last executing test programs: 1m1.267983432s ago: executing program 1 (id=1577): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x52, &(0x7f0000000200), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f70bc70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x5}}, {@stats}]}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 1m1.106366487s ago: executing program 1 (id=1578): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "7e5d89cc3db09ac5", "dab1e9398c67545e7f252b3ec3453927", ')\\>#', "e54848a496f64795"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffffffff], [0x800], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 1m1.106003656s ago: executing program 1 (id=1579): openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$BLKRASET(r1, 0x1262, &(0x7f0000000080)=0x6) 1m1.056353399s ago: executing program 1 (id=1580): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x300, 0x734ccc484342c589) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xa, 0x52, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB="7472170b733d76697274696f2c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c00105400913089725ab1189d121da4ee20393cce86"]) sendmmsg(r4, &(0x7f0000000140), 0x0, 0x24008088) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2040, 0x30) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x10000100, 0xffffffff, 0x401, 0x0, 0x5, 0x4, 0x0, 0xb, 0xff, 0x0, 0x8000001f, 0x2, 0x47, 0x0, 0xfffffffd}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m0.566856352s ago: executing program 1 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000080)=0x1, 0xd, 0x2, 0x0, 0x0, 0xfffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @broadcast}, &(0x7f00000003c0)=0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xda, '\x00', r3, r4, 0x1, 0x0, 0x4}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x9c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 59.976840484s ago: executing program 1 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a000100717565756500000014000280080004400000001006060340000200000900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) 59.902621513s ago: executing program 32 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a000100717565756500000014000280080004400000001006060340000200000900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) 6.311773464s ago: executing program 0 (id=2291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140)=0x8, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = signalfd4(r0, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) close_range(r2, r3, 0x0) 6.244837014s ago: executing program 0 (id=2293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000006119a000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010080ffffff000000000100000008000100030000000c00048005000300800000000800020003"], 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32e9b3f0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e62f451}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41bfb52c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47f88d35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31152fa3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3112b2d8}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1000}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x358, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aec5db5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e85f8b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x587add01}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ac9483c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44126730}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d04a07b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cb68955}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2677dec6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x116458ea}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6807d58c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a37223f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53896119}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x550df367}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1faa1bda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d2bfc1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x703a6f5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d7a53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e02}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x507d74f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d36c540}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d15a35d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe608}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4655092}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541afd63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdd72f1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e7fdc85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12ea8ca1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae6786e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58d5625a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e79842}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3641}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7453}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7155b225}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfd78064}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6822aaaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8601}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4f79de}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaea2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a00071d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x852}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2034ed74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c31b53d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e76d35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5672220f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b06}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x529e9ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc477}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d6222f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d93367f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7898}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x575549c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefe3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf564}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1404}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa17}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x358}}, 0x8000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x13, 0x9, 0x800, 0x6, 0x9, 0x8, 0x4, 0xffffffffffff3b95}, &(0x7f0000000040)={0xff, 0x3, 0x803, 0x0, 0xb4, 0xfffffffffffffffe, 0x59a, 0x299129c4}, &(0x7f0000000080)={0x2, 0x8, 0x100000000, 0xffffffffffffffed, 0x8, 0x404, 0x185, 0xffffffff}, &(0x7f0000000200)={r5, r6+10000000}, &(0x7f00000001c0)={&(0x7f0000000140)={[0xc]}, 0x8}) 6.241880716s ago: executing program 0 (id=2295): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8051}, 0x4011) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) (async) r5 = socket$kcm(0x10, 0x7, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000000c0), 0x8) (async, rerun: 64) listen(r6, 0x9) (async, rerun: 64) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) 6.159879021s ago: executing program 0 (id=2297): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000000000000000000000000000090038000100feff02000300030000000f00000008000000000000000d000000000000000080000000000000e5"], 0x78) close(r0) r3 = openat2(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x101000, 0xf0, 0x1}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r7, r7, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r10, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x80000002, 0x1ff}}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r10, 0x40084149, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x1, 0x401, 0x1, r6}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r6, 0x92, "8784b940f5a979b8eacb6054ed1e42e7dccacb717b4b82e16b31e3c46095480088a42291072dbca8435f0aa058630a6610dfded268566aaa6ed89ff1e2730355b9ed2c87bdc922cc29b3ed961af9a3c548508269ee8437721c77aa93c5aa3a9bbe5329af94eee3ab39d55532af185b0dfa38c18808e64ce3e86ffbcee3779a92a11f438c88b37558f2462982db63c0604a9a"}, &(0x7f0000000080)=0x9a) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.144297039s ago: executing program 0 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x70, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x42, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb13"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 6.133371623s ago: executing program 0 (id=2300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001980)=@expire={0x104, 0x18, 0x31b, 0x70bd2c, 0x25dfdbfd, {{{@in=@local, @in=@private=0xa010102, 0x4e23, 0x4, 0x4e24, 0x37, 0xa, 0x80, 0x20, 0x62}, {@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x7, 0x54, 0x1, 0xffffffff80000001, 0x50e, 0x6f1, 0x5}, {0x8, 0x2, 0x401, 0x7}, {0x200, 0x5e, 0x5a8}, 0x70bd2a, 0x3501, 0x2, 0x4, 0x9, 0x21}, 0x8}, [@mark={0xc, 0x15, {0x35075a, 0xffffff00}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000811}, 0x4840) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000001180)={0x8, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @remote}}}, 0x108) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r5, &(0x7f0000000140)=""/4096, 0x1000) (async) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x2) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) (async) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 2.894742406s ago: executing program 3 (id=2316): ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) (async) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000000)) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000840)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000840)={0xc, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880)={0x0, 0x7}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000900), &(0x7f0000000940)=0x4) sendto(r0, &(0x7f0000000980)="1a4dd1169685c5017f8c247bc39b39b906f61d780c00b23358101c0482b45e77f4638509f980ad7700af49981c2fa5a3210d8b702251edc80ff7b2ec2e066515da54b423f80b2955b64892f08c94fa6447faf762bce47cc8712021e58ab0a0971b16aa6a2c9616baea3cf8fe454a343faeebcd1a4ed7958250753f29e145fd5324e03ee6aaae97077ab8efb7e7555cce9adf2c1bbe7a5e4421da6fdf25610b90fec0dc90c998afee8f248470ab0d7633e850640ff5d9bfe7f763d88526f48d12e7b0b82844023a3751608a3e1f7e87a3025223f23f06a03215e0ced9cc6319f80eeff988e658b82077c262bcbec46859edfa714cc0698cedc4", 0xf9, 0x80, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000a80)={0x0, {0x4, 0x10001}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000ac0)={0x1, 0x36314d4e, 0x2, @discrete={0x7, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000e00)={@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2908, 0x8, 0x6, 0x100, 0x5, 0x4000042, r2}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000e80)={0x0}, &(0x7f0000000ec0)=0x8) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000f00)={0x1, 0x0, 0x0, r2, 0xc5e5}, 0xc) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000f40)={0x28, 0x2, r1, r1, 0x9, 0x86cf, 0x4}) r5 = syz_open_dev$sg(&(0x7f0000000f80), 0xfb3, 0x1a880) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000fc0)) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$security_ima(r6, &(0x7f0000001000), &(0x7f0000001040)=@ng={0x4, 0xe, "ffec2b1e9125980d9e2b71"}, 0xd, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001080)={r4, @in6={{0xa, 0x4e24, 0x81, @private2, 0xffffff81}}, 0x1, 0x1}, &(0x7f0000001140)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001080)={r4, @in6={{0xa, 0x4e24, 0x81, @private2, 0xffffff81}}, 0x1, 0x1}, &(0x7f0000001140)=0x90) io_setup(0x4, &(0x7f0000001180)) bind$pptp(r0, &(0x7f00000011c0)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80c3) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x20, 0x5, &(0x7f0000001340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x3a, &(0x7f00000013c0)=""/58, 0x41100, 0x10, '\x00', r2, @fallback=0x17, r0, 0x8, &(0x7f0000001400)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x3, &(0x7f0000001440)=[r0, r0, r0, r0], &(0x7f0000001480)=[{0x2, 0x3, 0x1, 0x6}, {0x5, 0x3, 0xd, 0x5}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x9}, 0x94) io_setup(0x3ff, &(0x7f0000001580)=0x0) io_getevents(r8, 0x2231, 0x4, &(0x7f00000015c0)=[{}, {}, {}, {}], &(0x7f0000001640)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001680)={'gretap0\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001680)={'gretap0\x00', 0x400}) preadv(r6, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/14, 0xe}, {&(0x7f0000001700)=""/80, 0x50}, {&(0x7f0000001780)=""/215, 0xd7}], 0x3, 0x8000, 0x1c) semget$private(0x0, 0x3, 0x14) (async) r9 = semget$private(0x0, 0x3, 0x14) semtimedop(r9, &(0x7f00000018c0)=[{0x4, 0x1000, 0x1000}, {0x4, 0x4, 0x1800}, {0x1, 0x3}, {0x2, 0x8, 0x800}, {0x3, 0x9, 0x1000}], 0x5, &(0x7f0000001900)) semtimedop(r9, &(0x7f0000001940)=[{0x2, 0x0, 0x800}, {0x0, 0x2}], 0x2, &(0x7f00000019c0)) (async) semtimedop(r9, &(0x7f0000001940)=[{0x2, 0x0, 0x800}, {0x0, 0x2}], 0x2, &(0x7f00000019c0)) 2.703448386s ago: executing program 3 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.694403414s ago: executing program 3 (id=2318): r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) 2.406053361s ago: executing program 3 (id=2319): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r1, 0x6, 0x0) (async) lseek(r1, 0x6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b81000085000000"], &(0x7f00000001c0)='GPL\x00', 0x33f, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffef, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffef, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r6}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r6}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x21100e6, r6}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r12 = dup(r2) write$UHID_INPUT(r12, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1014) 2.387058384s ago: executing program 3 (id=2321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) poll(&(0x7f0000000200)=[{r0, 0x2000}], 0x1, 0x4d77f234) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = mq_open(&(0x7f00000000c0)='Y-,{\x00', 0x2, 0xd8, &(0x7f00000001c0)={0x3, 0x9, 0x62d, 0x1}) mq_timedsend(r3, &(0x7f0000000380)="3ec2ac73b8c66a66eeaefcbb16ac3f01d7545f0cd801bfb4c111281e201027bc8f269e4d8608cd9d289999ce5351e9d8c758a99e709fafdac9a3a8409d3d8e67787261c051d886c6297684ca11a75678d350df779f00e3864c91ddcc5780a6887f0747abf31d80bd9ca98f5d22c005874484a591ee8676c8ce5d003adbdb0900783ffca9a96881dd2c5285428f152ad6254c6a3caf178dc16f99b70b98e763233d9efc8cb85bfd4defcc39e626b750b1e1916e07d8a9a396b97ea749b203b3915cafe1948103f7ef", 0xc8, 0x1, &(0x7f0000000240)={0x0, 0x989680}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x7, 0x2, 0x40004}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x204800, 0x23456}) io_uring_enter(r6, 0x47f9, 0x4db, 0x0, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.513564665s ago: executing program 2 (id=2330): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="550a0000000000096111440000000000186800000000000000d9e75e531c84df695920b9680b58ad000000010400009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 1.512803089s ago: executing program 4 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0xfffffffe) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x150, r5, 0x8de13c6b70ae92c3, 0x41403, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x4, 0x5, 0x0, 0xc20, 0xfff4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xa0, 0x7, 0xc5, 0x70, 0xfff8, 0xfff, 0xe481]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x3}, {0x2}, {0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x24]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x12}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x3}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {}, {0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x1f}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x1}, {0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x0, 0xe5, 0x1ff, 0x7, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4a51b245}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb20a}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x28000800}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r9 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r9, &(0x7f0000000380)="b8ccb50f78bd1a93864b2c92aecc63f595", 0x11, 0x40001, &(0x7f00000003c0)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x80) 1.512312904s ago: executing program 2 (id=2332): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x5, {{0xa, 0x4e20, 0xa40, @mcast2, 0x47e7}}, {{0xa, 0x4e25, 0x20, @mcast2, 0xfffffe01}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) socket(0x22, 