last executing test programs: 58.487950126s ago: executing program 1 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @loopback}, 0x41, 0x0, 0x0, 0x0, 0xb, 0x0, 0x200, 0x4, 0x7}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500090000000000189a680010000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="e7d08b35e9dfb19504226dd84755435f343aa0b0cc62b9b36c0b401202a7b2f108e624466e738bde52f73eb853ba86d0e149949fb1fceac008e7d9a06fbf7541a1d66343d658eb5656f134958c640c46549e25fe7759796fea5f6344969d8ad7c064c63f0d10be171389e7c9aa571f9248dc11f67e5e15a57f6d9ec40e2ea63e23c97d6e1de6829b0e81f61382cbfea203301689dc427507085e73947c0897e3ef6d33b46b1a2c", @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x151000, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000080)=0xe4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) 58.367300958s ago: executing program 1 (id=1434): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x2ee, &(0x7f00000002c0)={@random="030032b78c05", @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x6}], @ipv6=@gre_packet={0x8, 0x6, "e6cede", 0x2ac, 0x2f, 0x0, @remote, @remote, {[@fragment={0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x64}, @srh={0xbc, 0xc, 0x4, 0x6, 0x7, 0x30, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x21, 0xa, 0x4, 0x5, 0x1, 0x68, 0x1, [@empty, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x11}]}, @fragment={0x2f, 0x0, 0x1, 0x0, 0x0, 0xf, 0x65}, @hopopts={0x2c, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0xe, "b3a6d03f968dcadcfc993f63c0d2"}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5b, 0x1, [0x82, 0x6c], "85e7668ea717c2e7f342eb325386899a5168c74f7fc3446ce44c91d204b7bb678cf1c6f0efc84a00450aa7d09b2279f6a2c743c30c928515d2d45f059a17b9292d1d6d96317425763b91fd308061b827c1a3e6032d29835589193e"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xf50e, 0x100], "dbc94d0a861efe370d87b4b4435bb60a820598c3de1acb9c2c8e25cc307f0516f68974d20cc195a1cdbd388f94090c9ff62a1bfcdb8c1b2d0dd600f26722b12046e25de80479dfbe48da8b5a95c5cb06c4b551c5f4961a1ff19b366468f2adfb0499f5fdb2198caf116ae15c0a807fdc64b1b39c88389ec2f2c11104b4d93d3592"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x2, 0x3], "8857926f42f790e9aff43ea3da1994a5d435bd147011c58df9dea033fd86865f14d3831dde26aa1144407391436fd4100cbf7b88938c36bdb1b90c146c0649e01de918bd148964615dd0bbc2630685eac3273ee5d3161c9d36ddcbb2"}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x2, 0xf}, 0x2, {0x3, 0x6, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "fc2ce767ca416cd4b89aba3605d6d4f06d4d7b2175a8924162511c1b8954eb28bdb2"}}}}}}}}, 0x0) syz_emit_ethernet(0xfc8, &(0x7f0000001b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xfa6, 0x0, @opaque="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"}}}}}, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r0, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000680)={{0x4, 0x1, 0x9, 0x2, '\x00', 0x4}, 0x1, [0x7f, 0x3, 0x7fffffff, 0x7, 0x0, 0x1ff, 0x9, 0xfffffffffffffffc, 0x5, 0x8, 0x4, 0x8, 0x3, 0x6, 0xb, 0x4ff, 0x0, 0x0, 0x95d, 0x4, 0xc8, 0xfffffffffffffff5, 0x3, 0x8, 0x9, 0x8001, 0x2, 0xcc, 0x40, 0x6, 0xe17f, 0x7, 0x100000001, 0x0, 0x7, 0x8000000000000000, 0x4, 0xff, 0x9, 0x800, 0x2, 0xffff, 0x6, 0x0, 0x8, 0x4, 0xfff, 0x400, 0x0, 0x1, 0x0, 0x10, 0x32, 0x9, 0xffffffffffffffff, 0x9, 0x100000001, 0x6, 0x100000001, 0x10001, 0x6, 0x6000000, 0x3, 0x1ff, 0x53d, 0x5, 0xa, 0x49, 0x1, 0x9, 0x0, 0x1, 0x2b9, 0xf, 0x3, 0x9, 0x9, 0x2, 0x5, 0x3, 0xfffffffffffffffc, 0xff, 0x6, 0x80, 0xb, 0x7, 0x3, 0x708, 0x3, 0xff, 0xc, 0xffffffff, 0x7, 0x6, 0x40, 0x4, 0x5, 0x9, 0x2, 0x6, 0x9, 0x44b86ee2, 0x1, 0x0, 0x7, 0xfff, 0x6, 0x0, 0x9, 0x8, 0x5, 0x4, 0x0, 0x5, 0x3, 0x1dc7, 0x0, 0x2, 0xc83, 0x2, 0x32b, 0x80000001, 0xfff, 0x1, 0xabb7, 0x8ed, 0xff, 0x9]}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8402, 0x1, 0x1}, 0x18, 0x0) ptrace(0x10, 0x1) landlock_restrict_self(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000b80)={r4, 