3a5f38afdf3a8777453", 0xc3, 0x4040004, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0xb, 0x6, @random="83c2fda40382"}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x10000000, 0x6, 0x6}, 0x7e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 2m10.34581893s ago: executing program 3 (id=1022): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x403, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2404c080}, 0x48000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x2, 0x30d, 0x4, 0xd, 0x8, 0x7}}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x1) flock(r1, 0x1) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) fdatasync(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000080)='esdfs\x00', 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000013c0)={{r1, &(0x7f0000000100)='\x00', 0x1, &(0x7f0000000280)={@align=0x5, {0x8, 0x4, 0x0, 0x7fff}}, 0x1, &(0x7f00000002c0), &(0x7f0000000380)=0x6}, {[0x1e32, 0x7ffffffd, 0xf, 0x4]}, 0x7, 0x1000, &(0x7f0000001440)=""/4096}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 2m10.126648964s ago: executing program 3 (id=1024): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000000000000000000000000f5ffffffffffffff0000000000000000000002"], 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="77cb0dee80f463cf4582aac08ad363406e063144d91c0947d798eea2d3ae17690869981e0bba80cb83f7fab741d49bfb1ac4628e4550125b30448516cb3ee752fa054d353f814ce712119bf294cf5f16bd4ae39c58bd7314380d771f8dfdc41a9907348ed9870bd70de385", 0x6b) 2m10.063978449s ago: executing program 3 (id=1025): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x880000, &(0x7f0000000240)=':\x00') r0 = syz_clone(0x19aa9000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x10000040006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) writev(r4, &(0x7f0000000640)=[{&(0x7f0000001500)="e4", 0x1}], 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) 2m9.183820049s ago: executing program 3 (id=1027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x5) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x2, 0x0, 0xe, 0x8000000000000006}) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r11, &(0x7f0000000240)="8000647d03000000", 0x8, 0x0, &(0x7f0000000000)={0xa, 0x6e1b, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x20000000000006) request_key(0x0, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000340), 0x0, 0xe) 2m8.707504141s ago: executing program 3 (id=1029): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000380)=""/183, 0xb7, 0x20, &(0x7f0000000200)={0x1a, 0x10e, 0xd, 0x3, 0xe, 0x7, @link_local}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xbc}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x3, 'lblcr\x00'}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x51, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x1, @private1}, 0x1c) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="74eb8251c5393f5a03b160080072616e733d76697274696f2c64656275673d3078303030303030303030303030303030352c00"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}}, 0x9, 0x2, 0xb7ea, 0x6, 0x7}, &(0x7f00000001c0)=0x98) r6 = socket(0xa, 0x5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x2000c840) 2m8.647862218s ago: executing program 33 (id=1029): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000380)=""/183, 0xb7, 0x20, &(0x7f0000000200)={0x1a, 0x10e, 0xd, 0x3, 0xe, 0x7, @link_local}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xbc}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x3, 'lblcr\x00'}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x51, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x1, @private1}, 0x1c) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="74eb8251c5393f5a03b160080072616e733d76697274696f2c64656275673d3078303030303030303030303030303030352c00"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}}, 0x9, 0x2, 0xb7ea, 0x6, 0x7}, &(0x7f00000001c0)=0x98) r6 = socket(0xa, 0x5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x2000c840) 1m54.805953536s ago: executing program 2 (id=1258): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x602000, 0x4) (async) fanotify_init(0x1, 0x40000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x1, 0x1) getdents64(r3, &(0x7f0000000400)=""/4090, 0xffa) 1m54.657075509s ago: executing program 2 (id=1259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000000, 0xe0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in=@empty}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0xe, 0x6}, {0x391a, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0xfe, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2d, 0x0, 0x2}}]}, 0x154}}, 0x0) 1m54.656106618s ago: executing program 2 (id=1261): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000040)='./file0\x00', 0x800) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="18eb5bb46b0e940f64eeb62e5104b94229db4abd114d8ccb87a56a575b3c2cc8d354d338b2466aa697832f2da09e20bf04e6833c98b86d867b49a4177dfbb09eaff99d16fb599b3b3c50ba5d52e1cd574c26781b4897ffedc04e745895644fa8b809a37b66e764a8b8c2b9b21c246adde6d04542b00c4cdc973f19e0a99f68a327068457b7657100e6bd5b35b9c0f722f7316b0e9e0df387d629cbabd58af1eca3011e168fab229b7ffeed1935f84655aa6fcf7f5c84a2afdc531ceee01a34c8d3c0d201cc864478c88ad271524628c982f3d20da9af1b729a6557242de0807faaf6a001eaaac15b08bc0b", 0xeb}, {&(0x7f0000000180)="8e1425061bed2195efb024a1c1b3915ad4e312c085ba29fff183a2f47455e1", 0x1f}, {&(0x7f00000001c0)="2feee4503602b91c75f9445c446103be697c96e124178bcfb2fc49be800cafb695987800b2f9974f83a2bebc8dc0ef2d86cd50222e10641d69338980b5d002abd7822d99a961dfb38dba82dee30ac6b3a4aa7dca716bb8b7d22aebba05ff466bc6f7d44fdbfdde82ca6e3361c9a80ca34229522c0bc6df5544d82c9cf7270a091faf5b7890570ae92c619e1bd04f122c9e925247e0ab4191295d1a7ef6", 0x9d}, {&(0x7f0000000280)="deb0b6d105be077ca13c784ed6027b409b80b7d59dcfbbd34fb7b1326e2a1c11735c7ec1ca1e51d125ddf9eae4be3be88530f22e428eae950de49c0f509d6d2c665c9d3450de5fed559eccb9b137717cb0796ce1d05e3dbcaa2d1bcc1ee38d756b6f35d09df32e6b4829e7f8adfe208d1670f027bcb3252120b36d55a6d3ecf66f7593c7327b1a5400efc9f66a722fb38da5b36a9c772b7644d5293a0f80d85cd785606275169cfc2d9e83e6efa5bc1a96323798a73d7143a143e9d4e39c4cef8fef688e18fe363f5d3c8247f732c81abf9930869546a47506fa9bd300ea671189c665eae4784c5a9fe9efaa98a7c5ba02bdc657d22c934739", 0xf9}, {&(0x7f0000000380)="fd9da75f5216ae9bdee09802e09db6b0e3459a7802822c1db86966bf3e5bee957241df6110e0c368e2eaab531369975bd1d6ce4418f8b436273c1e388f8013b2aadbe1321af03e913c351685bed990719a418a112d84732de07379deec42b702b2f88d1cec80f8c965730d190fc71bfbe652ab61353e700257e26cf7f51b9a3a3ed6c7a381e87e99d6d826c08677d89a36265396ec0f777e71f3d722100cf45a15f88754baa993d5008b284f180688ba95e464eb1d5d408a62669a3ef1a1f4652cab43eb097a826d9a615ae73ce69f2d35e65bb66c26d08ca6a4cee93ba7fa0353a7e85eb3389ae2802d952818c5b728", 0xf0}], 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f0000002540)='net/l2cap\x00') ioctl$KVM_CAP_STEAL_TIME(r5, 0x4068aea3, &(0x7f0000002580)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000002600)={0x4, 0x2, 0x8}) fcntl$setlease(r5, 0x400, 0x2) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x40, 0x4) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f00000026c0)) syz_io_uring_setup(0x4665, &(0x7f0000002ac0)={0x0, 0x415e, 0x1, 0x0, 0x27c, 0x0, r5}, &(0x7f0000002b40), &(0x7f0000002b80)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', 0x8000, 0x0) renameat2(r9, &(0x7f0000002c00)='./file0\x00', r7, &(0x7f0000002c40)='./file0\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000002c80)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) fstat(r9, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002d80)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000002e00)={0x10, 0x30, 0xfa00, {&(0x7f0000002d40), 0x4, {0xa, 0x4e20, 0x6, @loopback, 0x2}, r12}}, 0x38) recvmsg$inet_nvme(r5, &(0x7f00000031c0)={&(0x7f0000002e40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002ec0)=""/125, 0x7d}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000003040)=""/64, 0x40}], 0x3, &(0x7f00000030c0)=""/233, 0xe9}, 0x2100) fsync(r8) fcntl$getown(r8, 0x9) mount$afs(&(0x7f0000003200)=@cell={0x25, '', 'syz0'}, &(0x7f0000003240)='./file1\x00', &(0x7f0000003280), 0x8, &(0x7f00000032c0)={[{}, {@flock_strict}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r10}}, {@fsname={'fsname', 0x3d, '%\xbc\xfb-)'}}, {@smackfshat={'smackfshat', 0x3d, 'net/l2cap\x00'}}, {@subj_user}, {@obj_type={'obj_type', 0x3d, '/dev/cuse\x00'}}, {@obj_type}, {@obj_role}]}) openat$incfs(r5, &(0x7f0000003380)='.log\x00', 0xc200, 0x20) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000033c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2e, r13}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000003400)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000004400)={{0x0, 0x6, 0x181, 0x650, 0x3, 0x9, 0x8, 0x8001, 0xc5, 0x7ff, 0x5, 0x1b60, 0xfff, 0xe9, 0xffffffff}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000044c0)={r14, r15, "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", "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"}) sendmsg$NFT_BATCH(r5, &(0x7f00000056c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005680)={&(0x7f0000005500)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x525a083c788b056b}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "1edf491057d7f391e3d7d49259df20326e76747f6703002af90c5a3c14983087fa012364e274"}, @NFTA_TABLE_USERDATA={0x35, 0x6, "38366134d84a7d8a6f8682067182e66d9369ff7c9ff32e7844ccf6e8a414d15f9cf0af39bdd9cf36e26d3cabd1ebf4bbf3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x150}, 0x1, 0x0, 0x0, 0xe000000}, 0x4000) setxattr$system_posix_acl(&(0x7f0000005700)='./file0\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000005a80)={{}, {}, [{0x2, 0x4, r10}, {0x2, 0x4, r2}, {0x2, 0x4}, {0x2, 0x4, r2}, {0x2, 0x7, 0xee00}, {0x2, 0x4, r2}, {0x2, 0x2, r2}, {0x2, 0x0, r10}], {0x4, 0x3}, [{0x8, 0x2, r11}, {0x8, 0x4, r3}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x7}, {0x8, 0x4, r3}], {0x10, 0x4}}, 0x94, 0x2) 1m54.577326038s ago: executing program 2 (id=1262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245", 0x6f}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f1702", 0x92}], 0x2, 0x0, 0x0, 0x4040010}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b7d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000480)={r4, 0xf, 0x5, 0x2, 0x0, [], [0x8, 0x1ff, 0x2, 0x1ff], [0x0, 0x800, 0x2, 0xf], [0x7, 0x8, 0x6, 0x10]}) 1m54.57523921s ago: executing program 2 (id=1263): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) close_range(r2, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_elf64(r4, 0x0, 0x831) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4000003e, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4001, @remote, 'dvmrp0\x00'}}) 1m54.496588984s ago: executing program 2 (id=1266): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ftruncate(r0, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4090) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000540)={r4, 0x5a6, 0x400}) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x1000408, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000a00)={0x6, 0x6, {0x0}, {0xee01}, 0x7fffffff, 0x5aa19c7e}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000a80)={{0x1, 0x1, 0x9, 0xffffffdd, 'syz0\x00', 0x9b7}, 0x4, 0x22, 0x3, r5, 0x3, 0xe2, 'syz1\x00', &(0x7f0000000a40)=['802.15.4 MAC\x00', 'wpan4\x00', '\x00'], 0x14}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d00)={0x2, 0x0, [{0xdddd1000, 0x3f, &(0x7f0000000c00)=""/63}, {0x100000, 0x89, &(0x7f0000000c40)=""/137}]}) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000d80)=0x10000, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000012c0)={0x7, 0x0, [{0xffff1000, 0x7d, &(0x7f0000000e00)=""/125}, {0x8000000, 0xf7, &(0x7f0000000e80)=""/247}, {0x3000, 0x94, &(0x7f0000000f80)=""/148}, {0xb000, 0x81, &(0x7f0000001040)=""/129}, {0x8080000, 0x6, &(0x7f0000001100)=""/6}, {0x8080000, 0x66, &(0x7f0000001140)=""/102}, {0xe6d52000, 0xd4, &(0x7f00000011c0)=""/212}]}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x100010, r6, 0x6000) r9 = syz_clone(0x80000, &(0x7f0000001500)="4a2aedee4cef8edb602f180f15750fc2d74c53da234b1a47dd3343ce865616d589f34e9e9e8590e0f6b4db4aee34d1c3de7b67ab17", 0x35, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="8dfa6eb0d4b425dee7066a2f722aaa6a57df2b6022fea2a25d9497dcd9beb06034ac78b69f904c9c9bd4503dc60681c1") r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001600), 0x101100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001640)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000001680)={0x1d, r11}, 0x10) gettid() sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000854) ioprio_get$pid(0x1, r9) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r10, 0x80045530, &(0x7f00000017c0)=""/127) fcntl$setown(r6, 0x8, r9) ioctl$TIOCSCTTY(r10, 0x540e, 0x7) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000001840)=""/88) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000018c0)={r3, "bd40a9cd193c3de46cc90127a5292a7d"}) 1m34.863752803s ago: executing program 34 (id=1266): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ftruncate(r0, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4090) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000540)={r4, 0x5a6, 0x400}) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x1000408, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000a00)={0x6, 0x6, {0x0}, {0xee01}, 0x7fffffff, 0x5aa19c7e}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000a80)={{0x1, 0x1, 0x9, 0xffffffdd, 'syz0\x00', 0x9b7}, 0x4, 0x22, 0x3, r5, 0x3, 0xe2, 'syz1\x00', &(0x7f0000000a40)=['802.15.4 MAC\x00', 'wpan4\x00', '\x00'], 0x14}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d00)={0x2, 0x0, [{0xdddd1000, 0x3f, &(0x7f0000000c00)=""/63}, {0x100000, 0x89, &(0x7f0000000c40)=""/137}]}) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000d80)=0x10000, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000012c0)={0x7, 0x0, [{0xffff1000, 0x7d, &(0x7f0000000e00)=""/125}, {0x8000000, 0xf7, &(0x7f0000000e80)=""/247}, {0x3000, 0x94, &(0x7f0000000f80)=""/148}, {0xb000, 0x81, &(0x7f0000001040)=""/129}, {0x8080000, 0x6, &(0x7f0000001100)=""/6}, {0x8080000, 0x66, &(0x7f0000001140)=""/102}, {0xe6d52000, 0xd4, &(0x7f00000011c0)=""/212}]}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x100010, r6, 0x6000) r9 = syz_clone(0x80000, &(0x7f0000001500)="4a2aedee4cef8edb602f180f15750fc2d74c53da234b1a47dd3343ce865616d589f34e9e9e8590e0f6b4db4aee34d1c3de7b67ab17", 0x35, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="8dfa6eb0d4b425dee7066a2f722aaa6a57df2b6022fea2a25d9497dcd9beb06034ac78b69f904c9c9bd4503dc60681c1") r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001600), 0x101100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001640)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f0000001680)={0x1d, r11}, 0x10) gettid() sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000854) ioprio_get$pid(0x1, r9) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r10, 0x80045530, &(0x7f00000017c0)=""/127) fcntl$setown(r6, 0x8, r9) ioctl$TIOCSCTTY(r10, 0x540e, 0x7) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000001840)=""/88) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000018c0)={r3, "bd40a9cd193c3de46cc90127a5292a7d"}) 5.894890756s ago: executing program 6 (id=2693): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200000, 0x0, 0x1c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e24, 0x835, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x87, 0x0, r2}, {0x9, 0x3, 0x0, 0x3, 0x2b13, 0x0, 0x1ff, 0x1000}, {0x2, 0x80000001, 0x2, 0x3}, 0x700000, 0x6e6bb1, 0x2, 0x1, 0x2, 0x1}, {{@in6=@private0, 0x4d2, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3, 0x2, 0x6, 0x4, 0x3, 0x80}}, 0xe8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000140)="24000000010006", 0x7) (async) write(r3, &(0x7f0000000140)="24000000010006", 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x40, @mcast1, 0x6e9}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x45, 0x0, "9ff87bb50db988f82d8be6facaba9b497cae303f06ed65d2a919f46f7cf703a19381c366e9bb18b5fd5bc826ce251502217b64c17acf69c7303e65c39e904dab3f8bec92fe564625f189b363fd82f275"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x45, 0x0, "9ff87bb50db988f82d8be6facaba9b497cae303f06ed65d2a919f46f7cf703a19381c366e9bb18b5fd5bc826ce251502217b64c17acf69c7303e65c39e904dab3f8bec92fe564625f189b363fd82f275"}, 0xd8) 5.831712835s ago: executing program 6 (id=2696): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa42501, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = fsmount(r1, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e24, @remote}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x40}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000100)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) 5.762553345s ago: executing program 6 (id=2699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x4, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 5.576487625s ago: executing program 6 (id=2707): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}]}) 3.816438051s ago: executing program 0 (id=2735): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf2]) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 2.644023864s ago: executing program 0 (id=2741): r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077ef5d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$setperm(0x5, r0, 0x4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r2, &(0x7f0000000480)) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="a3", 0x1}, {&(0x7f0000000200)="01b8c3add6ed8bbf62b051f09f78aea121016867f4174c51d9f760fd5e67b7255d5b8bce", 