0x803, 0xfffffffd) 1.425641436s ago: executing program 4 (id=2334): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="77669f09f3781b14c4ce841c3d0d4814c71d5bca1c45530f0d03709333229f2e52cad9fa99440a34e3487ad1d7e86a471cab2f43fb"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000003c0)="6c05c517f0ee1a886f85877a8d9864f9172825a16905b92473c4f2bb4d653814cca0b8ee450d27d60ce71efae07077f953df44ce7854479ffdb037148166170d36e5be1f6e40c1035c395fd09e02761e2f33487db38977aa87830513ee0932aad9a1d144b43c2c5136b12d2dae394ede3caa018134c013d0cc4227683f1b5c8ffa8cd862517be5c2455f370f91ee5d54bd210c380ad98c690754cbfd9d2ce58e0987adc83f4ed2f48c8cd54bb4e229a035cd758e90d4f31b8e79747a1c3548390732"}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1000ef3e7e6cca7796655c7e8e50ce45eb53a1f8a5c6b1fb61d96140f0daa09d31d41a371e69624fd8bbc7d565f07d107af2810fc5b204", @ANYRESDEC=0x0, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="bfed3a7d25866f172a0f7db0623d1c690b004ed1c0ed9b40e8ec4c6a446b03966a7a062629848c1d171a72fb475a2a744ee6b4fa29ab7b17ad83b74b25335fe279899cda66522454adeab2b14ab082308c7be43782cefb9793f345687ca06465a11f5bd8c2c456e1a02212be62489edd247052b95688e35485a8f80b9480e49aa90aabce6b6f2a059323925aa79275b030b4741471ec0db8881d092a8fa9ce"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2000, 0x2}}, "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", "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"}) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfd000/0x400000)=nil) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffff, 0xf000}}, "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", "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"}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0xb, 0xafcca32794b86fcc, 0x4, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0]}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r10 = open(&(0x7f0000000040)='./file0\x00', 0x64c080, 0x43) mknodat$loop(r10, &(0x7f0000000000)='./file0\x00', 0x800, 0x1) (async) unlinkat(r9, &(0x7f0000000040)='./bus/file0\x00', 0x0) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.424777923s ago: executing program 2 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) 1.424363769s ago: executing program 2 (id=2336): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81}) 1.315758222s ago: executing program 2 (id=2337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004810) 1.315256043s ago: executing program 2 (id=2338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010015, 0x0, 0x9}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="40c8b78eae871cbc65379181653610ad48128b019e0a686e4dfcc15202d744c43cf671fff65df82e5af2f2b3d7089fcff9efce93d2a2b054709a168518c45d4f7275b6e3ac27267b27e5743dcc04120ac28059de26089529363bcfeb85fff6d09a97ae0419ad9051f1b886441390ee4a87e32330b79c5486823bed4534fe39fa196b31851bad0eedf819e1523197b4990782f5cf85969ce05aa6232b1a5ba17fdd9d8d43231ed3eefb9c501f3f53f300a9244ed796db65b020e99ddaabb4d14ffbaa276614226fd2c4fe07eb80cc6ea34e89810df81e94d6be0ab5763f7bf3b33b5295ab00ecc82ed69d276e8adb", 0xee}, {&(0x7f00000000c0)="330a3f5f5d8fb2535b3dbfa16f8896782224868d792dccb5114f5b46117fc45bdac9b28e77e619ba978b31185928496fbf5b73f02303ed03c8f2ace46e0f3905e03b181db7eec614e765a01a17744678d640d9d21867976ee56ba1fc3d90923a24434bff8cb998d650359f7aa215811f41a8fb19e9e95ee41266ff33a815", 0x7e}, {&(0x7f00000002c0)="3d440750e11d98a4132a49fdfd6f23ebc78a92b48ac72ecf1f9912e714ff2f2de2151ae3585745b7f8bbae19c40a1546b6b1fbcb0fd769d07e03ccbc82c21152a11abf505ba139be67470e1bc4e05851cb752a96902df9d0cd7b", 0x5a}, {&(0x7f0000000040)="24a938d3a561d14003134f580af26dc07e421648612c821ccc", 0x19}, {&(0x7f0000000340)="218a4b2b108ad45505ef03d6b6418d8b4b50e6c6ea106a27a6de8741315383edd04c7f915e8ac5a0a040c06b0971520845dedd60c1ade0a83affc02a50fc0e454d0c8e6325308247e87f4226849110c00069dfd19eb97073131108214375ef922e0e61a2", 0x64}, {&(0x7f0000000500)="c1411b32e3b1008f", 0x8}], 0x6, 0x80, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b2f, 0x7f) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x66) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x1}) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) poll(&(0x7f0000000400)=[{r4, 0x105}], 0x1, 0xdaf) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) 1.264988127s ago: executing program 4 (id=2339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000040)={0x0, 0x40, 0xffffffff, 0x2, 0x10, 0x2, 0x4, 0x2, 0x4, 0xfffffff9, 0x10, 0xfffffffe, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (rerun: 32) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0xa, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xffffffffffffe}, 0x60) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001440)='/', 0x1}, {0x0}], 0x2}}], 0x2, 0x40080c0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x3fe}, @mss={0x2, 0xcb2}, @window={0x3, 0x2}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 376.104809ms ago: executing program 4 (id=2340): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000008200"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000001300)=""/30) 256.386471ms ago: executing program 4 (id=2341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffc882}, 0x94) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x83) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$mixer_OSS_GETVERSION(r4, 0x80044d76, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 185.485857ms ago: executing program 4 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = accept4$unix(r3, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e, 0x40800) accept$unix(r4, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x4c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x402}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x1c00}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}]}, 0x4c}}, 0x0) 0s ago: executing program 3 (id=2333): r0 = semget$private(0x0, 0x4, 0x2ab) add_key(0x0, 0x0, &(0x7f0000000100)='P', 0x1, 0xfffffffffffffffc) r1 = io_uring_setup(0x267d, &(0x7f0000000900)={0x0, 0x7b5f, 0x4, 0x1, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000002000)={0x2, 0x4e24, @multicast2}, 0xfffffffffffffd5e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r2, r4, 0x0, 0x47) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f0000002240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x4, 0x1800000, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0xa, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x0, r7, r8, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000048c0)="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", 0x2000, &(0x7f00000012c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0xedd0d724a129513, 0x9, 0x400, 0x50, 0x7, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000340)={0x18, 0x0, 0x6, {0x40}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x8000000000000000, {0x3}}, &(0x7f00000003c0)={0x18, 0x0, 0x10001, {0xb9}}, &(0x7f0000000400)={0x18, 0xfffffffffffffff5, 0x8001, {0x5}}, &(0x7f0000000480)={0x28, 0xfffffffffffffffe, 0x7f, {{0x3, 0x7, 0x2}}}, &(0x7f00000004c0)={0x60, 0xfffffffffffffff5, 0x5, {{0x5a5, 0x4, 0x5, 0x2, 0x8001, 0x5, 0x1, 0x1}}}, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0x10, {0x5}}, &(0x7f0000000580)=ANY=[@ANYBLOB="82"], &(0x7f00000005c0)={0x20, 0x0, 0x1}, &(0x7f0000000740)={0x78, 0xfffffffffffffffe, 0x9a, {0x7b0d, 0x4, 0x0, {0x0, 0x9, 0xd1, 0x80, 0x1, 0x81, 0xffffff81, 0x5, 0x1e0, 0x1000, 0xa, 0x0, 0x0, 0x100, 0x6}}}, &(0x7f0000000a40)={0x90, 0x0, 0x9, {0x6, 0x1, 0x8, 0x9, 0x5, 0x1, {0x3, 0x100000000, 0x6, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff7, 0x0, 0x7, 0x9, 0x4000, 0x7fff, 0x0, 0xffffffffffffffff, 0x8}}}, &(0x7f0000000980)={0x60, 0x0, 0x23b0c78f, [{0x6, 0x9, 0x0, 0xb9}, {0x6, 0x2, 0x1e, 0x10001, 'blkio.bfq.io_merged_recursive\x00'}]}, &(0x7f00000022c0)=ANY=[@ANYBLOB="5001000000000000f7ffff7f0000000006000000000000000200000000000000dc0c000000000000000000800000000001010000000001000400000000000000030000000000000006000000000000000700000000000000090000000000000001800000000000007000000008000000ff0300000060000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000008000000000000000600000000000000070000000000000001000000a89c0000290000000000000004000000000000000000000000000000060000000000000001000000000000000000000006000000060000000000000043b10000000000000000000000000000ffff0000000000000900000000000000810000000000000006000000090000000100000000400000ff010000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="060000000c0000000000000001000000000000000900000000000000010000000500"/44], &(0x7f0000001080)={0xa0, 0xfffffffffffffffe, 0x7fffffff, {{0x4, 0x1, 0x14f, 0xe9d, 0x41ffb15a, 0x7ff, {0x5, 0x8, 0x2, 0x4, 0x0, 0x0, 0x43d8, 0x5de5, 0x8001, 0xa000, 0x7eb4, 0xee01, 0x0, 0xae9a, 0xffffffc5}}, {0x0, 0x1c}}}, &(0x7f0000001140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x10, 0x9}}, &(0x7f0000001180)={0x130, 0x0, 0x4, {0x9, 0x2, 0x0, '\x00', {0x80, 0x8, 0x8, 0xfffff395, 0x0, r8, 0x6000, '\x00', 0x7fffffffffffffff, 0x6, 0x1, 0x6, {0x2, 0x8}, {0x100, 0x9}, {0xc, 0x7}, {0x1, 0x9}, 0xfffffff8, 0x1, 0x23, 0x7f}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000000001800128008000100677470000c00028008000200", @ANYRES32=r12, @ANYBLOB="080003"], 0x40}}, 0x24000840) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f0000004880)=@udp=r10}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) r13 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r13, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0xb9f6}) kernel console output (not intermixed with test programs): -22 [ 131.143635][T10207] binder: 10206:10207 ioctl c0286415 200000000000 returned -22 [ 131.392836][T10229] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 131.805926][T10071] orangefs_mount: mount request failed with -4 [ 131.852263][T10241] binder: 10240:10241 unknown command 0 [ 131.855227][T10241] binder: 10240:10241 ioctl c0306201 200000000080 returned -22 [ 131.880650][T10241] binder: 10240:10241 ioctl c0306201 2000000003c0 returned -14 [ 131.883867][T10241] binder_alloc: 10240: binder_alloc_buf, no vma [ 132.084344][T10249] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 132.455863][T10270] xfrm0 speed is unknown, defaulting to 1000 [ 132.563315][T10276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10276 comm=syz.1.1269 [ 132.630542][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 132.727826][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729946][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.966513][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 132.966529][ T40] audit: type=1400 audit(1764859620.837:27125): avc: denied { setopt } for pid=10314 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.071397][ T40] audit: type=1400 audit(1764859620.937:27126): avc: denied { kexec_image_load } for pid=10322 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 133.080494][T10324] erspan1: entered promiscuous mode [ 133.128966][T10328] xfrm0 speed is unknown, defaulting to 1000 [ 133.136727][T10324] openvswitch: netlink: Flow actions attr not present in new flow. [ 133.412788][ T5996] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.448756][ T40] audit: type=1400 audit(1764859621.317:27127): avc: denied { read } for pid=10335 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.562721][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 133.565823][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.571125][ T5996] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.574386][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.577071][ T5996] usb 6-1: Product: syz [ 133.578537][ T5996] usb 6-1: Manufacturer: syz [ 133.580172][ T5996] usb 6-1: SerialNumber: syz [ 133.583736][ T5996] usb 6-1: config 0 descriptor?? [ 133.587881][ T5996] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.591019][ T5996] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 134.052993][ T5996] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 134.121302][ T5996] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 134.125208][ T5996] em28xx 6-1:0.0: board has no eeprom [ 134.182784][ T5996] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 134.185475][ T5996] em28xx 6-1:0.0: dvb set to bulk mode. [ 134.206322][ T6018] em28xx 6-1:0.0: Binding DVB extension [ 134.214067][ T5996] usb 6-1: USB disconnect, device number 11 [ 134.221574][T10356] nfs4: Bad value for 'source' [ 134.223390][ T5996] em28xx 6-1:0.0: Disconnecting em28xx [ 134.233791][ T6018] em28xx 6-1:0.0: Registering input extension [ 134.237637][ T5996] em28xx 6-1:0.0: Closing input extension [ 134.258999][ T40] audit: type=1400 audit(1764859622.127:27128): avc: denied { remount } for pid=10358 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.292292][ T5996] em28xx 6-1:0.0: Freeing device [ 134.342204][T10364] syzkaller0: entered promiscuous mode [ 134.346205][T10364] syzkaller0: entered allmulticast mode [ 134.350985][T10364] futex_wake_op: syz.2.1294 tries to shift op by 32; fix this program [ 134.418913][T10372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58740 sclass=netlink_route_socket pid=10372 comm=syz.0.1300 [ 134.613900][T10401] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 134.616468][T10400] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 134.682148][T10407] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 134.685201][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.819101][T10428] tmpfs: Unknown parameter 'hute' [ 135.023255][ T40] audit: type=1400 audit(1764859622.887:27129): avc: denied { getattr } for pid=10437 comm="syz.1.1319" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 135.189898][ T40] audit: type=1400 audit(1764859623.057:27130): avc: denied { append } for pid=10458 comm="syz.1.1328" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.196742][T10457] sp0: Synchronizing with TNC [ 135.205648][ T40] audit: type=1400 audit(1764859623.077:27131): avc: denied { read } for pid=10458 comm="syz.1.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.353880][T10464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 135.356142][T10464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.358854][T10464] vhci_hcd vhci_hcd.0: Device attached [ 135.364724][T10465] vhci_hcd: connection closed [ 135.364993][ T12] vhci_hcd: stop threads [ 135.368011][ T12] vhci_hcd: release socket [ 135.369676][ T12] vhci_hcd: disconnect device [ 135.412843][T10031] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 135.542850][T10031] usb 8-1: device descriptor read/64, error -71 [ 135.782765][T10031] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 135.912916][T10031] usb 8-1: device descriptor read/64, error -71 [ 136.026758][T10031] usb usb8-port1: attempt power cycle [ 136.101358][T10491] syz.1.1338: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 136.140670][ T40] audit: type=1326 audit(1764859624.007:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.1.1339" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c8938f7c9 code=0x0 [ 136.372159][T10511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.373882][T10031] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 136.402761][T10031] usb 8-1: device descriptor read/8, error -71 [ 136.435930][T10514] __nla_validate_parse: 11 callbacks suppressed [ 136.435946][T10514] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1346'. [ 136.481571][ T40] audit: type=1400 audit(1764859624.347:27133): avc: denied { map } for pid=10517 comm="syz.1.1347" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 136.561684][T10518] XFS (nullb0): Invalid superblock magic number [ 136.577183][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 136.584557][T10518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.593961][T10530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.612052][T10525] policy can only be matched on NF_INET_PRE_ROUTING [ 136.612071][T10525] unable to load match [ 136.652825][T10031] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 136.673422][T10031] usb 8-1: device descriptor read/8, error -71 [ 136.793788][T10031] usb usb8-port1: unable to enumerate USB device [ 136.918640][T10551] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1356'. [ 136.922889][T10551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 137.029397][ T40] audit: type=1400 audit(1764859624.897:27134): avc: denied { setattr } for pid=10553 comm="syz.1.1357" name="/" dev="9p" ino=72095695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.135086][T10558] bridge_slave_0: left allmulticast mode [ 137.137045][T10558] bridge_slave_0: left promiscuous mode [ 137.139224][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.147197][T10558] bridge_slave_1: left allmulticast mode [ 137.149431][T10558] bridge_slave_1: left promiscuous mode [ 137.151518][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.157811][T10558] bond0: (slave bond_slave_0): Releasing backup interface [ 137.163089][T10558] bond0: (slave bond_slave_1): Releasing