0x456b}, 0x8) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x4}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40001) 58.137612811s ago: executing program 1 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x15, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x51, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}]}, 0x48}}, 0x8000002) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x5) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="40000000012000001c00128009000100766c616e000000000c00028006000100fc2f000008000500", @ANYRES32=r3, @ANYBLOB="e30003000000988199f24b6b0000"], 0x4c}}, 0x8000) 58.070254677s ago: executing program 1 (id=1440): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, 0x0, 0x0) (async) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f00000007c0)=""/144, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2000000000000044, &(0x7f0000000200)=[{0x5, 0x5, 0x7, 0x50000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2000000000000044, &(0x7f0000000200)=[{0x5, 0x5, 0x7, 0x50000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) (async) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0xc0049364, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0x80000300, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)={0x3, 0x0, [{0x0, 0x7, 0x1, 0xfffffe71, 0xf66, 0x3, 0x401}, {0xc0000006, 0x5, 0x5, 0xdc, 0x1, 0x8, 0x5}, {0x40000000, 0x1, 0x9, 0x7, 0x6, 0xe2, 0x5}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 56.677114086s ago: executing program 1 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) close(r2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) io_setup(0x9, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r6, 0x1, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000980)=[@cpuid={0x64, 0x18, {0x3, 0x5}}, @wrmsr={0x65, 0x20, {0xbb1, 0x8}}, @code={0xa, 0x48, {"44f4c4a3e5499b00680000f90f01df66b811008ee0660f38828b00000000420f01c266baa000ec3e362e66440f388116420f01c9430f08"}}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x76da}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xbc3, 0x8}}], 0xe8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) chdir(0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) socket$kcm(0x2, 0x1, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) (async) close(r2) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) io_setup(0x9, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) io_setup(0x6, &(0x7f0000000000)) (async) io_getevents(r6, 0x1, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a80)={0x0, &(0x7f0000000980)=[@cpuid={0x64, 0x18, {0x3, 0x5}}, @wrmsr={0x65, 0x20, {0xbb1, 0x8}}, @code={0xa, 0x48, {"44f4c4a3e5499b00680000f90f01df66b811008ee0660f38828b00000000420f01c266baa000ec3e362e66440f388116420f01c9430f08"}}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0x76da}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xbc3, 0x8}}], 0xe8}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 55.91179804s ago: executing program 1 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048844}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async, rerun: 32) syz_usbip_server_init(0x3) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) (async) execveat$binfmt(r3, 0x0, &(0x7f00000004c0)={[&(0x7f0000000140)='cpuacct.usage_percpu_user\x00', &(0x7f0000000440)='#! ', &(0x7f0000000480)='cpuacct.usage_percpu_user\x00']}, &(0x7f00000005c0)={[&(0x7f0000000500)='cpuacct.usage_percpu_user\x00', &(0x7f0000000540)='/dev/kvm\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x40, 0x0, 0xffff, 0x2, 0xe000, '\x00', 0x654}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r0, r0, 0xffffffff, 0x4, '\x00', {0x8, 0xfc4f, 0x6, 0x9, 0x7, 0x0, 0xffffffff, 0xfffffffffffffffd, {0x2, 0x3607ebde}, {0x0, 0x101}, {0x5, 0x6}, 0x1, 0x5, 0x7ff, 0x8, 0x101, 0x1c60, 0xf87e, 0x9, 0x8, 0x0, '\x00', 0x5, 0xa1, 0x0, 