last executing test programs: 57.550114262s ago: executing program 2 (id=605): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.307596263s ago: executing program 2 (id=607): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000af"], 0xfc}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x60800, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0xd2f0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000002140)=ANY=[@ANYBLOB="100000000000000005ee80886d46369f"], 0x10) setns(r1, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) faccessat2(r7, &(0x7f0000002100)='./file1\x00', 0x28, 0x0) 57.10153643s ago: executing program 2 (id=609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r5, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x2, 0x1, 0x0, [0x0]}}, 0x29) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="030328bd7000fddbdf254a"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000100010087d61dde52d5fccc7e498e9dbec5e3b04e4c6a650e9859cd2d9dba0b014138a41955620502f6946b470d5c631f9e895d08bcf8e26faf070753e91cf28600000000000000f193e2264d7bf391125326f43fcbfa395c56738d078ed38d25e36b421d4e67217645b37a2ab6b84aae365cfbbc8ef128f6551f455ce8db1bb18720ebf4d90e09de58dc55bb6478058bf5b500e8999e5bfdbc8f4f4ffc1fdf44c3f231ab3401c163b8d494b7f1fdd9654c9327a713b432480be2324c"], 0x28}}, 0x0) 56.960990614s ago: executing program 2 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000780)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010080000000000000000500000a40000000060a0104000000000000ffffffffffffffff010073797a310000000014000480100001800700010063740000040002800900020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 56.91149829s ago: executing program 2 (id=615): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000140)=@access={'system_u:object_r:pinentry_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x1}, 0x51) 56.500984847s ago: executing program 2 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x80000007, 0x81, 0x0, 0x6, 0xd4f, 0x8, 0xb}, {0x0, 0x3, 0x7, 0x3, 0x20c, 0x7, 0x9}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB="0303000000000000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000800) 56.463066472s ago: executing program 32 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x80000007, 0x81, 0x0, 0x6, 0xd4f, 0x8, 0xb}, {0x0, 0x3, 0x7, 0x3, 0x20c, 0x7, 0x9}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB="0303000000000000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000800) 39.141725047s ago: executing program 0 (id=851): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pread64(r0, &(0x7f0000000700)=""/119, 0x77, 0xd) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000006) r5 = signalfd(r1, &(0x7f0000000000)={[0x3ff]}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x95, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=@deltclass={0x2c, 0x29, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0x5}, {0x4, 0x7}, {0x5, 0xfff1}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x40000080) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000004d433000000e000000100000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000e388000000000000000000000000000000000000000000000000000040000000000000000a00000300000000000000005d001400636d61632861657329"], 0x150}}, 0x0) 38.984359421s ago: executing program 0 (id=858): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="ff430000"], 0x24}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf25030000000500300001000000050037000100000008000600238facc8f0a1a36d2430a4dcad0d4d518e142648d9c1c18a", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x404c081) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @broadcast, 0x1c, 0x5}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x4000010, r0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000001c0)={0x3, 'veth0\x00', {0x8}, 0x8}) r11 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x13, 0xffffffffffffffff, 0x10000000) r12 = io_uring_setup(0x669, &(0x7f00000002c0)) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0xa, 0x0, r14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$sock_ifreq(r15, 0x8994, &(0x7f0000000200)={'bond0\x00', @ifru_data=&(0x7f0000000000)="efed7ca040a1110529deda82157cb31cb400000000000000000000002300"}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0xd5, 0x0, @opaque="a60074227bb13abd9980601a13910d2ac440fb6ac266b612b0ef75c80111ef83589885f50aff5a62b776af0f15674386afbce9332ed7223db976dd59569b89ed6c39bb25b28853048e557f48f06b31c6c11ee14070a87ff4857402f3fed5a79dd887ffef0ecfff9d12aa9de3c3bee2872d9cb2b3a0f7b9b4a3cf0affa7244baace6f636ef57e31673c5c37e31b361a0e28c5c0fadfdcf2730f972146d4aeca6550cc4bb4cd797968a1fda36d1dbe7f37c4739f8fddb51f4fd6cb133b025b5a7b21a4a391dd7c0cd7e506d4ade1"}}}}}, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_SHUTDOWN={0x22, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 38.879880196s ago: executing program 0 (id=860): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') read$FUSE(r0, &(0x7f0000003640)={0x2020}, 0x2020) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000140)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='xfs\x00', 0x800, 0x0) 38.809780212s ago: executing program 0 (id=862): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="00090000000004009dffffffef987a14c2370f0df743d541"]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x1}, 0xc) (async) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xee) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) (async) sched_setscheduler(r5, 0x0, &(0x7f0000000040)=0xc8ef) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x2818, 0x4) 38.74008613s ago: executing program 0 (id=863): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r5, 0x1, 0x4, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x40000) 38.737486233s ago: executing program 0 (id=864): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x69c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x1, "a701f6dd566a4ab69e1f83b4051d09a83971e3aece62c53bb500", 0x20385655}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x9c, 0xb6, 0x0, 0x4}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000800000000000000000040002000000000000000000"], 0x1c}}, 0x400c0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{0x0, 0x12}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x3) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x3a, 0x2f, 0x1, 0xe, 0x3, 0x3, 0x1, 0xfb, 0x1}) syz_clone(0x100, &(0x7f0000000940)="17645661cc86e9fd37277d3fd1fd744ffabc71d6e5bfd07aef896814d94fc69e3d6ce71dfcef5af449df056359259437aeb82523be80a3e66c335166737cdacc27a7f2904cf2caa4e5e53cebf3be9b7acb3ef595f8b78be750e36dbbd0678b7a7d049662cd0466814f97bcb5f2f601d469e824ff1dd4930f3a79b54580a196f86938c217d3917b9e646ed3db1bba611f05c56b65647ade1cf079bef0133484fd7932a3ebf3cda9ab14876f9640f831be5a118b95f33e91ac78f4a3879fd2798d6db38d4bb67c0dd1c21b685ac7d061a85b0b5363e31b14c2ba0b3eb0a7b1a3647a7386f2b9b0cbd6", 0xe8, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="0425f26592f90d42d4bb959da805f54f62dbaf0f3d416826d757ccd9e06b7655e589a5930989453d926ae769b599389311b3b6eff3b267eb46921580e7f4dbe949fa3d0bae2010ef9824310adc4954dd5a089266184aeb48887fc789ec3da00ce101f82b653d8eaa779f08cc3fc7d17449f5fc749b8cc122b4df9900ea1f8ee5f435331120b44d5bb0075126f03adebffb2349820f904e5596812198c060aba48c74c08390b14468fc5e98496766454dd9f5ee155aed6efbf8d68af0daab6a68c0a77cbe8f1c15b852859db58372b4d1c4486ed507c55d72b9de1995a0d73d6731e233c350aad0720d") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {0xfff3}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xa7, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0xcb47, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x7, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0x0, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x80, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0x9, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x10, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x46d, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x4, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0xffffffff, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cd, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x10000e6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = accept$netrom(r1, &(0x7f0000000800)={{0x3, @null}, [@rose, @default, @null, @bcast, @netrom, @remote, @remote, @bcast]}, &(0x7f00000005c0)=0x48) getsockopt$bt_hci(r8, 0x0, 0x2, &(0x7f0000001b80)=""/4096, &(0x7f0000000880)=0x1000) 23.712596167s ago: executing program 33 (id=864): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x69c, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x1, "a701f6dd566a4ab69e1f83b4051d09a83971e3aece62c53bb500", 0x20385655}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x9c, 0xb6, 0x0, 0x4}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000800000000000000000040002000000000000000000"], 0x1c}}, 0x400c0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{0x0, 0x12}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x3) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x3a, 0x2f, 0x1, 0xe, 0x3, 0x3, 0x1, 0xfb, 0x1}) syz_clone(0x100, &(0x7f0000000940)="17645661cc86e9fd37277d3fd1fd744ffabc71d6e5bfd07aef896814d94fc69e3d6ce71dfcef5af449df056359259437aeb82523be80a3e66c335166737cdacc27a7f2904cf2caa4e5e53cebf3be9b7acb3ef595f8b78be750e36dbbd0678b7a7d049662cd0466814f97bcb5f2f601d469e824ff1dd4930f3a79b54580a196f86938c217d3917b9e646ed3db1bba611f05c56b65647ade1cf079bef0133484fd7932a3ebf3cda9ab14876f9640f831be5a118b95f33e91ac78f4a3879fd2798d6db38d4bb67c0dd1c21b685ac7d061a85b0b5363e31b14c2ba0b3eb0a7b1a3647a7386f2b9b0cbd6", 0xe8, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="0425f26592f90d42d4bb959da805f54f62dbaf0f3d416826d757ccd9e06b7655e589a5930989453d926ae769b599389311b3b6eff3b267eb46921580e7f4dbe949fa3d0bae2010ef9824310adc4954dd5a089266184aeb48887fc789ec3da00ce101f82b653d8eaa779f08cc3fc7d17449f5fc749b8cc122b4df9900ea1f8ee5f435331120b44d5bb0075126f03adebffb2349820f904e5596812198c060aba48c74c08390b14468fc5e98496766454dd9f5ee155aed6efbf8d68af0daab6a68c0a77cbe8f1c15b852859db58372b4d1c4486ed507c55d72b9de1995a0d73d6731e233c350aad0720d") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {0xfff3}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xa7, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0xcb47, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x7, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x8, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0x0, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x10000, 0x8, 0x8, 0x7, 0x1, 0x80, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0x9, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x10, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x46d, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x4, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0xffffffff, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cd, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x10000e6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = accept$netrom(r1, &(0x7f0000000800)={{0x3, @null}, [@rose, @default, @null, @bcast, @netrom, @remote, @remote, @bcast]}, &(0x7f00000005c0)=0x48) getsockopt$bt_hci(r8, 0x0, 0x2, &(0x7f0000001b80)=""/4096, &(0x7f0000000880)=0x1000) 15.919347766s ago: executing program 5 (id=1193): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@local, 0xffffffff}, 0x0, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0xffffffffffffffcb, 0xa277}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x8040) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdf92e0b1cd6f24776b9da5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7"], 0x10b8}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b8f2ced5", @ANYRES64=0x0], 0x20) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000380)={{@hyper, 0x5c225a5a}, 0x1, 0x1, 0x4}) 13.907750086s ago: executing program 5 (id=1215): socket$unix(0x1, 0x5, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000380), 0x1000a) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0xeffb, 0x9) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000004c0)=@newtaction={0x198, 0x30, 0x9, 0x0, 0x0, {}, [{0x184, 0x1, [@m_bpf={0x180, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0xfc, 0x6, "c25737c7e1eb63da15164430bd9ad992125048d4d2aa803e1ae52484db1f43a1d618e9b02e0b4e76de9c05e761a3da7d9275c8ab1f5731055fadb9976e9908e882f55da293e8fd8fb9f3be31514fdeff29327f38e3f36aca8484729a7d6374115cae7b12e4141788fb6909fcfb547b4c14a65571cb4d2f535208152746798df7c946801fa46e4c1371f64d33ee06e72af6389f06cfb1d0e48e4e8504770d5f5dd2814c571f3cccfdf9d71de361ba0f0099f0c5e4d390fa429422cfb79929fac09a258c97e24fdb2ecdee18122fec36436c2a890425aa42f17e561a5928ce72f5f0e4c4c14769a8ba1c967dc46b12c8f458f707603fc058bb"}, {0xc}, {0xc}}}]}]}, 0x198}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r6, r6) (async) ioprio_set$uid(0x0, r6, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0x6}, {0xd, 0x9}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x7c0}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x3c2}, {0x8, 0xb, 0xfffff801}]}, 0x54}}, 0x0) 13.906685799s ago: executing program 5 (id=1218): r0 = socket$inet6(0xa, 0x2, 0x88) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}}) bind$inet6(r0, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @rand_addr, 0xd}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) readv(r2, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/183, 0xb7}], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x2, 0x4) 13.840371003s ago: executing program 5 (id=1221): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000240)=0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0xfb, "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"}, &(0x7f0000000140)=0x11f) 13.83989337s ago: executing program 5 (id=1223): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1e48fecacbd21e9b, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = inotify_init1(0x80000) r5 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r5, 0x3, 0x3, 0xffffffff) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) listen(0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x0) (async) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000840)) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xb, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xb, 0x4) 13.769001237s ago: executing program 5 (id=1227): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x2b, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="980000000080010000001801008f", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r5, 0x0, 0x4b}, 0xb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r5, 0x0, 0x4b}, 0xb) sync() (async) sync() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140001000000000000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc140000001100010000000000000000000100040a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a00000d0900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) sync() sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.340163744s ago: executing program 1 (id=1363): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x20046004, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x9, 0x5a}) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x20046004, 0x0, 0x0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x9, 0x5a}) (async) 2.335781039s ago: executing program 1 (id=1364): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi3\x00', 0x40c00, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f00000005c0)) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba00, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x58}}, 0x8000002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a00000409000107000000000000000008000540000000020900020073797a310000000008000a40fffffffc6c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000400003803c000080080003400000000230000b802c0001800a0001006c060000000000001c0002800c00024000000000000000030c0001400000000000010000140000001100010000000000000000000300000a"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.250588776s ago: executing program 1 (id=1365): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000003a002902000000000020000002"], 0x14}}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x54000, 0xe8f5b594b9351402, 0x10000, 0x50000], 0x2, 0x0, 0xfff}) 2.25020567s ago: executing program 1 (id=1366): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x79b9, 0x80) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x11, 0x17, 0x5, 0x12, 0xb, 0x4, 0x1, 0x3, 0x1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0xffff, r0, 0xb, {0x2, 0xdc}, 0x9}, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) sendto$inet(r2, &(0x7f0000000180)="63dfaa5bf289fb90f919979bb87149e1aedcebf9688174e90b7a24ed8e4f6b713d9b57fe081c7b577825313441f53cffee60b7771628c84d41d637095e6a8be89d2488b3d9423a606d8edaec2c6c", 0x4e, 0x40801, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xe}, @device_b, @device_a, @from_mac=@broadcast, {0x1, 0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0xff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x2, 0x0, {0x6, 0x1, 0x0, 0xd3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xe, 0x1}}, [{0xdd, 0xe0, "5dfc4f47b23fbbbe4fd079b994863095f3887d5ee9b863b0677bd98b007b3167ec3beea5ee6ba764d1334a2ade17370b6c827d37331221549bd5d1360f0b011da0ee16e17cd396095cf20f41b13299e44332f5706268ca1a66a91c77f6afd5632840e535409cc9d26eaaac7ee0b0d1a9dd0ca882d8700950026b29a31e06390b0df01d101522a551915473b592864507de691ce4e025896868512f39f065deddd040d2a5ee01f303c18ae4e352c089d2c4aa57f59b9546af2ed7abb259f428470d3c5ecf87eff6ce9d534b3ee6ab1ee283baf2fbf5ee937062ca0bb5a7ad40b7"}, {0xdd, 0xfb, "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"}, {0xdd, 0xd8, "5e7e9c2de531b26a5ac53393961dc813687e9192406dce89915ec1cf753221926e8c3c0d9056bea2dc51bb030ad3132cb67cda5f5c2760a9f6f29659d1fedfb7d89de24172a37f352d13e2e1cb4dda4056506d480548dde4ff513f7daa3c59ee5ffd2cc9e99205e6575b9e973b51a9f583f256e9ee228f2e8f1a8c475e75115a20ff3a99f169ede18fdbed10554e75fdac32834c55f385fb131c5a79ef61b3ac43d831e0a4d7f8466ffae972a3d96b8ee9906239af0f31a870e3efb4c1f8450493d9c83e66f0280293f3074c865780cc46fc9873485b5804"}, {0xdd, 