0x24}, {&(0x7f0000000240)="70fc7e0f68d3bb76ffc0a7b4b69b440b1b1fed6416476c7bce19b71cf9a67732f499f0f77385b96864d65bf708696cec5905ae6edf6ae53062da49e09b1456c38eca6177c7b6d22da57101a78924168253daf695495edf2eb78c1684503661405dd3f3cea7115c7c80", 0x69}], 0x3, 0x0, 0x0, 0x4084084}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8087}, 0x81) recvmmsg(r3, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 2.53266476s ago: executing program 6 (id=2743): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f00000005c0)='%'}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008090) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000040)={0x4d, 0x9ad, 0xc, 0xb, 0x6, 0x81}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0xffff629f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 2.530122697s ago: executing program 6 (id=2745): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3a, 0xb, 0x8d}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xff, 0x4, 0x81, 0x10, 0x8}, 0xb, &(0x7f00000001c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x25, &(0x7f0000000200)=ANY=[@ANYBLOB="25033d2fbf63600ac218442e082f940c8d76fcbb72b7e70bd9c7fb0d09b12713668c0ec9c6"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0x94, &(0x7f0000000380)=@string={0x94, 0x3, "e1402df37790d2b13164568070ef011ac9362daccb5af25316cff4ae8350e1130ed00d8149a39dadf32ce925cd2f92a2a8adac483a61087104484400c257ce69bfbee04d1e7a5b192d444995f57252e8b5ce926ed51f1436889f19e459e4943f48673ed25dc95af9080e8c129e43fcdf6325468d89f812ed093aac3b763052dcd1f5acf02814ad318c105565885ff67148da"}}, {0x47, &(0x7f00000002c0)=@string={0x47, 0x3, "e1a8187ea1bddfe0819178a5a3c2be5ca7646c50fdc1e9c8828c1eda7ba68c0c82eac2ee0e5191ac6a9bca03854453360ab88dafbca0dcf8d57cfa99defda6e2ba531f7130"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "611cc445c843fba0e86f8ed2a4069a702c54b034f4f4554b6a2cab4b9a343d1f7595d23e432900a8dd4958b4d742ceda739f9604c0ec77a009a25f34a257e5fec635643cc8263390305ba9892e3a55baeddcb477ce6e9538ff564eb2e96a35f99c52544c3704826dc54de034010493f4402152101514b8aab3bb11fa74f94759d72c65"}}]}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) connect$rose(r1, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) r2 = gettid() rt_tgsigqueueinfo(r0, r2, 0x1d, &(0x7f0000000080)={0x8, 0x0, 0x4}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000740)=""/377, 0x179) (async) read(r3, &(0x7f0000000740)=""/377, 0x179) mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='omfs\x00', 0x200000, 0x0) 1.806239047s ago: executing program 0 (id=2763): timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000140)=@sha1={0x1, "d957a0ac0b828186a3ce70bb005ee120f30a4538"}, 0x9, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="400200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_TIMEOUT(r6, 0xab09, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff5366"], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) fsopen(&(0x7f0000000480)='exfat\x00', 0x0) 1.566135977s ago: executing program 5 (id=2769): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.496356891s ago: executing program 5 (id=2770): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101580, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000c45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 746.073263ms ago: executing program 4 (id=2772): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x0, {0x2, 0x3, @empty}, 'caif0\x00'}) r5 = socket(0x18, 0x5, 0x0) recvmmsg(r5, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000080)="d88666770c1a2637f21fe885d40aa339c53dcf0e3a8b3b7509a5ad6aadb61f84d47fb0108931428e04f90606be9cb3e409bb4c3fb29eb6916c9a6f4fd37238a47124bc40575a4c4d86166384d5e70d540f2ac3eb4f68bd822f52b37f9f8f0a75d98ae17c524b4ce905ecb296c610b8211ad9ad4027", 0x75) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000840000ac1414aaac1e0001341517c1b72badc7"], 0x0) 414.12594ms ago: executing program 0 (id=2773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x37) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000a40)={0x2, 'sit0\x00', {}, 0x7}) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000000400028008000500"/32, @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) openat$cgroup_type(r6, &(0x7f00000009c0), 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) connect$inet(r4, &(0x7f0000000980)={0x2, 0x4e23, @private=0xa010101}, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28f54fe2e6c8023509f62008bd14de938f334d816e80fee70b453dce97d37d25d4741f3169acffdc261386f1a6be735296fb343d4cbbe62da2329333e0", @ANYRES16=r11, @ANYBLOB="000227bd7000fcdbdf256d00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099008100000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) getsockopt(r4, 0xb, 0x3, &(0x7f00000006c0)=""/71, &(0x7f0000000740)=0x47) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090000000000000000008100000008000300", @ANYRES32=r10, @ANYBLOB="0a000600ffffffffffff000006006600c78800002600330048970400080211000000ffffffffffff0802110000017e000802110000000e008241000004006700"], 0x5c}, 0x1, 0x3a000000}, 0x800) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x50, r12, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc015) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xa0, r12, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TESTDATA={0x82, 0x45, "388c1d93f31a275efbeaf62c596ead78dc61a96709bde1286af9e4b6f15991830303b9b12514b1cf9551c8b70480b32ad3f070792f29717a21e0121216967a6a2f7d65d79a19111578f8ba87a4bf712898acd1acac0a0ecd063561b29d01bb863692b997491df0bbe5800b9a2bf664a3f22b907ff4e7b34a08acdf7f434c"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x881) 413.580988ms ago: executing program 4 (id=2774): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async, rerun: 64) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012bf14000000000000000000fe80000000000000000000000000002bfffffffd0000000014000d00200100000000000000000000000000000c001a"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400150000fddbdf25000000006c120cb6dc9fbe1952865eac2a4db8f832e86f5f51fc74d3b3132eb2d038e6a9b2dea48a04e231387af371069a5f36db99324b09e41b963d64e3b4ae1e0707b3449672aa200236f6640daacf8c1b8b0beb0fb305cfe8fc210b35210fa979b22ec305ff44213cd8b611c6f681efec4a862870d57924c0c0cd7938b9eed2b3cf6575654638", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104000000000000000000"], 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d09918", 0x6}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async, rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) listen(r3, 0x2) (rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000004c0)={0x0, 0x0, "0a0f15525a559f73d7235ac263a81bfd"}) (async) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000340)={'lo\x00', {0x2, 0x0, @multicast1}}) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (rerun: 64) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000104fcfffffffbdbdf25000000008749862c6f6b6a6c24d2caad791a1d65745d34171e530285e642da249b9c7c33863c00f5e2270f04ac8c71f96e6bc56d16a6c9b0695b83a892d7e84ceca26dffd6920082397e4a1e71478140d8b7614361d635189d011d1568e2135347ea0a29e9d84597da6f62ae4218eab58b61cd5f780febd3d246cf2d8656623b991c282ddafc9df004fa337667", @ANYRES32=r1, @ANYBLOB="05150000040000001c00128009000100626f6e64000000000c00028005000c0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 346.247091ms ago: executing program 0 (id=2775): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000bf2e54b900000000fbffffffffffffff000000000000000000000000000000000000000000000002010000000000000000000000000000000000000000000c0015005a07350081000000"], 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001500018b"], 0xb8}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, &(0x7f0000001b00)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffff8}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9e14}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1c45}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000080)=0x1, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 345.755391ms ago: executing program 4 (id=2776): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}], 0x10) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4000004}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='{', 0x1}], 0x1}, 0x20048843) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) (async) shutdown(r1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 345.611292ms ago: executing program 4 (id=2777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x6, 0x8, &(0x7f0000000000)={0x10, "e922604a455494c905fd8208ff08000000000000000000000000080800"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x119) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x2, 0x18, 0x30}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_format(r4, &(0x7f00000018c0)='-1\x00', 0x3) unlinkat(r4, &(0x7f00000001c0)='./file0\x00', 0x200) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) 286.381496ms ago: executing program 5 (id=2778): io_setup(0x8, &(0x7f0000004200)) io_setup(0xffffffff, &(0x7f0000000240)) io_setup(0x3083, &(0x7f0000000000)) io_setup(0xa, &(0x7f0000000040)) io_setup(0x8, &(0x7f00000001c0)) io_setup(0x8, &(0x7f0000004200)) (async) io_setup(0xffffffff, &(0x7f0000000240)) (async) io_setup(0x3083, &(0x7f0000000000)) (async) io_setup(0xa, &(0x7f0000000040)) (async) io_setup(0x8, &(0x7f00000001c0)) (async) 236.199546ms ago: executing program 0 (id=2779): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24ff00000000", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000280)="f91d9189", 0x4}, {&(0x7f0000000cc0)="0654d8b5ff4fb33ab7cad4f27786", 0xe}], 0x5) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) 124.667367ms ago: executing program 5 (id=2780): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x2}}) (async) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) (async) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) (async) read$char_usb(r4, &(0x7f0000000100)=""/67, 0x43) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 122.408097ms ago: executing program 4 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbbc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004100) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x2, 0x6, 0x5, 0x7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfffffffa, 0xc, 0x6, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'veth0_virt_wifi\x00', {0x2, 0x4e20, @loopback}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r6, 0x8921, &(0x7f0000000040)="a43a") 56.77323ms ago: executing program 5 (id=2782): set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) (async) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0680, 0x3a, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) 4.106054ms ago: executing program 4 (id=2783): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000001a00)=""/240, &(0x7f0000000800)=""/96, &(0x7f00000000c0)=""/112, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001940)={0x4, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x70000, 0x1000, &(0x7f0000000880)=""/4096}, {0xdddd0000, 0xb6, &(0x7f0000001880)=""/182}, {0xdddd1000, 0xd, &(0x7f00000002c0)=""/13}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7, 0x1}) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) memfd_secret(0x0) 0s ago: executing program 5 (id=2784): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[r1, r1, r1], 0x0, 0x4000020c}) kernel console output (not intermixed with test programs): xfrm0 speed is unknown, defaulting to 1000 [ 194.726392][ T6230] usb 5-1: USB disconnect, device number 28 [ 194.726986][T12734] xfrm0 speed is unknown, defaulting to 1000 [ 194.741851][ T61] usb usb10-port1: unable to enumerate USB device [ 194.881719][ T6230] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 195.043764][ T6230] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 195.046385][ T6230] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.049436][ T6230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.053311][ T6230] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.056157][ T6230] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.058712][ T6230] usb 5-1: Product: syz [ 195.060033][ T6230] usb 5-1: Manufacturer: syz [ 195.061927][ T6230] usb 5-1: SerialNumber: syz [ 195.067031][ T6230] usb 5-1: config 0 descriptor?? [ 195.074214][ T6230] hub 5-1:0.0: bad descriptor, ignoring hub [ 195.076721][ T6230] hub 5-1:0.0: probe with driver hub failed with error -5 [ 195.082040][ T6230] usb 5-1: selecting invalid altsetting 0 [ 195.541886][ T10] usb 5-1: USB disconnect, device number 29 [ 195.867501][T12795] overlayfs: conflicting lowerdir path [ 195.985191][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1888'. [ 196.020962][T12800] vxlan0: entered promiscuous mode [ 196.034114][ T9634] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.037727][ T9634] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.042704][ T9634] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.046407][ T9634] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.109465][T12799] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 196.243090][T12818] smc: net device bond0 applied user defined pnetid SYZ2 [ 196.310057][T12825] netlink: 'syz.5.1897': attribute type 10 has an invalid length. [ 196.318349][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.323249][T12825] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 196.329451][T12825] netlink: 'syz.5.1897': attribute type 10 has an invalid length. [ 196.332920][T12825] batadv0: entered promiscuous mode [ 196.335393][T12825] batadv0: entered allmulticast mode [ 196.338721][T12825] bond0: (slave batadv0): Releasing backup interface [ 196.348667][T12825] bridge0: port 3(batadv0) entered blocking state [ 196.354486][T12825] bridge0: port 3(batadv0) entered disabled state [ 196.410050][T12829] : renamed from wg2 (while UP) [ 196.611648][ T6230] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 196.661853][ T9634] batman_adv: batadv0: IGMP Querier appeared [ 196.664082][ T9634] batman_adv: batadv0: MLD Querier appeared [ 196.760920][ T39] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 196.767099][ T6230] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.778825][ T6230] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.781873][ T6230] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 196.785701][ T6230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.800531][ T6230] usb 9-1: config 0 descriptor?? [ 196.814244][ T6230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 196.818983][ T6230] dvb-usb: bulk message failed: -22 (3/0) [ 196.828517][ T6230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.832946][ T6230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.836138][ T6230] usb 9-1: media controller created [ 196.840607][ T6230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.858562][ T6230] dvb-usb: bulk message failed: -22 (6/0) [ 196.861256][ T6230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.867237][ T6230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input24 [ 196.874376][ T6230] dvb-usb: schedule remote query interval to 150 msecs. [ 196.876688][ T6230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.911617][ T39] usb 10-1: device descriptor read/64, error -71 [ 196.964588][T12850] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 197.016354][ T58] usb 9-1: USB disconnect, device number 15 [ 197.051073][ T58] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.151564][ T39] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 197.153394][T12856] overlayfs: cannot append lower layer [ 197.281557][ T39] usb 10-1: device descriptor read/64, error -71 [ 197.343208][T12873] lo speed is unknown, defaulting to 1000 [ 197.345087][T12873] lo speed is unknown, defaulting to 1000 [ 197.347210][T12873] lo speed is unknown, defaulting to 1000 [ 197.354686][T12873] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.370669][T12873] lo speed is unknown, defaulting to 1000 [ 197.374817][T12873] lo speed is unknown, defaulting to 1000 [ 197.377927][T12873] lo speed is unknown, defaulting to 1000 [ 197.380926][T12873] lo speed is unknown, defaulting to 1000 [ 197.384263][T12873] lo speed is unknown, defaulting to 1000 [ 197.403081][ T39] usb usb10-port1: attempt power cycle [ 197.532253][T12877] kvm: kvm [12876]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 197.535572][T12877] kvm: kvm [12876]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 197.557343][T12877] kvm: kvm [12876]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 197.583610][T12877] kvm: kvm [12876]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 197.587929][T12877] kvm: kvm [12876]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 197.741598][ T39] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 197.763821][ T39] usb 10-1: device descriptor read/8, error -71 [ 197.893692][ T40] kauditd_printk_skb: 290 callbacks suppressed [ 197.893708][ T40] audit: type=1400 audit(2000000036.369:35558): avc: denied { create } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.904592][ T40] audit: type=1400 audit(2000000036.369:35559): avc: denied { bind } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.913148][ T40] audit: type=1400 audit(2000000036.369:35560): avc: denied { setopt } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.921137][ T40] audit: type=1400 audit(2000000036.369:35561): avc: denied { accept } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.929646][ T40] audit: type=1400 audit(2000000036.369:35562): avc: denied { write } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.937861][ T40] audit: type=1400 audit(2000000036.369:35563): avc: denied { read } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.946386][ T40] audit: type=1400 audit(2000000036.369:35564): avc: denied { create } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.955011][ T40] audit: type=1400 audit(2000000036.369:35565): avc: denied { connect } for pid=12890 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.981581][ T5284] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 198.001551][ T39] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 198.032162][ T39] usb 10-1: device descriptor read/8, error -71 [ 198.102097][T12898] mkiss: ax0: crc mode is auto. [ 198.104161][ T40] audit: type=1400 audit(2000000036.579:35566): avc: denied { read } for pid=5642 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 198.113685][ T40] audit: type=1400 audit(2000000036.589:35567): avc: denied { search } for pid=5642 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.121587][ T5284] usb 9-1: device descriptor read/64, error -71 [ 198.151801][ T39] usb usb10-port1: unable to enumerate USB device [ 198.311025][T12905] __nla_validate_parse: 6 callbacks suppressed [ 198.311036][T12905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1923'. [ 198.334703][T12905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1923'. [ 198.338121][T12905] bridge_slave_1: entered promiscuous mode [ 198.340117][T12905] bridge_slave_1: entered allmulticast mode [ 198.364291][ T5284] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 198.501583][ T5284] usb 9-1: device descriptor read/64, error -71 [ 198.511080][T12915] FAT-fs (sr0): bogus number of reserved sectors [ 198.513433][T12915] FAT-fs (sr0): Can't find a valid FAT filesystem [ 198.559788][T12917] syz.6.1927: attempt to access beyond end of device [ 198.559788][T12917] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 198.565571][T12917] gfs2: error -5 reading superblock [ 198.614721][ T5284] usb usb9-port1: attempt power cycle [ 198.654800][T12924] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 198.784418][T12933] program syz.6.1932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.844195][T12942] netlink: 'syz.6.1936': attribute type 1 has an invalid length. [ 198.961589][ T5284] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 198.982835][ T5284] usb 9-1: device descriptor read/8, error -71 [ 199.093366][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.106483][T12965] ubi0: attaching mtd1 [ 199.108183][T12965] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 199.192951][T12965] xfrm0 speed is unknown, defaulting to 1000 [ 199.195686][T12965] lo speed is unknown, defaulting to 1000 [ 199.221605][ T5284] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 199.241980][ T5284] usb 9-1: device descriptor read/8, error -71 [ 199.296360][T12976] option changes via remount are deprecated (pid=12975 comm=syz.0.1946) [ 199.300280][T12976] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 199.361737][ T5284] usb usb9-port1: unable to enumerate USB device [ 199.373474][ T9634] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.382025][ T9634] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.385064][ T9634] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.391698][ T9634] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.455970][T12991] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 199.485968][T12995] afs: Unknown parameter '' [ 199.759780][T13020] binder: 13010:13020 ioctl c0306201 2000000003c0 returned -14 [ 199.977964][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 200.251647][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 200.381580][ T10] usb 5-1: device descriptor read/64, error -71 [ 200.578324][T13038] fuse: Bad value for 'rootmode' [ 200.584065][T13037] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 200.584065][T13037] program syz.5.1964 not setting count and/or reply_len properly [ 200.641598][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 200.658487][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 200.662107][T13047] netlink: 'syz.6.1967': attribute type 21 has an invalid length. [ 200.669089][T13049] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 200.689332][T13049] bond2: entered promiscuous mode [ 200.692733][T13049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.714001][T13049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.717170][T13049] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 200.717190][T13049] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 200.720290][T13049] bond2: (slave xfrm1): making interface the new active one [ 200.728403][T13049] xfrm1: entered promiscuous mode [ 200.732043][T13049] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 200.744195][T13054] program syz.6.1970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.781550][ T10] usb 5-1: device descriptor read/64, error -71 [ 200.895596][ T10] usb usb5-port1: attempt power cycle [ 201.041620][ T5941] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 201.192801][ T5941] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.196794][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.200323][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.204066][ T5941] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.208276][ T5941] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.211290][ T5941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.217522][ T5941] usb 10-1: config 0 descriptor?? [ 201.231687][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 201.252218][ T10] usb 5-1: device descriptor read/8, error -71 [ 201.504591][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 201.533149][ T10] usb 5-1: device descriptor read/8, error -71 [ 201.596781][T13097] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 201.596781][T13097] program syz.4.1983 not setting count and/or reply_len properly [ 201.631109][ T5941] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 201.641430][ T5941] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 201.651749][ T10] usb usb5-port1: unable to enumerate USB device [ 201.707450][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 201.793987][T13117] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1988'. [ 201.797153][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 201.902867][T13119] md: md2 stopped. [ 201.933957][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 201.936800][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1972'. [ 201.940091][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 201.971795][T13125] netfs: Couldn't get user pages (rc=-14) [ 202.033292][T13129] io-wq is not configured for unbound workers [ 202.155048][T13134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.185466][T13134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.221087][T13136] gfs2: not a GFS2 filesystem [ 202.456851][T13143] vxfs: WRONG superblock magic 00000000 at 1 [ 202.459470][T13143] vxfs: WRONG superblock magic 00000000 at 8 [ 202.461806][T13143] vxfs: can't find superblock. [ 203.013782][ T40] kauditd_printk_skb: 266 callbacks suppressed [ 203.013793][ T40] audit: type=1400 audit(2000000041.489:35834): avc: denied { write } for pid=13144 comm="syz.4.1997" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.058688][ T40] audit: type=1400 audit(2000000041.529:35835): avc: denied { setopt } for pid=13150 comm="syz.0.1998" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.063976][T13151] pim6reg: entered allmulticast mode [ 203.100440][ T40] audit: type=1400 audit(2000000041.569:35836): avc: denied { create } for pid=13155 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.108506][ T40] audit: type=1400 audit(2000000041.569:35837): avc: denied { bind } for pid=13155 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.235662][ T40] audit: type=1400 audit(2000000041.709:35838): avc: denied { create } for pid=13155 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.256349][ T40] audit: type=1400 audit(2000000041.729:35839): avc: denied { perfmon } for pid=13181 comm="syz.6.2002" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.264265][ T40] audit: type=1400 audit(2000000041.729:35840): avc: denied { map_read map_write } for pid=13181 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.309607][ T40] audit: type=1400 audit(2000000041.779:35841): avc: denied { create } for pid=13187 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.317317][ T40] audit: type=1400 audit(2000000041.779:35842): avc: denied { write } for pid=13187 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.326063][T13159] cgroup: fork rejected by pids controller in /syz4 [ 203.327229][ T40] audit: type=1400 audit(2000000041.779:35843): avc: denied { nlmsg_write } for pid=13187 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.554516][T13209] __nla_validate_parse: 2 callbacks suppressed [ 203.554528][T13209] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2005'. [ 203.612807][T13213] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 203.739106][ T61] usb 10-1: USB disconnect, device number 13 [ 203.831563][ T10] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 203.961822][ T10] usb 11-1: device descriptor read/64, error -71 [ 204.013484][T13244] random: crng reseeded on system resumption [ 204.018060][T13244] PM: hibernation: Image mismatch: memory size [ 204.221575][ T10] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 204.351586][ T10] usb 11-1: device descriptor read/64, error -71 [ 204.372450][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2012'. [ 204.461930][ T10] usb usb11-port1: attempt power cycle [ 204.801702][ T10] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 204.832900][ T10] usb 11-1: device descriptor read/8, error -71 [ 204.997278][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2027'. [ 205.001156][T13302] bridge0: port 3(batadv0) entered disabled state [ 205.006619][T13302] bridge_slave_1: left allmulticast mode [ 205.008749][T13302] bridge_slave_1: left promiscuous mode [ 205.010696][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.014789][T13302] bridge_slave_0: left allmulticast mode [ 205.016833][T13302] bridge_slave_0: left promiscuous mode [ 205.019245][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.051671][ T5284] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 205.092489][ T10] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 205.112247][ T10] usb 11-1: device descriptor read/8, error -71 [ 205.221577][ T5284] usb 9-1: Using ep0 maxpacket: 32 [ 205.223787][ T10] usb usb11-port1: unable to enumerate USB device [ 205.225996][ T5284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.230838][ T5284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.234887][ T5284] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 205.238238][ T5284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.243927][ T5284] usb 9-1: config 0 descriptor?? [ 205.655292][ T5284] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 205.842190][ T5284] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 205.887219][T13322] netlink: 'syz.0.2033': attribute type 5 has an invalid length. [ 205.899555][T13322] can0: slcan on ttyS3. [ 205.913856][T13291] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 205.924361][T13291] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 205.942022][ T39] usb 9-1: USB disconnect, device number 20 [ 205.983731][T13322] can0 (unregistered): slcan off ttyS3. [ 205.993574][ T5284] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 205.996221][ T5284] usb 10-1: config 0 has no interface number 0 [ 205.998659][ T5284] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.003219][ T5284] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 206.006889][ T5284] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 206.010455][ T5284] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.016354][ T5284] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 206.019211][ T5284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.022560][ T5284] usb 10-1: Product: syz [ 206.023925][ T5284] usb 10-1: Manufacturer: syz [ 206.025427][ T5284] usb 10-1: SerialNumber: syz [ 206.032834][ T5284] usb 10-1: config 0 descriptor?? [ 206.034950][T13319] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 206.043450][ T5284] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input26 [ 206.048128][ T5325] usb 10-1: BOGUS urb xfer, pipe 1 != type 3 [ 206.061622][ C2] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 206.699171][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2038'. [ 206.702894][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2038'. [ 206.709673][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 206.713080][T13347] team0: left allmulticast mode [ 206.714736][T13347] team_slave_0: left allmulticast mode [ 206.716508][T13347] team_slave_1: left allmulticast mode [ 206.718309][T13347] team0: left promiscuous mode [ 206.731382][T13347] team_slave_0: left promiscuous mode [ 206.734201][T13347] team_slave_1: left promiscuous mode [ 206.736144][T13347] bridge0: port 3(team0) entered disabled state [ 206.739949][T13347] bridge_slave_0: left allmulticast mode [ 206.741886][T13347] bridge_slave_0: left promiscuous mode [ 206.743748][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.053935][T13367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.120149][ C2] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 207.231954][ T61] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 207.250628][T13374] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 207.361968][ T61] usb 5-1: device descriptor read/64, error -71 [ 207.450737][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 207.521098][T13387] fuse: Bad value for 'user_id' [ 207.523160][T13387] fuse: Bad value for 'user_id' [ 207.612194][ T61] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 207.741624][ T61] usb 5-1: device descriptor read/64, error -71 [ 207.843107][ T39] hid_parser_main: 1 callbacks suppressed [ 207.843121][ T39] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 207.851981][ T39] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 207.852807][ T61] usb usb5-port1: attempt power cycle [ 208.024367][T13412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13412 comm=syz.6.2058 [ 208.035814][ T40] kauditd_printk_skb: 298 callbacks suppressed [ 208.035826][ T40] audit: type=1400 audit(2000000046.509:36142): avc: denied { create } for pid=13413 comm="syz.4.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.040066][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2058'. [ 208.044914][ T40] audit: type=1400 audit(2000000046.509:36143): avc: denied { connect } for pid=13413 comm="syz.4.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.048324][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2058'. [ 208.055828][ T40] audit: type=1400 audit(2000000046.529:36144): avc: denied { read write } for pid=13413 comm="syz.4.2059" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 208.066192][ T40] audit: type=1400 audit(2000000046.529:36145): avc: denied { open } for pid=13413 comm="syz.4.2059" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 208.076453][ T40] audit: type=1400 audit(2000000046.529:36146): avc: denied { ioctl } for pid=13413 comm="syz.4.2059" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 208.099361][ T40] audit: type=1400 audit(2000000046.569:36147): avc: denied { module_request } for pid=13416 comm="syz.4.2060" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 208.106847][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2061'. [ 208.130489][ T40] audit: type=1400 audit(2000000046.599:36148): avc: denied { mount } for pid=13416 comm="syz.4.2060" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.141547][ T40] audit: type=1400 audit(2000000046.609:36149): avc: denied { prog_load } for pid=13416 comm="syz.4.