0xe2b4}}) (async) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000550001002bbd7000fc9bdf2507", @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 55.858625761s ago: executing program 32 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048844}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async, rerun: 32) syz_usbip_server_init(0x3) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) (async) execveat$binfmt(r3, 0x0, &(0x7f00000004c0)={[&(0x7f0000000140)='cpuacct.usage_percpu_user\x00', &(0x7f0000000440)='#! ', &(0x7f0000000480)='cpuacct.usage_percpu_user\x00']}, &(0x7f00000005c0)={[&(0x7f0000000500)='cpuacct.usage_percpu_user\x00', &(0x7f0000000540)='/dev/kvm\x00', &(0x7f0000000580)='/dev/kvm\x00']}, 0x1000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x40, 0x0, 0xffff, 0x2, 0xe000, '\x00', 0x654}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r0, r0, 0xffffffff, 0x4, '\x00', {0x8, 0xfc4f, 0x6, 0x9, 0x7, 0x0, 0xffffffff, 0xfffffffffffffffd, {0x2, 0x3607ebde}, {0x0, 0x101}, {0x5, 0x6}, 0x1, 0x5, 0x7ff, 0x8, 0x101, 0x1c60, 0xf87e, 0x9, 0x8, 0x0, '\x00', 0x5, 0xa1, 0x0, 0xe2b4}}) (async) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000550001002bbd7000fc9bdf2507", @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.571942285s ago: executing program 4 (id=2019): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000012000100000800000000000010000000a9f1"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x8001, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x5, 0x9}}) r7 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000040)={0x6, 0x3}) 2.31272695s ago: executing program 4 (id=2021): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000003340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) read$FUSE(r4, &(0x7f00000073c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x39c) write$FUSE_ATTR(r3, &(0x7f0000000100)={0x78, 0x0, r5, {0xfffffffffffffbff, 0x4, 0x0, {0x0, 0x7, 0x6, 0x9, 0x2, 0x1166, 0x80000000, 0x3, 0x1, 0x4000, 0x800, r2, 0xee01, 0x3, 0x7c}}}, 0x78) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)={0x150, 0x0, r1, [{{0x6, 0x1, 0xa, 0x0, 0x8, 0x8, {0x4, 0x0, 0x7, 0x9, 0x0, 0x3, 0x101, 0x7, 0x7b, 0xa000, 0x4, r8, r7, 0x4, 0x5}}, {0x1, 0x6, 0x4, 0x80000000, 'GPL\x00'}}, {{0x2, 0x0, 0x2, 0x9, 0x6, 0x8001000, {0x2, 0x4, 0x0, 0x5, 0x3abaf522, 0x4, 0x80000000, 0x10000, 0x7ff, 0x8000, 0xbd1e, r6, r7, 0x9}}, {0x3, 0x7, 0x4, 0x55c, 'GPL\x00'}}]}, 0x150) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002040)={0x50, 0x0, r5, {0x7, 0x2d, 0x81, 0x529820, 0x5b, 0x4, 0x1, 0x1, 0x0, 0x0, 0x10, 0x9}}, 0x50) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002bc0)='/sys/kernel/uevent_seqnum', 0x88140, 0xb0) read$FUSE(r9, &(0x7f0000002c00)={0x2020}, 0x2020) 2.251811574s ago: executing program 4 (id=2024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.94094131s ago: executing program 0 (id=2029): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000100)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x8c, 0x1000}}, 0x28) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_script(r9, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "ff992681070d19205087fe61b1e62b8549"}, 0x1c) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r9, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047", 0x3fc) write$UHID_INPUT(r9, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x800}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in6=@remote, 0x4e24, 0x7fff, 0x4e21, 0x8000, 0x2, 0xa0, 0x80, 0x11, r5, r12}, {0xfffffffffffffe01, 0x7, 0x4, 0x10000, 0x3, 0x9ebc00000000000, 0xffffffffffffff30, 0xffffffffffff23d0}, {0x0, 0x5, 0x7, 0x2}, 0xbe, 0x6e6bb6, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3505, 0x1, 0x0, 0x2, 0x2, 0x1, 0x1}}, 0xe8) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x72, 0xff, 0x400, 0x1570722e, 0x1c, 0x4, 0xf}, 0x9c) 1.886522146s ago: executing program 4 (id=2030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000280)=""/4096, 