backup interface [ 137.168865][T10558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.171427][T10558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.177110][T10558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.388419][T10592] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 137.437093][T10595] overlayfs: failed to clone upperpath [ 137.525085][T10031] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 137.552872][ T73] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 137.673053][T10031] usb 6-1: Using ep0 maxpacket: 8 [ 137.676146][T10031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 137.681749][T10031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.685186][T10031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.688364][T10031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 137.692083][T10031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.695596][T10031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.699843][T10031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.704328][T10031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.722981][ T73] usb 7-1: Using ep0 maxpacket: 16 [ 137.726694][ T73] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 137.731091][ T73] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 137.739385][ T73] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 137.752710][ T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.756251][ T73] usb 7-1: Product: syz [ 137.758069][ T73] usb 7-1: Manufacturer: syz [ 137.760085][ T73] usb 7-1: SerialNumber: syz [ 137.764401][ T73] usb 7-1: config 0 descriptor?? [ 137.771929][ T73] hub 7-1:0.0: bad descriptor, ignoring hub [ 137.774285][ T73] hub 7-1:0.0: probe with driver hub failed with error -5 [ 137.779706][ T73] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 137.878885][T10619] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 137.887186][T10619] bond6 (unregistering): Released all slaves [ 137.910418][T10031] usb 6-1: GET_CAPABILITIES returned 0 [ 137.912288][T10031] usbtmc 6-1:16.0: can't read capabilities [ 137.916301][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 137.920424][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 138.003282][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 138.019649][T10626] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1365'. [ 138.125910][T10031] usb 6-1: USB disconnect, device number 12 [ 138.169387][T10642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10642 comm=syz.0.1383 [ 138.225403][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 138.225418][ T40] audit: type=1400 audit(1764859626.097:27136): avc: denied { watch_sb } for pid=10645 comm="syz.0.1386" path="/385/file0" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.303476][T10653] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 138.311838][T10649] FAULT_INJECTION: forcing a failure. [ 138.311838][T10649] name failslab, interval 1, probability 0, space 0, times 1 [ 138.315969][T10649] CPU: 2 UID: 0 PID: 10649 Comm: syz.3.1385 Not tainted syzkaller #0 PREEMPT(full) [ 138.315985][T10649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.315992][T10649] Call Trace: [ 138.315996][T10649] [ 138.316001][T10649] dump_stack_lvl+0x16c/0x1f0 [ 138.316039][T10649] should_fail_ex+0x512/0x640 [ 138.316058][T10649] ? fs_reclaim_acquire+0xae/0x150 [ 138.316076][T10649] should_failslab+0xc2/0x120 [ 138.316093][T10649] __kmalloc_noprof+0xdd/0x8f0 [ 138.316105][T10649] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 138.316121][T10649] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 138.316132][T10649] tomoyo_realpath_from_path+0xc2/0x6e0 [ 138.316146][T10649] ? tomoyo_profile+0x47/0x60 [ 138.316162][T10649] tomoyo_path_number_perm+0x245/0x580 [ 138.316178][T10649] ? tomoyo_path_number_perm+0x237/0x580 [ 138.316196][T10649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.316214][T10649] ? find_held_lock+0x2b/0x80 [ 138.316238][T10649] ? find_held_lock+0x2b/0x80 [ 138.316248][T10649] ? hook_file_ioctl_common+0x144/0x410 [ 138.316265][T10649] ? __fget_files+0x20e/0x3c0 [ 138.316278][T10649] security_file_ioctl+0x9b/0x240 [ 138.316291][T10649] __x64_sys_ioctl+0xb7/0x210 [ 138.316307][T10649] do_syscall_64+0xcd/0xf80 [ 138.316324][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.316335][T10649] RIP: 0033:0x7fdd9fd8f7c9 [ 138.316344][T10649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.316354][T10649] RSP: 002b:00007fdd9dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.316365][T10649] RAX: ffffffffffffffda RBX: 00007fdd9ffe5fa0 RCX: 00007fdd9fd8f7c9 [ 138.316372][T10649] RDX: 0000200000000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 138.316378][T10649] RBP: 00007fdd9dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.316385][T10649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.316391][T10649] R13: 00007fdd9ffe6038 R14: 00007fdd9ffe5fa0 R15: 00007ffe8fedcfb8 [ 138.316405][T10649] [ 138.316409][T10649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.337510][T10655] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 138.423209][ T40] audit: type=1400 audit(1764859626.297:27137): avc: denied { getopt } for pid=10656 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.444554][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1388'. [ 138.470085][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 138.474321][T10661] netlink: 'syz.3.1390': attribute type 11 has an invalid length. [ 138.474890][T10655] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.481264][T10657] bond6: entered promiscuous mode [ 138.483609][T10657] bond6: entered allmulticast mode [ 138.493909][T10661] netlink: 'syz.3.1390': attribute type 11 has an invalid length. [ 138.536919][T10655] bond6: (slave dummy0): making interface the new active one [ 138.539581][T10655] dummy0: entered promiscuous mode [ 138.541335][T10655] dummy0: entered allmulticast mode [ 138.545989][T10655] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 138.556464][ T40] audit: type=1400 audit(1764859626.427:27138): avc: denied { setattr } for pid=10666 comm="syz.1.1393" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.557057][T10667] netlink: 'syz.1.1393': attribute type 21 has an invalid length. [ 138.636966][T10655] bond6 (unregistering): (slave dummy0): Releasing active interface [ 138.639667][T10655] dummy0: left promiscuous mode [ 138.641453][T10655] dummy0: left allmulticast mode [ 138.648278][T10655] bond6 (unregistering): Released all slaves [ 138.722783][ T40] audit: type=1400 audit(1764859626.577:27139): avc: denied { connect } for pid=10671 comm="syz.3.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.794221][ T6018] usb 7-1: USB disconnect, device number 12 [ 138.871021][T10682] FAULT_INJECTION: forcing a failure. [ 138.871021][T10682] name failslab, interval 1, probability 0, space 0, times 0 [ 138.876253][T10682] CPU: 1 UID: 0 PID: 10682 Comm: syz.3.1399 Not tainted syzkaller #0 PREEMPT(full) [ 138.876268][T10682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.876275][T10682] Call Trace: [ 138.876279][T10682] [ 138.876284][T10682] dump_stack_lvl+0x16c/0x1f0 [ 138.876302][T10682] should_fail_ex+0x512/0x640 [ 138.876317][T10682] ? fs_reclaim_acquire+0xae/0x150 [ 138.876334][T10682] should_failslab+0xc2/0x120 [ 138.876351][T10682] __kmalloc_noprof+0xdd/0x8f0 [ 138.876363][T10682] ? tomoyo_encode2+0x100/0x3e0 [ 138.876378][T10682] ? tomoyo_encode2+0x100/0x3e0 [ 138.876389][T10682] tomoyo_encode2+0x100/0x3e0 [ 138.876402][T10682] tomoyo_encode+0x29/0x50 [ 138.876414][T10682] tomoyo_realpath_from_path+0x18f/0x6e0 [ 138.876430][T10682] tomoyo_path_number_perm+0x245/0x580 [ 138.876447][T10682] ? tomoyo_path_number_perm+0x237/0x580 [ 138.876465][T10682] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.876483][T10682] ? find_held_lock+0x2b/0x80 [ 138.876506][T10682] ? find_held_lock+0x2b/0x80 [ 138.876517][T10682] ? hook_file_ioctl_common+0x144/0x410 [ 138.876534][T10682] ? __fget_files+0x20e/0x3c0 [ 138.876547][T10682] security_file_ioctl+0x9b/0x240 [ 138.876560][T10682] __x64_sys_ioctl+0xb7/0x210 [ 138.876575][T10682] do_syscall_64+0xcd/0xf80 [ 138.876591][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.876603][T10682] RIP: 0033:0x7fdd9fd8f7c9 [ 138.876612][T10682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.876623][T10682] RSP: 002b:00007fdd9dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.876634][T10682] RAX: ffffffffffffffda RBX: 00007fdd9ffe5fa0 RCX: 00007fdd9fd8f7c9 [ 138.876641][T10682] RDX: 0000200000000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 138.876647][T10682] RBP: 00007fdd9dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.876653][T10682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.876659][T10682] R13: 00007fdd9ffe6038 R14: 00007fdd9ffe5fa0 R15: 00007ffe8fedcfb8 [ 138.876674][T10682] [ 138.876684][T10682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.283379][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.435994][T10730] FAULT_INJECTION: forcing a failure. [ 139.435994][T10730] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.440382][T10730] CPU: 0 UID: 0 PID: 10730 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(full) [ 139.440398][T10730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.440404][T10730] Call Trace: [ 139.440409][T10730] [ 139.440413][T10730] dump_stack_lvl+0x16c/0x1f0 [ 139.440431][T10730] should_fail_ex+0x512/0x640 [ 139.440448][T10730] _copy_from_user+0x2e/0xd0 [ 139.440463][T10730] video_usercopy+0xee2/0x16c0 [ 139.440477][T10730] ? __pfx___video_do_ioctl+0x10/0x10 [ 139.440488][T10730] ? selinux_kernel_read_file+0xb0/0x120 [ 139.440502][T10730] ? __pfx_video_usercopy+0x10/0x10 [ 139.440523][T10730] v4l2_ioctl+0x1bd/0x250 [ 139.440534][T10730] ? __pfx_v4l2_ioctl+0x10/0x10 [ 139.440546][T10730] __x64_sys_ioctl+0x18e/0x210 [ 139.440562][T10730] do_syscall_64+0xcd/0xf80 [ 139.440577][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.440592][T10730] RIP: 0033:0x7fdd9fd8f7c9 [ 139.440605][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.440620][T10730] RSP: 002b:00007fdd9dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.440636][T10730] RAX: ffffffffffffffda RBX: 00007fdd9ffe5fa0 RCX: 00007fdd9fd8f7c9 [ 139.440643][T10730] RDX: 0000200000000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 139.440649][T10730] RBP: 00007fdd9dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.440656][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.440662][T10730] R13: 00007fdd9ffe6038 R14: 00007fdd9ffe5fa0 R15: 00007ffe8fedcfb8 [ 139.440676][T10730] [ 140.105557][ T40] audit: type=1400 audit(1764859627.977:27140): avc: denied { ioctl } for pid=10777 comm="syz.0.1429" path="socket:[35403]" dev="sockfs" ino=35403 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.210931][T10785] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 140.429928][T10794] SELinux: policydb string length 77 does not match expected length 8 [ 140.432949][T10794] SELinux: failed to load policy [ 140.611770][T10804] xt_socket: unknown flags 0xd0 [ 140.618513][T10804] EXT4-fs (nbd3): unable to read superblock [ 140.727350][T10808] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 140.810847][T10810] team0: No ports can be present during mode change [ 140.814059][T10810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10810 comm=syz.3.1442 [ 140.866899][T10818] bond_slave_1: entered promiscuous mode [ 140.869490][T10818] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 140.873571][T10818] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 140.880385][T10820] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 140.917351][T10820] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 140.926059][T10820] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 140.963780][T10826] gretap1: entered promiscuous mode [ 140.969497][ T40] audit: type=1400 audit(1764859628.837:27141): avc: denied { append } for pid=10824 comm="syz.3.1447" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 141.072252][T10833] netlink: 'syz.1.1450': attribute type 15 has an invalid length. [ 141.250510][T10838] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 141.597475][T10865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10865 comm=syz.0.1461 [ 141.604410][T10865] __nla_validate_parse: 8 callbacks suppressed [ 141.604420][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.676045][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.680351][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.692010][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.695300][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.698394][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.701498][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.705043][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.708173][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 141.711281][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 142.000119][T10902] xt_ecn: cannot match TCP bits for non-tcp packets [ 142.094326][T10899] 9pnet_fd: p9_fd_create_tcp (10899): problem connecting socket to 127.0.0.1 [ 142.136780][T10918] netlink: 'syz.3.1477': attribute type 15 has an invalid length. [ 142.373284][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 142.384583][T10949] netlink: 'syz.0.1487': attribute type 2 has an invalid length. [ 142.387729][T10949] ./bus: Can't lookup blockdev [ 142.483034][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 142.563970][T10964] overlay: Bad value for 'uuid' [ 142.603209][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 144.804128][ T6026] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 145.970044][ T40] audit: type=1400 audit(1764859633.837:27142): avc: denied { recv } for pid=10982 comm="dhcpcd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 156.443832][ T40] audit: type=1400 audit(1764859644.317:27143): avc: denied { read append } for pid=10994 comm="syz.1.1492" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 156.571788][T11008] __nla_validate_parse: 57 callbacks suppressed [ 156.571803][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'. [ 156.617138][T11018] geneve2: entered promiscuous mode [ 156.618927][T11018] geneve2: entered allmulticast mode [ 156.669123][T11026] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.714128][T11037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1504'. [ 156.766282][T11043] snd_dummy snd_dummy.0: control 0:64:128:syz0:8 is already present [ 156.782934][T11048] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 156.810198][T11052] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1510'. [ 156.846579][ T40] audit: type=1400 audit(1764859644.717:27144): avc: denied { mounton } for pid=11046 comm="syz.1.1507" path="/347/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 156.859854][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1511'. [ 156.884942][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 156.931248][ T40] audit: type=1400 audit(1764859644.797:27145): avc: denied { execute } for pid=11060 comm="syz.3.1513" path="/sys/kernel/debug/binder/stats" dev="debugfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 156.991452][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 156.998718][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 157.071319][T11058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.074910][T11058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.077581][T11058] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 157.092408][T11058] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1512'. [ 157.109711][T11069] /dev/nullb0: Can't lookup blockdev [ 157.115885][T11069] cgroup: No subsys list or none specified [ 157.322480][T11096] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1525'. [ 157.386785][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 157.441374][T11106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.707190][T11114] kAFS: No cell specified [ 157.713662][T11114] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 157.765733][ T40] audit: type=1400 audit(1764859645.637:27146): avc: denied { mounton } for pid=11116 comm="syz.1.1532" path="/proc/984/task" dev="proc" ino=36760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.033816][ T40] audit: type=1400 audit(1764859645.907:27147): avc: denied { mounton } for pid=11130 comm="syz.3.1536" path="/proc/1031/cgroup" dev="proc" ino=37897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 158.148887][T11133] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 158.172920][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 158.333909][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 158.336957][ T54] usb 6-1: config 0 has an invalid interface number: 32 but max is 1 [ 158.339633][ T54] usb 6-1: config 0 has an invalid interface number: 113 but max is 1 [ 158.342533][ T54] usb 6-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 