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 208.147807][ T40] audit: type=1400 audit(2000000046.609:36150): avc: denied { bpf } for pid=13416 comm="syz.4.2060" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.154988][ T40] audit: type=1400 audit(2000000046.609:36151): avc: denied { perfmon } for pid=13416 comm="syz.4.2060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.202111][ T61] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 208.232482][ T61] usb 5-1: device descriptor read/8, error -71 [ 208.431609][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 208.471811][ T61] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 208.492310][ T61] usb 5-1: device descriptor read/8, error -71 [ 208.542825][ T1330] usb 10-1: USB disconnect, device number 14 [ 208.576690][T13428] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 208.592622][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 208.597481][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.601740][ T61] usb usb5-port1: unable to enumerate USB device [ 208.603038][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.608952][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 208.613522][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.621566][ T10] usb 9-1: config 0 descriptor?? [ 208.867490][T13440] tipc: Enabling of bearer rejected, already enabled [ 208.871022][T13441] __nla_validate_parse: 1 callbacks suppressed [ 208.871036][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2066'. [ 208.881551][T13441] tipc: Disabling bearer [ 208.931133][T13445] openvswitch: netlink: IP tunnel TTL not specified. [ 208.934627][T13445] tc_dump_action: action bad kind [ 209.043044][ T10] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 209.205216][T13455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 209.210010][T13455] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 209.215406][T13455] cramfs: wrong magic [ 209.281700][ T61] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 209.310138][ T1330] usb 9-1: USB disconnect, device number 21 [ 209.441639][T13462] netlink: 'syz.4.2073': attribute type 12 has an invalid length. [ 209.452080][ T61] usb 10-1: Using ep0 maxpacket: 8 [ 209.458021][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.464460][ T61] usb 10-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 209.468045][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.471317][ T61] usb 10-1: Product: syz [ 209.473670][ T61] usb 10-1: Manufacturer: syz [ 209.475667][ T61] usb 10-1: SerialNumber: syz [ 209.480735][ T61] usb 10-1: config 0 descriptor?? [ 209.490717][ T61] usb 10-1: invalid MIDI EP [ 209.493316][ T61] usb 10-1: snd-bcd2000: error during probing [ 209.496593][ T61] snd-bcd2000 10-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 209.555559][T13469] iso9660: block size(16384) > page size(4096) not supported by filesystem [ 209.696240][ T61] usb 10-1: USB disconnect, device number 15 [ 209.785052][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 209.797193][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2076'. [ 209.800936][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 210.314069][T13505] sctp: [Deprecated]: syz.5.2086 (pid 13505) Use of int in max_burst socket option deprecated. [ 210.314069][T13505] Use struct sctp_assoc_value instead [ 210.528742][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 210.533148][T13515] netlink: 'syz.5.2089': attribute type 7 has an invalid length. [ 210.536239][T13515] netlink: 'syz.5.2089': attribute type 8 has an invalid length. [ 210.539396][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 210.562064][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 210.622355][T13519] netlink: 'syz.6.2091': attribute type 4 has an invalid length. [ 210.641215][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2091'. [ 210.645492][T13519] netlink: 'syz.6.2091': attribute type 33 has an invalid length. [ 210.648055][T13519] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2091'. [ 210.692215][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.884209][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2097'. [ 210.923400][T13537] 9pnet_fd: Insufficient options for proto=fd [ 210.931675][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 211.061543][ T10] usb 5-1: device descriptor read/64, error -71 [ 211.065860][T13541] overlay: Unknown parameter 'smackfsroot' [ 211.171666][ T10] usb usb5-port1: attempt power cycle [ 211.220098][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2103'. [ 211.376725][T13568] cgroup: Need name or subsystem set [ 211.511585][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 211.532574][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.563450][T13584] tmpfs: Bad value for 'size' [ 211.607196][T13587] all: renamed from bridge_slave_0 (while UP) [ 211.704928][T13591] loop4: detected capacity change from 0 to 7 [ 211.708730][ T5930] buffer_io_error: 24 callbacks suppressed [ 211.708739][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.713512][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.716265][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.719736][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.724669][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.727433][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.730123][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.733900][ T5930] ldm_validate_partition_table(): Disk read failed. [ 211.736140][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.738753][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.741277][ T5930] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.743923][ T5930] Dev loop4: unable to read RDB block 0 [ 211.745799][ T5930] loop4: unable to read partition table [ 211.747706][ T5930] loop4: partition table beyond EOD, truncated [ 211.750896][T13591] ldm_validate_partition_table(): Disk read failed. [ 211.754306][T13591] Dev loop4: unable to read RDB block 0 [ 211.756971][T13591] loop4: unable to read partition table [ 211.759620][T13591] loop4: partition table beyond EOD, truncated [ 211.762536][T13591] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 211.771614][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 211.796761][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.870423][T13599] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 211.873176][T13599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.876437][T13599] vhci_hcd vhci_hcd.0: Device attached [ 211.883752][T13599] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 211.886059][T13599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.889014][T13599] vhci_hcd vhci_hcd.0: Device attached [ 211.892704][T13599] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 211.895262][T13599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.898122][T13599] vhci_hcd vhci_hcd.0: Device attached [ 211.901763][T13599] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 211.902316][ T10] usb usb5-port1: unable to enumerate USB device [ 211.903865][T13599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.908719][T13599] vhci_hcd vhci_hcd.0: Device attached [ 211.912764][T13599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=13599 comm=syz.4.2115 [ 211.918202][T13606] vhci_hcd: connection closed [ 211.918289][T13604] vhci_hcd: connection closed [ 211.918331][ T9635] vhci_hcd vhci_hcd.4: stop threads [ 211.920505][T13602] vhci_hcd: connection closed [ 211.921109][T13600] vhci_hcd: connection closed [ 211.922587][ T9635] vhci_hcd vhci_hcd.4: release socket [ 211.930389][ T9635] vhci_hcd vhci_hcd.4: disconnect device [ 211.934248][ T9635] vhci_hcd vhci_hcd.4: stop threads [ 211.936309][ T9635] vhci_hcd vhci_hcd.4: release socket [ 211.938481][ T9635] vhci_hcd vhci_hcd.4: disconnect device [ 211.940894][ T9635] vhci_hcd vhci_hcd.4: stop threads [ 211.943098][ T9635] vhci_hcd vhci_hcd.4: release socket [ 211.945250][ T9635] vhci_hcd vhci_hcd.4: disconnect device [ 211.947670][ T9635] vhci_hcd vhci_hcd.4: stop threads [ 211.949821][ T9635] vhci_hcd vhci_hcd.4: release socket [ 211.951857][ T9635] vhci_hcd vhci_hcd.4: disconnect device [ 212.329643][T13626] netlink: 'syz.6.2121': attribute type 13 has an invalid length. [ 212.332718][T13626] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 212.462217][ T5284] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 212.535949][T13645] macsec0: entered promiscuous mode [ 212.537849][T13645] macsec0: entered allmulticast mode [ 212.539529][T13645] veth1_macvtap: entered allmulticast mode [ 212.641568][ T5284] usb 10-1: Using ep0 maxpacket: 32 [ 212.645206][ T5284] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 212.648787][ T5284] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 212.655704][ T5284] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.660485][ T5284] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 212.664936][ T5284] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.668709][ T5284] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 212.672084][ T5284] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 212.674866][ T5284] usb 10-1: Product: syz [ 212.676290][ T5284] usb 10-1: Manufacturer: syz [ 212.678063][ T5284] usb 10-1: SerialNumber: syz [ 212.683201][ T5284] usb 10-1: config 0 descriptor?? [ 212.688524][ T5284] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 212.694963][ T5284] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 212.787828][T13664] xt_policy: output policy not valid in PREROUTING and INPUT [ 212.890142][ T61] usb 10-1: USB disconnect, device number 16 [ 212.891785][ C3] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 212.894661][T13615] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 212.898755][ T61] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 213.094613][ T40] kauditd_printk_skb: 272 callbacks suppressed [ 213.094629][ T40] audit: type=1400 audit(2000000051.569:36424): avc: denied { ioctl } for pid=13613 comm="syz.5.2119" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.311696][ T40] audit: type=1400 audit(2000000051.789:36425): avc: denied { read } for pid=13669 comm="syz.4.2134" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 213.320478][ T40] audit: type=1400 audit(2000000051.789:36426): avc: denied { open } for pid=13669 comm="syz.4.2134" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 213.329778][ T40] audit: type=1400 audit(2000000051.789:36427): avc: denied { write } for pid=13669 comm="syz.4.2134" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 213.338654][ T40] audit: type=1400 audit(2000000051.789:36428): avc: denied { ioctl } for pid=13669 comm="syz.4.2134" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 213.348240][ T40] audit: type=1400 audit(2000000051.789:36429): avc: denied { set_context_mgr } for pid=13669 comm="syz.4.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 213.405554][ T40] audit: type=1400 audit(2000000051.879:36430): avc: denied { mount } for pid=13673 comm="syz.0.2136" name="/" dev="9p" ino=72613991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.415423][ T40] audit: type=1400 audit(2000000051.889:36431): avc: denied { unmount } for pid=13673 comm="syz.0.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.416666][T13674] overlayfs: statfs failed on './file0' [ 213.423568][ T40] audit: type=1400 audit(2000000051.889:36432): avc: denied { mounton } for pid=13673 comm="syz.0.2136" path="/542/file0" dev="9p" ino=72613991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.435282][ T40] audit: type=1400 audit(2000000051.889:36433): avc: denied { getattr } for pid=13673 comm="syz.0.2136" name="/" dev="9p" ino=72613991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.561681][ T1330] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 213.726954][ T1330] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 213.730314][ T1330] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 213.730335][ T1330] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 213.730364][ T1330] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 213.741881][ T1330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 213.745930][ T1330] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 213.754003][ T1330] usb 9-1: string descriptor 0 read error: -22 [ 213.756561][ T1330] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 213.760544][ T1330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.769809][ T1330] usb 9-1: config 0 descriptor?? [ 213.772811][T13670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.777408][ T1330] hub 9-1:0.0: bad descriptor, ignoring hub [ 213.779887][ T1330] hub 9-1:0.0: probe with driver hub failed with error -5 [ 213.787316][ T1330] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input28 [ 213.806621][ C3] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 214.030656][T13695] netlink: 'syz.4.2134': attribute type 2 has an invalid length. [ 214.034678][T13695] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 214.041717][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 214.041882][ T1330] usb 9-1: USB disconnect, device number 22 [ 214.203045][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.207165][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.211059][ T10] usb 10-1: New USB device found, idVendor=056b, idProduct=0063, bcdDevice= 0.00 [ 214.214811][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.219614][ T10] usb 10-1: config 0 descriptor?? [ 214.495714][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 214.498101][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 214.505890][ T10] usb 10-1: USB disconnect, device number 17 [ 214.586817][T13716] __nla_validate_parse: 5 callbacks suppressed [ 214.586829][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'. [ 214.666433][T13716] kvm: kvm [13715]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 214.670510][T13716] kvm: kvm [13715]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 214.880531][T13733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13733 comm=syz.4.2156 [ 215.008766][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 215.012530][T13736] netlink: 'syz.0.2157': attribute type 10 has an invalid length. [ 215.344689][T13750] netlink: 'syz.5.2160': attribute type 32 has an invalid length. [ 215.347254][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'. [ 215.358422][T13750] bond4: Setting coupled_control to off (0) [ 215.459905][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2161'. [ 215.459905][T13754] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2161'. [ 215.569086][T13763] Invalid argument reading file caps for ./file0 [ 215.626915][T13767] ubi0: attaching mtd1 [ 215.630389][T13767] ubi0: scanning is finished [ 215.633288][T13767] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 215.785515][T13767] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 215.972266][ T5284] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 215.990503][T13788] vim2m vim2m.0: vidioc_s_fmt queue busy [ 216.133143][ T5284] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.136556][ T5284] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 216.139315][ T5284] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.151525][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.172248][T13812] netlink: 'syz.5.2181': attribute type 22 has an invalid length. [ 216.175443][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2181'. [ 216.423370][ T1330] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 216.464465][ T5941] usb 5-1: USB disconnect, device number 42 [ 216.556613][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2188'. [ 216.559468][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2188'. [ 216.572795][ T1330] usb 9-1: config 0 has no interfaces? [ 216.575450][ T1330] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 216.579288][ T1330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.587484][ T1330] usb 9-1: config 0 descriptor?? [ 216.640274][T13835] comedi comedi1: s526: I/O port conflict (0x2,64) [ 216.728725][T13839] xfrm0 speed is unknown, defaulting to 1000 [ 216.732415][T13839] lo speed is unknown, defaulting to 1000 [ 216.801172][ T1330] usb 9-1: USB disconnect, device number 23 [ 217.011583][ T5941] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 217.043609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.174058][ T5941] usb 10-1: config 0 has no interfaces? [ 217.181625][ T5941] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 217.185271][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.188505][ T5941] usb 10-1: Product: syz [ 217.190256][ T5941] usb 10-1: Manufacturer: syz [ 217.200157][ T5941] usb 10-1: SerialNumber: syz [ 217.207851][ T5941] usb 10-1: config 0 descriptor?? [ 217.466724][T13861] xfrm0 speed is unknown, defaulting to 1000 [ 217.469439][T13861] lo speed is unknown, defaulting to 1000 [ 217.481647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.487095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.524649][ T39] usb 10-1: USB disconnect, device number 18 [ 217.543313][T13864] xfrm0 speed is unknown, defaulting to 1000 [ 217.570217][T13864] lo speed is unknown, defaulting to 1000 [ 217.580142][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 217.743275][T13877] xfrm0 speed is unknown, defaulting to 1000 [ 217.746030][T13877] lo speed is unknown, defaulting to 1000 [ 218.140107][ T40] kauditd_printk_skb: 344 callbacks suppressed [ 218.140119][ T40] audit: type=1400 audit(2000000056.609:36778): avc: denied { write } for pid=13902 comm="syz.5.2209" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 218.159238][T13905] bpf: Bad value for 'uid' [ 218.165335][ T40] audit: type=1400 audit(2000000056.639:36779): avc: denied { create } for pid=13904 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.174688][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 218.184730][T13905] erspan1: entered promiscuous mode [ 218.186875][T13905] erspan1: entered allmulticast mode [ 218.193668][ T40] audit: type=1400 audit(2000000056.669:36780): avc: denied { write } for pid=13904 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.201731][ T40] audit: type=1404 audit(2000000056.679:36781): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 218.239852][ T40] audit: type=1404 audit(2000000056.699:36782): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 218.246034][ T40] audit: type=1400 audit(2000000056.709:36783): avc: denied { create } for pid=13904 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.271555][ T40] audit: type=1400 audit(2000000056.709:36784): avc: denied { create } for pid=13904 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.280893][ T40] audit: type=1400 audit(2000000056.719:36785): avc: denied { ioctl } for pid=13904 comm="syz.4.2210" path="socket:[63929]" dev="sockfs" ino=63929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.290851][ T40] audit: type=1400 audit(2000000056.719:36786): avc: denied { override_creds } for pid=13902 comm="syz.5.