0x1000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000e00)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9b5522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.742067229s ago: executing program 0 (id=2034): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffff7f000000000000000061100c000000000095000000000000007b91fb661e2dacd8f00b916920aca17fecf2bd46cb8426a89ce41a32e9c245bcb7a0c6e72cfc029b471cfe99167d7cd651535416238204cc6acae3a328b67074b0b35e8b9baea183495b3a57a2d1f0d95c9a013cd1b25ccd9a0098b0913b3a6baf44c9d9bde33cfe777a7e072913061e85b001c09b6484093825540000000eead87d6f7b8189d47d9f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) r1 = syz_usbip_server_init(0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x3ff, 0x5}) 1.582539658s ago: executing program 3 (id=2036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 1.39653711s ago: executing program 4 (id=2039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 1.242114384s ago: executing program 3 (id=2042): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) (async, rerun: 32) read$dsp(r0, &(0x7f0000000140)=""/52, 0x34) (rerun: 32) 1.152730067s ago: executing program 0 (id=2043): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffcfd9, 0xa080) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x49]}}) close_range(r1, r3, 0x2) 1.062587731s ago: executing program 0 (id=2044): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[], 0x40) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x4026c0) pipe(&(0x7f0000000340)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r1, 0x3811a000) r2 = epoll_create(0xd1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x2, r3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000090001000850600"/21, @ANYRES32=r7, @ANYRESDEC=r4], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, 0x1feff, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 946.332735ms ago: executing program 3 (id=2045): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000400)={0x8, 0x0, [{0x0, 0x0, 0x7}, {0x400000b3, 0x0, 0x1}, {0x2c, 0x0, 0x100000000}, {0x9bd, 0x0, 0x66}, {0x9a7, 0x0, 0x2000000f0a}, {0x809, 0x0, 0x3}, {0x879, 0x0, 0x8}, {0xb7a}]}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x2, 0x7, 0x100}, {0x6, 0x9, 0x9, 0x10001}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000740)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x2}}, 0x18) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r7, @ANYBLOB="c304050000000000240012800b00010067656e65766500001400028005000c00010000000500080000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="3b94139eeded38a3cd4a1160cbfd248d48ee0eeb982695121c366d9c089f126634c3fe7dfd6d0bd837439c042eda971c8e23b989551867524865f6c04b5d671044e2551aedfdfc466eb6bffa44189925e428c500e6d428759d1521a67653215ad22e5d27d4a42dd15c14a3e4aa09d2ce585ec8aa527990e9744fe9864937b57d4caa012adcd1984f5f7e95dd744abdd6987b795418a636293d0d084b845661da24ddb0947f299df53831421b4590ebc8a55cad40e8c6abbf41a66b1e0d758cec378ea8ced0de9271183f04f02051871a70078efcba7c37ec9bbbf6cefe3261fcaf54aac1fc4711c48469758ffe4c6f5c0a94395dbbc7a14f6fecb2b9e00e7422c8222d112710ce4de4035e50989576b5ffaf5452914a15da89d0a3b0abdfa56fe258a595d7cf4ac88d0508f3414d7f5ff1641c27a03521df199cab0a7581f0a2657d0bc8b472037d6b98d0daf8f70ec9966932c3b37f5314df886b7f8acf23948dbcf6c26c097471f110b2a954f1cb8f3c162e3ec1d41dd5ec9ef6ee2884711e5fbb0c319029c3a2904193ee0b9c112fbb52193a8b7a9c4b6c7a985c685efc757c46d35f1367aeb7cf1f81b927add152a88a26e5da5849ba3c6d4d8a5fb2c5f4f5cba6fff8dea2d4cf54f6122ce3fd64ba884878175d51a09fd2f4f4fb13bdf95a7161ce9e0707f09ec8f4320c0a814317fdc832653331f4c177b5a5f586b7fe8d4659571675e7cf5d6a55b1dbd8131b281d7cbf3ae16dc7f166068cd58b34b744136d70ace1b306c0284e6dc4054a38700ece2fbf693226df0b2172634c6e57838e184143cd2bb7091bea2acb6440cc5b06af83024e724155d3d09bea8d904a5eaa0720b1eb23205ff0e9367cae5d6c829ca88fe8011c91a75eacbb49675700533a942bacccac551989a324c9c0a1ff4219446149f87b0c088702de4c73ac5611106