0x52, "4d0b949b1bb0e1390cd0d7fa48dfc670c237419bf7c7d7d23c7841808566bca26f43c1331e88c5e62f321e987ac77927ee58b7cc9a1d425ec2b64d9a049994b6987174ed09e50e6c9386442e586d74b08259"}, {0xdd, 0x7b, "ea6427d1544084954d8faab02c52e04f8b8603c9562bc4b4f535d94278b38199aad492d0d5e2054941e3ba90218227929842cff0c3b45353702d92d17c998e8dcf874ce38acce86a27222e600d4efe62fc5eeb522357b6a9ba125d666250da21ed91a4ab5517e7ffad5a8bdfb74616e171d29b49db79c581b79891"}, {0xdd, 0xf3, "fc4253351401536b00374dd63d9255a1efbb71de1374c6468e622da6390f681fc9fc8cee0f73dd77064a5b1d18c1cefb865466dbedda91c895e95e1b9bee137beacd5e26deac33e4fcca533a323ec043adf425ee658dd24ce12d65107c7c145a3f2a6af396cdfc42a14ad0e1669b2bf20957cf28c09fb4114e000238cbe80b4c3f9a025515721f237676e97fda484044674cc5b7d218506e7d9e19b69a60d55abd95209812d0d07c7f894a5d488930a9b3e01746017702884d600f747651adea958f1029d5105e913de4b131fd08049e2cfd190b94dd39486fc5bbe3253933217ab5dfd6be48798401ac9b516c2e644208b3be"}]}, 0x4d7) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xfb, 0xc8}}}, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@dev={0xac, 0x14, 0x14, 0x2f}, @in6=@empty, 0x4e20, 0xdc, 0x4e23, 0x1000, 0x2, 0x20, 0x80, 0x3a}, {0x2000, 0x3, 0x4, 0x2, 0x3, 0x2, 0x6, 0x9}, {0xf, 0x9, 0x81, 0x401}, 0x0, 0x6e6bbc, 0x0, 0x1, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0xa9742750475cc377}, 0xa, @in=@remote, 0x3502, 0x4, 0x1, 0xff, 0x1, 0x0, 0x9}}, 0xe8) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000f00)={0x7, &(0x7f0000000ec0)=[{0x3, 0xe, 0x51, 0x3}, {0xde, 0xd, 0xd, 0x4}, {0x7, 0x9, 0xf7, 0x2}, {0x7, 0x9, 0xfc, 0x1ff}, {0x9, 0x1, 0xb2, 0x2}, {0x856d, 0x9, 0xcc, 0xfffffffd}, {0xb12a, 0x0, 0x3, 0xfffffffd}]}) r3 = syz_create_resource$binfmt(&(0x7f0000000fc0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000001000)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) io_uring_enter(r0, 0x445a, 0xe4bc, 0x4c, &(0x7f0000001040)={[0x401]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000010c0)={0x10002000}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001100)) 2.109318347s ago: executing program 3 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) setreuid(0x0, 0xee00) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80ce1efbafc0c66edd9ee0f01c3", 0x2d}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.879514814s ago: executing program 3 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}}, 0xfffffffffffffd7f) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.879178603s ago: executing program 3 (id=1370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x3, {{{@in=@private=0xa010100, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, @in6=@remote, {0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0xffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x118, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @loopback, 0x45}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 1.679712394s ago: executing program 1 (id=1371): r0 = fanotify_init(0x4000, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="0005100000001010d1be36321fd0a065074d38b8330b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x20010, r2, 0x99d62000) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000080)={0xffffffff, 0x100, 0x0, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x0, 0x1, 0x54}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00002abd7098b8dbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800952720bbbdd055c8cefb0b000800000000303030303a30303a31302e300200000008000b00e60200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f80900000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0xb0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x130, 0x30, 0x3, 0x1, 0x2000000, {}, [{0x11c, 0x1, [@m_ct={0x118, 0x3, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e5a32649ac3a9f407e4611d28576afe7"}]}, {0xb4, 0x6, "29fd2951cc4c326249e990f0913e5fa0d673ed65926664c3aa855d311e76ca5fcf892e3e1f08109179246da0a36f10d946c277a323ee85dedc0c9522652a7c981baf31c2a9dad54176ca6d7d66b18eab97b8a80753be54dffe95774afaba4c012757014e39e3a46de0ba5f9fea93785c94e98b68ac26d58d9f4383e9f6f622647775ee4aec314b97c9058350c0a329c3b166e5ab6a27f671f05166793c67a5b680f3f91ad78404f645f4045f1ed13634"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x130}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000900)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2, 0x8f, "5f4691ef7642139a88f959b65c37dda4fbe4ebff9526a5dd89eb34664d7189aecc36823cd5a30d00b2eaf0de7717b7fe224096b47e8112c6cb5223c5c22f596e0000000048a7c7e62a349dfbcc0520f4e7536dbe64627dea9580000100bc4a425209ab1ccf9b53cdc15e46fd79dce471b8694d524b163b06c53ff554fabb4c06513f048ed4bee5c22e68eae27e3fec"}}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000170a01010000000000000000020001000000010073797a30000000009aedf6dc254f3841d36f58d553167f"], 0x20}}, 0x884) getsockopt$sock_buf(r6, 0x1, 0x32, &(0x7f00000005c0)=""/201, &(0x7f0000000400)=0xc9) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000700)={0x2}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xbd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r7}, 0x14) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x100010, r2, 0x5e3ca000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r8, @ANYRES64=r3], 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x10040c41) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r8, @ANYRES8=r8], 0xf0}}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x84082, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x5) 1.337385052s ago: executing program 4 (id=1372): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@arm64={0x6, 0x3, 0xb, '\x00', 0x5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r9 = getpgrp(0xffffffffffffffff) kcmp(r9, r9, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000240)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 999.821509ms ago: executing program 3 (id=1373): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x2b, 0x6, 0x5e) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x80002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) socket(0x2b, 0x6, 0x5e) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 880.413349ms ago: executing program 3 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, r2, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x24008004) 806.355012ms ago: executing program 3 (id=1375): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0x5f8, 0x288, 0x4d8, 0xd0, 0xd0, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f0000000000), {[{{@ipv6={@empty, @remote, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'veth0_to_bridge\x00', 'pimreg\x00', {}, {0xff}, 0xc, 0x7, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 'virt_wifi0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x5e, 0x4, 0x1, 0x9}, 0x0, 0x190, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@string={{0xc0}, {0x9, 0xbe70, 'fsm\x00', "c9b5732ed47337c7e695655d316747b8b7c88ea6ced289112289a7d1af0cc39a7713be8b34badcef115583429e7c34c4137ea6af84f17b3626e4ba336006882e57477aa16f9cccd59840fed612d66fddec866c90ef88a0b3a59b79bd17cf6c7c950520a45893b057df2b66145bd6db207b334997fd22ca8337ebe5da4b35403d", 0x17, 0x0, {0xa2}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x80, 0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, [0x1fe, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xff], 'ip6tnl0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0xb5, 0x6, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x60, 0x2, 0x0, [0x0, 0x6, 0x1, 0x7b, 0x6, 0xd56, 0x9, 0x0, 0xe, 0x10, 0x100, 0x0, 0x8ed, 0x5, 0x0, 0x4], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "c4df"}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0xfff, @ipv4=@local, 0x4e24}}}, {{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff], 'vxcan1\x00', 'geneve1\x00', {0xff}, {0xff}, 0x62, 0xfb, 0x3, 0x4e}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x4, 0x5, 0x0, 0xfeb, 0xfd, "00060801f60900000000000600", 0x240001, 0x1fd}) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x44, &(0x7f00000006c0)={[{0x35, 0x4e00, "7d950ad30d8911b5585f50f09d9491eecb2ce5cd165c0f050d87c0f34e07fb6c64cb872bde757abfb85eea04ad62b5e255275a7a79"}, {0x4, 0x4e00, "dcf43629"}]}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x8, 0x4) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x2b, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0xa1, 0xe4080, 0x23456}) 320.166375ms ago: executing program 4 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffd73, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010141, 0x0, 0x1}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 170.116248ms ago: executing program 4 (id=1377): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = semget$private(0x0, 0x1, 0x200) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000016c0)=""/152) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x123}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 105.606546ms ago: executing program 1 (id=1378): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0, 0x0, [{{0x9, 0x4, 0xd1, 0x5, 0x0, 0xa0, 0xee, 0xd8, 0x2}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x36, &(0x7f00000046c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x0, 0x2b, 0x0, @empty, @local}}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="f30fbd9e412b66b9640a000066b8e2ee000066ba00000000ba2100ec26f00fba7f1559b800078ec0baf80c66b9200a00000f32660f3a627768dfeff30f205b66b9800000c00f326635000800000f300f23c85bd621f8f835080030000f23f8ba4200ef440f20c0663501000000440f22c0", 0x71}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x600000}) r6 = dup(r5) write$binfmt_misc(r6, &(0x7f0000000280)="df", 0x1) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 105.224099ms ago: executing program 4 (id=1379): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='4\x00', 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) write$sysctl(r0, &(0x7f00000000c0)='4\x00', 0x2) (async) 215.789µs ago: executing program 4 (id=1380): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x25041}}, 0x20}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) (rerun: 32) 0s ago: executing program 4 (id=1381): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0x6, 0x12) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d00)={0x80000000000001a}) r2 = userfaultfd(0x80001) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r4, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) preadv2(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/11, 0xb}], 0x9, 0x2, 0xf78a, 0x0) kernel console output (not intermixed with test programs): ributes in process `syz.2.544'. [ 99.484313][ T7769] netlink: 96 bytes leftover after parsing attributes in process `syz.1.537'. [ 99.497793][ T54] usb 6-1: USB disconnect, device number 12 [ 99.540336][ T7803] netlink: 830 bytes leftover after parsing attributes in process `syz.0.547'. [ 99.577184][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.548'. [ 99.689982][ T7814] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 99.788654][ T7822] binder: 7821:7822 ioctl c0306201 200000000040 returned -22 [ 99.815361][ T7826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.555'. [ 99.828706][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.835295][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.123023][ T5931] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.150421][ T7854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.562'. [ 100.204008][ T7859] program syz.3.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.243488][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'. [ 100.302870][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 100.308031][ T5931] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.312108][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.316759][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.324374][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.329583][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.335489][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.339360][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.400170][ T7874] MTD: Couldn't look up '/dev/sg0': -15 [ 100.402606][ T7874] /dev/sg0: Can't lookup blockdev [ 100.555579][ T5931] usb 5-1: usb_control_msg returned -32 [ 100.557529][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 100.729853][ T7886] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 100.736093][ T7886] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 100.955790][ T7895] FAT-fs (sr0): bogus number of reserved sectors [ 100.959435][ T7895] FAT-fs (sr0): Can't find a valid FAT filesystem [ 101.027486][ T7893] FAT-fs (sr0): bogus number of reserved sectors [ 101.030459][ T7893] FAT-fs (sr0): Can't find a valid FAT filesystem [ 101.259527][ T7919] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 101.281398][ T7922] overlayfs: missing 'workdir' [ 101.465287][ T144] usb 5-1: USB disconnect, device number 9 [ 101.498240][ T7948] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.502238][ T7948] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.617246][ T7948] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.621183][ T7948] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.681148][ T7948] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.685225][ T7948] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.778832][ T7948] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.782102][ T7948] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.788382][ T7974] syzkaller0: entered promiscuous mode [ 101.790599][ T7974] syzkaller0: entered allmulticast mode [ 101.801504][ T7974] tipc: Started in network mode [ 101.803623][ T7974] tipc: Node identity 6a3b20842b57, cluster identity 4711 [ 101.806944][ T7974] tipc: Enabled bearer , priority 0 [ 101.815002][ T7972] openvswitch: netlink: Key type 31 is not supported [ 101.863097][ T63] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.866179][ T63] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.883053][ T63] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.886022][ T63] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.899646][ T6613] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.902823][ T6613] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.914848][ T1180] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.917836][ T1180] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.942593][ T7978] netlink: 'syz.2.601': attribute type 23 has an invalid length. [ 102.081614][ T7986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7986 comm=syz.0.604 [ 102.085727][ T7986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7986 comm=syz.0.604 [ 102.089694][ T7986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7986 comm=syz.0.604 [ 102.134145][ T8001] kvm: user requested TSC rate below hardware speed [ 102.139999][ T8001] kvm: user requested TSC rate below hardware speed [ 102.255839][ T8003] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 102.292306][ T8003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.310290][ T8003] bond1: (slave geneve2): making interface the new active one [ 102.313836][ T8003] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 102.603622][ T7973] tipc: Resetting bearer [ 102.616188][ T7973] tipc: Disabling bearer [ 102.657049][ T8032] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 102.685577][ T8034] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.747278][ T8036] tipc: Failed to remove unknown binding: 66,1,1/0:696885507/696885509 [ 102.750535][ T8036] tipc: Failed to remove unknown binding: 66,1,1/0:696885507/696885509 [ 102.763009][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.789330][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.867591][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.962182][ T8053] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 102.964979][ T8053] netlink: 'syz.1.622': attribute type 3 has an invalid length. [ 102.967576][ T8053] netlink: 'syz.1.622': attribute type 3 has an invalid length. [ 102.987377][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.172224][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.177676][ T5930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.180534][ T5930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.185725][ T5930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.189351][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 103.189359][ T40] audit: type=1400 audit(1766131330.498:708): avc: denied { mount } for pid=8058 comm="syz.0.625" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 103.189673][ T5930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.202742][ T40] audit: type=1400 audit(1766131330.518:709): avc: denied { read open } for pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.223453][ T40] audit: type=1400 audit(1766131330.518:710): avc: denied { getattr } for pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.235333][ T40] audit: type=1400 audit(1766131330.538:711): avc: denied { add_name } for pid=8059 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.247137][ T40] audit: type=1400 audit(1766131330.538:712): avc: denied { create } for pid=8059 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.256616][ T40] audit: type=1400 audit(1766131330.538:713): avc: denied { write } for pid=8059 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.264662][ T40] audit: type=1400 audit(1766131330.538:714): avc: denied { append } for pid=8059 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=3688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.275651][ T40] audit: type=1400 audit(1766131330.578:715): avc: denied { remove_name } for pid=8065 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.284279][ T40] audit: type=1400 audit(1766131330.578:716): avc: denied { unlink } for pid=8065 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.343795][ T1145] bond1 (unregistering): (slave geneve2): Releasing active interface [ 103.375915][ T1145] bond0 (unregistering): Released all slaves [ 103.425167][ T1145] bond1 (unregistering): Released all slaves [ 103.475918][ T8069] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 