158.346163][ T54] usb 6-1: config 0 has no interface number 0 [ 158.348336][ T54] usb 6-1: config 0 has no interface number 1 [ 158.350366][ T54] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.357543][ T54] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 158.362073][ T54] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0xF has invalid maxpacket 1088, setting to 64 [ 158.368548][ T54] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 158.377986][ T54] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.382016][ T54] usb 6-1: config 0 interface 32 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 158.388740][ T54] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 158.393797][ T54] usb 6-1: config 0 interface 32 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 158.398490][ T54] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 158.404572][ T54] usb 6-1: config 0 interface 113 altsetting 93 has a duplicate endpoint with address 0x5, skipping [ 158.409587][ T54] usb 6-1: config 0 interface 113 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 158.415571][ T54] usb 6-1: config 0 interface 113 has no altsetting 0 [ 158.420612][ T54] usb 6-1: Dual-Role OTG device on HNP port [ 158.423648][ T54] usb 6-1: New USB device found, idVendor=19d2, idProduct=1121, bcdDevice=65.9b [ 158.426755][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.429448][ T54] usb 6-1: Product: ê–¦ê’¢æ…æ’¦êŽè‰¬î™ä«­â‰éŠî¦»ç–ƒî‚崃챳ጧ豒曾䯰㜥⼑ïཡ⾹⻘ڟ狄鲘藹暋뱢㳑悧絣à¿ã‚Šã¨•ì†ç–¹â¥“ã”ï”ä–œâ‰æ „휚퉼箾쉎磩â‹í’„꘢尾 [ 158.437350][ T54] usb 6-1: Manufacturer: 驀譆﵄䂷盫鿫ꡛ둱者ç…㱂튆蠳ã«â‰ì¬˜èª®í‚’ï¡ì›µîˆ¼è‚Žé´­ã©ºì¤ç­“懼௽刈鉑ë´ì©šç¬³î´ìºžæ©”á˜Žì·£ë’‹æ…™è…šáŒ¡í• [ 158.444548][ T54] usb 6-1: SerialNumber: Њ [ 158.450797][ T54] usb 6-1: config 0 descriptor?? [ 158.455130][T11129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.456956][T11173] xfrm0 speed is unknown, defaulting to 1000 [ 158.546715][ T40] audit: type=1400 audit(1764859646.417:27148): avc: denied { watch watch_reads } for pid=11158 comm="syz.3.1545" path="pipe:[36808]" dev="pipefs" ino=36808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 158.664647][T11190] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 158.689612][T11190] bond6: (slave geneve3): making interface the new active one [ 158.693096][T11190] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 158.696011][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.699733][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.704055][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.707753][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 158.864642][ T54] option 6-1:0.32: GSM modem (1-port) converter detected [ 158.882538][ T54] usb 6-1: USB disconnect, device number 13 [ 158.892899][ T54] option 6-1:0.32: device disconnected [ 158.941120][T11210] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 159.043840][T11223] overlayfs: failed to clone upperpath [ 159.233487][T11240] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 159.302852][T10031] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 159.455351][T10031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.460385][T10031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.470096][T10031] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 159.476530][T10031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.481407][T10031] usb 7-1: config 0 descriptor?? [ 159.686175][ T40] audit: type=1400 audit(1764859647.557:27149): avc: denied { read } for pid=11220 comm="syz.2.1563" path="socket:[37326]" dev="sockfs" ino=37326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.688386][T10031] usbhid 7-1:0.0: can't add hid device: -71 [ 159.700484][T10031] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 159.707945][T10031] usb 7-1: USB disconnect, device number 13 [ 159.978665][T11275] xfrm0 speed is unknown, defaulting to 1000 [ 160.235266][ T40] audit: type=1400 audit(1764859648.107:27150): avc: denied { unlink } for pid=11272 comm="syz.1.1580" name="file0" dev="9p" ino=72095715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 160.329034][T11273] openvswitch: netlink: Flow key attr not present in new flow. [ 160.343253][T11286] netlink: 'syz.0.1585': attribute type 4 has an invalid length. [ 160.364394][ T5938] overlayfs: failed lookup in lower (newroot/360, name='bus', err=-40): overlapping layers [ 160.369353][ T5938] overlayfs: failed lookup in lower (newroot/360, name='bus', err=-40): overlapping layers [ 160.370822][ T40] audit: type=1400 audit(1764859648.237:27151): avc: denied { associate } for pid=11287 comm="syz.0.1585" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 160.384169][T11288] 9pnet_fd: Insufficient options for proto=fd [ 160.393539][ T40] audit: type=1400 audit(1764859648.257:27152): avc: denied { mounton } for pid=11280 comm="syz.2.1583" path="/410/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 160.651299][ T7358] bond0: (slave syz_tun): Releasing backup interface [ 161.246927][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.251868][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.255924][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.260027][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.264862][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.277217][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.279817][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.282233][ T5933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.285289][ T5933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.287843][ T5933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.315553][T11306] xfrm0 speed is unknown, defaulting to 1000 [ 161.487601][T11306] chnl_net:caif_netlink_parms(): no params data found [ 161.532523][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.534986][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.537361][T11306] bridge_slave_0: entered allmulticast mode [ 161.540244][T11306] bridge_slave_0: entered promiscuous mode [ 161.543778][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.546125][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.548637][T11306] bridge_slave_1: entered allmulticast mode [ 161.553471][T11306] bridge_slave_1: entered promiscuous mode [ 161.579090][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.592344][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.623480][T11306] team0: Port device team_slave_0 added [ 161.626771][T11306] team0: Port device team_slave_1 added [ 161.630942][T11318] netlink: 'syz.0.1596': attribute type 5 has an invalid length. [ 161.640799][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.643130][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.651418][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.658668][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.660979][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.669835][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.692262][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 161.692274][ T40] audit: type=1400 audit(1764859649.557:27157): avc: denied { mounton } for pid=11321 comm="syz.3.1598" path="/349/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 161.703501][T11306] hsr_slave_0: entered promiscuous mode [ 161.706283][T11306] hsr_slave_1: entered promiscuous mode [ 161.708798][T11306] debugfs: 'hsr0' already exists in 'hsr' [ 161.710772][T11306] Cannot create hsr debugfs directory [ 161.824295][T11306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.834552][T11306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.840852][T11306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.850491][T11306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.870940][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.873314][T11306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.875818][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.878121][T11306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.912056][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.916929][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.921870][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.942785][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.950637][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.953092][ T7670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.961899][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.964553][ T7670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.111076][T11341] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 162.116067][T11341] Error validating options; rc = [-22] [ 162.129605][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.300459][T11306] veth0_vlan: entered promiscuous mode [ 162.309256][T11306] veth1_vlan: entered promiscuous mode [ 162.325695][T11306] veth0_macvtap: entered promiscuous mode [ 162.329911][T11306] veth1_macvtap: entered promiscuous mode [ 162.341679][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.349141][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.356364][ T7700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.359351][ T7700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.365952][ T7700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.370016][ T7700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.424902][ T7700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.428561][ T7700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.442824][ T7699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.447195][ T7699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.454278][T11358] overlayfs: failed to clone upperpath [ 162.456739][ T40] audit: type=1400 audit(1764859650.327:27158): avc: denied { mounton } for pid=11306 comm="syz-executor" path="/syzkaller.zfIRNE/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 162.474042][ T40] audit: type=1400 audit(1764859650.347:27159): avc: denied { mounton } for pid=11306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 162.609840][T11366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.650828][T11374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=11374 comm=syz.0.1609 [ 162.655393][T11374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=11374 comm=syz.0.1609 [ 162.659624][T11374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11374 comm=syz.0.1609 [ 162.696164][ T40] audit: type=1400 audit(1764859650.567:27160): avc: denied { setattr } for pid=11375 comm="syz.0.1610" path="socket:[37719]" dev="sockfs" ino=37719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.781347][T11383] tmpfs: User quota block hardlimit too large. [ 162.820263][T11387] autofs: Bad value for 'fd' [ 162.881056][ T40] audit: type=1400 audit(1764859650.747:27161): avc: denied { mount } for pid=11385 comm="syz.2.1613" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.892318][ T40] audit: type=1400 audit(1764859650.757:27162): avc: denied { remount } for pid=11385 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.908860][ T40] audit: type=1400 audit(1764859650.777:27163): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.945067][T11341] ceph: No mds server is up or the cluster is laggy [ 163.365643][ T5933] Bluetooth: hci2: command tx timeout [ 163.818192][T11429] __nla_validate_parse: 11 callbacks suppressed [ 163.818204][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 164.472328][T11455] SELinux: syz.2.1635 (11455) set checkreqprot to 1. This is no longer supported. [ 164.490760][T11455] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 164.495506][T11455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.504879][T11464] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 164.505521][ T40] audit: type=1400 audit(1764859652.367:27164): avc: denied { connect } for pid=11462 comm="syz.4.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.636954][T11479] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1644'. [ 164.640036][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 164.726459][T11492] netlink: 'syz.3.1647': attribute type 12 has an invalid length. [ 164.797533][ T40] audit: type=1400 audit(1764859652.667:27165): avc: denied { name_bind 0x1000000 } for pid=11495 comm="syz.3.1649" path="socket:[39392]" dev="sockfs" ino=39392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 164.890138][ T40] audit: type=1400 audit(1764859652.757:27166): avc: denied { map } for pid=11498 comm="syz.2.1650" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.936728][T11508] --map-set only usable from mangle table [ 164.944831][T11508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.040284][T11521] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 165.444099][ T5933] Bluetooth: hci2: command tx timeout [ 166.470732][T11560] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 166.506824][T11560] bond4: entered promiscuous mode [ 166.509585][T11560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.527928][T11560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.530661][T11560] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 166.535928][T11560] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 166.542983][T11560] bond4: (slave ip6gre2): making interface the new active one [ 166.546249][T11560] ip6gre2: entered promiscuous mode [ 166.549961][T11560] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 166.562176][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 166.606966][T11571] netlink: 'syz.0.1674': attribute type 10 has an invalid length. [ 166.657394][T11560] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 166.660379][T11560] ip6gre2: left promiscuous mode [ 166.664533][T11560] bond4 (unregistering): Released all slaves [ 166.679576][T11571] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 166.683844][T11571] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.849468][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 166.937623][T11593] team0: Port device team_slave_0 removed [ 166.958726][ T7692] nci: nci_rsp_packet: unknown rsp opcode 0xc02 [ 166.965380][T11603] comedi comedi0: dt2814: I/O port conflict (0xff,2) [ 167.522932][ T5933] Bluetooth: hci2: command tx timeout [ 168.097326][T11665] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 168.100200][T11665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1556 sclass=netlink_route_socket pid=11665 comm=syz.3.1697 [ 168.114187][T11665] sctp: [Deprecated]: syz.3.1697 (pid 11665) Use of int in max_burst socket option. [ 168.114187][T11665] Use struct sctp_assoc_value instead [ 168.234133][T11669] xfrm0 speed is unknown, defaulting to 1000 [ 168.396873][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 168.405415][T11674] bond0: entered promiscuous mode [ 168.407337][T11674] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 168.413401][T11674] batadv0: entered promiscuous mode [ 168.416625][T11674] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 168.420557][T11674] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 168.425811][T11674] hsr1: entered promiscuous mode [ 168.428884][T11674] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 168.938764][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 169.059093][T11688] overlayfs: failed to clone upperpath [ 169.124862][T11686] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 169.128721][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.132268][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.154150][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 169.154162][ T40] audit: type=1400 audit(1764859657.027:27171): avc: denied { create } for pid=11694 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 169.293658][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 169.299121][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 169.402036][T11722] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1716'. [ 169.412960][T11716] could not allocate digest TFM handle sm3-ce [ 169.447297][T11720] syz.2.1715 (11720) used greatest stack depth: 19720 bytes left [ 169.586819][T11752] openvswitch: netlink: Unknown key attributes 2 [ 169.590377][ T40] audit: type=1400 audit(1764859657.457:27172): avc: denied { append } for pid=11750 comm="syz.3.1726" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.613203][ T5933] Bluetooth: hci2: command tx timeout [ 169.629379][ T40] audit: type=1400 audit(1764859657.497:27173): avc: denied { create } for pid=11745 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.637849][ T40] audit: type=1400 audit(1764859657.507:27174): avc: denied { write } for pid=11745 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.645415][ T40] audit: type=1400 audit(1764859657.507:27175): avc: denied { ioctl } for pid=11745 comm="syz.2.1724" path="socket:[38885]" dev="sockfs" ino=38885 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.700094][ T40] audit: type=1400 audit(1764859657.567:27176): avc: denied { lock } for pid=11754 comm="syz.3.1727" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 169.709772][T11757] geneve3: entered promiscuous mode [ 169.711641][T11757] geneve3: entered allmulticast mode [ 169.832567][ T40] audit: type=1400 audit(1764859657.697:27177): avc: denied { ioctl } for pid=11764 comm="syz.3.1731" path="socket:[40730]" dev="sockfs" ino=40730 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.861067][T11765] bond_slave_1: left promiscuous mode [ 169.881431][T11765] bridge_slave_0: left allmulticast mode [ 169.883439][T11765] bridge_slave_0: left promiscuous mode [ 169.885467][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.892323][T11765] bridge_slave_1: left allmulticast mode [ 169.894991][T11765] bridge_slave_1: left promiscuous mode [ 169.897669][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.911747][T11765] bond0: (slave bond_slave_1): Releasing backup interface [ 169.928463][T11765] team0: Port device team_slave_1 removed [ 169.932310][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.937563][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.942529][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.947093][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.953741][T11765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.143424][T11775] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1735'. [ 170.171185][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1734'. [ 186.283705][T11791] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1740'. [ 186.286663][T11791] openvswitch: netlink: Flow key attr not present in new flow. [ 186.291224][T11792] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1740'. [ 186.295192][T11792] openvswitch: netlink: Flow key attr not present in new flow. [ 186.357294][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 186.363758][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 186.366789][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 186.374263][ T40] audit: type=1400 audit(1764859674.247:27178): avc: denied { setopt } for pid=11813 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.380628][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 186.390356][T11819] syzkaller0: entered promiscuous mode [ 186.392666][T11819] syzkaller0: entered allmulticast mode [ 186.393533][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 186.472960][T11834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11834 comm=syz.3.1748 [ 186.477389][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 186.516167][ T40] audit: type=1400 audit(1764859674.387:27179): avc: denied { write } for pid=11838 comm="syz.0.1751" name="file0" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.569845][T11849] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 186.609508][ T40] audit: type=1400 audit(1764859674.477:27180): avc: denied { getopt } for pid=11853 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 186.674010][ T40] audit: type=1400 audit(1764859674.537:27181): avc: denied { relabelfrom } for pid=11853 comm="syz.0.1756" name="RDS" dev="sockfs" ino=42029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.695203][T11856] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 186.701676][ T40] audit: type=1400 audit(1764859674.567:27182): avc: denied { relabelto } for pid=11853 comm="syz.0.1756" name="RDS" dev="sockfs" ino=42029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rds_socket permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 186.710232][T11859] overlayfs: missing 'lowerdir' [ 186.862269][ T40] audit: type=1400 audit(1764859674.727:27183): avc: denied { transfer } for pid=11868 comm="syz.4.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.093699][T11874] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1763'. [ 187.133201][ T40] audit: type=1326 audit(1764859675.007:27184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.4.1764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9299f8f7c9 code=0x7ffc0000 [ 187.142028][ T40] audit: type=1326 audit(1764859675.007:27185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.4.1764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9299f8f7c9 code=0x7ffc0000 [ 187.151299][ T40] audit: type=1326 audit(1764859675.007:27186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.4.1764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9299f8f7c9 code=0x7ffc0000 [ 187.161999][ T40] audit: type=1326 audit(1764859675.007:27188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.4.1764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9299f8f7c9 code=0x7ffc0000 [ 187.208821][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 187.211961][T11876] netlink: 'syz.4.1764': attribute type 15 has an invalid length. [ 187.220942][ T7691] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 187.221005][T11876] netlink: 'syz.4.1764': attribute type 15 has an invalid length. [ 187.223950][ T7691] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 187.242938][ T7691] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 187.246404][ T7691] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 187.494438][T11905] bridge0: entered promiscuous mode [ 187.544317][T11910] netlink: 'syz.0.1771': attribute type 32 has an invalid length. [ 187.593533][ T6018] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 187.787675][ T6018] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 187.791370][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 187.801917][ T6018] usb 8-1: Product: syz [ 187.802841][T11938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.803722][ T6018] usb 8-1: Manufacturer: syz [ 187.809680][ T6018] usb 8-1: SerialNumber: syz [ 187.813334][ T6018] usb 8-1: config 0 descriptor?? [ 187.817203][ T6018] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 187.820667][ T6018] dvb-usb: bulk message failed: -22 (2/0) [ 187.826533][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.843462][ T6018] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 187.846999][ T6018] usb 8-1: media controller created [ 187.859336][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.868694][T11940] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 187.883153][T11950] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 188.017501][T11889] cxusb: i2c wr: len=79 is too big! [ 188.017501][T11889] [ 188.047487][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.052463][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.068961][ T6018] cxusb: set interface failed [ 188.070619][ T6018] dvb-usb: bulk message failed: -22 (1/0) [ 188.098387][ T6018] DVB: Unable to find symbol mt352_attach() [ 188.101406][T11970] batman_adv: batadv0: Adding interface: vlan2 [ 188.103620][ T6018] dvb-usb: bulk message failed: -22 (5/0) [ 188.105739][ T6018] zl10353_read_register: readreg error (reg=127, ret==-121) [ 188.108251][ T6018] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 188.110932][T11970] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.119044][T11970] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 188.162803][ T6018] rc_core: IR keymap rc-dvico-mce not found [ 188.164925][ T6018] Registered IR keymap rc-empty [ 188.168313][ T6018] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 188.174424][ T6018] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input30 [ 188.187346][ T6018] dvb-usb: schedule remote query interval to 100 msecs. [ 188.202785][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 188.207984][ T6018] usb 8-1: USB disconnect, device number 13 [ 188.254300][T11977] qnx6: unable to set blocksize [ 188.274839][ T6018] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 188.655167][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.707920][T12015] netlink: 'syz.0.1798': attribute type 5 has an invalid length. [ 188.825553][T12023] xt_hashlimit: invalid rate [ 189.223751][T12050] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 189.228041][T12050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.425538][T12062] vxlan0: entered promiscuous mode [ 189.427296][T12062] vxlan0: entered allmulticast mode [ 189.429402][ T7670] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.432955][ T7691] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.436972][ T7691] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.441165][ T7691] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.535319][T12068] ipvlan1: entered allmulticast mode [ 189.537736][T12068] team0: entered allmulticast mode [ 189.540501][T12068] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 189.668983][T12062] FAT-fs (sr0): bogus number of reserved sectors [ 189.672843][T12062] FAT-fs (sr0): Can't find a valid FAT filesystem [ 189.709885][T12076] program syz.3.1817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.843912][T12087] xt_limit: Overflow, try lower: 271964/0 [ 189.926641][T12101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12101 comm=syz.3.1820 [ 189.931754][T12101] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 189.933892][T12102] dummy0: left promiscuous mode [ 189.947062][T12101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.988873][T12114] program syz.3.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.992514][T12114] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 190.081150][T12127] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 190.085062][T12127] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 190.107276][T12129] gretap0: entered promiscuous mode [ 190.110572][T12129] gretap0: left promiscuous mode [ 190.160316][T12131] gretap0: entered promiscuous mode [ 190.164642][T12131] gretap0: left promiscuous mode [ 190.340688][T12154] random: crng reseeded on system resumption [ 190.658328][T12177] netlink: 'syz.2.1848': attribute type 2 has an invalid length. [ 190.708599][T12179] kAFS: unparsable volume name [ 190.767972][T12182] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.862025][T12195] overlayfs: failed to resolve './file1': -2 [ 190.891917][T12199] sctp: [Deprecated]: syz.0.1856 (pid 12199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.891917][T12199] Use struct sctp_sack_info instead [ 190.899208][T12200] sctp: [Deprecated]: syz.0.1856 (pid 12200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.899208][T12200] Use struct sctp_sack_info instead [ 191.104421][T12221] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 191.245993][T12235] IPv6: sit1: Disabled Multicast RS [ 191.248169][T12235] sit1: entered allmulticast mode [ 191.302270][T12238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12238 comm=syz.2.1867 [ 191.306821][T12238] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 191.360124][T12253] __nla_validate_parse: 24 callbacks suppressed [ 191.360136][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 191.389475][T12256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1874'. [ 191.392590][T12256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1874'. [ 191.403230][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 191.406145][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 191.409401][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 191.412271][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 191.450803][T12259] xfrm0 speed is unknown, defaulting to 1000 [ 191.536432][ T5996] IPVS: starting estimator thread 0... [ 191.540756][T12267] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 191.543200][T12270] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:0 [ 191.599883][T12274] pimreg: entered allmulticast mode [ 191.605568][T12272] pimreg: left allmulticast mode [ 191.632988][T12268] IPVS: using max 45 ests per chain, 108000 per kthread [ 191.719651][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.3.1880 [ 192.073240][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 192.700139][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 192.704207][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 192.743574][T12312] sp0: Synchronizing with TNC [ 192.755389][T12311] [U] è [ 192.849529][T12314] tmpfs: Cannot enable quota on remount [ 192.888026][T12316] random: crng reseeded on system resumption [ 192.950495][T12321] xt_socket: unknown flags 0xd0 [ 192.997883][T12321] xt_cgroup: path and classid specified [ 193.029802][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 193.029813][ T40] audit: type=1326 audit(1764859680.897:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.039867][ T40] audit: type=1326 audit(1764859680.897:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.048799][ T40] audit: type=1326 audit(1764859680.897:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.056520][ T40] audit: type=1326 audit(1764859680.897:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.066223][ T40] audit: type=1326 audit(1764859680.897:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.074540][ T40] audit: type=1326 audit(1764859680.897:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.083120][ T40] audit: type=1326 audit(1764859680.897:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.092788][ T40] audit: type=1326 audit(1764859680.897:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.102422][ T40] audit: type=1326 audit(1764859680.897:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.112824][ T40] audit: type=1326 audit(1764859680.897:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0d98f7c9 code=0x7ff00000 [ 193.290146][ T7692] Bluetooth: hci4: Frame reassembly failed (-84) [ 193.292443][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 194.019776][T12340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12340 comm=syz.4.1900 [ 194.106459][T12348] validate_nla: 2 callbacks suppressed [ 194.106471][T12348] netlink: 'syz.3.1903': attribute type 30 has an invalid length. [ 194.164855][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.193759][T12359] 9pnet_fd: p9_fd_create_unix (12359): problem connecting socket: ./file0: -111 [ 194.596580][T12382] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 194.600647][T12382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.852748][T12340] orangefs_mount: mount request failed with -4 [ 194.890185][T12399] veth1_to_batadv: entered promiscuous mode [ 194.995377][T12405] netlink: 'syz.3.1920': attribute type 2 has an invalid length. [ 195.362893][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 195.366818][ T5933] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 195.457898][T12448] netlink: 'syz.2.1931': attribute type 19 has an invalid length. [ 195.461885][T12448] netlink: 'syz.2.1931': attribute type 19 has an invalid length. [ 195.555884][T12457] dlm: no locking on control device [ 196.058725][T12463] hsr_slave_0: left promiscuous mode [ 196.143630][T12467] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 196.179784][T12467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.184940][T12467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.199395][T12476] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 196.248298][T12482] openvswitch: netlink: Duplicate or invalid key (type 0). [ 196.251443][T12482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.268231][T12467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.271619][T12467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.291370][T12487] batman_adv: batadv0: Removing interface: vlan2 [ 196.305199][T12487] batadv0 (unregistering): left promiscuous mode [ 196.333961][T12467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.337590][T12467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.438229][T12467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.441994][T12467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.534930][ T7670] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.538611][ T7670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.549597][ T7670] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.552392][ T7670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.560786][ T7670] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.564117][ T7670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.571275][ T7670] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.574336][ T7670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.605901][T12493] __nla_validate_parse: 7 callbacks suppressed [ 196.605913][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1947'. [ 196.610877][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 196.647511][T12498] binder_alloc: 12497: pid 12497 spamming oneway? 