d073888c10b012c74dc740184e09d4247ba343bdc4ccdf1c6f80c4908a48106b2fa8a0829a6cfdf52f89432811d53be75f87989c71723b9da3f4ae1614a0ebcb22549afadb11f35af693eb8ea5674d3c57975d53044fea71378886de4a520c791475b03286a250493fa35e04e5c5a3a87421ec2342975c888632768c54aa9d0eb4c9ecc528507f55726dd5da5a5bed31028ece4ce4ec2b6f74ca02502f98d1acfcb76d02db690559a1fbfd3a878ebbdebd308e41c9aa3bcd4cb39408708ee8818d793d09b5744b323693160438ffab2fc986ac7c6acf102a19515221e40c427317f5f32caaa97b052ed08c8c6496470623461cdabc6f1c49419a6b963067c4ee2f9d34d76e6a5d961fbd65b3c43bf44d320868b9ca0936cabffab9895129d9404b3c4a8acce5c809a1ae9d8d845bbaf4473cea8de1545c5ce7b7d0550e0d95fef06213d2b5859b7a7e6dc5c111c9d28f73e9fe6fb1a2cb79117c83a2e669c4833d8e1248c00637f603b265ac08d3047ad6c9fa5be65d7728ef2adfbd54428013a7f20c197047e6cdbb44725cc80d3f14903aaf06df257fce9523a9b57001620a1af30f3d46c16b6e90356226919f6554d35fea8c5ee2e45fb8fa576d136bf45140249f0b47904f96eb0a44c5baf266b4753b801988cbe4a3ff9f4661887a36822a97a1ecd86d53f70659b5f5b8e4e9257f1e89159aab5b822b63977204ad77cb1a6028d85b5e1dcef5f7ee685be0c2cd1e447468ecbba75744b8866a59bedc664840ca9acfb917da228ae080518ae4624edb4e03a532c083be48141d82c7f4fdbf03f7bfdf79ee8ea973b1e0493f91ec139fe9d4a33df5b95f45989b2232d0b2f2fc661f1fc47", 0x509}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001400000000000000000000000700"/36], 0x38}, 0x200000e0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) socket(0x200000000000011, 0x2, 0xd) (async) r10 = socket(0x200000000000011, 0x2, 0xd) socket(0x28, 0x80006, 0x10004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r10, @ANYRES64=r11, @ANYBLOB="000000001200000000000000000000008d18ce00000000", @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB='\x00'/28], 0x50) 946.110872ms ago: executing program 0 (id=2046): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 862.565568ms ago: executing program 0 (id=2048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000121000/0x3000)=nil, 0x3000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io$printer(r1, &(0x7f0000000540)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="000ac9000000c921bfbacf6ff9c9ab84190bdf9398e2ebd3b77f3891e03f9fb2a9878c858732470e49057427ed5d1b8697fad3bb982f2f4a18a7005ce86cbd5dfd276154f782e028b4666473538156f4bc9bdb8bbe8e4510240f89ab5a3f7f463d5b3f3d2acd460e45bcfb5a26a698c985fc1b6a9b58e0f3e133e434c839209d9c890303a834507d09513ea11dfef2959310b75a98e77a7629b3ac6345099518837e5c749953fa360efba9c451dcacecf33229df521f78d230f8d2e55ae8db9412638cedc15aa4d3528a01b86eda58"], &(0x7f0000000440)=ANY=[@ANYBLOB="0003f3000000f303b69bac8740a362a8e066494c3dacb4d841c399e4d396d817e9df7eff763db34f4b18e4616872a3252e688c367308f79086c99749cba1551f88261490b3957c8b36aae31dfc11d3e294ef073624c433f086ba0e25f272105faab4530c70842f138817ac42c868f5a85cde9d32df9265336b01f95594206cb9eada0a65199d719c6937dc87b4ac0fb37c02758bc494f6f1950bf1dca8527782b267526ff473d7d095bc48cd0b1a522442ebbc4aedf248a219aeed239dcf9eca1ee22a27f3626909285c30f0ba03f0b54edc7c0cc8b5ac5946cfacb46928908d2177d6703abd114030d3802bbe00"/249]}, &(0x7f0000000840)={0x34, &(0x7f0000000580)={0x0, 0x19fad00652931093, 0xa6, "edbf514f86a86c287f183c512d223861668f7b050a8f19a43767664797e5059b26e0b3046f32014e3c14847d27b4715cd249da542b7dc92b138e4075233fe7acee5816b170f001180b8956c5b0c5535f5d645808c4493e3b708d06585fc8abc0e3b13271e6c74c2efc09b20680a84e5c0aefefa387862f2ffe358c86b9c1f01a3974217ceb794774d65cd6d14576e4b7657badc51ed29b41831c097c27878f96a4288ed481de"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0xe5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x400000000000008, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x1ff, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, 0xffffffffffffffff) close_range(0xffffffffffffffff, r2, 0x0) write$P9_RUNLINKAT(r8, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000980)={&(0x7f0000000880)=""/228, 0x102000, 0x1800, 0x8, 0x6}, 0x20) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r10, 0xae80, 