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 218.299033][ T40] audit: type=1400 audit(2000000056.719:36787): avc: denied { prog_load } for pid=13904 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 218.676032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.931897][ T5941] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 219.002730][T13956] 9pnet: Found fid 0 not clunked [ 219.017147][T13958] vlan1: entered promiscuous mode [ 219.019110][T13958] bridge0: entered promiscuous mode [ 219.031686][ T6230] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 219.093213][ T5941] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 219.096045][ T5941] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.099325][ T5941] usb 9-1: config 0 interface 0 has no altsetting 0 [ 219.104890][ T5941] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.107809][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.111524][ T5941] usb 9-1: Product: syz [ 219.112856][ T5941] usb 9-1: Manufacturer: syz [ 219.114285][ T5941] usb 9-1: SerialNumber: syz [ 219.119727][ T5941] usb 9-1: config 0 descriptor?? [ 219.125858][ T5941] hub 9-1:0.0: bad descriptor, ignoring hub [ 219.127740][ T5941] hub 9-1:0.0: probe with driver hub failed with error -5 [ 219.132305][ T5941] usb 9-1: selecting invalid altsetting 0 [ 219.201796][ T6230] usb 5-1: Using ep0 maxpacket: 8 [ 219.205535][ T6230] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.208686][ T6230] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.212997][ T6230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.216763][ T6230] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.220674][ T6230] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.226193][ T6230] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.229626][ T6230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.445335][ T6230] usb 5-1: usb_control_msg returned -32 [ 219.447210][ T6230] usbtmc 5-1:16.0: can't read capabilities [ 219.852748][T14004] xt_hashlimit: size too large, truncated to 1048576 [ 219.907481][T14006] x9: renamed from bridge_slave_0 (while UP) [ 219.918291][T13943] usbtmc 5-1:16.0: control status returned 0 [ 219.922516][T13943] overlayfs: workdir and upperdir must be separate subtrees [ 220.034439][ T5941] usb 9-1: USB disconnect, device number 24 [ 220.120527][ T58] usb 5-1: USB disconnect, device number 43 [ 220.191603][ T5941] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 220.202674][T14013] __nla_validate_parse: 2 callbacks suppressed [ 220.202689][T14013] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2240'. [ 220.209225][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 220.213036][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 220.342931][ T5941] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 220.345674][ T5941] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.348658][ T5941] usb 9-1: config 0 interface 0 has no altsetting 0 [ 220.352761][ T5941] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.355596][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.358200][ T5941] usb 9-1: Product: syz [ 220.359526][ T5941] usb 9-1: Manufacturer: syz [ 220.361033][ T5941] usb 9-1: SerialNumber: syz [ 220.364650][ T5941] usb 9-1: config 0 descriptor?? [ 220.370254][ T5941] hub 9-1:0.0: bad descriptor, ignoring hub [ 220.372314][ T5941] hub 9-1:0.0: probe with driver hub failed with error -5 [ 220.375833][ T5941] usb 9-1: selecting invalid altsetting 0 [ 220.625183][T13938] netlink: 'syz.4.2219': attribute type 16 has an invalid length. [ 220.627719][T13938] netlink: 'syz.4.2219': attribute type 17 has an invalid length. [ 220.665787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.693326][T14036] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 220.718474][T14036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.736387][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 220.812861][T14039] misc userio: Can't change port type on an already running userio instance [ 220.862014][ T6230] usb 9-1: USB disconnect, device number 25 [ 220.905854][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 220.910007][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 220.914555][T14045] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 220.930129][T14045] cramfs: wrong magic [ 221.059258][T14052] netlink: 'syz.0.2255': attribute type 29 has an invalid length. [ 221.295127][T14062] tmpfs: Bad value for 'huge' [ 221.415955][T14069] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2259'. [ 221.484246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.691636][ T1330] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 221.842463][ T1330] usb 9-1: no configurations [ 221.844441][ T1330] usb 9-1: can't read configurations, error -22 [ 221.982690][ T1330] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 222.049139][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2264'. [ 222.054456][T14082] ubi0: attaching mtd1 [ 222.056380][T14082] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 222.061230][T14083] IPVS: Unknown mcast interface: bridge_slave_0 [ 222.121963][ T5291] Bluetooth: hci2: command 0x0405 tx timeout [ 222.143735][ T1330] usb 9-1: no configurations [ 222.145971][ T1330] usb 9-1: can't read configurations, error -22 [ 222.148971][ T1330] usb usb9-port1: attempt power cycle [ 222.501771][ T1330] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 222.532971][ T1330] usb 9-1: no configurations [ 222.534554][ T1330] usb 9-1: can't read configurations, error -22 [ 222.558408][T14105] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2271'. [ 222.594168][T14105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.598466][T14105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.671572][ T1330] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 222.692404][ T1330] usb 9-1: no configurations [ 222.694210][ T1330] usb 9-1: can't read configurations, error -22 [ 222.696733][ T1330] usb usb9-port1: unable to enumerate USB device [ 222.701635][T14105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.705751][T14105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.775381][T14105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.779325][T14105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.847035][T14105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.851263][T14105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.947825][ T6470] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.950876][ T6470] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.963986][ T6470] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.967473][ T6470] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.979480][ T9634] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.982952][ T9634] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.993468][ T9634] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.001526][ T9634] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.217004][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 223.217017][ T40] audit: type=1400 audit(2000000061.689:37005): avc: denied { allowed } for pid=14110 comm="syz.5.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.279989][ T40] audit: type=1400 audit(2000000061.749:37006): avc: denied { create } for pid=14112 comm="syz.5.2274" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.295775][ T40] audit: type=1400 audit(2000000061.769:37007): avc: denied { unlink } for pid=9858 comm="syz-executor" name="file2" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.321755][ T40] audit: type=1400 audit(2000000061.789:37008): avc: denied { read } for pid=14117 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.380723][ T40] audit: type=1400 audit(2000000061.849:37009): avc: denied { create } for pid=14121 comm="syz.5.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.387704][ T40] audit: type=1400 audit(2000000061.849:37010): avc: denied { bind } for pid=14121 comm="syz.5.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.401139][ T40] audit: type=1400 audit(2000000061.869:37011): avc: denied { name_bind } for pid=14121 comm="syz.5.2276" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 223.410710][ T40] audit: type=1400 audit(2000000061.869:37012): avc: denied { node_bind } for pid=14121 comm="syz.5.2276" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 223.505306][ T40] audit: type=1400 audit(2000000061.979:37013): avc: denied { read append } for pid=14121 comm="syz.5.2276" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.513829][ T40] audit: type=1400 audit(2000000061.979:37014): avc: denied { open } for pid=14121 comm="syz.5.2276" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.999202][T14132] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2278'. [ 224.403937][T14165] ip6gre1: entered promiscuous mode [ 224.405667][T14165] ip6gre1: entered allmulticast mode [ 224.423024][T14168] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.535462][T14178] xt_hashlimit: size too large, truncated to 1048576 [ 224.819722][T14211] xt_hashlimit: size too large, truncated to 1048576 [ 224.872023][T14214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.874536][T14214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.219228][T14229] __nla_validate_parse: 3 callbacks suppressed [ 225.219240][T14229] netlink: 63 bytes leftover after parsing attributes in process `syz.4.2306'. [ 225.656587][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'. [ 225.695704][T14283] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.830531][T14291] nbd: couldn't find device at index -2127233020 [ 225.836581][T14291] nbd: couldn't find device at index -2127233020 [ 225.878403][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2326'. [ 225.898555][T14298] bond5 (unregistering): Released all slaves [ 226.029226][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2330'. [ 226.035414][T14312] xt_hashlimit: size too large, truncated to 1048576 [ 226.106221][T14318] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 226.337802][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2340'. [ 226.341071][T14346] unsupported nlmsg_type 40 [ 226.368582][T14352] overlay: Unknown parameter 'subj_role' [ 226.371283][T14353] gfs2: error -5 reading superblock [ 226.415097][T14359] syzkaller0: entered promiscuous mode [ 226.417600][T14359] syzkaller0: entered allmulticast mode [ 226.667675][T14378] xt_hashlimit: size too large, truncated to 1048576 [ 226.785092][T14384] netlink: 'syz.4.2347': attribute type 12 has an invalid length. [ 226.789012][T14385] netlink: 'syz.4.2347': attribute type 12 has an invalid length. [ 226.977836][T14396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2350'. [ 227.055002][T14404] x_tables: duplicate underflow at hook 2 [ 227.441949][ T6230] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 227.603194][ T6230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.606313][ T6230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 227.609042][ T6230] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 227.612095][ T6230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.619295][ T6230] usb 5-1: config 0 descriptor?? [ 227.624428][ T6230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 227.626969][ T6230] dvb-usb: bulk message failed: -22 (3/0) [ 227.634611][ T6230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 227.638420][ T6230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 227.641187][ T6230] usb 5-1: media controller created [ 227.643614][ T6230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.650152][ T6230] dvb-usb: bulk message failed: -22 (6/0) [ 227.652007][ T6230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 227.657621][ T6230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input29 [ 227.669523][ T6230] dvb-usb: schedule remote query interval to 150 msecs. [ 227.672503][ T6230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 227.825182][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.828808][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.834619][ T6230] dvb-usb: bulk message failed: -22 (1/0) [ 227.837320][ T6230] dvb-usb: error while querying for an remote control event. [ 227.847881][ T5941] usb 5-1: USB disconnect, device number 44 [ 227.863171][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 228.059274][T14437] fuse: Unknown parameter 'fd)' [ 228.180318][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2366'. [ 228.185765][T14442] gtp0: entered promiscuous mode [ 228.187378][T14442] gtp0: entered allmulticast mode [ 228.246467][ T40] kauditd_printk_skb: 308 callbacks suppressed [ 228.246485][ T40] audit: type=1400 audit(2000000322.720:37323): avc: denied { create } for pid=14441 comm="syz.6.2366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.268617][ T40] audit: type=1400 audit(2000000322.740:37324): avc: denied { unlink } for pid=11053 comm="syz-executor" name="file0" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.285922][ T40] audit: type=1400 audit(2000000322.760:37325): avc: denied { create } for pid=14444 comm="syz.6.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.293270][ T40] audit: type=1400 audit(2000000322.760:37326): avc: denied { bind } for pid=14444 comm="syz.6.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.299841][ T40] audit: type=1400 audit(2000000322.760:37327): avc: denied { module_request } for pid=14444 comm="syz.6.2367" kmod="crypto-essiv(cbc(aes),sha256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 228.322334][ T40] audit: type=1400 audit(2000000322.800:37328): avc: denied { setopt } for pid=14444 comm="syz.6.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.329940][ T40] audit: type=1400 audit(2000000322.800:37329): avc: denied { accept } for pid=14444 comm="syz.6.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.336615][ T40] audit: type=1400 audit(2000000322.800:37330): avc: denied { write } for pid=14444 comm="syz.6.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.343280][ T40] audit: type=1400 audit(2000000322.800:37331): avc: denied { bpf } for pid=14444 comm="syz.6.2367" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.350795][ T40] audit: type=1400 audit(2000000322.800:37332): avc: denied { perfmon } for pid=14444 comm="syz.6.2367" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.446652][T14457] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2370'. [ 228.641583][ T5941] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 228.753387][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2374'. [ 228.792428][ T5941] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 228.796783][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.800545][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.804772][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.807743][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.810571][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.814061][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.816884][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.819824][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.823293][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.826210][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.830192][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.834436][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.837453][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.840455][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.843989][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.846837][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.849700][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.853161][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.855957][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.859452][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.863693][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.867460][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.871149][ T5941] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.875971][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.880731][ T5941] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.884614][ T5941] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.888114][ T5941] usb 5-1: Product: syz [ 228.889945][ T5941] usb 5-1: Manufacturer: syz [ 228.891979][ T5941] usb 5-1: SerialNumber: syz [ 228.895432][ T5941] usb 5-1: config 0 descriptor?? [ 228.903563][ T5941] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 228.970680][T14486] netlink: 'syz.5.2378': attribute type 4 has an invalid length. [ 229.002549][T14492] Cannot find set identified by id 3 to match [ 229.122441][ T6230] usb 5-1: USB disconnect, device number 45 [ 229.132957][ T6230] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 229.218412][T14506] IPVS: sh: FWM 3 0x00000003 - no destination available [ 229.305587][T14513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14513 comm=syz.5.2388 [ 229.310971][T14513] netlink: 'syz.5.2388': attribute type 1 has an invalid length. [ 229.570171][T14527] netem: change failed [ 229.803559][T14564] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 229.917190][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'. [ 230.367364][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2404'. [ 230.483365][T14656] netlink: 'syz.6.2405': attribute type 11 has an invalid length. [ 230.485932][T14656] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2405'. [ 230.957166][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 230.985040][T14675] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 231.103959][T14682] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2413'. [ 231.107372][T14679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.113318][T14679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.185891][T14682] macsec1: entered promiscuous mode [ 231.204609][ T6470] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.208186][ T6470] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.211897][ T6470] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.215351][ T6470] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.218908][ T6470] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.221919][ T6470] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.224803][ T6470] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.237448][ T6470] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.241741][T14685] netlink: 'syz.5.2414': attribute type 1 has an invalid length. [ 231.261193][T14685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.276472][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2414'. [ 231.292381][T14685] bond5: (slave bridge2): making interface the new active one [ 231.295191][T14685] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 231.462649][T14710] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 231.465136][T14710] netlink: 'syz.4.2416': attribute type 2 has an invalid length. [ 231.475479][T14712] tmpfs: Unknown parameter 'subj_user' [ 231.504159][T14715] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2422'. [ 231.527040][T14694] bond2: entered promiscuous mode [ 231.614258][T14731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14731 comm=syz.4.2428 [ 231.618603][T14731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=14731 comm=syz.4.2428 [ 231.622993][T14731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14731 comm=syz.4.2428 [ 231.627616][T14731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14731 comm=syz.4.2428 [ 231.633074][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2428'. [ 231.635822][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2428'. [ 231.646141][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2427'. [ 231.649218][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2427'. [ 231.659169][T14737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14737 comm=syz.0.2429 [ 231.669289][ T5291] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 231.710123][T14737] macvlan2: entered promiscuous mode [ 231.842474][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.847661][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.851747][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.857381][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.860882][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.909834][T14751] xfrm0 speed is unknown, defaulting to 1000 [ 231.912561][T14751] lo speed is unknown, defaulting to 1000 [ 232.035771][T14751] chnl_net:caif_netlink_parms(): no params data found [ 232.147715][T14751] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.150048][T14751] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.152753][T14751] bridge_slave_0: entered allmulticast mode [ 232.158010][T14751] bridge_slave_0: entered promiscuous mode [ 232.163118][T14751] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.165381][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.167577][T14751] bridge_slave_1: entered allmulticast mode [ 232.170201][T14751] bridge_slave_1: entered promiscuous mode [ 232.186002][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.190542][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.217758][T14751] team0: Port device team_slave_0 added [ 232.223028][T14751] team0: Port device team_slave_1 added [ 232.238808][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.241157][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.249885][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.254926][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.257176][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.266845][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.292971][T14751] hsr_slave_0: entered promiscuous mode [ 232.295167][T14751] hsr_slave_1: entered promiscuous mode [ 232.297584][T14751] debugfs: 'hsr0' already exists in 'hsr' [ 232.299381][T14751] Cannot create hsr debugfs directory [ 232.383655][T14751] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.387538][T14751] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 232.390836][T14751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.443692][T14797] /dev/sr0: Can't open blockdev [ 232.471340][T14751] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.477203][T14751] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 232.481393][T14751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.481896][T14806] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 232.565598][T14751] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.569258][T14751] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 232.574872][T14751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.615280][T14751] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.618384][T14751] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 232.622049][T14751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.878950][ T9608] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 232.882157][ T9608] xfrm1 (unregistering): left promiscuous mode [ 233.028513][ T9608] team0: Port device bridge1 removed [ 233.425045][ T9608] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.428969][ T9608] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.433178][ T9608] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 233.436414][ T9608] .` (unregistering): Released all slaves [ 233.447510][ T9608] smc: removing net device bond0 with user defined pnetid SYZ2 [ 233.450457][ T9608] bond0 (unregistering): Released all slaves [ 233.528759][ T9608] bond1 (unregistering): Released all slaves [ 233.535773][ T40] kauditd_printk_skb: 388 callbacks suppressed [ 233.535786][ T40] audit: type=1400 audit(233.431:37721): avc: denied { create } for pid=14828 comm="syz.6.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 233.586453][ T40] audit: type=1400 audit(233.481:37722): avc: denied { create } for pid=14832 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.592576][ T40] audit: type=1400 audit(233.491:37723): avc: denied { write } for pid=14832 comm="syz.6.2456" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.631956][ T9608] bond2 (unregistering): Released all slaves [ 233.668663][T14837] overlayfs: failed to clone upperpath [ 233.729820][ T9608] bond3 (unregistering): Released all slaves [ 233.794612][ T40] audit: type=1400 audit(233.691:37724): avc: denied { create } for pid=14842 comm="syz.6.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.803694][ T40] audit: type=1400 audit(233.701:37725): avc: denied { ioctl } for pid=14842 comm="syz.6.2461" path="socket:[67173]" dev="sockfs" ino=67173 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.837257][ T9608] bond4 (unregistering): Released all slaves [ 233.845810][ T9608] bond5 (unregistering): Released all slaves [ 233.925862][ T9608] bond6 (unregistering): Released all slaves [ 233.963263][ T5291] Bluetooth: hci4: command tx timeout [ 234.007121][ T9608] bond7 (unregistering): Released all slaves [ 234.017060][ T9608] bond8 (unregistering): Released all slaves [ 234.024756][ T6253] xfrm0 speed is unknown, defaulting to 1000 [ 234.027738][ T6253] infiniband syz1: ib_query_port failed (-19) [ 234.055572][ T40] audit: type=1400 audit(233.951:37726): avc: denied { create } for pid=14844 comm="syz.5.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.062059][ T40] audit: type=1400 audit(233.961:37727): avc: denied { ioctl } for pid=14844 comm="syz.5.2462" path="socket:[67929]" dev="sockfs" ino=67929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.076440][ T40] audit: type=1400 audit(233.961:37728): avc: denied { bind } for pid=14844 comm="syz.5.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.109965][ T40] audit: type=1400 audit(234.001:37729): avc: denied { read append } for pid=14854 comm="syz.5.2465" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.111117][T14751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.118388][ T40] audit: type=1400 audit(234.001:37730): avc: denied { open } for pid=14854 comm="syz.5.2465" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.130390][T14856] binder: 14854:14856 ioctl c0306201 2000000003c0 returned -14 [ 234.144379][T14751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.159828][T14855] vivid-000: ================= START STATUS ================= [ 234.162678][T14855] vivid-000: Test Pattern: 75% Colorbar [ 234.163980][ T9608] : left promiscuous mode [ 234.164628][T14855] vivid-000: Fill Percentage of Frame: 100 [ 234.173693][T14855] vivid-000: Horizontal Movement: No Movement [ 234.175698][T14855] vivid-000: Vertical Movement: No Movement [ 234.177724][T14855] vivid-000: OSD Text Mode: All [ 234.179314][T14855] vivid-000: Show Border: false [ 234.181976][T14855] vivid-000: Show Square: false [ 234.188881][T14855] vivid-000: Sensor Flipped Horizontally: false [ 234.194429][T14855] vivid-000: Sensor Flipped Vertically: false [ 234.196998][T14855] vivid-000: Insert SAV Code in Image: false [ 234.199095][T14855] vivid-000: Insert EAV Code in Image: false [ 234.201066][T14855] vivid-000: Insert Video Guard Band: false [ 234.203619][T14751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.207540][T14855] vivid-000: Reduced Framerate: false [ 234.209374][T14855] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 234.218884][T14751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.221844][T14855] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 234.224530][T14855] vivid-000: Enable Capture Cropping: true [ 234.226468][T14855] vivid-000: Enable Capture Composing: true [ 234.228491][T14855] vivid-000: Enable Capture Scaler: true [ 234.230338][T14855] vivid-000: Timestamp Source: End of Frame [ 234.232526][T14855] vivid-000: Colorspace: Rec. 709 [ 234.234272][T14855] vivid-000: Transfer Function: Default [ 234.236145][T14855] vivid-000: Y'CbCr Encoding: Default [ 234.248587][T14855] vivid-000: HSV Encoding: Hue 0-179 [ 234.251128][T14855] vivid-000: Quantization: Default [ 234.253375][T14855] vivid-000: Apply Alpha To Red Only: false [ 234.255316][T14855] vivid-000: Standard Aspect Ratio: 4x3 [ 234.257293][T14855] vivid-000: DV Timings Signal Mode: Current DV Timings [ 234.265445][T14855] vivid-000: DV Timings: 640x480p59 inactive [ 234.271835][T14855] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 234.274462][T14855] vivid-000: Maximum EDID Blocks: 2 [ 234.274474][ T9608] tipc: Disabling bearer [ 234.274477][T14855] [ 234.274777][ T9608] tipc: Left network mode [ 234.276433][T14855] vivid-000: Limited RGB Range (16-235): true [ 234.282289][T14855] vivid-000: Rx RGB Quantization Range: Automatic [ 234.284668][T14855] vivid-000: Power Present: 0x00000001 [ 234.285368][T14866] SELinux: unknown common  [ 234.286439][T14855] tpg source WxH: 1280x720 (Y'CbCr) [ 234.287966][T14866] SELinux: failed to load policy [ 234.289736][T14855] tpg field: 1 [ 234.294371][T14855] tpg crop: (0,0)/1280x720 [ 234.296335][T14855] tpg compose: (8,464)/1024x256 [ 234.298050][T14855] tpg colorspace: 3 [ 234.300705][T14855] tpg transfer function: 1/0 [ 234.303040][T14855] tpg Y'CbCr encoding: 0/0 [ 234.305160][T14855] tpg quantization: 2/0 [ 234.306528][T14855] tpg RGB range: 0/1 [ 234.307763][T14855] vivid-000: ================== END STATUS ================== [ 234.317209][T14751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.326313][T14751] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.333303][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.335598][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.340431][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.342787][ T9634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.357634][ T9608] IPVS: stopping backup sync thread 12924 ... [ 234.516539][ T9608] hsr_slave_0: left promiscuous mode [ 234.519067][ T9608] hsr_slave_1: left promiscuous mode [ 234.528296][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.530828][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.541032][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.543525][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.565369][ T9608] veth1_to_batadv: left promiscuous mode [ 234.567234][ T9608] veth1_macvtap: left promiscuous mode [ 234.569027][ T9608] veth0_macvtap: left promiscuous mode [ 234.570815][ T9608] veth1_vlan: left promiscuous mode [ 234.572800][ T9608] veth0_vlan: left promiscuous mode [ 234.634040][ T9608] pim6reg (unregistering): left allmulticast mode [ 234.806758][ T9608] (unregistering): left allmulticast mode [ 234.808860][ T9608] veth0_vlan (unregistering): left allmulticast mode [ 234.975019][ T9608] team0 (unregistering): Port device team_slave_1 removed [ 234.991426][ T9608] team0 (unregistering): Port device team_slave_0 removed [ 235.255149][ T6253] lo speed is unknown, defaulting to 1000 [ 235.256153][T14893] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 235.257066][ T6253] syz2: Port: 1 Link DOWN [ 235.268589][T14751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.293977][T14751] veth0_vlan: entered promiscuous mode [ 235.300119][T14751] veth1_vlan: entered promiscuous mode [ 235.323973][T14751] veth0_macvtap: entered promiscuous mode [ 235.329586][T14751] veth1_macvtap: entered promiscuous mode [ 235.345192][T14751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.353160][T14751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.360685][ T9619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.366356][ T9619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.371810][ T9619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.374843][ T9619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.382703][T14910] fuse: Bad value for 'group_id' [ 235.384359][T14910] fuse: Bad value for 'group_id' [ 235.416845][ T9634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.420677][ T9634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.447254][ T9634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.450018][ T9634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.534262][ T9608] IPVS: stop unused estimator thread 0... [ 235.616909][T14936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=14936 comm=syz.4.2486 [ 235.621327][T14935] __nla_validate_parse: 3 callbacks suppressed [ 235.621341][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2485'. [ 235.721669][ T5291] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 235.725831][ T5291] Bluetooth: hci1: Injecting HCI hardware error event [ 235.729534][ T5291] Bluetooth: hci1: hardware error 0x00 [ 235.784871][T14947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=14947 comm=syz.4.2489 [ 235.790591][T14947] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2489'. [ 235.844138][T14953] overlayfs: missing 'lowerdir' [ 235.874616][T14951] cgroup: noprefix used incorrectly [ 235.929049][T14955] sp0: Synchronizing with TNC [ 236.048608][T14963] snd_dummy snd_dummy.0: control 5:3:199:syz0:12 is already present [ 236.052812][ T5936] Bluetooth: hci4: command tx timeout [ 236.078860][T14968] sock: sock_timestamping_bind_phc: sock not bind to device [ 236.082855][T14969] sock: sock_timestamping_bind_phc: sock not bind to device [ 236.157936][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 236.215446][T14973] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 236.217589][T14973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.220415][T14973] vhci_hcd vhci_hcd.0: Device attached [ 236.223300][T14987] vhci_hcd: cannot find the pending unlink 1023 [ 236.234441][T14973] hpfs: hpfs_map_sector(): read error [ 236.273899][T14974] syz.0.2499 (14974) used greatest stack depth: 19168 bytes left [ 236.313131][T14994] ubi0: attaching mtd1 [ 236.314497][T14994] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 236.469681][T15000] netlink: 'syz.0.2505': attribute type 33 has an invalid length. [ 236.472920][T15000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2505'. [ 236.478491][ T6230] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 236.718628][T15026] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 236.860581][T15031] Invalid source name [ 236.862203][T15031] UBIFS error (pid: 15031): cannot open "/dev/sg0", error -22 [ 236.950618][T14987] vhci_hcd: connection reset by peer [ 236.956754][ T9634] vhci_hcd vhci_hcd.4: stop threads [ 236.958467][ T9634] vhci_hcd vhci_hcd.4: release socket [ 236.960308][ T9634] vhci_hcd vhci_hcd.4: disconnect device [ 236.999046][T15045] netlink: 'syz.6.2518': attribute type 21 has an invalid length. [ 237.801868][ T5291] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 237.943506][T15101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.966954][T15103] sock: sock_set_timeout: `syz.4.2537' (pid 15103) tries to set negative timeout [ 238.029430][T15106] xt_limit: Overflow, try lower: 271964/0 [ 238.082867][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2539'. [ 238.131676][ T5291] Bluetooth: hci4: command tx timeout [ 238.278118][T15121] cgroup2: Unknown parameter 'memNry_?iXN50C9hugetlb_a9 g' [ 238.296630][T15123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15123 comm=syz.6.2545 [ 238.321778][T15126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2546'. [ 238.442110][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2550'. [ 238.455735][T15140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2550'. [ 238.492153][T15143] kAFS: unable to lookup cell 'syz1' [ 238.554684][ T40] kauditd_printk_skb: 259 callbacks suppressed [ 238.554695][ T40] audit: type=1400 audit(238.451:37990): avc: denied { ioctl } for pid=15150 comm="syz.0.2555" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.576425][ T40] audit: type=1400 audit(238.471:37991): avc: denied { setattr } for pid=15152 comm="syz.6.2556" name="SCTP" dev="sockfs" ino=70941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.585568][ T40] audit: type=1400 audit(238.481:37992): avc: denied { create } for pid=15152 comm="syz.6.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.589430][T15155] overlayfs: failed to set uuid (364/file1, err=-1); falling back to uuid=null. [ 238.597279][ T40] audit: type=1400 audit(238.481:37993): avc: denied { setopt } for pid=15152 comm="syz.6.