1 buffers allocated for a total size of 4096 [ 196.717036][T12506] veth0_vlan: left promiscuous mode [ 196.719199][T12506] vlan1: entered promiscuous mode [ 196.720933][T12506] veth0_vlan: entered promiscuous mode [ 196.723898][T12506] vlan1: entered allmulticast mode [ 196.726051][T12506] veth0_vlan: entered allmulticast mode [ 196.745471][T12508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.763574][T12510] netlink: 'syz.3.1953': attribute type 142 has an invalid length. [ 196.772242][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 196.909597][T12519] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 197.000574][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1958'. [ 197.168036][T12533] mmap: syz.2.1961 (12533): VmData 37859328 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 197.237834][T12541] xfrm0 speed is unknown, defaulting to 1000 [ 197.407107][T12556] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 197.411119][T12557] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 197.686951][T12594] overlayfs: failed to resolve './bus': -2 [ 197.715920][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 197.718927][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 197.832197][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1983'. [ 197.837013][T12613] syzkaller1: entered promiscuous mode [ 197.839547][T12613] syzkaller1: entered allmulticast mode [ 198.045440][T12626] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.125286][ T40] kauditd_printk_skb: 30566 callbacks suppressed [ 198.125301][ T40] audit: type=1400 audit(1764859685.997:57884): avc: denied { shutdown } for pid=12632 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.290218][ T40] audit: type=1400 audit(1764859686.157:57885): avc: denied { getopt } for pid=12644 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.290426][T12646] netlink: 'syz.2.1993': attribute type 11 has an invalid length. [ 198.291678][T12649] vivid-001: disconnect [ 198.291914][T12649] vivid-001: reconnect [ 198.297142][T12650] netlink: 'syz.2.1993': attribute type 11 has an invalid length. [ 198.306081][ T40] audit: type=1400 audit(1764859686.157:57886): avc: denied { getopt } for pid=12644 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.346854][T12651] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 198.349400][T12651] PKCS7: Only support pkcs7_signedData type [ 198.467693][ T40] audit: type=1400 audit(1764859686.337:57887): avc: denied { ioctl } for pid=12655 comm="syz.0.1996" path="socket:[43832]" dev="sockfs" ino=43832 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.491876][T12660] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 198.704798][T12676] overlayfs: missing 'lowerdir' [ 198.764240][ T40] audit: type=1400 audit(1764859686.637:57888): avc: denied { ioctl } for pid=12675 comm="syz.2.2001" path="/510/file0/bus/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 198.825498][ T40] audit: type=1800 audit(1764859686.697:57889): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2006" name="nullb0" dev="tmpfs" ino=1486 res=0 errno=0 [ 199.022517][ T40] audit: type=1400 audit(1764859686.887:57890): avc: denied { create } for pid=12710 comm="syz.0.2013" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.029364][ T40] audit: type=1400 audit(1764859686.897:57891): avc: denied { mounton } for pid=12710 comm="syz.0.2013" path="/587/file0" dev="tmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.037995][ T40] audit: type=1400 audit(1764859686.897:57892): avc: denied { read write } for pid=12710 comm="syz.0.2013" name="file0" dev="tmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.046078][ T40] audit: type=1400 audit(1764859686.897:57893): avc: denied { open } for pid=12710 comm="syz.0.2013" path="/587/file0" dev="tmpfs" ino=3150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.146095][T12724] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2018'. [ 199.423789][ T47] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 199.572805][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 199.575970][ T47] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.579157][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.582462][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.585992][ T47] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.590173][ T47] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.593317][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.802407][ T47] usb 8-1: GET_CAPABILITIES returned 0 [ 199.804758][ T47] usbtmc 8-1:16.0: can't read capabilities [ 199.823994][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 199.827081][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. syzkaller syzkaller login: [ 199.973318][T12747] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 199.985014][T12747] bond2: entered promiscuous mode [ 199.986925][T12747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.999189][T12747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.002461][T12747] bond2: (slave bond3): making interface the new active one [ 200.005631][T12747] bond3: entered promiscuous mode [ 200.007700][T12747] bond2: (slave bond3): Enslaving as an active interface with an up link [ 200.016800][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.020308][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.023332][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.026269][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.029210][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.032214][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.035294][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.038172][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.045338][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.046478][T12747] overlayfs: workdir and upperdir must be separate subtrees [ 200.049035][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.054459][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.057446][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.060420][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.064995][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.068265][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.071443][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 200.115735][T12729] new mount options do not match the existing superblock, will be ignored [ 200.120406][ T10] usb 8-1: USB disconnect, device number 14 [ 200.123139][T12759] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 200.432292][T12768] xt_connbytes: Forcing CT accounting to be enabled [ 200.833704][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.854182][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.860420][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.866992][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.870032][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.682872][T12806] misc userio: Can't change port type on an already running userio instance [ 201.977619][T12792] xfrm0 speed is unknown, defaulting to 1000 [ 202.015742][T12817] : renamed from bridge_slave_0 (while UP) [ 202.116047][T12826] __nla_validate_parse: 128 callbacks suppressed [ 202.116063][T12826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2044'. [ 202.133061][T12827] xt_ecn: cannot match TCP bits for non-tcp packets [ 202.138343][T12826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2044'. [ 202.230324][T12792] chnl_net:caif_netlink_parms(): no params data found [ 202.341525][T12856] syzkaller0: entered promiscuous mode [ 202.343576][T12856] syzkaller0: entered allmulticast mode [ 202.360423][T12792] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.363772][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.366944][T12792] bridge_slave_0: entered allmulticast mode [ 202.370877][T12792] bridge_slave_0: entered promiscuous mode [ 202.379639][T12862] overlayfs: failed to resolve './file0': -2 [ 202.399511][T12792] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.403061][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.406619][T12792] bridge_slave_1: entered allmulticast mode [ 202.411382][T12792] bridge_slave_1: entered promiscuous mode [ 202.448862][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.455448][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.474590][T12792] team0: Port device team_slave_0 added [ 202.478086][T12792] team0: Port device team_slave_1 added [ 202.490512][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.492936][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.501260][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.505917][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.508334][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.518942][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.540616][T12792] hsr_slave_0: entered promiscuous mode [ 202.543049][T12792] hsr_slave_1: entered promiscuous mode [ 202.545622][T12792] debugfs: 'hsr0' already exists in 'hsr' [ 202.547526][T12792] Cannot create hsr debugfs directory [ 202.618128][T12792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.655688][T12879] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2058'. [ 202.658671][T12879] nbd: couldn't find a device at index -256 [ 202.731562][T12884] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 202.735822][T12792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.778185][T12888] xfrm0 speed is unknown, defaulting to 1000 [ 202.826578][T12792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.916658][T12893] comedi comedi3: comedi_test: 3879 microvolt, 2147483645 microsecond waveform attached [ 202.918146][T12887] xfrm0 speed is unknown, defaulting to 1000 [ 202.936359][T12792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.963042][ T5933] Bluetooth: hci4: command tx timeout [ 203.155410][T12792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.165737][T12792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.169874][T12792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.177633][T12792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.199259][T12913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2065'. [ 203.217969][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.227700][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.244899][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.247535][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.261000][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.263498][ T7698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.266258][T12921] program syz.2.2068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.271922][T12921] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 203.287242][T12921] program syz.2.2068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.419561][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 203.421456][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.441090][T12938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 203.449227][T12938] overlayfs: failed to set xattr on upper [ 203.453221][T12938] overlayfs: ...falling back to redirect_dir=nofollow. [ 203.455432][T12938] overlayfs: ...falling back to metacopy=off. [ 203.457345][T12938] overlayfs: ...falling back to index=off. [ 203.459212][T12938] overlayfs: ...falling back to uuid=null. [ 203.464449][T12792] veth0_vlan: entered promiscuous mode [ 203.470734][T12792] veth1_vlan: entered promiscuous mode [ 203.493719][T12792] veth0_macvtap: entered promiscuous mode [ 203.498178][T12792] veth1_macvtap: entered promiscuous mode [ 203.509564][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.519856][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.541704][ T7692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.545198][ T7692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.551680][ T7692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.555315][ T7670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.589494][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.592159][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.607817][ T7698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.610479][ T7698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.614255][T12952] netlink: 'syz.4.2076': attribute type 5 has an invalid length. [ 203.621146][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 203.621155][ T40] audit: type=1400 audit(1764859691.487:57910): avc: denied { mounton } for pid=12792 comm="syz-executor" path="/syzkaller.KmosMP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.694753][T12967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.711839][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 203.715147][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 203.757742][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 203.773910][ T6018] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 203.798312][T12981] netlink: 'syz.3.2084': attribute type 12 has an invalid length. [ 203.801034][T12981] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2084'. [ 203.924837][ T6018] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 203.927663][ T6018] usb 7-1: config 0 has no interface number 0 [ 203.929879][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.933906][ T6018] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 203.937482][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 203.941380][ T6018] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 203.951584][ T6018] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 203.958346][ T6018] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.962861][ T6018] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 203.965923][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.969936][ T6018] usb 7-1: config 0 descriptor?? [ 203.974105][T12945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.976664][T12945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.981678][ T6018] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 203.988288][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2089'. [ 204.065683][T13007] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.082403][T13007] set_tsc_khz: 55 callbacks suppressed [ 204.082413][T13007] kvm: user requested TSC rate below hardware speed [ 204.251465][ T6018] usb 7-1: USB disconnect, device number 14 [ 204.259916][ T6018] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 204.371624][T13016] tipc: Can't bind to reserved service type 2 [ 204.383891][ T40] audit: type=1400 audit(1764859692.257:57911): avc: denied { watch watch_reads } for pid=13015 comm="syz.2.2094" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 204.517468][T13021] netlink: 'syz.2.2095': attribute type 9 has an invalid length. [ 204.612049][ T40] audit: type=1400 audit(1764859692.477:57912): avc: denied { listen } for pid=13024 comm="syz.2.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.621483][ T40] audit: type=1400 audit(1764859692.497:57913): avc: denied { accept } for pid=13024 comm="syz.2.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.775136][T13040] sctp: [Deprecated]: syz.0.2101 (pid 13040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.775136][T13040] Use struct sctp_sack_info instead [ 204.785972][ T40] audit: type=1400 audit(1764859692.657:57914): avc: denied { mounton } for pid=13038 comm="syz.0.2101" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 204.792962][T13040] overlay: filesystem on ./bus is read-only [ 205.014106][ T40] audit: type=1400 audit(1764859692.887:57915): avc: denied { append } for pid=13056 comm="syz.0.2107" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.050059][T13060] bridge_slave_0: left allmulticast mode [ 205.052033][T13060] bridge_slave_0: left promiscuous mode [ 205.054006][ T5933] Bluetooth: hci4: command tx timeout [ 205.054780][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.061114][T13060] bridge_slave_1: left allmulticast mode [ 205.065970][T13060] bridge_slave_1: left promiscuous mode [ 205.068187][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.075971][T13055] cgroup2: Unknown parameter 'rlimit' [ 205.078712][T13060] bond0: (slave bond_slave_0): Releasing backup interface [ 205.096117][T13060] bond0: (slave bond_slave_1): Releasing backup interface [ 205.108683][T13060] team0: Port device team_slave_0 removed [ 205.115976][T13060] team0: Port device team_slave_1 removed [ 205.118781][T13060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.121382][T13060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.127882][T13060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.130846][T13060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.136235][T13060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.274202][ T40] audit: type=1400 audit(1764859693.147:57916): avc: denied { lock } for pid=13075 comm="syz.3.2114" path="socket:[49244]" dev="sockfs" ino=49244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 205.286198][ T40] audit: type=1400 audit(1764859693.147:57917): avc: denied { accept } for pid=13075 comm="syz.3.