103.480248][ T8069] Error validating options; rc = [-22] [ 103.560015][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 103.614306][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.616773][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.619093][ T8055] bridge_slave_0: entered allmulticast mode [ 103.624243][ T8055] bridge_slave_0: entered promiscuous mode [ 103.632592][ T40] audit: type=1400 audit(1766131330.948:717): avc: denied { read } for pid=8085 comm="syz.3.628" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 103.633021][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.641174][ T8086] netlink: 'syz.3.628': attribute type 7 has an invalid length. [ 103.643588][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.647350][ T8055] bridge_slave_1: entered allmulticast mode [ 103.650030][ T8055] bridge_slave_1: entered promiscuous mode [ 103.695345][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.701996][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.716678][ T8055] team0: Port device team_slave_0 added [ 103.719802][ T8055] team0: Port device team_slave_1 added [ 103.734044][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.736246][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.744616][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.752145][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.754703][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.771753][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.828181][ T8055] hsr_slave_0: entered promiscuous mode [ 103.832090][ T8098] netlink: 'syz.1.630': attribute type 13 has an invalid length. [ 103.833827][ T8055] hsr_slave_1: entered promiscuous mode [ 103.837694][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 103.839612][ T8055] Cannot create hsr debugfs directory [ 103.866310][ T1145] hsr_slave_0: left promiscuous mode [ 103.869307][ T1145] hsr_slave_1: left promiscuous mode [ 103.879477][ T1145] batadv_slave_1: left promiscuous mode [ 103.882443][ T1145] veth1_macvtap: left promiscuous mode [ 103.884865][ T1145] veth0_macvtap: left promiscuous mode [ 103.886836][ T1145] veth1_vlan: left promiscuous mode [ 103.889124][ T1145] veth0_vlan: left promiscuous mode [ 104.442287][ T8104] __nla_validate_parse: 11 callbacks suppressed [ 104.442304][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 104.510403][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.523030][ T8055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.527287][ T8055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.531390][ T8055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.536936][ T8055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.594646][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.606008][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.612778][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.615081][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.621097][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.623428][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.726344][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.901641][ T8055] veth0_vlan: entered promiscuous mode [ 104.906510][ T8055] veth1_vlan: entered promiscuous mode [ 104.919654][ T8055] veth0_macvtap: entered promiscuous mode [ 104.923516][ T8055] veth1_macvtap: entered promiscuous mode [ 104.931335][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.936866][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.942287][ T6613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.945149][ T6613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.948671][ T6613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.951574][ T6613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.982643][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.986003][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.999947][ T6613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.003462][ T6613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.135298][ T8144] qnx6: unable to set blocksize [ 105.290435][ T65] Bluetooth: hci3: command tx timeout [ 105.360478][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 105.511594][ T34] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 105.514468][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 105.521609][ T34] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 105.524713][ T34] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 105.527386][ T34] usb 8-1: Manufacturer: syz [ 105.531025][ T34] usb 8-1: config 0 descriptor?? [ 105.580255][ T34] rc_core: IR keymap rc-hauppauge not found [ 105.582910][ T34] Registered IR keymap rc-empty [ 105.585670][ T34] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 105.590327][ T34] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 105.737799][ T6018] usb 8-1: USB disconnect, device number 6 [ 105.906039][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.179919][ T5931] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 106.329828][ T5931] usb 9-1: Using ep0 maxpacket: 16 [ 106.334683][ T5931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.338644][ T5931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.342675][ T5931] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 106.347151][ T5931] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 106.350348][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.354375][ T5931] usb 9-1: config 0 descriptor?? [ 106.677029][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.769773][ T5931] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:05AC:8241.0004/input/input12 [ 106.846245][ T5931] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 106.960280][ T6018] usb 9-1: USB disconnect, device number 2 [ 107.163933][ T8163] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 107.166497][ T8163] netlink: 224 bytes leftover after parsing attributes in process `syz.4.642'. [ 107.215468][ T8221] ip6gre1: entered promiscuous mode [ 107.217541][ T8221] ip6gre1: entered allmulticast mode [ 107.369397][ T65] Bluetooth: hci3: command tx timeout [ 107.529316][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 107.659164][ T34] usb 6-1: device descriptor read/64, error -71 [ 107.706708][ T8232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.713168][ T8232] cgroup: No subsys list or none specified [ 107.806434][ T8237] erofs (device loop3): cannot find valid erofs superblock [ 107.839583][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.899130][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.036974][ T34] usb 6-1: device descriptor read/64, error -71 [ 108.043799][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 108.061865][ T8265] team0: Port device team_slave_1 removed [ 108.119323][ T8269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.672'. [ 108.125179][ T8269] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.672'. [ 108.159159][ T34] usb usb6-port1: attempt power cycle [ 108.508780][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 108.529894][ T34] usb 6-1: device descriptor read/8, error -71 [ 108.535545][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 108.535557][ T40] audit: type=1400 audit(1766131335.850:744): avc: denied { append } for pid=8291 comm="syz.0.678" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.539224][ T8292] sg_write: process 546 (syz.0.678) changed security contexts after opening file descriptor, this is not allowed. [ 108.573231][ T8307] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 108.575780][ T8307] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.682'. [ 108.641998][ T8314] tmpfs: Bad value for 'mpol' [ 108.672481][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.756903][ T40] audit: type=1326 audit(1766131336.071:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.3.688" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f07edb86667 code=0x0 [ 108.778603][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 108.799257][ T34] usb 6-1: device descriptor read/8, error -71 [ 108.919109][ T34] usb usb6-port1: unable to enumerate USB device [ 108.928743][ T6018] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 109.098447][ T6018] usb 9-1: Using ep0 maxpacket: 16 [ 109.101871][ T6018] usb 9-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.105618][ T6018] usb 9-1: config 1 interface 0 has no altsetting 0 [ 109.109715][ T6018] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 109.112360][ T6018] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.114647][ T6018] usb 9-1: Product: Ñ [ 109.115851][ T6018] usb 9-1: Manufacturer: 䬯ãŽè¬šç·¹è†¤â¤·ážé–ƒç“™ä¯ªã·›æ“’éµ€àµë†“唖슛ᷟស잨ꭄ衢尵紦쥇嫾銱蘌ïಯ깎ï¹å§›ì†“홡榚百䟟浴鉴筪膜î½î¾¥ì„¢ä³Šà¢™é¨Žæ•²ä¤œâ™ê§¼å’šä‚œèµ°ïŽïŒ¿â³¥æ²£é´²ÈµÑªê”…থ楢ಽ飑蟉蕠ꔽ퇒蟷絩잳쳩ã§ë¡°ïŸÃ€ê„íºì‘沩与횭া켩묈즦ï¥ì³Ÿë„´ïˆªä–å³ë»”讀郺 [ 109.125242][ T6018] usb 9-1: SerialNumber: syz [ 109.249417][ T65] Bluetooth: hci1: Malformed LE Event: 0x1d [ 109.252304][ T40] audit: type=1400 audit(1766131336.571:746): avc: denied { bind } for pid=8332 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.252816][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 109.260778][ T40] audit: type=1400 audit(1766131336.571:747): avc: denied { setopt } for pid=8332 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.266366][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 109.353822][ T6018] usbhid 9-1:1.0: can't add hid device: -71 [ 109.358392][ T6018] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 109.362755][ T40] audit: type=1400 audit(1766131336.681:748): avc: denied { map } for pid=8336 comm="syz.0.693" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.374127][ T6018] usb 9-1: USB disconnect, device number 3 [ 109.448775][ T65] Bluetooth: hci3: command tx timeout [ 109.619117][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.690213][ T40] audit: type=1400 audit(1766131337.011:749): avc: denied { associate } for pid=8348 comm="syz.4.696" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.698776][ T40] audit: type=1400 audit(1766131337.021:750): avc: denied { watch } for pid=8348 comm="syz.4.696" path="/16/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 109.706877][ T40] audit: type=1400 audit(1766131337.021:751): avc: denied { module_request } for pid=8348 comm="syz.4.696" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 110.099574][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 110.112865][ T8379] bond1: Invalid ad_actor_system MAC address. [ 110.115057][ T8379] bond1: option ad_actor_system: invalid value (255) [ 110.121817][ T8379] bond1 (unregistering): Released all slaves [ 110.186836][ T8386] mkiss: ax0: crc mode is auto. [ 110.204569][ T8390] netlink: 'syz.0.710': attribute type 11 has an invalid length. [ 110.244390][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.711'. [ 110.366396][ T8399] xt_CT: No such helper "snmp_trap" [ 110.373030][ T8402] netlink: zone id is out of range [ 110.383162][ T8399] ip6gretap1: entered promiscuous mode [ 110.385527][ T8399] ip6gretap1: entered allmulticast mode [ 110.400013][ T8402] SELinux: policydb table sizes (1,0) do not match mine (8,7) [ 110.402779][ T8402] SELinux: failed to load policy [ 110.437062][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.468742][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.649701][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.659633][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.664002][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.669765][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.673327][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.676470][ T60] usb 5-1: Product: syz [ 110.678988][ T60] usb 5-1: Manufacturer: syz [ 110.680758][ T60] usb 5-1: SerialNumber: syz [ 110.893996][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.897802][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.908633][ T60] usb 5-1: 0:2 : does not exist [ 110.925301][ T60] usb 5-1: USB disconnect, device number 10 [ 110.942503][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.153070][ T8449] lo speed is unknown, defaulting to 1000 [ 111.153155][ T8448] rdma_rxe: rxe_newlink: failed to add lo [ 111.157096][ T8449] lo speed is unknown, defaulting to 1000 [ 111.160538][ T8449] lo speed is unknown, defaulting to 1000 [ 111.208575][ T8448] netlink: 'syz.3.726': attribute type 64 has an invalid length. [ 111.208626][ T8452] netlink: 'syz.3.726': attribute type 64 has an invalid length. [ 111.210996][ T8448] netlink: 'syz.3.726': attribute type 4 has an invalid length. [ 111.214202][ T8452] netlink: 'syz.3.726': attribute type 4 has an invalid length. [ 111.216573][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.726'. [ 111.221820][ T8452] netlink: 152 bytes leftover after parsing attributes in process `syz.3.726'. [ 111.253022][ T8455] futex_wake_op: syz.4.727 tries to shift op by 32; fix this program [ 111.256900][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 111.259861][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 111.263669][ T8449] infiniband sz1: set active [ 111.264419][ T5999] lo speed is unknown, defaulting to 1000 [ 111.264641][ T8456] overlayfs: failed to resolve '/ailed_transaction_log': -2 [ 111.265475][ T8449] infiniband sz1: added lo [ 111.286933][ T8449] RDS/IB: sz1: added [ 111.289097][ T8449] smc: adding ib device sz1 with port count 1 [ 111.291689][ T8449] smc: ib device sz1 port 1 has no pnetid [ 111.294941][ T60] lo speed is unknown, defaulting to 1000 [ 111.299828][ T8449] lo speed is unknown, defaulting to 1000 [ 111.420979][ T8449] lo speed is unknown, defaulting to 1000 [ 111.439501][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.443467][ T40] audit: type=1400 audit(1766131338.762:752): avc: denied { read } for pid=8459 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.503281][ T8449] lo speed is unknown, defaulting to 1000 [ 111.529786][ T65] Bluetooth: hci3: command tx timeout [ 111.582414][ T8449] lo speed is unknown, defaulting to 1000 [ 111.710426][ T40] audit: type=1400 audit(1766131339.032:753): avc: denied { map } for pid=8474 comm="syz.1.731" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.423097][ T8519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.447144][ T8523] netlink: get zone limit has 4 unknown bytes [ 112.541852][ T8535] lo speed is unknown, defaulting to 1000 [ 113.007376][ T8573] fuse: Bad value for 'rootmode' [ 113.014878][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 113.076823][ T8575] team_slave_0 (unregistering): left allmulticast mode [ 113.084190][ T8575] team0: Port device team_slave_0 removed [ 113.094315][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.760'. [ 113.170172][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.366353][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 113.411410][ T8599] syzkaller0: entered promiscuous mode [ 113.413163][ T8599] syzkaller0: entered allmulticast mode [ 113.512670][ T8601] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 113.516210][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 113.519201][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.522392][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.525553][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.528996][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.533079][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.535986][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.536457][ T8601] veth0_vlan: left promiscuous mode [ 113.542515][ T8601] veth0_vlan: entered promiscuous mode [ 113.549427][ T8601] team0: Device veth0_vlan failed to register rx_handler [ 113.703511][ T8608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.709097][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 113.709106][ T40] audit: type=1400 audit(1766131341.033:765): avc: denied { read } for pid=8607 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.743732][ T40] audit: type=1400 audit(1766131341.063:766): avc: denied { append } for pid=8584 comm="syz.3.761" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.744687][ T8585] netlink: 260 bytes leftover after parsing attributes in process `syz.3.761'. [ 113.769587][ T8585] SELinux: policydb version -1102856148 does not match my version range 15-35 [ 113.772636][ T8585] SELinux: failed to load policy [ 113.895445][ T10] usb 8-1: usb_control_msg returned -71 [ 113.906006][ T10] usbtmc 8-1:16.0: can't read capabilities [ 113.914380][ T10] usb 8-1: USB disconnect, device number 7 [ 113.994096][ T8633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.994884][ T8635] netlink: 'syz.1.779': attribute type 16 has an invalid length. [ 113.999893][ T8635] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.779'. [ 114.004314][ T40] audit: type=1400 audit(1766131341.323:767): avc: denied { read append } for pid=8634 comm="syz.1.779" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.013676][ T40] audit: type=1400 audit(1766131341.323:768): avc: denied { ioctl open } for pid=8634 comm="syz.1.779" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.533549][ T8656] input: syz1 as /devices/virtual/input/input13 [ 114.563989][ T8658] syz_tun: entered allmulticast mode [ 114.635146][ T40] audit: type=1400 audit(1766131341.953:769): avc: denied { associate } for pid=8662 comm="syz.0.785" name="cpuacct.usage_percpu_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.645878][ T40] audit: type=1400 audit(1766131341.953:770): avc: denied { map } for pid=8662 comm="syz.0.785" path="/211/file0/cpuacct.usage_percpu_sys" dev="9p" ino=72095761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.825087][ T40] audit: type=1400 audit(1766131342.144:771): avc: denied { read } for pid=8670 comm="syz.3.788" name="usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.835635][ T40] audit: type=1400 audit(1766131342.154:772): avc: denied { open } for pid=8670 comm="syz.3.788" path="/dev/usbmon4" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.845220][ T40] audit: type=1400 audit(1766131342.154:773): avc: denied { ioctl } for pid=8670 comm="syz.3.788" path="/dev/usbmon4" dev="devtmpfs" ino=749 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.877981][ T8677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.065572][ T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 115.150186][ T8687] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 115.215342][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 115.220182][ T60] usb 8-1: config 4 has an invalid interface number: 155 but max is 1 [ 115.223084][ T60] usb 8-1: config 4 has an invalid interface number: 139 but max is 1 [ 115.235344][ T60] usb 8-1: config 4 has no interface number 0 [ 115.237830][ T60] usb 8-1: config 4 has no interface number 1 [ 115.240419][ T60] usb 8-1: config 4 interface 139 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 115.244552][ T60] usb 8-1: config 4 interface 139 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 115.253688][ T60] usb 8-1: config 4 interface 139 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 115.258389][ T60] usb 8-1: config 4 interface 139 altsetting 5 has an endpoint descriptor with address 0x1A, changing to 0xA [ 115.263232][ T60] usb 8-1: config 4 interface 139 altsetting 5 endpoint 0xA has invalid wMaxPacketSize 0 [ 115.267384][ T60] usb 8-1: config 4 interface 139 altsetting 5 has an endpoint descriptor with address 0x74, changing to 0x4 [ 115.271832][ T60] usb 8-1: config 4 interface 139 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 115.276969][ T60] usb 8-1: config 4 interface 139 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 115.281237][ T60] usb 8-1: config 4 interface 155 has no altsetting 0 [ 115.283797][ T60] usb 8-1: config 4 interface 139 has no altsetting 0 [ 115.289632][ T60] usb 8-1: Dual-Role OTG device on HNP port [ 115.292053][ T60] usb 8-1: New USB device found, idVendor=0424, idProduct=9902, bcdDevice=c5.a2 [ 115.296568][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.299084][ T60] usb 8-1: Product: Ч [ 115.300416][ T60] usb 8-1: Manufacturer: à°š [ 115.301875][ T60] usb 8-1: SerialNumber: 蚥硭襎á˜æ—‚ä‹ãž¶ë”©à¢›í€½ê‡Šç±ˆé”튷æœÈ¯ã³¡áŒ»ã•â§ªà¦Žå³ç¨ºâ¼½é¾“몫놭哜ꔓ䇬㮷㟶嗵즇愔…㡚错â¡î·ºä•§è€ä¡—쪖Ƣ檒숗衜ï®È¡ê…•ä–Œï¬µè˜¹æ¿¤â°˜ïœ©î¦•îŽ…浾㭺饸ꡥ⭳å†å·¯ï»¨í…¸â’ᵕ誩å¿ë‚Šä—⳺Ἆᱡ䠔㈜â„鮚巜穮á£ê•Ÿìµ–⥕ᨱ銺믫ä»ï°Œè°äƒ¹ãƒŸí•”笠∻탔传裀볻ꮯ [ 115.425777][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 115.449662][ T8709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.458687][ T8709] bond1: (slave batadv1): Opening slave failed [ 115.523698][ T60] smsc95xx v2.0.0 [ 115.524928][ T60] smsc95xx 8-1:4.155 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.528497][ T60] smsc95xx 8-1:4.155: probe with driver smsc95xx failed with error -22 [ 115.533973][ T60] smsc95xx v2.0.0 [ 115.535225][ T60] smsc95xx 8-1:4.139 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.538698][ T60] smsc95xx 8-1:4.139: probe with driver smsc95xx failed with error -22 [ 115.547395][ T60] usb 8-1: USB disconnect, device number 8 [ 115.658718][ T8721] overlayfs: workdir and upperdir must reside under the same mount [ 115.984973][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.065211][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 116.111036][ T40] audit: type=1400 audit(1766131343.424:774): avc: denied { write } for pid=8741 comm="syz.3.804" path="socket:[27794]" dev="sockfs" ino=27794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.114951][ T60] usb 5-1: device descriptor read/64, error -71 [ 116.245904][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.349823][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 116.353249][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 116.375974][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.514785][ T60] usb 5-1: device descriptor read/64, error -71 [ 116.517266][ T8761] trusted_key: encrypted_key: insufficient parameters specified [ 116.635093][ T60] usb usb5-port1: attempt power cycle [ 116.800575][ T10] lo speed is unknown, defaulting to 1000 [ 116.836251][ T8780] overlayfs: upper fs does not support file handles, falling back to index=off. [ 116.984091][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 116.986974][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.820'. [ 116.994508][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.025011][ T60] usb 5-1: device descriptor read/8, error -71 [ 117.264404][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.277169][ T8789] overlay: ./file1 is not a directory [ 117.285658][ T60] usb 5-1: device descriptor read/8, error -71 [ 117.402091][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 117.404628][ T60] usb usb5-port1: unable to enumerate USB device [ 117.429452][ T8800] openvswitch: netlink: EtherType 50a is less than min 600 [ 117.448414][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.654206][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 117.824032][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 117.827577][ T60] usb 8-1: config 0 has no interfaces? [ 117.832776][ T60] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 117.836732][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.839998][ T60] usb 8-1: Product: syz [ 117.841810][ T60] usb 8-1: Manufacturer: syz [ 117.843446][ T60] usb 8-1: SerialNumber: syz [ 117.847159][ T60] usb 8-1: config 0 descriptor?? [ 118.680917][ T8828] netlink: 'syz.4.832': attribute type 4 has an invalid length. [ 118.690865][ T8828] netlink: 'syz.4.832': attribute type 4 has an invalid length. [ 118.811344][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 118.817150][ T8833] tmpfs: Bad value for 'mpol' [ 118.844570][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'. [ 118.998197][ T8846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.126961][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 119.126975][ T40] audit: type=1400 audit(1766131346.446:781): avc: denied { append } for pid=8851 comm="syz.4.841" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 119.169999][ T40] audit: type=1400 audit(1766131346.486:782): avc: denied { audit_write } for pid=8853 comm="syz.4.842" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 119.244839][ T40] audit: type=1400 audit(1766131346.566:783): avc: denied { connect } for pid=8862 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.583263][ T8878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.846'. [ 120.217866][ T8890] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 120.380521][ T10] usb 8-1: USB disconnect, device number 9 [ 120.471720][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.515099][ T40] audit: type=1400 audit(1766131347.845:784): avc: denied { write } for pid=8905 comm="syz.4.856" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.568697][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 120.570154][ T8912] loop2: detected capacity change from 0 to 7 [ 120.577602][ T8912] Dev loop2: unable to read RDB block 7 [ 120.578812][ T40] audit: type=1400 audit(1766131347.895:785): avc: denied { map } for pid=8908 comm="syz.0.858" path="socket:[28077]" dev="sockfs" ino=28077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.579791][ T8912] loop2: unable to read partition table [ 120.591462][ T8912] loop2: partition table beyond EOD, truncated [ 120.593839][ T8912] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.623600][ T8910] batman_adv: batadv0: Adding interface: dummy0 [ 120.625628][ T8910] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.642731][ T8910] batman_adv: batadv0: Interface activated: dummy0 [ 120.667511][ T8914] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.676868][ T8917] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 120.716104][ T8918] XFS (nullb0): Invalid superblock magic number [ 120.774878][ T8927] program syz.0.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.809161][ T40] audit: type=1400 audit(1766131348.125:786): avc: denied { mounton } for pid=8933 comm="syz.0.863" path="/228/file1/file0" dev="autofs" ino=25990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 121.003785][ T8936] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.151178][ T8949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8949 comm=syz.3.869 [ 121.329962][ T40] audit: type=1400 audit(1766131348.645:787): avc: denied { read write } for pid=8951 comm="syz.3.870" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.339576][ T40] audit: type=1400 audit(1766131348.645:788): avc: denied { open } for pid=8951 comm="syz.3.870" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.410096][ T8958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.683160][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 121.832812][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 121.835822][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.839686][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.843535][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 121.846782][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.851195][ T10] usb 6-1: config 0 descriptor?? [ 122.105356][ T8972] netlink: 'syz.3.876': attribute type 21 has an invalid length. [ 122.140745][ T8976] geneve1: entered allmulticast mode [ 122.184336][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 122.189168][ T8978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.193610][ T40] audit: type=1400 audit(1766131349.515:789): avc: denied { write } for pid=8977 comm="syz.3.878" path="socket:[27291]" dev="sockfs" ino=27291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.406001][ C2] ata1: illegal qc_active transition (00000000->00001000) [ 122.498593][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.874'. [ 122.504138][ T6018] IPVS: starting estimator thread 0... [ 122.506828][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 122.508790][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 122.513237][ T10] usb 6-1: USB disconnect, device number 17 [ 122.592747][ T8983] IPVS: using max 46 ests per chain, 110400 per kthread [ 122.726769][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 122.733829][ T1115] ata1.00: configured for UDMA/100 [ 123.102788][ T8987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.130982][ T8989] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 123.137446][ T8990] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 123.137447][ T40] audit: type=1400 audit(1766131350.455:790): avc: denied { setopt } for pid=8988 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.156175][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.237289][ T8996] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 123.271836][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 123.274827][ T9001] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 123.326242][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.336184][ T9001] bond0: (slave ip6gretap1): making interface the new active one [ 123.339111][ T9001] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 123.398955][ T9006] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 123.432175][ T9011] netlink: 'syz.3.888': attribute type 7 has an invalid length. [ 123.435595][ T9011] netlink: 'syz.3.888': attribute type 7 has an invalid length. [ 123.438902][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.888'. [ 123.693455][ T9029] ufs: You didn't specify the type of your ufs filesystem [ 123.693455][ T9029] [ 123.693455][ T9029] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 123.693455][ T9029] [ 123.693455][ T9029] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 123.763464][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 123.795180][ T9036] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 123.838657][ T9036] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.842405][ T9036] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 123.896784][ T9040] gretap1: entered promiscuous mode [ 123.913140][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 123.918258][ T10] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 123.921530][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 123.924807][ T10] usb 8-1: Product: syz [ 123.926174][ T10] usb 8-1: Manufacturer: syz [ 123.927598][ T10] usb 8-1: SerialNumber: syz [ 123.930387][ T10] usb 8-1: config 0 descriptor?? [ 124.004991][ T9050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.008034][ T9052] SELinux: failed to load policy [ 124.144843][ T10] usb 8-1: USB disconnect, device number 10 [ 124.179621][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 124.179624][ T9060] MTD: Couldn't look up './bus': -15 [ 124.179637][ T40] audit: type=1400 audit(1766131351.495:798): avc: denied { mounton } for pid=9059 comm="syz.4.901" path="/90/bus" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.348924][ T9071] netlink: 'syz.4.903': attribute type 1 has an invalid length. [ 124.529765][ T29] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 124.533829][ T29] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 124.536891][ T29] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 124.551494][ T29] hid-generic 0006:0004:0009.0005: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 124.584716][ T40] audit: type=1400 audit(1766131351.905:799): avc: denied { ioctl } for pid=9074 comm="syz.4.904" path="socket:[28358]" dev="sockfs" ino=28358 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.684281][ T9085] block nbd0: not configured, cannot reconfigure [ 124.757731][ T9088] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.760176][ T9088] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 124.763393][ T9088] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.765895][ T9088] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 124.799260][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 125.063777][ T9096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.144270][ T40] audit: type=1400 audit(1766131352.465:800): avc: denied { accept } for pid=9099 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.159292][ T9104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.422652][ T5999] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 125.592698][ T5999] usb 8-1: Using ep0 maxpacket: 8 [ 125.595666][ T5999] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 125.599090][ T5999] usb 8-1: config 0 has no interface number 0 [ 125.601652][ T5999] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.606342][ T5999] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 125.610850][ T5999] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 125.617353][ T5999] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.624268][ T5999] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 125.627805][ T5999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.631063][ T5999] usb 8-1: Product: syz [ 125.633248][ T5999] usb 8-1: Manufacturer: syz [ 125.635128][ T5999] usb 8-1: SerialNumber: syz [ 125.643120][ T5999] usb 8-1: config 0 descriptor?? [ 125.760922][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 125.776443][ T40] audit: type=1400 audit(1766131353.095:801): avc: denied { remount } for pid=9110 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.852472][ T5999] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 125.977890][ T9121] netlink: 6 bytes leftover after parsing attributes in process `syz.1.922'. [ 125.981464][ T9121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.988915][ T40] audit: type=1400 audit(1766131353.315:802): avc: denied { watch watch_reads } for pid=9120 comm="syz.1.922" path="pipe:[6718]" dev="pipefs" ino=6718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.053148][ T5999] usb 8-1: USB disconnect, device number 11 [ 126.062052][ T9106] overlayfs: statfs failed on './file0' [ 126.120380][ T9126] efs: cannot read volume header [ 126.212967][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.894801][ T40] audit: type=1400 audit(1766131354.215:803): avc: denied { ioctl } for pid=9146 comm="syz.4.931" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.904108][ T40] audit: type=1400 audit(1766131354.215:804): avc: denied { setattr } for pid=9146 comm="syz.4.931" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.916370][ T40] audit: type=1400 audit(1766131354.225:805): avc: denied { append } for pid=9146 comm="syz.4.931" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.061974][ T40] audit: type=1326 audit(1766131354.375:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.3.936" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07edb8f7c9 code=0x0 [ 127.224211][ T9177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.929797][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.932831][ T40] audit: type=1400 audit(1766131355.255:807): avc: denied { read } for pid=9182 comm="syz.1.939" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.934148][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.172661][ T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 128.233447][ T9194] cgroup: Unknown subsys name 'subj_user' [ 128.320731][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.330159][ T9197] cramfs: wrong magic [ 128.333131][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.337440][ T9197] cramfs: wrong magic [ 128.341065][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.342687][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 128.346328][ T29] usb 8-1: config 0 has an invalid interface number: 185 but max is 0 [ 128.346452][ T9197] cramfs: wrong magic [ 128.348897][ T29] usb 8-1: config 0 has no interface number 0 [ 128.352291][ T29] usb 8-1: config 0 interface 185 has no altsetting 0 [ 128.353805][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.357247][ T29] usb 8-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 128.359724][ T9197] cramfs: wrong magic [ 128.360122][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.364394][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.366698][ T29] usb 8-1: Product: syz [ 128.366974][ T9197] cramfs: wrong magic [ 128.368002][ T29] usb 8-1: Manufacturer: syz [ 128.370846][ T29] usb 8-1: SerialNumber: syz [ 128.370940][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.373908][ T29] usb 8-1: config 0 descriptor?? [ 128.380918][ T9197] cramfs: wrong magic [ 128.384023][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.390937][ T9197] cramfs: wrong magic [ 128.394179][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.399416][ T9197] cramfs: wrong magic [ 128.402377][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.408257][ T9197] cramfs: wrong magic [ 128.412112][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.418293][ T9197] cramfs: wrong magic [ 128.422094][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.431947][ T9197] cramfs: wrong magic [ 128.435427][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.442411][ T9197] cramfs: wrong magic [ 128.446451][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.454333][ T9197] cramfs: wrong magic [ 128.458296][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.465614][ T9197] cramfs: wrong magic [ 128.468947][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.474906][ T9197] cramfs: wrong magic [ 128.478557][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.486617][ T9197] cramfs: wrong magic [ 128.490278][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.496806][ T9197] cramfs: wrong magic [ 128.500212][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.507502][ T9197] cramfs: wrong magic [ 128.510965][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.519488][ T9197] cramfs: wrong magic [ 128.523937][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.529363][ T9197] cramfs: wrong magic [ 128.532138][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.538510][ T9197] cramfs: wrong magic [ 128.542131][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.547841][ T9197] cramfs: wrong magic [ 128.550529][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.555473][ T9197] cramfs: wrong magic [ 128.559059][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.565058][ T9197] cramfs: wrong magic [ 128.568796][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.575739][ T9197] cramfs: wrong magic [ 128.579639][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.587026][ T29] usb 8-1: Could not find all expected endpoints [ 128.588092][ T9197] cramfs: wrong magic [ 128.592731][ T29] usb 8-1: USB disconnect, device number 12 [ 128.598409][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.604515][ T9197] cramfs: wrong magic [ 128.608295][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.614823][ T9197] cramfs: wrong magic [ 128.619922][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.627153][ T9197] cramfs: wrong magic [ 128.631095][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.636623][ T9197] cramfs: wrong magic [ 128.640303][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.649627][ T9197] cramfs: wrong magic [ 128.653728][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.658358][ T9197] cramfs: wrong magic [ 128.661715][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.667998][ T9197] cramfs: wrong magic [ 128.671612][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.678107][ T9197] cramfs: wrong magic [ 128.681568][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.686147][ T9197] cramfs: wrong magic [ 128.689695][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.695501][ T9197] cramfs: wrong magic [ 128.699820][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.706390][ T9197] cramfs: wrong magic [ 128.709610][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.716587][ T9197] cramfs: wrong magic [ 128.722031][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.729107][ T9197] cramfs: wrong magic [ 128.731818][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.737381][ T9197] cramfs: wrong magic [ 128.740358][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.744707][ T9197] cramfs: wrong magic [ 128.747375][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.751784][ T9197] cramfs: wrong magic [ 128.756530][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.761858][ T9197] cramfs: wrong magic [ 128.765545][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.770909][ T9197] cramfs: wrong magic [ 128.774428][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.779405][ T9197] cramfs: wrong magic [ 128.783414][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.788883][ T9197] cramfs: wrong magic [ 128.791970][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.796926][ T9197] cramfs: wrong magic [ 128.799665][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.804533][ T9197] cramfs: wrong magic [ 128.807731][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.812116][ T9197] cramfs: wrong magic [ 128.815358][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.820655][ T9197] cramfs: wrong magic [ 128.824045][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.829068][ T9197] cramfs: wrong magic [ 128.832839][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.837839][ T9197] cramfs: wrong magic [ 128.841336][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.846323][ T9197] cramfs: wrong magic [ 128.849080][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.853562][ T9197] cramfs: wrong magic [ 128.856309][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.863882][ T9197] cramfs: wrong magic [ 128.865726][ T9201] fuse: Bad value for 'rootmode' [ 128.868172][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.873156][ T9197] cramfs: wrong magic [ 128.876195][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.880339][ T9197] cramfs: wrong magic [ 128.883988][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.890174][ T9197] cramfs: wrong magic [ 128.892981][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.897701][ T9197] cramfs: wrong magic [ 128.900453][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.905522][ T9197] cramfs: wrong magic [ 128.908172][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.912953][ T9197] cramfs: wrong magic [ 128.915591][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.919905][ T9197] cramfs: wrong magic [ 128.923222][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.928641][ T9197] cramfs: wrong magic [ 128.931479][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.936254][ T9197] cramfs: wrong magic [ 128.938874][ T9197] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.943256][ T9197] cramfs: wrong magic [ 128.967856][ T9203] netlink: 'syz.4.945': attribute type 8 has an invalid length. [ 129.045831][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.194283][ T9217] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 129.221769][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 129.248799][ T9223] zonefs (loop3) ERROR: Not a zoned block device [ 129.335825][ T9231] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 129.344515][ T9231] netlink: 260 bytes leftover after parsing attributes in process `syz.1.957'. [ 129.467253][ T9240] syzkaller1: entered promiscuous mode [ 129.469616][ T9240] syzkaller1: entered allmulticast mode [ 129.635043][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.964'. [ 129.641549][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'. [ 129.645715][ T9257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32545 sclass=netlink_route_socket pid=9257 comm=syz.4.964 [ 129.665692][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.669398][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.678423][ T9259] syzkaller0: entered promiscuous mode [ 129.680694][ T9259] syzkaller0: entered allmulticast mode [ 129.690770][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 129.690780][ T40] audit: type=1400 audit(1766131357.005:810): avc: denied { nlmsg_write } for pid=9258 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 129.741885][ T40] audit: type=1400 audit(1766131357.055:811): avc: denied { connect } for pid=9274 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.771524][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.900240][ T9288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.975'. [ 129.951394][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9290 comm=syz.3.976 [ 130.130963][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 130.134273][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 130.137772][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 130.276259][ T9302] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 130.276259][ T9302] program syz.3.979 not setting count and/or reply_len properly [ 130.391765][ T9317] loop6: detected capacity change from 0 to 524279808 [ 130.415748][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.418158][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.420516][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.424352][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.426687][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.429018][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.431393][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.434071][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.436455][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.438811][ T5999] hid-generic 0005:00B6:0009.0006: unknown main item tag 0x0 [ 130.447558][ T5999] hid-generic 0005:00B6:0009.0006: unexpected long global item [ 130.450170][ T5999] hid-generic 0005:00B6:0009.0006: probe with driver hid-generic failed with error -22 [ 130.619753][ T9325] bond0: entered promiscuous mode [ 130.621329][ T9325] bond_slave_0: entered promiscuous mode [ 130.623352][ T9325] bond_slave_1: entered promiscuous mode [ 130.626097][ T9325] batadv_slave_0: entered promiscuous mode [ 130.628058][ T9325] batadv_slave_0: left promiscuous mode [ 130.629981][ T9325] bond0: left promiscuous mode [ 130.631505][ T9325] bond_slave_0: left promiscuous mode [ 130.634168][ T9325] bond_slave_1: left promiscuous mode [ 130.721625][ T9329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.512751][ T5931] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 131.832375][ T40] audit: type=1400 audit(1766131359.145:812): avc: denied { write } for pid=9336 comm="syz.1.992" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 131.841189][ T40] audit: type=1400 audit(1766131359.165:813): avc: denied { create } for pid=9336 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 131.983205][ T40] audit: type=1400 audit(1766131359.305:814): avc: denied { read } for pid=9341 comm="syz.3.993" dev="nsfs" ino=4026532894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.992096][ T40] audit: type=1400 audit(1766131359.305:815): avc: denied { open } for pid=9341 comm="syz.3.993" path="net:[4026532894]" dev="nsfs" ino=4026532894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.235337][ T9350] __nla_validate_parse: 18 callbacks suppressed [ 132.235354][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 132.458071][ T9362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.736520][ T9398] tipc: Failed to remove unknown binding: 66,1,1/0:510902255/510902257 [ 133.740069][ T9398] tipc: Failed to remove unknown binding: 66,1,1/0:510902255/510902257 [ 133.913969][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 133.919124][ T40] audit: type=1400 audit(1766131361.235:816): avc: denied { ioctl } for pid=9409 comm="syz.4.1016" path="socket:[31006]" dev="sockfs" ino=31006 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.049664][ T40] audit: type=1400 audit(1766131361.365:817): avc: denied { read } for pid=9421 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.054127][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 134.060037][ T9422] netlink: 'syz.3.1020': attribute type 30 has an invalid length. [ 134.228613][ T9433] ntfs3(sr0): Primary boot signature is not NTFS. [ 134.231885][ T9433] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 134.477853][ T40] audit: type=1400 audit(1766131361.795:818): avc: denied { execute } for pid=9436 comm="syz.3.1026" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.790655][ T40] audit: type=1400 audit(1766131362.105:819): avc: denied { getopt } for pid=9456 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.808220][ T9457] smc: net device wlan1 applied user defined pnetid SYZ1 [ 134.925173][ T9462] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 135.213413][ T40] audit: type=1400 audit(1766131362.535:820): avc: denied { name_bind } for pid=9477 comm="syz.4.1042" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.325498][ T9480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.695283][ T40] audit: type=1400 audit(1766131363.015:821): avc: denied { mounton } for pid=9483 comm="syz.3.1045" path="/330/file0" dev="gadgetfs" ino=8542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 135.740193][ T9487] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 135.783768][ T9491] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 135.786290][ T9491] SELinux: failed to load policy [ 135.848891][ T40] audit: type=1400 audit(1766131363.165:822): avc: denied { connect } for pid=9494 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.944901][ T5930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.949725][ T5930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.954144][ T5930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.957812][ T5930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.961061][ T5930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.981965][ T9514] lo speed is unknown, defaulting to 1000 [ 136.031880][ T40] audit: type=1400 audit(1766131363.345:823): avc: denied { execute } for pid=9517 comm="syz.4.1056" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.106696][ T8659] syz_tun (unregistering): left allmulticast mode [ 136.110437][ T8659] bond0: (slave syz_tun): Releasing backup interface [ 136.135343][ T9511] lo speed is unknown, defaulting to 1000 [ 136.161478][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 136.176161][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'. [ 136.314340][ T9511] chnl_net:caif_netlink_parms(): no params data found [ 136.405922][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.408292][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.410632][ T9511] bridge_slave_0: entered allmulticast mode [ 136.413655][ T9511] bridge_slave_0: entered promiscuous mode [ 136.416690][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.418905][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.421088][ T9511] bridge_slave_1: entered allmulticast mode [ 136.424746][ T9511] bridge_slave_1: entered promiscuous mode [ 136.440522][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.447006][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.473090][ T9511] team0: Port device team_slave_0 added [ 136.477128][ T9511] team0: Port device team_slave_1 added [ 136.499252][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.501935][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.511381][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.517670][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.520196][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.529686][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.598222][ T9511] hsr_slave_0: entered promiscuous mode [ 136.601510][ T9511] hsr_slave_1: entered promiscuous mode [ 136.604810][ T9511] debugfs: 'hsr0' already exists in 'hsr' [ 136.607109][ T9511] Cannot create hsr debugfs directory [ 136.771052][ T9539] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 136.780187][ T9539] veth0_vlan: left promiscuous mode [ 136.783470][ T9539] veth0_vlan: entered promiscuous mode [ 136.786960][ T9539] team0: Device veth0_vlan failed to register rx_handler [ 136.823171][ T9545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.824185][ T9511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.832339][ T9511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.838537][ T9511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.846229][ T9511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.857326][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1060'. [ 136.900839][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.914749][ T9511] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.921517][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.924538][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.929401][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 136.947387][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.949653][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.004348][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1066'. [ 137.018946][ T9569] bond3 (unregistering): Released all slaves [ 137.110047][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.116128][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1066'. [ 137.208874][ T9596] program syz.3.