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.599324][T15155] overlayfs: failed to verify upper root origin [ 238.605538][ T40] audit: type=1400 audit(238.481:37994): avc: denied { getopt } for pid=15152 comm="syz.6.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.616825][ T40] audit: type=1400 audit(238.481:37995): avc: denied { write } for pid=15152 comm="syz.6.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.647727][ T40] audit: type=1400 audit(238.541:37996): avc: denied { read write } for pid=15158 comm="syz.5.2559" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 238.658223][ T40] audit: type=1400 audit(238.541:37997): avc: denied { open } for pid=15158 comm="syz.5.2559" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 238.665903][ T40] audit: type=1400 audit(238.551:37998): avc: denied { ioctl } for pid=15158 comm="syz.5.2559" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 238.714959][ T40] audit: type=1400 audit(238.611:37999): avc: denied { ioctl } for pid=15165 comm="syz.6.2562" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68382 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.793088][T15166] overlayfs: failed to clone upperpath [ 238.801571][ T29] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 238.923720][T15173] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 238.953145][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.957480][ T29] usb 5-1: config 0 has no interfaces? [ 238.960038][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.961547][ T6253] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 238.964607][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.972955][ T29] usb 5-1: config 0 descriptor?? [ 239.091607][ T6253] usb 10-1: device descriptor read/64, error -71 [ 239.242464][T15177] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2565'. [ 239.292844][ T39] usb 5-1: USB disconnect, device number 46 [ 239.331567][ T6253] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 239.393640][T15180] netlink: zone id is out of range [ 239.395718][T15180] netlink: get zone limit has 4 unknown bytes [ 239.471794][ T6253] usb 10-1: device descriptor read/64, error -71 [ 239.581892][ T6253] usb usb10-port1: attempt power cycle [ 239.736897][T15182] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2567'. [ 239.921622][ T6253] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 239.934320][T15186] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 239.942133][ T6253] usb 10-1: device descriptor read/8, error -71 [ 240.129197][T15191] netlink: 'syz.6.2570': attribute type 2 has an invalid length. [ 240.182769][ T6253] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 240.201636][ T5291] Bluetooth: hci4: command tx timeout [ 240.202401][ T6253] usb 10-1: device descriptor read/8, error -71 [ 240.239653][T15208] overlayfs: failed to clone lowerpath [ 240.264207][T15210] binder: 15209:15210 ioctl c0306201 200000000080 returned -14 [ 240.311946][ T6253] usb usb10-port1: unable to enumerate USB device [ 240.318766][T15215] ip6erspan0: entered promiscuous mode [ 240.426340][T15226] xt_CT: No such helper "pptp" [ 240.464225][T15234] loop5: detected capacity change from 0 to 7 [ 240.467601][ T5930] buffer_io_error: 28 callbacks suppressed [ 240.467611][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.472331][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.474897][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.477442][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.481591][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.485080][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.487778][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.490830][ T5930] ldm_validate_partition_table(): Disk read failed. [ 240.494929][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.496350][T15238] sctp: [Deprecated]: syz.6.2586 (pid 15238) Use of int in max_burst socket option deprecated. [ 240.496350][T15238] Use struct sctp_assoc_value instead [ 240.497778][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.506112][ T5930] Buffer I/O error on dev loop5, logical block 0, async page read [ 240.509224][ T5930] Dev loop5: unable to read RDB block 0 [ 240.511827][ T5930] loop5: unable to read partition table [ 240.514178][ T5930] loop5: partition table beyond EOD, truncated [ 240.520350][T15234] ldm_validate_partition_table(): Disk read failed. [ 240.525127][T15234] Dev loop5: unable to read RDB block 0 [ 240.527511][T15234] loop5: unable to read partition table [ 240.529582][T15234] loop5: partition table beyond EOD, truncated [ 240.532574][T15234] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 240.597827][T15244] overlayfs: failed to clone upperpath [ 240.602553][T15244] overlayfs: missing 'lowerdir' [ 240.781885][ T6253] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 240.890228][T15278] netlink: 'syz.6.2593': attribute type 5 has an invalid length. [ 240.932903][ T6253] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.936315][ T6253] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.939652][ T6253] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.944817][ T6253] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.949540][ T6253] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.954846][ T6253] usb 9-1: config 0 descriptor?? [ 241.031394][T15285] __nla_validate_parse: 2 callbacks suppressed [ 241.031409][T15285] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2595'. [ 241.123221][T15289] loop9: detected capacity change from 0 to 7 [ 241.134931][T15289] Dev loop9: unable to read RDB block 7 [ 241.136877][T15289] loop9: unable to read partition table [ 241.138920][T15289] loop9: partition table beyond EOD, truncated [ 241.145273][T15289] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 241.198477][T15295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2597'. [ 241.246743][T15300] overlayfs: failed lookup in lower (newroot/31, name='bus', err=-40): overlapping layers [ 241.349901][T15304] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 241.352699][T15304] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2599'. [ 241.368823][ T6253] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.392042][T15308] ip6gre1: entered promiscuous mode [ 241.393792][T15308] ip6gre1: entered allmulticast mode [ 241.571706][ T6230] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 241.711615][ T831] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 241.744235][ T5340] ldm_validate_partition_table(): Disk read failed. [ 241.747111][ T5340] Dev loop5: unable to read RDB block 0 [ 241.749596][ T5340] loop5: unable to read partition table [ 241.752637][ T5340] loop5: partition table beyond EOD, truncated [ 241.796666][ T5340] ldm_validate_partition_table(): Disk read failed. [ 241.799768][ T5340] Dev loop5: unable to read RDB block 0 [ 241.802597][ T5340] loop5: unable to read partition table [ 241.805321][ T5340] loop5: partition table beyond EOD, truncated [ 241.811696][T15328] netlink: 'syz.5.2607': attribute type 29 has an invalid length. [ 241.820073][T15328] netlink: 'syz.5.2607': attribute type 29 has an invalid length. [ 241.825594][T15329] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2607'. [ 241.828568][T15329] unsupported nla_type 58 [ 241.841355][ T5340] ldm_validate_partition_table(): Disk read failed. [ 241.849801][ T5340] Dev loop5: unable to read RDB block 0 [ 241.854036][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2609'. [ 241.858077][ T5340] loop5: unable to read partition table [ 241.860642][ T5340] loop5: partition table beyond EOD, truncated [ 241.870352][T15334] xt_connbytes: Forcing CT accounting to be enabled [ 241.873738][T15334] set match dimension is over the limit! [ 241.882929][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 241.888504][ T831] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.891144][ T831] usb 5-1: config 179 has no interface number 0 [ 241.896161][T15337] macvlan0: entered allmulticast mode [ 241.898506][ T831] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 241.902183][ T831] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 241.905812][ T831] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 241.909392][ T831] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 241.913158][ T831] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.917059][ T831] usb 5-1: config 179 interface 65 has no altsetting 0 [ 241.919351][ T831] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 241.919598][ T5340] ldm_validate_partition_table(): Disk read failed. [ 241.922589][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.924488][T15312] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 241.924785][ T5340] Dev loop5: unable to read RDB block 0 [ 241.931519][ T5340] loop5: unable to read partition table [ 241.933442][ T5340] loop5: partition table beyond EOD, truncated [ 241.934498][ T831] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input30 [ 241.964962][ T5340] ldm_validate_partition_table(): Disk read failed. [ 241.967770][ T5340] Dev loop5: unable to read RDB block 0 [ 241.970119][ T5340] loop5: unable to read partition table [ 241.973324][ T5340] loop5: partition table beyond EOD, truncated [ 241.983365][ T5325] input input30: unable to receive magic message: -110 [ 242.003912][ T5325] input input30: unable to receive magic message: -32 [ 242.012868][ T5325] input input30: unable to receive magic message: -32 [ 242.019007][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 242.021864][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.024052][ T5340] Dev loop5: unable to read RDB block 0 [ 242.024109][ T6062] input input30: unable to receive magic message: -32 [ 242.025911][ T5340] loop5: unable to read partition table [ 242.030038][ T5340] loop5: partition table beyond EOD, truncated [ 242.059397][ T5325] input input30: unable to receive magic message: -32 [ 242.075528][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.078341][ T5340] Dev loop5: unable to read RDB block 0 [ 242.080857][ T5340] loop5: unable to read partition table [ 242.083748][ T5340] loop5: partition table beyond EOD, truncated [ 242.106786][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2617'. [ 242.111098][T15356] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2617'. [ 242.129935][T15312] input input30: unable to receive magic message: -32 [ 242.358839][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.361107][ T5340] Dev loop5: unable to read RDB block 0 [ 242.363424][ T5340] loop5: unable to read partition table [ 242.365371][ T5340] loop5: partition table beyond EOD, truncated [ 242.403339][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.405678][ T5340] Dev loop5: unable to read RDB block 0 [ 242.407650][ T5340] loop5: unable to read partition table [ 242.409795][ T5340] loop5: partition table beyond EOD, truncated [ 242.660994][T15374] bond1: (slave bond_slave_1): Device is not our slave [ 242.663312][T15374] bond1: option active_slave: invalid value (bond_slave_1) [ 242.667049][T15374] bond1 (unregistering): Released all slaves [ 242.677084][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.679299][ T5340] Dev loop5: unable to read RDB block 0 [ 242.681185][ T5340] loop5: unable to read partition table [ 242.683747][ T5340] loop5: partition table beyond EOD, truncated [ 242.692116][T15377] netlink: 'syz.5.2623': attribute type 3 has an invalid length. [ 242.702500][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 242.744640][ C2] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 242.787372][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.789534][ T5340] Dev loop5: unable to read RDB block 0 [ 242.791289][ T5340] loop5: unable to read partition table [ 242.799209][ T5340] loop5: partition table beyond EOD, truncated [ 242.852396][ T5340] ldm_validate_partition_table(): Disk read failed. [ 242.854646][ T5340] Dev loop5: unable to read RDB block 0 [ 242.856446][ T5340] loop5: unable to read partition table [ 242.858311][ T5340] loop5: partition table beyond EOD, truncated [ 242.875688][T15403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.891647][ T6253] usb 9-1: reset high-speed USB device number 30 using dummy_hcd [ 242.968036][T15407] overlayfs: failed to clone upperpath [ 243.021749][ T6253] usb 9-1: device descriptor read/64, error -32 [ 243.024239][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.026393][ T5340] Dev loop5: unable to read RDB block 0 [ 243.028183][ T5340] loop5: unable to read partition table [ 243.030061][ T5340] loop5: partition table beyond EOD, truncated [ 243.043493][T15409] random: crng reseeded on system resumption [ 243.072038][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.075180][ T5340] Dev loop5: unable to read RDB block 0 [ 243.077712][ T5340] loop5: unable to read partition table [ 243.080409][ T5340] loop5: partition table beyond EOD, truncated [ 243.202258][ T39] usb 5-1: USB disconnect, device number 47 [ 243.204376][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 243.272026][ T6253] usb 9-1: reset high-speed USB device number 30 using dummy_hcd [ 243.344976][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.351563][ T5340] Dev loop5: unable to read RDB block 0 [ 243.353372][ T5340] loop5: unable to read partition table [ 243.355723][ T5340] loop5: partition table beyond EOD, truncated [ 243.401937][ T6253] usb 9-1: device descriptor read/64, error -32 [ 243.411874][T15431] lo: entered allmulticast mode [ 243.556830][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.559679][ T5340] Dev loop5: unable to read RDB block 0 [ 243.562476][ T5340] loop5: unable to read partition table [ 243.564981][ T5340] loop5: partition table beyond EOD, truncated [ 243.570113][ T40] kauditd_printk_skb: 318 callbacks suppressed [ 243.570125][ T40] audit: type=1400 audit(243.461:38318): avc: denied { create } for pid=15443 comm="syz.5.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.581705][ T40] audit: type=1400 audit(243.471:38319): avc: denied { bind } for pid=15443 comm="syz.5.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.589205][T15444] netlink: 'syz.5.2640': attribute type 21 has an invalid length. [ 243.611992][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.614703][ T5340] Dev loop5: unable to read RDB block 0 [ 243.615715][ T40] audit: type=1400 audit(243.511:38320): avc: denied { lock } for pid=15445 comm="syz.0.2641" path="socket:[70616]" dev="sockfs" ino=70616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 243.616640][ T5340] loop5: unable to read partition table [ 243.626950][ T5340] loop5: partition table beyond EOD, truncated [ 243.629764][ T40] audit: type=1400 audit(243.521:38321): avc: denied { allowed } for pid=15447 comm="syz.5.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.637564][ T40] audit: type=1400 audit(243.531:38322): avc: denied { create } for pid=15447 comm="syz.5.2642" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.645352][ T40] audit: type=1400 audit(243.531:38323): avc: denied { map } for pid=15447 comm="syz.5.2642" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.653089][ T40] audit: type=1400 audit(243.531:38324): avc: denied { read write } for pid=15447 comm="syz.5.2642" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.660611][ T40] audit: type=1400 audit(243.541:38325): avc: denied { ioctl } for pid=15447 comm="syz.5.2642" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=72797 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.662069][ T6253] usb 9-1: reset high-speed USB device number 30 using dummy_hcd [ 243.668836][ T40] audit: type=1400 audit(243.551:38326): avc: denied { mount } for pid=15447 comm="syz.5.2642" name="/" dev="ramfs" ino=72798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 243.681518][ T40] audit: type=1400 audit(243.561:38327): avc: denied { create } for pid=15445 comm="syz.0.