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.432880][T10031] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 205.475706][T13082] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 205.583984][T10031] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.592347][T10031] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.602464][T10031] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.606160][T10031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.611739][T13072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.620818][T10031] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.821946][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.827153][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.052318][ T6018] usb 5-1: USB disconnect, device number 13 [ 206.342476][T13136] tipc: Started in network mode [ 206.344308][T13136] tipc: Node identity ff010000000000000000000000000001, cluster identity 3865 [ 206.347261][T13136] tipc: Enabling of bearer rejected, failed to enable media [ 206.351306][ T40] audit: type=1400 audit(1764859694.217:57918): avc: denied { create } for pid=13135 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.611080][T13142] fuse: Unknown parameter 'fŽ' [ 206.627631][ T40] audit: type=1400 audit(1764859694.497:57919): avc: denied { mount } for pid=13141 comm="syz.2.2133" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 206.739337][T13157] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.739921][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41069 sclass=netlink_route_socket pid=13158 comm=syz.2.2138 [ 206.789888][T13165] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 206.805289][T13162] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 206.859753][T13166] usb usb8: usbfs: process 13166 (syz.4.2137) did not claim interface 0 before use [ 206.864619][T13166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13166 comm=syz.4.2137 [ 207.122813][ T5933] Bluetooth: hci4: command tx timeout [ 207.214955][T13185] bond4: Removing last ns target with arp_interval on [ 207.219371][T13185] netlink: 'syz.2.2144': attribute type 21 has an invalid length. [ 207.222664][T13185] __nla_validate_parse: 6 callbacks suppressed [ 207.222674][T13185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2144'. [ 207.299802][T13193] Mount JFS Failure: -5 [ 207.303131][T13193] jfs_mount failed w/return code = -5 [ 207.410807][T13190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.415094][T13190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.431164][T13190] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.437339][T13190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.440141][T13190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.446987][T13190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.536109][T13210] xt_connbytes: Forcing CT accounting to be enabled [ 207.539320][T13210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.575201][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2155'. [ 207.581596][T13217] xfrm1: entered promiscuous mode [ 207.584992][T13217] xfrm1: entered allmulticast mode [ 207.600172][T13217] loop2: detected capacity change from 0 to 7 [ 207.608837][T13217] Dev loop2: unable to read RDB block 7 [ 207.611122][T13217] loop2: AHDI p1 p2 p3 [ 207.615613][T13217] loop2: partition table partially beyond EOD, truncated [ 207.619191][T13217] loop2: p1 start 1601398130 is beyond EOD, truncated [ 207.622046][T13217] loop2: p2 start 1702059890 is beyond EOD, truncated [ 207.666487][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 207.741476][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 207.767185][T13238] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 207.769912][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 207.792994][ T5996] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 207.830971][T13247] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.895303][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 207.929651][T13263] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 207.945186][T13263] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 207.955378][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.960290][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 207.965172][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 207.989304][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 207.993235][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.000454][ T5996] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 208.008766][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.011805][ T5996] usb 5-1: Product: syz [ 208.014448][ T5996] usb 5-1: Manufacturer: syz [ 208.016672][ T5996] usb 5-1: SerialNumber: syz [ 208.020037][ T5996] usb 5-1: config 0 descriptor?? [ 208.026245][ T5996] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input32 [ 208.039560][ T5996] input: failed to attach handler mousedev to device input32, error: -5 [ 208.109295][T13277] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2171'. [ 208.113852][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 208.227360][ T5940] usb 5-1: USB disconnect, device number 14 [ 208.554977][T13287] sg_read: process 1611 (syz.3.2176) changed security contexts after opening file descriptor, this is not allowed. [ 208.754051][T13293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13293 comm=syz.3.2178 [ 208.773111][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 208.773123][ T40] audit: type=1400 audit(1764859696.647:57926): avc: denied { create } for pid=13294 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.773533][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 208.783783][ T40] audit: type=1400 audit(1764859696.657:57927): avc: denied { setopt } for pid=13294 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.792375][ T40] audit: type=1400 audit(1764859696.657:57928): avc: denied { ioctl } for pid=13294 comm="syz.0.2179" path="socket:[50358]" dev="sockfs" ino=50358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 208.889317][T13295] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 208.934462][ T40] audit: type=1400 audit(1764859696.807:57929): avc: denied { accept } for pid=13307 comm="syz.0.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.983500][T13312] binder: 13311:13312 ioctl 40046205 0 returned -22 [ 209.055406][T13321] PKCS8: Unsupported PKCS#8 version [ 209.096902][ T40] audit: type=1804 audit(1764859696.967:57930): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2190" name="/newroot/101/bus" dev="tmpfs" ino=548 res=1 errno=0 [ 209.103812][T13332] syzkaller1: entered promiscuous mode [ 209.106528][T13332] syzkaller1: entered allmulticast mode [ 209.113552][T13330] sctp: [Deprecated]: syz.3.2191 (pid 13330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.113552][T13330] Use struct sctp_sack_info instead [ 209.227568][ T40] audit: type=1400 audit(1764859697.097:57931): avc: denied { append } for pid=13342 comm="syz.4.2196" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.329424][T13352] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 209.329625][T13353] netlink: 'syz.4.2199': attribute type 13 has an invalid length. [ 209.362808][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.373587][T13353] gretap0: refused to change device tx_queue_len [ 209.378355][T13353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.412048][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 209.413598][ T40] audit: type=1400 audit(1764859697.287:57932): avc: denied { write } for pid=13361 comm="syz.4.2201" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.443113][ T5933] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.952948][T10031] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 210.090127][T13392] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 210.092834][T10031] usb 5-1: device descriptor read/64, error -71 [ 210.100319][T13392] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 210.108936][ T40] audit: type=1400 audit(1764859697.977:57933): avc: denied { accept } for pid=13388 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.109236][T13389] QAT: failed to copy from user cfg_data. [ 210.197595][T13397] input: syz1 as /devices/virtual/input/input33 [ 210.227766][ T40] audit: type=1400 audit(1764859698.097:57934): avc: denied { create } for pid=13398 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 210.362854][T10031] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 210.368082][T13405] bond5: entered promiscuous mode [ 210.407279][T13413] vetè0_virt_wif: renamed from lo (while UP) [ 210.492902][T10031] usb 5-1: device descriptor read/64, error -71 [ 210.603124][T10031] usb usb5-port1: attempt power cycle [ 210.801254][ C0] hrtimer: interrupt took 122359 ns [ 210.829986][ T40] audit: type=1400 audit(1764859698.697:57935): avc: denied { listen } for pid=13439 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.963803][T10031] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 210.983613][T13458] ptrace attach of "/syz-executor exec"[5930] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 210.984419][T10031] usb 5-1: device descriptor read/8, error -71 [ 211.047740][T13463] SELinux: ebitmap: empty map [ 211.051375][T13463] SELinux: failed to load policy [ 211.054105][T13463] snd_dummy snd_dummy.0: control 4:0:0:syz1:0 is already present [ 211.190696][T13474] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 211.196696][T13474] vivid-007: ================= START STATUS ================= [ 211.199460][T13474] vivid-007: Generate PTS: true [ 211.201486][T13474] vivid-007: Generate SCR: true [ 211.204051][T13474] tpg source WxH: 320x240 (Y'CbCr) [ 211.205792][T13474] tpg field: 1 [ 211.206948][T13474] tpg crop: (0,0)/320x240 [ 211.208410][T13474] tpg compose: (0,0)/320x240 [ 211.209996][T13474] tpg colorspace: 8 [ 211.211333][T13474] tpg transfer function: 0/0 [ 211.213152][T13474] tpg Y'CbCr encoding: 0/0 [ 211.214726][T13474] tpg quantization: 0/0 [ 211.216201][T13474] tpg RGB range: 0/2 [ 211.217524][T13474] vivid-007: ================== END STATUS ================== [ 211.274494][T10031] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 211.293835][T10031] usb 5-1: device descriptor read/8, error -71 [ 211.408636][T10031] usb usb5-port1: unable to enumerate USB device [ 211.442968][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.522855][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 211.532889][ T5933] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.672801][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 211.676510][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.681473][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.685690][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.691215][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 211.695520][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.701136][ T29] usb 7-1: config 0 descriptor?? [ 212.114546][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 212.136131][ T29] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 212.139369][ T29] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 212.407252][T13476] random: crng reseeded on system resumption [ 212.423643][ T54] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 212.427683][ T6029] usb 7-1: USB disconnect, device number 15 [ 212.429293][ T54] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 212.434612][T13491] __nla_validate_parse: 6 callbacks suppressed [ 212.434623][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 212.435152][ T54] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 212.491071][T13495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2243'. [ 212.662258][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 212.784660][T13505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13505 comm=syz.4.2247 [ 212.958088][T13536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2254'. [ 212.958236][T13536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2254'. [ 213.251035][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 213.410742][T13563] fuse: Bad value for 'group_id' [ 213.413445][T13563] fuse: Bad value for 'group_id' [ 213.471477][T13565] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2265'. [ 213.474946][T13565] openvswitch: netlink: Message has 6 unknown bytes. [ 213.522852][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.612987][ T5933] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.882244][T13573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2269'. [ 213.932472][T13577] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2271'. [ 213.937144][T13577] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2271'. [ 213.999385][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 213.999396][ T40] audit: type=1400 audit(1764859701.867:57939): avc: denied { read } for pid=13581 comm="syz.3.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 214.001283][T13582] 9p: Unknown access argument 00000000004294967295-ç: -22 [ 214.204790][T13590] 9pnet_fd: p9_fd_create_unix (13590): problem connecting socket: ./file0: -111 [ 214.208131][T13592] Cannot find del_set index 4 as target [ 214.459963][T13611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=51898 sclass=netlink_audit_socket pid=13611 comm=syz.2.2283 [ 214.493009][T13616] program syz.2.2284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.493809][T13617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.498218][T13617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.538953][T13620] No such timeout policy "syz1" [ 214.820621][T13658] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 214.981528][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.986616][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.990796][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.994764][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.998475][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.024846][T13664] xfrm0 speed is unknown, defaulting to 1000 [ 215.184387][T13664] chnl_net:caif_netlink_parms(): no params data found [ 215.211801][ T1157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.220504][ T1157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.315457][ T1157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.319776][ T1157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.331564][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.334908][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.338119][T13664] bridge_slave_0: entered allmulticast mode [ 215.341973][T13664] bridge_slave_0: entered promiscuous mode [ 215.346059][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.348513][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.350981][T13664] bridge_slave_1: entered allmulticast mode [ 215.353820][T13664] bridge_slave_1: entered promiscuous mode [ 215.374131][T13664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.379494][T13664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.396261][T13664] team0: Port device team_slave_0 added [ 215.415703][ T1157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.420931][ T1157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.431085][T13664] team0: Port device team_slave_1 added [ 215.446087][T13664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.448383][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.456817][T13664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.461264][T13664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.463667][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.471922][T13664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.482544][ T1157] bond0: (slave netdevsim0): Releasing backup interface [ 215.486930][ T1157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.490379][ T1157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.513302][T13664] hsr_slave_0: entered promiscuous mode [ 215.516638][T13664] hsr_slave_1: entered promiscuous mode [ 215.519712][T13664] debugfs: 'hsr0' already exists in 'hsr' [ 215.522240][T13664] Cannot create hsr debugfs directory [ 215.879076][ T7678] smc: removing ib device syz1 [ 217.002590][ T1157] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 217.006510][ T1157] bond0 (unregistering): Released all slaves [ 217.010955][ T1157] bond1 (unregistering): Released all slaves [ 217.054242][ T5933] Bluetooth: hci1: command tx timeout [ 217.092353][ T1157] bond2 (unregistering): (slave bond3): Releasing backup interface [ 217.098476][ T1157] bond3 (unregistering): left promiscuous mode [ 217.100983][ T1157] bond2 (unregistering): Released all slaves [ 217.174779][ T1157] bond3 (unregistering): Released all slaves [ 217.181544][ T1157] bond4 (unregistering): Released all slaves [ 217.188424][ T1157] bond5 (unregistering): Released all slaves [ 217.196240][T10032] xfrm0 speed is unknown, defaulting to 1000 [ 217.198810][T10032] syz1: Port: 1 Link DOWN [ 217.345459][ T1157] !: left promiscuous mode [ 217.415975][ T40] audit: type=1400 audit(1764859705.287:57940): avc: denied { bind } for pid=13690 comm="syz.3.