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.245334][ T9511] veth0_vlan: entered promiscuous mode [ 137.250929][ T9511] veth1_vlan: entered promiscuous mode [ 137.259951][ T9600] lo speed is unknown, defaulting to 1000 [ 137.269730][ T9511] veth0_macvtap: entered promiscuous mode [ 137.275372][ T9511] veth1_macvtap: entered promiscuous mode [ 137.283504][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.296053][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.305247][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.308234][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.311616][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.321366][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.367062][ T9605] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 137.418482][ T40] audit: type=1800 audit(1766131364.735:824): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1075" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 137.442930][ T9598] nbd0: detected capacity change from 0 to 63 [ 137.472436][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.479758][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.526764][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.529198][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.605165][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.607207][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.641028][ T9623] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1052'. [ 137.678709][ T40] audit: type=1400 audit(1766131364.995:825): avc: denied { setopt } for pid=9625 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.818309][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.861388][ T9635] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 138.003303][ T5937] Bluetooth: hci4: command tx timeout [ 138.102723][ T54] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 138.262662][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 138.265873][ T54] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.268799][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.283000][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.286014][ T54] pvrusb2: ********** [ 138.287815][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.291894][ T54] pvrusb2: Important functionality might not be entirely working. [ 138.295150][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.299765][ T54] pvrusb2: ********** [ 138.482402][ T2487] pvrusb2: Invalid write control endpoint [ 138.525586][ T2487] pvrusb2: Invalid write control endpoint [ 138.528452][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 138.532533][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 138.535882][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 138.539143][ T9648] loop2: detected capacity change from 0 to 1 [ 138.539865][ T2487] pvrusb2: Device being rendered inoperable [ 138.545619][ T9648] Dev loop2: unable to read RDB block 1 [ 138.547095][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 138.547446][ T9648] loop2: unable to read partition table [ 138.550465][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 138.552397][ T9648] loop2: partition table beyond EOD, truncated [ 138.558705][ T9648] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.559369][ T2487] pvrusb2: Attached sub-driver cx25840 [ 138.564318][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 138.572476][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 138.683885][ T24] usb 10-1: USB disconnect, device number 2 [ 138.755689][ T9652] program syz.4.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.823941][ T5930] block nbd0: Receive control failed (result -104) [ 138.869850][ T9659] IPv6: sit2: Disabled Multicast RS [ 138.970972][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.034153][ T6613] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.496547][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1096'. [ 139.512898][ T40] audit: type=1804 audit(1766131366.825:826): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1096" name="/newroot/5/bus" dev="tmpfs" ino=44 res=1 errno=0 [ 139.537874][ T40] audit: type=1804 audit(1766131366.855:827): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1097" name="/newroot/219/file0" dev="tmpfs" ino=1194 res=1 errno=0 [ 139.547073][ T9679] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 139.550893][ T9679] ref_ctr decrement failed for inode: 0x4aa offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888039b88000 [ 139.556962][ T9679] uprobe: syz.1.1097:9679 failed to unregister, leaking uprobe [ 139.572771][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 139.594168][ T40] audit: type=1804 audit(1766131366.915:828): pid=9684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1097" name="/newroot/219/file0" dev="tmpfs" ino=1194 res=1 errno=0 [ 139.659535][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 139.728211][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 139.732080][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 64 [ 139.739284][ T54] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 139.743227][ T9699] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1103'. [ 139.743400][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.750224][ T54] usb 8-1: Product: syz [ 139.751999][ T54] usb 8-1: Manufacturer: syz [ 139.754383][ T54] usb 8-1: SerialNumber: syz [ 139.785616][ T54] usb 8-1: config 0 descriptor?? [ 139.791099][ T54] hub 8-1:0.0: bad descriptor, ignoring hub [ 139.793672][ T54] hub 8-1:0.0: probe with driver hub failed with error -5 [ 139.803356][ T54] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input17 [ 140.082727][ T5930] Bluetooth: hci4: command 0x041b tx timeout [ 140.111213][ T24] usb 8-1: USB disconnect, device number 13 [ 140.134078][ T40] audit: type=1400 audit(1766131367.455:829): avc: denied { ioctl } for pid=9725 comm="syz.5.1110" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.222541][ T9726] SELinux: syz.5.1110 (9726) set checkreqprot to 1. This is no longer supported. [ 140.230578][ T40] audit: type=1400 audit(1766131367.535:830): avc: denied { setcheckreqprot } for pid=9725 comm="syz.5.1110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.372165][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1111'. [ 140.757397][ T9741] dvmrp1: entered allmulticast mode [ 140.760409][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 140.804342][ T9748] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 140.856911][ T40] audit: type=1400 audit(1766131368.175:831): avc: denied { rmdir } for pid=9757 comm="syz.1.1123" name="file2" dev="9p" ino=72095715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.865884][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 140.890036][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1123'. [ 140.928943][ T9765] openvswitch: netlink: Flow key attr not present in new flow. [ 140.934286][ T9765] Driver unsupported XDP return value 0 on prog (id 326) dev N/A, expect packet loss! [ 140.983928][ T9774] netlink: 'syz.1.1127': attribute type 142 has an invalid length. [ 141.001948][ T9776] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 141.036892][ T9782] hugetlbfs: syz.5.1134 (9782): Using mlock ulimits for SHM_HUGETLB is obsolete [ 141.051931][ T9785] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 141.057789][ T9785] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1135'. [ 141.098613][ T40] audit: type=1400 audit(1766131368.415:832): avc: denied { set_context_mgr } for pid=9796 comm="syz.1.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 141.099183][ T9797] binder: BINDER_SET_CONTEXT_MGR already set [ 141.108444][ T9797] binder: 9796:9797 ioctl 4018620d 200000000040 returned -16 [ 141.112963][ T9797] openvswitch: netlink: IPv4 tunnel dst address is zero [ 141.179518][ T9786] SET target dimension over the limit! [ 141.266742][ T40] audit: type=1400 audit(1766131368.585:833): avc: denied { read } for pid=9815 comm="syz.4.1143" laddr=172.20.20.170 lport=51884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.267184][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1143'. [ 141.281473][ T9811] input: syz0 as /devices/virtual/input/input20 [ 141.348341][ T40] audit: type=1400 audit(1766131368.665:834): avc: denied { create } for pid=9822 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.435029][ T9834] overlayfs: missing 'workdir' [ 141.445672][ T9840] kernel profiling enabled (shift: 34) [ 141.447666][ T9840] profiling shift: 34 too large [ 141.477577][ T9842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=9842 comm=syz.5.1152 [ 141.530560][ T9851] random: crng reseeded on system resumption [ 141.547617][ T9851] macvlan5: entered allmulticast mode [ 141.596588][ T9857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.615909][ T9859] lo speed is unknown, defaulting to 1000 [ 141.838603][ T9864] lo speed is unknown, defaulting to 1000 [ 141.862495][ T40] audit: type=1400 audit(1766131369.175:835): avc: denied { setopt } for pid=9875 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.041492][ T40] audit: type=1400 audit(1766131369.355:836): avc: denied { read } for pid=9880 comm="syz.5.1165" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.053367][ T40] audit: type=1400 audit(1766131369.355:837): avc: denied { open } for pid=9880 comm="syz.5.1165" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.072298][ T40] audit: type=1400 audit(1766131369.355:838): avc: denied { ioctl } for pid=9880 comm="syz.5.1165" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.163068][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 142.294638][ T9903] netlink: 'syz.5.1171': attribute type 2 has an invalid length. [ 142.341957][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.455734][ T9912] fuse: Bad value for 'fd' [ 142.547696][ T9919] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 142.562469][ T9919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.570959][ T9915] netlink: 'syz.4.1175': attribute type 4 has an invalid length. [ 142.595476][ T65] Bluetooth: min 1 < 6 [ 142.719163][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.722653][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.810059][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.812915][ T6020] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 142.819441][ T9927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.963800][ T6020] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.967200][ T6020] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.970885][ T6020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.974623][ T6020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.978562][ T6020] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.985689][ T6020] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 142.986358][ T46] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.988887][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.992447][ T46] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.994874][ T6020] usb 8-1: Product: syz [ 142.994884][ T6020] usb 8-1: Manufacturer: syz [ 142.994891][ T6020] usb 8-1: SerialNumber: syz [ 143.003383][ T6020] usb 8-1: config 0 descriptor?? [ 143.007625][ T46] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.010166][ T9934] vcan0: tx drop: invalid sa for name 0x0000000400000000 [ 143.011374][ T46] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.016327][ T6020] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 143.070623][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.211867][ T24] usb 8-1: USB disconnect, device number 14 [ 143.317539][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.772679][ T6020] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 143.862714][ T5999] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 143.944890][ T6020] usb 6-1: not running at top speed; connect to a high speed hub [ 143.948616][ T6020] usb 6-1: config 0 has an invalid interface number: 224 but max is 3 [ 143.951337][ T6020] usb 6-1: config 0 has an invalid interface number: 21 but max is 3 [ 143.954192][ T6020] usb 6-1: config 0 has an invalid interface number: 7 but max is 3 [ 143.956739][ T6020] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 143.960413][ T6020] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 143.963754][ T6020] usb 6-1: config 0 has no interface number 0 [ 143.966195][ T6020] usb 6-1: config 0 has no interface number 1 [ 143.968155][ T6020] usb 6-1: config 0 has no interface number 2 [ 143.970114][ T6020] usb 6-1: config 0 interface 224 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 143.970178][ T9982] __nla_validate_parse: 1 callbacks suppressed [ 143.970187][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'. [ 143.973795][ T6020] usb 6-1: config 0 interface 21 altsetting 6 endpoint 0x3 has invalid maxpacket 18077, setting to 64 [ 143.975408][ T9982] bridge_slave_1: left allmulticast mode [ 143.978600][ T6020] usb 6-1: config 0 interface 21 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 143.978643][ T6020] usb 6-1: config 0 interface 7 altsetting 37 has 8 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.981824][ T9982] bridge_slave_1: left promiscuous mode [ 143.985124][ T6020] usb 6-1: config 0 interface 224 has no altsetting 0 [ 143.985147][ T6020] usb 6-1: config 0 interface 21 has no altsetting 0 [ 143.985163][ T6020] usb 6-1: config 0 interface 7 has no altsetting 0 [ 143.987066][ T6020] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=6d.af [ 143.989888][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.993928][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.011946][ T6020] usb 6-1: Product: 斠략홅鮼ä¾î—ƒà°ê‹¥îšŸàº¼ë° è¶€æ¶•é’ºêŠç´¹å´ï‰á¯¨ï’á¡áŠ®ç»¹ë”½á©¤æ’¼èŠ¬é£ ë¢¾æ‘¶ë€·ï‚†è…£ê¢å—šë®¦ç¢¤äŠ¸æ¿†î·¸è†Žç¦‰à³”꫱鉇ê¤î…±îŠ¹ë­Šè·ƒîºŠë‰œÌ¡ã½•äœ¼è²ªè«çºŽé„žá€¿ê¸¡ì¬¯è—šâ€¤ë½« [ 144.019535][ T6020] usb 6-1: Manufacturer: Е [ 144.020657][ T9982] bridge_slave_0: left allmulticast mode [ 144.021038][ T6020] usb 6-1: SerialNumber: syz [ 144.023108][ T9982] bridge_slave_0: left promiscuous mode [ 144.026562][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.026868][ T6020] usb 6-1: config 0 descriptor?? [ 144.042712][ T5999] usb 10-1: Using ep0 maxpacket: 16 [ 144.046422][ T5999] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 144.051015][ T5999] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.054241][ T5999] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.056966][ T5999] usb 10-1: Product: syz [ 144.058446][ T5999] usb 10-1: Manufacturer: syz [ 144.060121][ T5999] usb 10-1: SerialNumber: syz [ 144.064109][ T5999] usb 10-1: config 0 descriptor?? [ 144.075230][ T5999] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.079054][ T5999] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 144.151872][ T9984] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 144.230616][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 144.243616][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 144.389355][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1203'. [ 144.450617][ T6020] usbhid 6-1:0.7: couldn't find an input interrupt endpoint [ 144.455290][ T6020] usb 6-1: USB disconnect, device number 19 [ 144.642892][ T65] Bluetooth: hci3: command tx timeout [ 144.680524][ T5999] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 145.027463][T10006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.090071][ T5999] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.092974][ T5999] em28xx 10-1:0.0: board has no eeprom [ 145.100770][T10009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.152762][ T5999] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.156122][ T5999] em28xx 10-1:0.0: dvb set to bulk mode. [ 145.158506][ T144] em28xx 10-1:0.0: Binding DVB extension [ 145.166982][ T5999] usb 10-1: USB disconnect, device number 3 [ 145.170276][ T5999] em28xx 10-1:0.0: Disconnecting em28xx [ 145.194544][ T144] em28xx 10-1:0.0: Registering input extension [ 145.197395][ T5999] em28xx 10-1:0.0: Closing input extension [ 145.210335][ T5999] em28xx 10-1:0.0: Freeing device [ 145.247248][T10023] bridge2: entered promiscuous mode [ 145.248954][T10023] bridge2: entered allmulticast mode [ 145.252393][T10023] team0: Port device bridge2 added [ 145.257289][T10024] bridge3: entered promiscuous mode [ 145.258796][T10024] bridge3: entered allmulticast mode [ 145.261915][T10024] team0: Port device bridge3 added [ 145.345125][T10032] loop6: detected capacity change from 0 to 524287999 [ 145.410345][T10033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.507777][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 145.507793][ T40] audit: type=1400 audit(1766131372.825:856): avc: denied { setattr } for pid=10034 comm="syz.4.1213" name="/" dev="9p" ino=72095591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.599441][T10041] batadv_slave_1: entered promiscuous mode [ 145.608819][T10041] batadv_slave_1: left promiscuous mode [ 145.672027][ T40] audit: type=1400 audit(1766131372.985:857): avc: denied { read } for pid=10051 comm="syz.5.1218" path="socket:[34260]" dev="sockfs" ino=34260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.715867][T10063] ip6t_REJECT: ECHOREPLY is not supported [ 145.761685][T10068] overlayfs: failed to resolve './file1': -2 [ 145.771461][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.879980][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 145.886912][T10087] erspan1: entered promiscuous mode [ 145.927029][T10089] FAULT_INJECTION: forcing a failure. [ 145.927029][T10089] name failslab, interval 1, probability 0, space 0, times 1 [ 145.931361][T10089] CPU: 2 UID: 0 PID: 10089 Comm: syz.1.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.931398][T10089] Tainted: [L]=SOFTLOCKUP [ 145.931401][T10089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.931408][T10089] Call Trace: [ 145.931411][T10089] [ 145.931415][T10089] dump_stack_lvl+0x16c/0x1f0 [ 145.931432][T10089] should_fail_ex+0x512/0x640 [ 145.931448][T10089] ? fs_reclaim_acquire+0xae/0x150 [ 145.931464][T10089] should_failslab+0xc2/0x120 [ 145.931478][T10089] __kmalloc_noprof+0xeb/0x910 [ 145.931495][T10089] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 145.931512][T10089] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 145.931526][T10089] tomoyo_realpath_from_path+0xc2/0x6e0 [ 145.931541][T10089] ? tomoyo_profile+0x47/0x60 [ 145.931558][T10089] tomoyo_path_number_perm+0x245/0x580 [ 145.931570][T10089] ? tomoyo_path_number_perm+0x237/0x580 [ 145.931583][T10089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 145.931595][T10089] ? find_held_lock+0x2b/0x80 [ 145.931623][T10089] ? find_held_lock+0x2b/0x80 [ 145.931656][T10089] ? hook_file_ioctl_common+0x144/0x410 [ 145.931681][T10089] ? __fget_files+0x20e/0x3c0 [ 145.931698][T10089] security_file_ioctl+0x9b/0x240 [ 145.931713][T10089] __x64_sys_ioctl+0xb7/0x210 [ 145.931726][T10089] do_syscall_64+0xcd/0xf80 [ 145.931741][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.931751][T10089] RIP: 0033:0x7fc57458f7c9 [ 145.931760][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.931769][T10089] RSP: 002b:00007fc5754ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.931779][T10089] RAX: ffffffffffffffda RBX: 00007fc5747e5fa0 RCX: 00007fc57458f7c9 [ 145.931785][T10089] RDX: 0000200000000d00 RSI: 000000004008af03 RDI: 0000000000000004 [ 145.931791][T10089] RBP: 00007fc5754ab090 R08: 0000000000000000 R09: 0000000000000000 [ 145.931797][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.931803][T10089] R13: 00007fc5747e6038 R14: 00007fc5747e5fa0 R15: 00007fff6c10e508 [ 145.931816][T10089] [ 145.931821][T10089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.041070][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 146.047099][ T40] audit: type=1400 audit(1766131373.375:858): avc: denied { getopt } for pid=10091 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.068601][ T40] audit: type=1400 audit(1766131373.385:859): avc: denied { map } for pid=10094 comm="syz.3.1232" path="socket:[35193]" dev="sockfs" ino=35193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.076986][ T40] audit: type=1400 audit(1766131373.385:860): avc: denied { accept } for pid=10094 comm="syz.3.1232" path="socket:[35193]" dev="sockfs" ino=35193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.312219][T10123] FAULT_INJECTION: forcing a failure. [ 146.312219][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 146.315683][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1242'. [ 146.318086][T10123] CPU: 3 UID: 0 PID: 10123 Comm: syz.4.