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.693355][ T5340] ldm_validate_partition_table(): Disk read failed. [ 243.695720][ T5340] Dev loop5: unable to read RDB block 0 [ 243.698023][ T5340] loop5: unable to read partition table [ 243.700486][ T5340] loop5: partition table beyond EOD, truncated [ 243.711917][ T6253] usb 9-1: device descriptor read/8, error -32 [ 243.736568][T15455] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 243.912603][T15475] syz_tun: entered allmulticast mode [ 243.929324][T15474] syz_tun: left allmulticast mode [ 244.030110][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'. [ 244.154452][T15490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.157268][T15490] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 244.160963][T15490] overlayfs: missing 'lowerdir' [ 244.549392][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2659'. [ 244.615197][ T61] usb 9-1: USB disconnect, device number 30 [ 244.684056][T15546] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 244.687217][T15546] netlink: 'syz.4.2667': attribute type 2 has an invalid length. [ 244.731949][ T6230] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 244.881734][ T6230] usb 10-1: Using ep0 maxpacket: 8 [ 244.885607][ T6230] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.888699][ T6230] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.888714][ T6230] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.888727][ T6230] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.888749][ T6230] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.904888][ T6230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.117514][ T6230] usb 10-1: GET_CAPABILITIES returned 0 [ 245.119293][ T6230] usbtmc 10-1:16.0: can't read capabilities [ 245.125879][T15589] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 245.130247][T15584] 9p: Could not find request transport: virtiN [ 245.164641][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.669035][ T5936] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 245.669995][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 245.693110][ T6259] usb 10-1: USB disconnect, device number 23 [ 245.824354][T15613] TC_ACT_REPEAT abuse ? [ 245.916470][T15625] overlayfs: failed to clone upperpath [ 246.072655][T15645] __nla_validate_parse: 8 callbacks suppressed [ 246.072665][T15645] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2700'. [ 246.080079][T15645] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2700'. [ 246.084576][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 246.111973][T15645] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 246.195944][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 246.198889][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 246.339177][T15686] binder: 15685:15686 ioctl c018620c 200000000000 returned -22 [ 246.642104][T15703] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 246.642104][T15703] program syz.5.2714 not setting count and/or reply_len properly [ 246.650732][T15702] netlink: 'syz.4.2712': attribute type 8 has an invalid length. [ 246.654315][T15702] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 247.058552][T15732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2721'. [ 247.063327][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 247.106425][T15732] team0: Port device team_slave_0 removed [ 247.536540][T15745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'. [ 247.539444][T15745] openvswitch: netlink: Flow key attr not present in new flow. [ 247.544141][T15745] Falling back ldisc for ttyS3. [ 247.683260][T15750] XFS (nbd4): SB validate failed with error -5. [ 248.006828][T15707] Set syz1 is full, maxelem 65536 reached [ 248.044189][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2734'. [ 248.066539][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 248.097857][T15791] pim6reg: entered allmulticast mode [ 248.111368][T15790] macvlan0 (unregistering): left allmulticast mode [ 248.164630][T15795] can0: slcan on pty28. [ 248.234187][ T61] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 248.383037][ T61] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 248.385820][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.390094][ T61] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 248.396496][ T61] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 248.399152][ T61] usb 5-1: Manufacturer: syz [ 248.401637][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 248.402610][ T61] usb 5-1: config 0 descriptor?? [ 248.451603][ T61] rc_core: IR keymap rc-hauppauge not found [ 248.454111][ T61] Registered IR keymap rc-empty [ 248.456674][ T61] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 248.461021][ T61] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 248.553288][ T10] usb 9-1: config index 0 descriptor too short (expected 7954, got 18) [ 248.556774][ T10] usb 9-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 248.561216][ T10] usb 9-1: config 32 has no interfaces? [ 248.567831][ T10] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 248.572651][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.575991][ T10] usb 9-1: Product: syz [ 248.577744][ T10] usb 9-1: Manufacturer: syz [ 248.579721][ T10] usb 9-1: SerialNumber: syz [ 248.609544][ T40] kauditd_printk_skb: 389 callbacks suppressed [ 248.609557][ T40] audit: type=1400 audit(248.501:38717): avc: denied { read } for pid=15781 comm="syz.0.2735" name="event4" dev="devtmpfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 248.620775][ T40] audit: type=1400 audit(248.501:38718): avc: denied { open } for pid=15781 comm="syz.0.2735" path="/dev/input/event4" dev="devtmpfs" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 248.624002][ T61] usb 5-1: USB disconnect, device number 48 [ 248.631423][ T40] audit: type=1400 audit(248.501:38719): avc: denied { ioctl } for pid=15781 comm="syz.0.2735" path="/dev/input/event4" dev="devtmpfs" ino=3720 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 248.788797][ T40] audit: type=1400 audit(248.681:38720): avc: denied { create } for pid=15794 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.793086][T15795] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.797397][ T40] audit: type=1400 audit(248.681:38721): avc: denied { write } for pid=15794 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.808647][ T40] audit: type=1400 audit(248.681:38722): avc: denied { read } for pid=15794 comm="syz.4.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.817424][ T40] audit: type=1400 audit(248.681:38723): avc: denied { read } for pid=15794 comm="syz.4.2738" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 248.828106][ T40] audit: type=1400 audit(248.681:38724): avc: denied { read open } for pid=15794 comm="syz.4.2738" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 248.837947][ T40] audit: type=1400 audit(248.681:38725): avc: denied { read } for pid=15794 comm="syz.4.2738" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.847576][ T40] audit: type=1400 audit(248.681:38726): avc: denied { open } for pid=15794 comm="syz.4.2738" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.877887][ T831] usb 9-1: USB disconnect, device number 31 [ 248.964418][T15794] can0 (unregistered): slcan off pty28. [ 249.275046][T15827] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 249.365220][T15832] ./cgroup: Can't lookup blockdev [ 249.399035][T15840] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 249.547971][T15848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.591070][T15854] erofs (device loop5): cannot find valid erofs superblock [ 249.808542][T15868] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 249.810253][T15868] @0: renamed from bond_slave_1 [ 249.883628][T15870] tmpfs: Bad value for 'mpol' [ 249.906696][T15870] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 250.128083][T15889] CIFS mount error: No usable UNC path provided in device string! [ 250.128083][T15889] [ 250.131310][T15889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 250.271601][ T6253] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 250.421566][ T6253] usb 5-1: Using ep0 maxpacket: 8 [ 250.424566][ T6253] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 250.427271][ T6253] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.430399][ T6253] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.433925][ T6253] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.437107][ T6253] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.441254][ T6253] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.444338][ T6253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.541614][ T61] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 250.651445][ T6253] usb 5-1: GET_CAPABILITIES returned 0 [ 250.653452][ T6253] usbtmc 5-1:16.0: can't read capabilities [ 250.693139][ T61] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.696688][ T61] usb 10-1: config 0 has no interfaces? [ 250.698564][ T61] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.701432][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.705667][ T61] usb 10-1: config 0 descriptor?? [ 250.859699][ T61] usb 5-1: USB disconnect, device number 49 [ 250.982576][ T6253] usb 10-1: USB disconnect, device number 24 [ 251.057841][T15908] nbd: must specify a device to reconfigure [ 251.409079][T15914] __nla_validate_parse: 1 callbacks suppressed [ 251.409097][T15914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2773'. [ 251.430682][T15916] netlink: 'syz.4.2774': attribute type 1 has an invalid length. [ 251.433878][T15916] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 251.486037][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 251.492612][T15926] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 251.512489][T15926] XFS (nullb0): Invalid superblock magic number [ 251.691867][T15943] ISOFS: Unable to identify CD-ROM format. [ 251.839753][T15960] ------------[ cut here ]------------ [ 251.841769][T15960] 1 [ 251.841777][T15960] WARNING: mm/page_alloc.c:5216 at __alloc_frozen_pages_noprof+0x1e8a/0x2410, CPU#1: syz.5.2784/15960 [ 251.846086][T15960] Modules linked in: [ 251.847704][T15960] CPU: 1 UID: 0 PID: 15960 Comm: syz.5.2784 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.851118][T15960] Tainted: [L]=SOFTLOCKUP [ 251.852922][T15960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.856110][T15960] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 251.858239][T15960] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 e3 bc 0d 00 e9 05 fa ff ff c6 05 23 61 3b 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 5e b8 81 11 48 8d b8 70 09 00 [ 251.864550][T15960] RSP: 0018:ffffc900062b7770 EFLAGS: 00010246 [ 251.866647][T15960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 251.869149][T15960] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 251.872030][T15960] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 251.874523][T15960] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 251.877011][T15960] R13: 1ffff92000c56f36 R14: 1ffff92000c56f04 R15: 0000000000000015 [ 251.879533][T15960] FS: 00007f403f41a6c0(0000) GS:ffff8880d66b6000(0000) knlGS:0000000000000000 [ 251.882541][T15960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.884581][T15960] CR2: 00007f403e585640 CR3: 0000000037e98000 CR4: 0000000000352ef0 [ 251.887146][T15960] Call Trace: [ 251.888240][T15960] [ 251.889190][T15960] ? bpf_ksym_find+0x128/0x1c0 [ 251.890779][T15960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 251.893048][T15960] ? is_bpf_text_address+0x94/0x1a0 [ 251.894729][T15960] ? kernel_text_address+0x8d/0x100 [ 251.896415][T15960] ? widen_string+0xdb/0x2f0 [ 251.897903][T15960] ? __kernel_text_address+0xd/0x30 [ 251.899592][T15960] ? unwind_get_return_address+0x59/0xa0 [ 251.901431][T15960] ? arch_stack_walk+0xa6/0xf0 [ 251.903899][T15960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.906343][T15960] ? stack_trace_save+0x8e/0xc0 [ 251.907889][T15960] ? __pfx_stack_trace_save+0x10/0x10 [ 251.909681][T15960] ? stack_depot_save_flags+0x27/0x9d0 [ 251.911366][T15960] ? __lock_acquire+0x4a5/0x2630 [ 251.913446][T15960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.915862][T15960] ? policy_nodemask+0xed/0x4f0 [ 251.917614][T15960] alloc_pages_mpol+0x1fb/0x550 [ 251.919165][T15960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.920927][T15960] ___kmalloc_large_node+0x104/0x150 [ 251.922702][T15960] ? find_held_lock+0x2b/0x80 [ 251.924572][T15960] __kmalloc_large_node_noprof+0x1c/0x70 [ 251.926880][T15960] ? drm_syncobj_array_find+0x35/0x3a0 [ 251.928839][T15960] __kmalloc_noprof+0x6b1/0x9c0 [ 251.930835][T15960] ? avc_has_extended_perms+0x484/0x1080 [ 251.933237][T15960] ? drm_syncobj_array_find+0x35/0x3a0 [ 251.935341][T15960] drm_syncobj_array_find+0x35/0x3a0 [ 251.937360][T15960] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 251.939386][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 251.942504][T15960] ? drm_dev_exit+0x41/0x60 [ 251.944397][T15960] ? drm_dev_exit+0x41/0x60 [ 251.946072][T15960] drm_ioctl_kernel+0x1f3/0x3e0 [ 251.947630][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 251.950091][T15960] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 251.952274][T15960] drm_ioctl+0x5e6/0xc60 [ 251.954007][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 251.956376][T15960] ? __pfx_drm_ioctl+0x10/0x10 [ 251.957909][T15960] ? selinux_file_ioctl+0x139/0x290 [ 251.959592][T15960] ? selinux_file_ioctl+0xb4/0x290 [ 251.961439][T15960] ? __pfx_drm_ioctl+0x10/0x10 [ 251.963503][T15960] __x64_sys_ioctl+0x18e/0x210 [ 251.965440][T15960] do_syscall_64+0x106/0xf80 [ 251.967254][T15960] ? clear_bhb_loop+0x40/0x90 [ 251.968770][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.970664][T15960] RIP: 0033:0x7f403e59bf79 [ 251.972356][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.978368][T15960] RSP: 002b:00007f403f41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.981058][T15960] RAX: ffffffffffffffda RBX: 00007f403e815fa0 RCX: 00007f403e59bf79 [ 251.983611][T15960] RDX: 0000200000000080 RSI: 00000000c01864cd RDI: 0000000000000003 [ 251.986114][T15960] RBP: 00007f403e6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 251.988612][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.991144][T15960] R13: 00007f403e816038 R14: 00007f403e815fa0 R15: 00007ffd610717b8 [ 251.993580][T15960] [ 251.994585][T15960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.996879][T15960] CPU: 1 UID: 0 PID: 15960 Comm: syz.5.2784 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.000270][T15960] Tainted: [L]=SOFTLOCKUP [ 252.001649][T15960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.004802][T15960] Call Trace: [ 252.005872][T15960] [ 252.006822][T15960] dump_stack_lvl+0x100/0x190 [ 252.008338][T15960] vpanic+0x20d/0x630 [ 252.009658][T15960] panic+0xd1/0xd1 [ 252.010855][T15960] ? __pfx_panic+0x10/0x10 [ 252.012291][T15960] check_panic_on_warn.cold+0x19/0x34 [ 252.013982][T15960] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 252.015922][T15960] __warn.cold+0x191/0x2f8 [ 252.017361][T15960] __report_bug+0x296/0x3d0 [ 252.018915][T15960] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 252.020899][T15960] ? __pfx___report_bug+0x10/0x10 [ 252.022459][T15960] ? __lock_acquire+0x4a5/0x2630 [ 252.024031][T15960] ? __lock_acquire+0x4a5/0x2630 [ 252.025624][T15960] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 252.027575][T15960] report_bug+0xb2/0x220 [ 252.028962][T15960] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 252.030934][T15960] handle_bug+0x166/0x2a0 [ 252.032318][T15960] exc_invalid_op+0x17/0x50 [ 252.033762][T15960] asm_exc_invalid_op+0x1a/0x20 [ 252.035302][T15960] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 252.037428][T15960] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 e3 bc 0d 00 e9 05 fa ff ff c6 05 23 61 3b 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 5e b8 81 11 48 8d b8 70 09 00 [ 252.043488][T15960] RSP: 0018:ffffc900062b7770 EFLAGS: 00010246 [ 252.045362][T15960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 252.047836][T15960] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 252.050342][T15960] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 252.053040][T15960] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 252.055521][T15960] R13: 1ffff92000c56f36 R14: 1ffff92000c56f04 R15: 0000000000000015 [ 252.058572][T15960] ? bpf_ksym_find+0x128/0x1c0 [ 252.060591][T15960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 252.063140][T15960] ? is_bpf_text_address+0x94/0x1a0 [ 252.065168][T15960] ? kernel_text_address+0x8d/0x100 [ 252.066823][T15960] ? widen_string+0xdb/0x2f0 [ 252.068327][T15960] ? __kernel_text_address+0xd/0x30 [ 252.070022][T15960] ? unwind_get_return_address+0x59/0xa0 [ 252.071789][T15960] ? arch_stack_walk+0xa6/0xf0 [ 252.073315][T15960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 252.075311][T15960] ? stack_trace_save+0x8e/0xc0 [ 252.076862][T15960] ? __pfx_stack_trace_save+0x10/0x10 [ 252.078549][T15960] ? stack_depot_save_flags+0x27/0x9d0 [ 252.080333][T15960] ? __lock_acquire+0x4a5/0x2630 [ 252.081905][T15960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.083765][T15960] ? policy_nodemask+0xed/0x4f0 [ 252.085314][T15960] alloc_pages_mpol+0x1fb/0x550 [ 252.086853][T15960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 252.088558][T15960] ___kmalloc_large_node+0x104/0x150 [ 252.090253][T15960] ? find_held_lock+0x2b/0x80 [ 252.091742][T15960] __kmalloc_large_node_noprof+0x1c/0x70 [ 252.093533][T15960] ? drm_syncobj_array_find+0x35/0x3a0 [ 252.095258][T15960] __kmalloc_noprof+0x6b1/0x9c0 [ 252.096806][T15960] ? avc_has_extended_perms+0x484/0x1080 [ 252.098557][T15960] ? drm_syncobj_array_find+0x35/0x3a0 [ 252.100295][T15960] drm_syncobj_array_find+0x35/0x3a0 [ 252.101959][T15960] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 252.103956][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 252.106128][T15960] ? drm_dev_exit+0x41/0x60 [ 252.107573][T15960] ? drm_dev_exit+0x41/0x60 [ 252.109041][T15960] drm_ioctl_kernel+0x1f3/0x3e0 [ 252.110738][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 252.112891][T15960] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 252.114604][T15960] drm_ioctl+0x5e6/0xc60 [ 252.115954][T15960] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 252.118124][T15960] ? __pfx_drm_ioctl+0x10/0x10 [ 252.119685][T15960] ? selinux_file_ioctl+0x139/0x290 [ 252.121357][T15960] ? selinux_file_ioctl+0xb4/0x290 [ 252.122977][T15960] ? __pfx_drm_ioctl+0x10/0x10 [ 252.124539][T15960] __x64_sys_ioctl+0x18e/0x210 [ 252.126064][T15960] do_syscall_64+0x106/0xf80 [ 252.127534][T15960] ? clear_bhb_loop+0x40/0x90 [ 252.129039][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.130934][T15960] RIP: 0033:0x7f403e59bf79 [ 252.132347][T15960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.138317][T15960] RSP: 002b:00007f403f41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.140919][T15960] RAX: ffffffffffffffda RBX: 00007f403e815fa0 RCX: 00007f403e59bf79 [ 252.143384][T15960] RDX: 0000200000000080 RSI: 00000000c01864cd RDI: 0000000000000003 [ 252.145857][T15960] RBP: 00007f403e6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 252.148318][T15960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.150814][T15960] R13: 00007f403e816038 R14: 00007f403e815fa0 R15: 00007ffd610717b8 [ 252.153301][T15960] [ 252.155001][T15960] Kernel Offset: disabled [ 252.156381][T15960] Rebooting in 86400 seconds..