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.467704][ T1157] : left promiscuous mode [ 217.529115][T13702] netlink: zone id is out of range [ 217.569344][T13702] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.572403][ T1157] tipc: Left network mode [ 217.771646][T13664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.799693][T13722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.802153][T13722] IPv6: NLM_F_CREATE should be set when creating new route [ 217.804623][T13722] IPv6: NLM_F_CREATE should be set when creating new route [ 217.807112][T13722] IPv6: NLM_F_CREATE should be set when creating new route [ 217.811692][T13722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.815008][T13664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.823590][T13664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.831188][T13664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.931636][T13664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.971288][T13664] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.980460][T13740] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 217.990771][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.993160][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.001401][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.003869][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.027332][ T1157] hsr_slave_0: left promiscuous mode [ 218.031260][ T1157] hsr_slave_1: left promiscuous mode [ 218.045750][ T1157] veth1_macvtap: left allmulticast mode [ 218.048455][ T1157] veth1_macvtap: left promiscuous mode [ 218.051215][ T1157] veth0_macvtap: left promiscuous mode [ 218.068301][ T40] audit: type=1400 audit(1764859705.937:57941): avc: denied { setattr } for pid=13746 comm="syz.3.2316" name="PPPOL2TP" dev="sockfs" ino=53407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.117648][ T40] audit: type=1800 audit(1764859705.987:57942): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.2316" name="/" dev="sockfs" ino=53407 res=0 errno=0 [ 218.233903][T13754] __nla_validate_parse: 6 callbacks suppressed [ 218.233920][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 218.246773][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 218.638564][T13664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.689461][T13664] veth0_vlan: entered promiscuous mode [ 218.694727][T13664] veth1_vlan: entered promiscuous mode [ 218.713879][T13664] veth0_macvtap: entered promiscuous mode [ 218.717716][T13664] veth1_macvtap: entered promiscuous mode [ 218.726307][T13664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.733227][T13664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.748370][ T7670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.751908][ T7670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.761519][ T7670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.765704][ T7670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.821539][ T7700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.828810][ T7700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.840950][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.843845][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.921295][ T1157] IPVS: stop unused estimator thread 0... [ 218.978664][ T40] audit: type=1400 audit(1764859706.847:57943): avc: denied { create } for pid=13784 comm="syz.2.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 219.123189][ T5933] Bluetooth: hci1: command tx timeout [ 219.234337][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 219.453837][T13809] ipt_ECN: cannot use operation on non-tcp rule [ 219.525413][ T40] audit: type=1400 audit(1764859707.397:57944): avc: denied { write } for pid=13813 comm="syz.4.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.611175][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.616980][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.620248][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.624841][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.627533][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.674980][T13828] kvm: kvm [13827]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 219.745580][T13823] chnl_net:caif_netlink_parms(): no params data found [ 219.804586][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.807450][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.809858][T13823] bridge_slave_0: entered allmulticast mode [ 219.812686][T13823] bridge_slave_0: entered promiscuous mode [ 219.818125][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.821080][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.823597][T13823] bridge_slave_1: entered allmulticast mode [ 219.828637][T13823] bridge_slave_1: entered promiscuous mode [ 219.845420][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.850513][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.866807][T13823] team0: Port device team_slave_0 added [ 219.870155][T13823] team0: Port device team_slave_1 added [ 219.883178][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.885491][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.894146][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.899191][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.901484][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.910049][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.935004][T13823] hsr_slave_0: entered promiscuous mode [ 219.937377][T13823] hsr_slave_1: entered promiscuous mode [ 219.939577][T13823] debugfs: 'hsr0' already exists in 'hsr' [ 219.941560][T13823] Cannot create hsr debugfs directory [ 220.005451][T13823] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.008872][T13823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.091943][T13823] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.092875][ T29] usb 7-1: device descriptor read/64, error -71 [ 220.095312][T13823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.156275][T13823] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.159623][T13823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.235652][T13823] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.238872][T13823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.342976][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 220.350437][T13823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.355266][T13823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.360019][T13823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.364616][T13823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.386184][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.389420][T13823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.392971][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.396045][T13823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.431095][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.440337][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.445323][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.453640][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.461555][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.465165][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.473723][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.476306][ T7698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.502916][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 220.506569][ T29] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 220.509260][ T29] usb 7-1: config 0 has no interface number 0 [ 220.511423][ T29] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.517567][ T29] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 220.521155][ T29] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 220.524050][ T29] usb 7-1: Product: syz [ 220.525609][ T29] usb 7-1: SerialNumber: syz [ 220.528892][ T29] usb 7-1: config 0 descriptor?? [ 220.537964][ T29] cm109 7-1:0.8: invalid payload size 149, expected 4 [ 220.541304][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input35 [ 220.628282][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.652174][T13823] veth0_vlan: entered promiscuous mode [ 220.659025][T13823] veth1_vlan: entered promiscuous mode [ 220.673534][T13823] veth0_macvtap: entered promiscuous mode [ 220.677490][T13823] veth1_macvtap: entered promiscuous mode [ 220.688040][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.697274][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.708487][ T7698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.712257][ T7698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.716846][ T7698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.720263][ T7698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.794968][T13856] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2342'. [ 220.798879][T13856] bridge_slave_1: left allmulticast mode [ 220.800835][T13856] bridge_slave_1: left promiscuous mode [ 220.803387][T13856] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.807920][T13856] : left allmulticast mode [ 220.809500][T13856] : left promiscuous mode [ 220.811405][T13856] bridge0: port 1() entered disabled state [ 220.916237][ T7670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.919611][ T7670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.940730][ T7700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.944108][ T7700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.980641][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 220.983000][ C1] ------------[ cut here ]------------ [ 220.985085][ C1] URB ffff888034eb9200 submitted while active [ 220.987132][ C1] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#1: ksoftirqd/1/28 [ 220.989764][ C1] Modules linked in: [ 220.991325][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 220.994444][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.998377][ C1] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 221.000443][ C1] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 67 14 b5 fa 48 8d 3d f0 a4 88 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 49 14 b5 fa 0f 1f [ 221.006759][ C1] RSP: 0018:ffffc90000677850 EFLAGS: 00010046 [ 221.008804][ C1] RAX: 0000000000000000 RBX: ffff888034eb9200 RCX: ffffffff87917e34 [ 221.011440][ C1] RDX: ffff88801e284980 RSI: ffff888034eb9200 RDI: ffffffff90919530 [ 221.014089][ C1] RBP: ffff88802ae99058 R08: 0000000000000001 R09: 0000000000000000 [ 221.016741][ C1] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 221.019339][ C1] R13: ffff88802ae99057 R14: ffff888032857280 R15: 000000000000000f [ 221.022228][ C1] FS: 0000000000000000(0000) GS:ffff8880d6a83000(0000) knlGS:0000000000000000 [ 221.025405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.028133][ C1] CR2: 00007ffefe14d840 CR3: 0000000036aee000 CR4: 0000000000352ef0 [ 221.031264][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000381c [ 221.034071][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 221.036726][ C1] Call Trace: [ 221.037858][ C1] [ 221.038863][ C1] ? find_held_lock+0x2b/0x80 [ 221.040465][ C1] ? __pfx____ratelimit+0x10/0x10 [ 221.042162][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 221.042910][ T40] audit: type=1400 audit(1764859708.907:57945): avc: denied { getopt } for pid=13857 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 221.044058][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 221.054110][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 221.055916][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 221.057635][ C1] dummy_timer+0x1809/0x3a00 [ 221.059210][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 221.060904][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.062815][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.064794][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.066682][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 221.068691][ C1] ? __lock_acquire+0x433/0x22f0 [ 221.070356][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.072045][ C1] ? rcu_is_watching+0x12/0xc0 [ 221.073655][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.075648][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.077299][ C1] __hrtimer_run_queues+0x202/0xc40 [ 221.079039][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 221.080948][ C1] ? read_tsc+0x9/0x20 [ 221.082336][ C1] hrtimer_run_softirq+0x17d/0x350 [ 221.084096][ C1] handle_softirqs+0x219/0x8b0 [ 221.085929][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 221.088151][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 221.090387][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 221.092542][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 221.094679][ C1] run_ksoftirqd+0x3a/0x60 [ 221.096610][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 221.098684][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.100625][ C1] kthread+0x3c5/0x780 [ 221.102005][ C1] ? __pfx_kthread+0x10/0x10 [ 221.103595][ C1] ? rcu_is_watching+0x12/0xc0 [ 221.105206][ C1] ? __pfx_kthread+0x10/0x10 [ 221.106767][ C1] ret_from_fork+0x983/0xb10 [ 221.108185][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 221.109678][ C1] ? __switch_to+0x7af/0x10d0 [ 221.111068][ C1] ? __pfx_kthread+0x10/0x10 [ 221.112636][ C1] ret_from_fork_asm+0x1a/0x30 [ 221.114247][ C1] [ 221.115343][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.117766][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 221.120802][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.124377][ C1] Call Trace: [ 221.125525][ C1] [ 221.126595][ C1] dump_stack_lvl+0x3d/0x1f0 [ 221.128182][ C1] vpanic+0x640/0x6f0 [ 221.129545][ C1] panic+0xca/0xd0 [ 221.130825][ C1] ? __pfx_panic+0x10/0x10 [ 221.132358][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 221.134091][ C1] check_panic_on_warn+0xab/0xb0 [ 221.135789][ C1] __warn+0x108/0x3c0 [ 221.137150][ C1] __report_bug+0x2a0/0x520 [ 221.138680][ C1] ? __pfx___report_bug+0x10/0x10 [ 221.140390][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 221.142166][ C1] ? cm109_urb_irq_callback+0x1f4/0xb80 [ 221.144025][ C1] report_bug_entry+0xb2/0x220 [ 221.145641][ C1] ? usb_submit_urb+0x15a3/0x1920 [ 221.147346][ C1] handle_bug+0x18a/0x260 [ 221.148803][ C1] exc_invalid_op+0x17/0x50 [ 221.150337][ C1] asm_exc_invalid_op+0x1a/0x20 [ 221.152013][ C1] RIP: 0010:usb_submit_urb+0x15a3/0x1920 [ 221.153887][ C1] Code: 7c 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 67 14 b5 fa 48 8d 3d f0 a4 88 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 49 14 b5 fa 0f 1f [ 221.161604][ C1] RSP: 0018:ffffc90000677850 EFLAGS: 00010046 [ 221.164133][ C1] RAX: 0000000000000000 RBX: ffff888034eb9200 RCX: ffffffff87917e34 [ 221.167406][ C1] RDX: ffff88801e284980 RSI: ffff888034eb9200 RDI: ffffffff90919530 [ 221.170700][ C1] RBP: ffff88802ae99058 R08: 0000000000000001 R09: 0000000000000000 [ 221.173978][ C1] R10: 0000000000000001 R11: 00000000ffffffff R12: 0000000000000001 [ 221.177272][ C1] R13: ffff88802ae99057 R14: ffff888032857280 R15: 000000000000000f [ 221.180556][ C1] ? cm109_urb_irq_callback+0x1f4/0xb80 [ 221.182865][ C1] ? find_held_lock+0x2b/0x80 [ 221.184957][ C1] ? __pfx____ratelimit+0x10/0x10 [ 221.187094][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 221.189370][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 221.191495][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 221.193754][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 221.195951][ C1] dummy_timer+0x1809/0x3a00 [ 221.197884][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 221.200006][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.202348][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.204781][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 221.207128][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 221.209629][ C1] ? __lock_acquire+0x433/0x22f0 [ 221.211701][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.213767][ C1] ? rcu_is_watching+0x12/0xc0 [ 221.215622][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.217621][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.219276][ C1] __hrtimer_run_queues+0x202/0xc40 [ 221.220975][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 221.222858][ C1] ? read_tsc+0x9/0x20 [ 221.224260][ C1] hrtimer_run_softirq+0x17d/0x350 [ 221.225978][ C1] handle_softirqs+0x219/0x8b0 [ 221.227604][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 221.229353][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 221.231144][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 221.232854][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 221.234571][ C1] run_ksoftirqd+0x3a/0x60 [ 221.236137][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 221.237922][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.239748][ C1] kthread+0x3c5/0x780 [ 221.241115][ C1] ? __pfx_kthread+0x10/0x10 [ 221.242661][ C1] ? rcu_is_watching+0x12/0xc0 [ 221.244289][ C1] ? __pfx_kthread+0x10/0x10 [ 221.245855][ C1] ret_from_fork+0x983/0xb10 [ 221.247437][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 221.249195][ C1] ? __switch_to+0x7af/0x10d0 [ 221.250790][ C1] ? __pfx_kthread+0x10/0x10 [ 221.252371][ C1] ret_from_fork_asm+0x1a/0x30 [ 221.254002][ C1] [ 221.255770][ C1] Kernel Offset: disabled [ 221.257241][ C1] Rebooting in 86400 seconds..