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.318110][T10123] Tainted: [L]=SOFTLOCKUP [ 146.318116][T10123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.318126][T10123] Call Trace: [ 146.318132][T10123] [ 146.318138][T10123] dump_stack_lvl+0x16c/0x1f0 [ 146.318163][T10123] should_fail_ex+0x512/0x640 [ 146.318187][T10123] ? fs_reclaim_acquire+0xae/0x150 [ 146.318213][T10123] should_failslab+0xc2/0x120 [ 146.318235][T10123] __kmalloc_noprof+0xeb/0x910 [ 146.318261][T10123] ? tomoyo_encode2+0x100/0x3e0 [ 146.318304][T10123] ? tomoyo_encode2+0x100/0x3e0 [ 146.318326][T10123] tomoyo_encode2+0x100/0x3e0 [ 146.318351][T10123] tomoyo_encode+0x29/0x50 [ 146.318371][T10123] tomoyo_realpath_from_path+0x18f/0x6e0 [ 146.318401][T10123] tomoyo_path_number_perm+0x245/0x580 [ 146.318419][T10123] ? tomoyo_path_number_perm+0x237/0x580 [ 146.318440][T10123] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.318460][T10123] ? find_held_lock+0x2b/0x80 [ 146.318509][T10123] ? find_held_lock+0x2b/0x80 [ 146.318532][T10123] ? hook_file_ioctl_common+0x144/0x410 [ 146.318563][T10123] ? __fget_files+0x20e/0x3c0 [ 146.318591][T10123] security_file_ioctl+0x9b/0x240 [ 146.318615][T10123] __x64_sys_ioctl+0xb7/0x210 [ 146.318636][T10123] do_syscall_64+0xcd/0xf80 [ 146.318660][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.318676][T10123] RIP: 0033:0x7f371418f7c9 [ 146.318690][T10123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.318705][T10123] RSP: 002b:00007f3714fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.318720][T10123] RAX: ffffffffffffffda RBX: 00007f37143e5fa0 RCX: 00007f371418f7c9 [ 146.318731][T10123] RDX: 0000200000000d00 RSI: 000000004008af03 RDI: 0000000000000004 [ 146.318741][T10123] RBP: 00007f3714fae090 R08: 0000000000000000 R09: 0000000000000000 [ 146.318751][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.318760][T10123] R13: 00007f37143e6038 R14: 00007f37143e5fa0 R15: 00007ffffd5d57a8 [ 146.318785][T10123] [ 146.319054][T10123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.322142][T10120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10120 comm=syz.3.1242 [ 146.332726][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 146.538145][T10144] autofs: Bad value for 'fd' [ 146.541360][T10144] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 146.551081][T10144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 146.579124][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 146.639204][T10163] FAULT_INJECTION: forcing a failure. [ 146.639204][T10163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.646900][T10163] CPU: 3 UID: 0 PID: 10163 Comm: syz.4.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.646927][T10163] Tainted: [L]=SOFTLOCKUP [ 146.646933][T10163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.646943][T10163] Call Trace: [ 146.646949][T10163] [ 146.646956][T10163] dump_stack_lvl+0x16c/0x1f0 [ 146.646982][T10163] should_fail_ex+0x512/0x640 [ 146.647011][T10163] _copy_from_user+0x2e/0xd0 [ 146.647036][T10163] vhost_dev_ioctl+0x720/0xe20 [ 146.647055][T10163] ? tomoyo_path_number_perm+0x18d/0x580 [ 146.647079][T10163] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 146.647108][T10163] vhost_net_ioctl+0x494/0x1850 [ 146.647123][T10163] ? do_vfs_ioctl+0x128/0x14f0 [ 146.647142][T10163] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.647161][T10163] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 146.647175][T10163] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 146.647205][T10163] ? hook_file_ioctl_common+0x144/0x410 [ 146.647239][T10163] ? selinux_file_ioctl+0xb4/0x270 [ 146.647261][T10163] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 146.647278][T10163] __x64_sys_ioctl+0x18e/0x210 [ 146.647300][T10163] do_syscall_64+0xcd/0xf80 [ 146.647340][T10163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.647357][T10163] RIP: 0033:0x7f371418f7c9 [ 146.647371][T10163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.647387][T10163] RSP: 002b:00007f3714fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.647403][T10163] RAX: ffffffffffffffda RBX: 00007f37143e5fa0 RCX: 00007f371418f7c9 [ 146.647414][T10163] RDX: 0000200000000d00 RSI: 000000004008af03 RDI: 0000000000000004 [ 146.647424][T10163] RBP: 00007f3714fae090 R08: 0000000000000000 R09: 0000000000000000 [ 146.647434][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.647443][T10163] R13: 00007f37143e6038 R14: 00007f37143e5fa0 R15: 00007ffffd5d57a8 [ 146.647468][T10163] [ 146.887778][T10173] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1257'. [ 147.000603][ T40] audit: type=1400 audit(1766131374.315:861): avc: denied { read } for pid=10175 comm="syz.1.1258" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 147.167490][T10200] FAULT_INJECTION: forcing a failure. [ 147.167490][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 147.171502][T10200] CPU: 3 UID: 0 PID: 10200 Comm: syz.3.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.171518][T10200] Tainted: [L]=SOFTLOCKUP [ 147.171521][T10200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.171527][T10200] Call Trace: [ 147.171531][T10200] [ 147.171535][T10200] dump_stack_lvl+0x16c/0x1f0 [ 147.171553][T10200] should_fail_ex+0x512/0x640 [ 147.171568][T10200] ? __kvmalloc_node_noprof+0x129/0xa40 [ 147.171583][T10200] should_failslab+0xc2/0x120 [ 147.171597][T10200] __kvmalloc_node_noprof+0x14a/0xa40 [ 147.171610][T10200] ? vhost_dev_ioctl+0x79d/0xe20 [ 147.171625][T10200] ? vhost_dev_ioctl+0x79d/0xe20 [ 147.171653][T10200] vhost_dev_ioctl+0x79d/0xe20 [ 147.171664][T10200] ? tomoyo_path_number_perm+0x18d/0x580 [ 147.171679][T10200] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 147.171696][T10200] vhost_net_ioctl+0x494/0x1850 [ 147.171705][T10200] ? do_vfs_ioctl+0x128/0x14f0 [ 147.171717][T10200] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.171728][T10200] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 147.171737][T10200] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.171755][T10200] ? hook_file_ioctl_common+0x144/0x410 [ 147.171776][T10200] ? selinux_file_ioctl+0xb4/0x270 [ 147.171790][T10200] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 147.171800][T10200] __x64_sys_ioctl+0x18e/0x210 [ 147.171813][T10200] do_syscall_64+0xcd/0xf80 [ 147.171827][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.171838][T10200] RIP: 0033:0x7f07edb8f7c9 [ 147.171847][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.171857][T10200] RSP: 002b:00007f07eea3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.171867][T10200] RAX: ffffffffffffffda RBX: 00007f07edde5fa0 RCX: 00007f07edb8f7c9 [ 147.171873][T10200] RDX: 0000200000000d00 RSI: 000000004008af03 RDI: 0000000000000004 [ 147.171879][T10200] RBP: 00007f07eea3f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.171885][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.171890][T10200] R13: 00007f07edde6038 R14: 00007f07edde5fa0 R15: 00007ffc726f4248 [ 147.171904][T10200] [ 147.248669][T10205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7198 sclass=netlink_route_socket pid=10205 comm=syz.4.1266 [ 147.249842][T10207] netlink: 'syz.4.1266': attribute type 6 has an invalid length. [ 147.274320][T10209] tipc: Enabled bearer , priority 10 [ 147.293829][T10211] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 147.309650][T10213] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1269'. [ 147.312736][T10214] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1269'. [ 147.475051][T10222] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 147.574936][T10227] vcan1: entered allmulticast mode [ 147.819134][T10231] netlink: '`/\#'#.^-': attribute type 23 has an invalid length. [ 148.882361][ T40] audit: type=1400 audit(1766131376.195:862): avc: denied { append } for pid=10243 comm="syz.3.1279" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 149.249009][ T5931] tipc: Node number set to 1097605252 [ 151.362980][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.363509][T10246] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 151.813832][T10246] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.821753][T10246] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.826923][T10246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.829168][T10246] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.833098][T10246] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.877204][T10258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.208580][T10277] bond5: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 152.214366][T10277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.301546][T10283] program syz.1.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.305200][T10282] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 152.308679][T10282] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 152.312861][T10282] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 152.361226][T10287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.507058][ T40] audit: type=1400 audit(1766131379.825:863): avc: denied { append } for pid=10297 comm="syz.1.1296" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.630364][T10305] __nla_validate_parse: 1 callbacks suppressed [ 152.630376][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 152.642125][T10305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56366 sclass=netlink_route_socket pid=10305 comm=syz.1.1298 [ 152.646810][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1298'. [ 152.650124][ T40] audit: type=1800 audit(1766131379.965:864): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1297" name="/" dev="fuse" ino=1 res=0 errno=0 [ 152.655271][T10305] NILFS (loop1): device size too small [ 152.660846][T10305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1298'. [ 152.681154][T10307] FAT-fs (loop4): unable to read boot sector [ 152.695749][T10307] tmpfs: Bad value for 'mpol' [ 152.745191][T10313] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 152.756782][T10313] CIFS mount error: No usable UNC path provided in device string! [ 152.756782][T10313] [ 152.761133][T10313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 152.785878][T10320] ./bus: Can't lookup blockdev [ 152.848234][T10334] macvtap1: entered promiscuous mode [ 152.849944][T10334] macvtap1: entered allmulticast mode [ 152.862631][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1305'. [ 152.880223][T10340] 9p: Bad value for 'wfdno' [ 153.162667][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 153.176905][T10362] lo speed is unknown, defaulting to 1000 [ 153.304557][T10376] sp0: Synchronizing with TNC [ 153.314517][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 153.317658][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.324044][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 153.326956][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.329502][ T24] usb 6-1: Product: syz [ 153.330852][ T24] usb 6-1: Manufacturer: syz [ 153.343444][ T24] usb 6-1: SerialNumber: syz [ 153.346816][ T24] usb 6-1: config 0 descriptor?? [ 153.430430][T10378] atomic_op ffff8880289b8198 conn xmit_atomic 0000000000000000 [ 153.435166][T10378] program syz.3.1318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.442955][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.511339][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 153.520417][T10380] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 153.555698][ T6018] usb 6-1: USB disconnect, device number 20 [ 153.771785][ T65] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 153.842678][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 154.048248][T10404] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 154.088714][ T40] audit: type=1400 audit(1766131381.405:865): avc: denied { ioctl } for pid=10406 comm="syz.1.1328" path="socket:[36748]" dev="sockfs" ino=36748 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.093835][T10409] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.1328'. [ 154.100729][T10409] openvswitch: netlink: Message has 6 unknown bytes. [ 154.556085][T10439] block device autoloading is deprecated and will be removed. [ 154.592171][T10441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1336'. [ 154.762738][ T6020] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 154.890909][T10448] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 154.894684][T10448] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 154.917832][ T6020] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 154.925166][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 154.928424][ T6020] usb 6-1: Product: syz [ 154.930126][ T6020] usb 6-1: Manufacturer: syz [ 154.932103][ T6020] usb 6-1: SerialNumber: syz [ 154.936436][ T6020] usb 6-1: config 0 descriptor?? [ 154.943901][ T6020] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 154.947415][ T6020] dvb-usb: bulk message failed: -22 (2/0) [ 154.953594][ T6020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.957981][ T6020] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 154.961594][ T6020] usb 6-1: media controller created [ 154.975349][ T6020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.084167][ T40] audit: type=1326 audit(1766131382.405:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.3.1341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07edb8f7c9 code=0x7fc00000 [ 155.140783][T10428] dvb-usb: bulk message failed: -22 (3/0) [ 155.145695][ T6020] cxusb: set interface failed [ 155.146429][T10464] program syz.4.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.147249][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 155.150147][T10464] ata1.00: non-matching transfer count (1691183692/0) [ 155.181330][ T6020] DVB: Unable to find symbol mt352_attach() [ 155.183825][ T6020] dvb-usb: bulk message failed: -22 (5/0) [ 155.187147][ T6020] zl10353_read_register: readreg error (reg=127, ret==-121) [ 155.189450][ T6020] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 155.242746][ T6020] rc_core: IR keymap rc-dvico-mce not found [ 155.244709][ T6020] Registered IR keymap rc-empty [ 155.247050][ T6020] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 155.249743][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.251957][ T6020] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input24 [ 155.258795][ T6020] dvb-usb: schedule remote query interval to 100 msecs. [ 155.261237][ T6020] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 155.266306][ T6020] usb 6-1: USB disconnect, device number 21 [ 155.305265][ T6020] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 155.532683][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.923035][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 155.941300][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1352'. [ 156.023430][T10496] No control pipe specified [ 156.462646][ T144] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 156.636414][ T144] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 156.638825][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.642197][ T144] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.645968][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.649175][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.653508][ T144] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 156.655855][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.659176][ T144] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.663013][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.667371][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.671613][ T144] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 156.674286][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 156.677669][ T144] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.681430][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 156.685199][ T144] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 156.690844][ T144] usb 8-1: string descriptor 0 read error: -22 [ 156.693142][ T144] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.695989][ T144] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.710461][ T144] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 156.905232][ T6018] usb 8-1: USB disconnect, device number 15 [ 157.026832][ T40] audit: type=1400 audit(1766131384.345:867): avc: denied { connect } for pid=10515 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.141438][T10525] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 157.141462][ T40] audit: type=1400 audit(1766131384.455:868): avc: denied { relabelfrom } for pid=10524 comm="syz.1.1362" name="HCI" dev="sockfs" ino=37243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.154264][ T40] audit: type=1400 audit(1766131384.465:869): avc: denied { relabelto } for pid=10524 comm="syz.1.1362" name="HCI" dev="sockfs" ino=37243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:modem_device_t:s0" [ 157.199318][T10528] netlink: 'syz.1.1363': attribute type 4 has an invalid length. [ 157.203683][T10529] netlink: 'syz.1.1363': attribute type 4 has an invalid length. [ 157.237748][ T40] audit: type=1400 audit(1766131384.555:870): avc: denied { setopt } for pid=10530 comm="syz.1.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 157.246014][T10531] vlan1: entered allmulticast mode [ 157.247739][T10531] bond0: entered allmulticast mode [ 157.249390][T10531] bond_slave_0: entered allmulticast mode [ 157.251215][T10531] bond_slave_1: entered allmulticast mode [ 157.253269][T10531] syz_tun: entered allmulticast mode [ 157.290342][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 157.294178][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 157.332153][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.688623][ T40] audit: type=1400 audit(1766131385.005:871): avc: denied { read } for pid=10546 comm="syz.3.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.002837][ T65] Bluetooth: hci4: command 0x041b tx timeout [ 158.102690][ T144] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 158.254574][ T144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.258095][ T144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.261667][ T144] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.266098][ T144] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.269036][ T144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.275014][ T144] usb 6-1: config 0 descriptor?? [ 158.657002][T10562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.660799][T10562] batadv_slave_0: entered promiscuous mode [ 158.683752][ T144] hid_parser_main: 1647 callbacks suppressed [ 158.683765][ T144] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x1 [ 158.692959][ T144] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x1 [ 158.695613][ T144] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 158.697930][ T144] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 158.700306][ T144] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 14/15 [ 158.704161][ T144] plantronics 0003:047F:FFFF.0007: parse failed [ 158.706214][ T144] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 158.883972][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 158.888256][ T40] audit: type=1400 audit(1766131386.205:872): avc: denied { getopt } for pid=10549 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.898742][ T40] audit: type=1400 audit(1766131386.215:873): avc: denied { write } for pid=10549 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 158.899985][ T6020] usb 6-1: USB disconnect, device number 22 [ 158.907633][ T40] audit: type=1400 audit(1766131386.215:874): avc: denied { write } for pid=10549 comm="syz.1.1371" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 158.983027][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 159.132666][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 159.136595][ T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.140056][ T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.144452][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.148145][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.151994][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.156060][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.160809][ T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.164642][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.168457][ T24] usb 8-1: config 0 descriptor?? [ 159.369672][T10568] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 159.372933][ T24] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.382292][ T24] usb 8-1: USB disconnect, device number 16 [ 159.386691][ T24] usblp0: removed [ 159.454909][T10570] lo speed is unknown, defaulting to 1000 [ 159.456130][ T40] audit: type=1326 audit(1766131386.775:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.4.1379" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f371418f7c9 code=0x0 [ 159.561622][ T40] audit: type=1400 audit(1766131386.875:876): avc: denied { read write } for pid=10581 comm="syz.4.1381" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.569576][ T40] audit: type=1400 audit(1766131386.875:877): avc: denied { open } for pid=10581 comm="syz.4.1381" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.578726][ T40] audit: type=1400 audit(1766131386.875:878): avc: denied { ioctl } for pid=10581 comm="syz.4.1381" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.742669][ T6020] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 159.823001][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 159.866444][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 159.869256][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 159.878863][ C0] ------------[ cut here ]------------ [ 159.880853][ C0] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#0: kworker/u32:8/1150 [ 159.884326][ C0] Modules linked in: [ 159.885881][ C0] CPU: 0 UID: 0 PID: 1150 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.889326][ C0] Tainted: [L]=SOFTLOCKUP [ 159.890697][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.894199][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 159.895992][ C0] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 159.897856][ C0] Code: 89 ee e8 78 37 5b f6 40 84 ed 75 21 e8 2e 3d 5b f6 44 89 fe bf 07 00 00 00 e8 c1 37 5b f6 41 83 ff 07 74 09 e8 16 3d 5b f6 90 <0f> 0b 90 e8 0d 3d 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 159.904078][ C0] RSP: 0018:ffffc90000007588 EFLAGS: 00010246 [ 159.905980][ C0] RAX: 0000000000000000 RBX: ffff888033ae3500 RCX: ffffffff8b63a96f [ 159.908449][ C0] RDX: ffff888029cb4980 RSI: ffffffff8b63a97a RDI: 0000000000000005 [ 159.910925][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 159.913547][ C0] R10: 0000000000000008 R11: ffff888029cb54b0 R12: ffff888056dd2580 [ 159.916019][ C0] R13: 1ffff92000000eb1 R14: ffff88802df3f800 R15: 0000000000000008 [ 159.918477][ C0] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 159.921271][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.923493][ C0] CR2: 00007f3714f8cf98 CR3: 0000000029aba000 CR4: 0000000000352ef0 [ 159.925989][ C0] Call Trace: [ 159.927063][ C0] [ 159.927998][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 159.929741][ C0] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 159.931765][ C0] tcp_data_ready+0x114/0x5a0 [ 159.933428][ C0] ? tcp_fin+0x3b7/0x500 [ 159.934789][ C0] tcp_data_queue+0x1ac2/0x4ff0 [ 159.936345][ C0] ? tcp_urg+0x10f/0xb80 [ 159.937692][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 159.939338][ C0] ? tcp_try_undo_loss+0x7b0/0x860 [ 159.940976][ C0] tcp_rcv_established+0xa7f/0x36e0 [ 159.942719][ C0] ? sk_filter_trim_cap+0x11a/0xde0 [ 159.944455][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 159.946227][ C0] ? lock_acquire+0x179/0x330 [ 159.947735][ C0] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 159.949260][ C0] tcp_v6_rcv+0x2ab5/0x48f0 [ 159.950716][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 159.952284][ C0] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 159.954208][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 159.955965][ C0] ? find_held_lock+0x2b/0x80 [ 159.957473][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 159.959127][ C0] ip6_protocol_deliver_rcu+0x188/0x1520 [ 159.960931][ C0] ip6_input_finish+0x1e4/0x4b0 [ 159.962475][ C0] ip6_input+0x105/0x2f0 [ 159.964008][ C0] ipv6_rcv+0x264/0x650 [ 159.965423][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 159.967001][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 159.968967][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 159.971062][ C0] ? lock_acquire+0x179/0x330 [ 159.972745][ C0] ? process_backlog+0x450/0x1650 [ 159.974405][ C0] __netif_receive_skb+0x1d/0x160 [ 159.976009][ C0] process_backlog+0x4a2/0x1650 [ 159.977560][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 159.979249][ C0] net_rx_action+0x9f9/0xfa0 [ 159.980740][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 159.982358][ C0] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 159.984605][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 159.986246][ C0] ? sched_clock+0x38/0x60 [ 159.987621][ C0] ? sched_clock_cpu+0x6c/0x530 [ 159.989167][ C0] ? mark_held_locks+0x49/0x80 [ 159.990682][ C0] handle_softirqs+0x219/0x950 [ 159.992216][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 159.994043][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 159.995702][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 159.997296][ C0] do_softirq+0xb2/0xf0 [ 159.998594][ C0] [ 159.999538][ C0] [ 160.000483][ C0] __local_bh_enable_ip+0x100/0x120 [ 160.002126][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 160.002695][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 160.003905][ C0] __dev_queue_xmit+0x797/0x4650 [ 160.007072][ C0] ? selinux_ip_postroute+0x739/0xdd0 [ 160.008072][ T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 160.008778][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.011381][ T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 160.013216][ C0] ? __lock_acquire+0x436/0x2890 [ 160.013247][ C0] ip6_finish_output2+0x1184/0x1cf0 [ 160.013268][ C0] __ip6_finish_output+0x3cd/0x1010 [ 160.013286][ C0] ip6_output+0x253/0x710 [ 160.013303][ C0] ip6_xmit+0x1512/0x23f0 [ 160.013323][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 160.013338][ C0] ? __sk_dst_check+0x120/0x350 [ 160.013360][ C0] inet6_csk_xmit+0x444/0x7f0 [ 160.013374][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 160.013389][ C0] ? csum_ipv6_magic+0x299/0x320 [ 160.013403][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 160.013415][ C0] __tcp_transmit_skb+0x1d67/0x48b0 [ 160.013432][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 160.013450][ C0] ? ktime_get+0x200/0x310 [ 160.013462][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.013479][ C0] tcp_write_xmit+0x12aa/0x8710 [ 160.013500][ C0] __tcp_push_pending_frames+0xaf/0x3c0 [ 160.013513][ C0] tcp_send_fin+0x11f/0x10e0 [ 160.013527][ C0] __tcp_close+0xa46/0x1120 [ 160.013540][ C0] tcp_close+0x28/0x120 [ 160.013550][ C0] inet_release+0xed/0x200 [ 160.017118][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 160.017792][ C0] inet6_release+0x4f/0x70 [ 160.020002][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.021598][ C0] sock_release+0x91/0x1d0 [ 160.023849][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.024873][ C0] rds_tcp_accept_one+0x31c/0xac0 [ 160.026856][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.028389][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 160.028407][ C0] rds_tcp_accept_worker+0x59/0x80 [ 160.028419][ C0] process_one_work+0x9ba/0x1b20 [ 160.028438][ C0] ? __pfx_process_one_work+0x10/0x10 [ 160.030459][ T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 160.032029][ C0] ? assign_work+0x1a0/0x250 [ 160.034164][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.035778][ C0] worker_thread+0x6c8/0xf10 [ 160.039263][ T24] usb 8-1: config 0 descriptor?? [ 160.039474][ C0] ? __pfx_worker_thread+0x10/0x10 [ 160.087254][ C0] kthread+0x3c5/0x780 [ 160.088574][ C0] ? __pfx_kthread+0x10/0x10 [ 160.090040][ C0] ? rcu_is_watching+0x12/0xc0 [ 160.091556][ C0] ? __pfx_kthread+0x10/0x10 [ 160.093155][ C0] ret_from_fork+0x983/0xb10 [ 160.094717][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 160.096432][ C0] ? __switch_to+0x7af/0x10d0 [ 160.098036][ C0] ? __pfx_kthread+0x10/0x10 [ 160.099529][ C0] ret_from_fork_asm+0x1a/0x30 [ 160.101063][ C0] [ 160.102056][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.104430][ C0] CPU: 0 UID: 0 PID: 1150 Comm: kworker/u32:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.107844][ C0] Tainted: [L]=SOFTLOCKUP [ 160.109222][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.112578][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 160.114456][ C0] Call Trace: [ 160.115532][ C0] [ 160.116456][ C0] dump_stack_lvl+0x3d/0x1f0 [ 160.117926][ C0] vpanic+0x640/0x6f0 [ 160.119171][ C0] ? subflow_data_ready+0x40b/0x790 [ 160.120792][ C0] panic+0xca/0xd0 [ 160.121955][ C0] ? __pfx_panic+0x10/0x10 [ 160.123440][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 160.125014][ C0] check_panic_on_warn+0xab/0xb0 [ 160.126546][ C0] __warn+0x108/0x3c0 [ 160.127840][ C0] __report_bug+0x2a0/0x520 [ 160.129230][ C0] ? subflow_data_ready+0x40b/0x790 [ 160.130879][ C0] ? __pfx___report_bug+0x10/0x10 [ 160.132474][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 160.134229][ C0] ? sched_clock+0x38/0x60 [ 160.135643][ C0] ? sched_clock_cpu+0x6c/0x530 [ 160.137183][ C0] ? tick_program_event+0xb0/0x140 [ 160.138787][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 160.140465][ C0] ? subflow_data_ready+0x40b/0x790 [ 160.142107][ C0] report_bug+0xb2/0x220 [ 160.143550][ C0] ? subflow_data_ready+0x40b/0x790 [ 160.145198][ C0] handle_bug+0x127/0x260 [ 160.146567][ C0] exc_invalid_op+0x17/0x50 [ 160.148022][ C0] asm_exc_invalid_op+0x1a/0x20 [ 160.149559][ C0] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 160.151393][ C0] Code: 89 ee e8 78 37 5b f6 40 84 ed 75 21 e8 2e 3d 5b f6 44 89 fe bf 07 00 00 00 e8 c1 37 5b f6 41 83 ff 07 74 09 e8 16 3d 5b f6 90 <0f> 0b 90 e8 0d 3d 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 160.157448][ C0] RSP: 0018:ffffc90000007588 EFLAGS: 00010246 [ 160.159365][ C0] RAX: 0000000000000000 RBX: ffff888033ae3500 RCX: ffffffff8b63a96f [ 160.161829][ C0] RDX: ffff888029cb4980 RSI: ffffffff8b63a97a RDI: 0000000000000005 [ 160.164397][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 160.166860][ C0] R10: 0000000000000008 R11: ffff888029cb54b0 R12: ffff888056dd2580 [ 160.169329][ C0] R13: 1ffff92000000eb1 R14: ffff88802df3f800 R15: 0000000000000008 [ 160.171812][ C0] ? subflow_data_ready+0x3ff/0x790 [ 160.173560][ C0] ? subflow_data_ready+0x40a/0x790 [ 160.175206][ C0] ? subflow_data_ready+0x40a/0x790 [ 160.176861][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 160.178604][ C0] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 160.180606][ C0] tcp_data_ready+0x114/0x5a0 [ 160.182057][ C0] ? tcp_fin+0x3b7/0x500 [ 160.183481][ C0] tcp_data_queue+0x1ac2/0x4ff0 [ 160.184916][ C0] ? tcp_urg+0x10f/0xb80 [ 160.186265][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 160.187914][ C0] ? tcp_try_undo_loss+0x7b0/0x860 [ 160.189539][ C0] tcp_rcv_established+0xa7f/0x36e0 [ 160.191185][ C0] ? sk_filter_trim_cap+0x11a/0xde0 [ 160.192890][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 160.194703][ C0] ? lock_acquire+0x179/0x330 [ 160.196202][ C0] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 160.197726][ C0] tcp_v6_rcv+0x2ab5/0x48f0 [ 160.199181][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 160.200735][ C0] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 160.202494][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 160.204351][ C0] ? find_held_lock+0x2b/0x80 [ 160.205851][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 160.207386][ C0] ip6_protocol_deliver_rcu+0x188/0x1520 [ 160.209164][ C0] ip6_input_finish+0x1e4/0x4b0 [ 160.210702][ C0] ip6_input+0x105/0x2f0 [ 160.212055][ C0] ipv6_rcv+0x264/0x650 [ 160.213484][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 160.214977][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 160.216851][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 160.218850][ C0] ? lock_acquire+0x179/0x330 [ 160.220355][ C0] ? process_backlog+0x450/0x1650 [ 160.221941][ C0] __netif_receive_skb+0x1d/0x160 [ 160.223637][ C0] process_backlog+0x4a2/0x1650 [ 160.225175][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 160.226857][ C0] net_rx_action+0x9f9/0xfa0 [ 160.228328][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 160.229937][ C0] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 160.232016][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 160.233756][ C0] ? sched_clock+0x38/0x60 [ 160.235167][ C0] ? sched_clock_cpu+0x6c/0x530 [ 160.236711][ C0] ? mark_held_locks+0x49/0x80 [ 160.238223][ C0] handle_softirqs+0x219/0x950 [ 160.239758][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 160.241423][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 160.243171][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 160.244797][ C0] do_softirq+0xb2/0xf0 [ 160.246123][ C0] [ 160.247062][ C0] [ 160.248009][ C0] __local_bh_enable_ip+0x100/0x120 [ 160.249652][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 160.251274][ C0] __dev_queue_xmit+0x797/0x4650 [ 160.252893][ C0] ? selinux_ip_postroute+0x739/0xdd0 [ 160.254640][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.256349][ C0] ? __lock_acquire+0x436/0x2890 [ 160.257924][ C0] ip6_finish_output2+0x1184/0x1cf0 [ 160.259591][ C0] __ip6_finish_output+0x3cd/0x1010 [ 160.261226][ C0] ip6_output+0x253/0x710 [ 160.262610][ C0] ip6_xmit+0x1512/0x23f0 [ 160.264110][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 160.265600][ C0] ? __sk_dst_check+0x120/0x350 [ 160.267144][ C0] inet6_csk_xmit+0x444/0x7f0 [ 160.268633][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 160.270271][ C0] ? csum_ipv6_magic+0x299/0x320 [ 160.271842][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 160.273573][ C0] __tcp_transmit_skb+0x1d67/0x48b0 [ 160.275218][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 160.276967][ C0] ? ktime_get+0x200/0x310 [ 160.278380][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.280045][ C0] tcp_write_xmit+0x12aa/0x8710 [ 160.281597][ C0] __tcp_push_pending_frames+0xaf/0x3c0 [ 160.283426][ C0] tcp_send_fin+0x11f/0x10e0 [ 160.284901][ C0] __tcp_close+0xa46/0x1120 [ 160.286342][ C0] tcp_close+0x28/0x120 [ 160.287658][ C0] inet_release+0xed/0x200 [ 160.289032][ C0] inet6_release+0x4f/0x70 [ 160.290404][ C0] sock_release+0x91/0x1d0 [ 160.291769][ C0] rds_tcp_accept_one+0x31c/0xac0 [ 160.293403][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 160.295083][ C0] rds_tcp_accept_worker+0x59/0x80 [ 160.296653][ C0] process_one_work+0x9ba/0x1b20 [ 160.298182][ C0] ? __pfx_process_one_work+0x10/0x10 [ 160.299802][ C0] ? assign_work+0x1a0/0x250 [ 160.301204][ C0] worker_thread+0x6c8/0xf10 [ 160.302677][ C0] ? __pfx_worker_thread+0x10/0x10 [ 160.304383][ C0] kthread+0x3c5/0x780 [ 160.305679][ C0] ? __pfx_kthread+0x10/0x10 [ 160.307146][ C0] ? rcu_is_watching+0x12/0xc0 [ 160.308662][ C0] ? __pfx_kthread+0x10/0x10 [ 160.310124][ C0] ret_from_fork+0x983/0xb10 [ 160.311597][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 160.313297][ C0] ? __switch_to+0x7af/0x10d0 [ 160.314788][ C0] ? __pfx_kthread+0x10/0x10 [ 160.316262][ C0] ret_from_fork_asm+0x1a/0x30 [ 160.317781][ C0] [ 160.319437][ C0] Kernel Offset: disabled [ 160.320820][ C0] Rebooting in 86400 seconds..