0x0) 761.655038ms ago: executing program 3 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 652.413703ms ago: executing program 4 (id=2052): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44080) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x3, 0x3, &(0x7f0000000100)={0x14, "00bc0000000000001f2a00deff00"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 542.577578ms ago: executing program 2 (id=2053): syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1={0xff, 0x3}}, @jumbo]}]}}}}}, 0x0) 402.332568ms ago: executing program 2 (id=2054): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f006, 0xffffff00}) 402.058242ms ago: executing program 2 (id=2055): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './cgroup\x00'}, 0x6e) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000002c0)) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) 191.409935ms ago: executing program 2 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200100021200000300012800c0001006d6163766c616e0020000280080003000100000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 191.083153ms ago: executing program 2 (id=2057): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2000000000000074, &(0x7f0000000080)=[{0x7, 0x37, 0xf5, 0x7}, {0x1, 0x5b, 0x5, 0x6}, {0x9, 0x7, 0x1, 0x7e}]}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="a4ac000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r4}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0xa) fchdir(r5) close_range(r0, 0xffffffffffffffff, 0x0) 122.656499ms ago: executing program 3 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000000c0)={0x1, 0x7, 0x6, 0x0, '\x00', '\x00', '\x00', 0x7, 0x2, 0x2, 0x6, "12caf055d9ac12e05c6386cd037a4d1d"}) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x200480d5}, 0x84) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10) 121.157797ms ago: executing program 2 (id=2059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, &(0x7f0000002000)=""/4096, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) pidfd_getfd(r3, r4, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x2) 0s ago: executing program 3 (id=2060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) kernel console output (not intermixed with test programs): tion_interruptible_timeout failed -512 [ 181.578419][T10328] geneve4: entered promiscuous mode [ 181.580681][T10328] geneve4: entered allmulticast mode [ 181.756396][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 181.803338][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 181.803353][ T40] audit: type=1400 audit(1780847381.433:7608): avc: denied { map } for pid=10350 comm="syz.3.1277" path="/dev/video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 181.810388][T10354] fuse: fd is not a fuse device [ 181.815452][ T40] audit: type=1400 audit(1780847381.443:7609): avc: denied { execute } for pid=10350 comm="syz.3.1277" path="/dev/video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 181.850545][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1280'. [ 181.854651][T10362] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1280'. [ 181.858444][T10362] netlink: 'syz.0.1280': attribute type 6 has an invalid length. [ 181.861685][T10362] netlink: 'syz.0.1280': attribute type 5 has an invalid length. [ 181.864013][T10362] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1280'. [ 181.909797][ T40] audit: type=1400 audit(1780847381.543:7610): avc: denied { mount } for pid=10358 comm="syz.3.1279" name="/" dev="rpc_pipefs" ino=32433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 181.929653][ T40] audit: type=1400 audit(1780847381.563:7611): avc: denied { view } for pid=10369 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 181.999197][ T40] audit: type=1400 audit(1780847381.633:7612): avc: denied { create } for pid=10377 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 182.006338][T10378] sctp: [Deprecated]: syz.0.1285 (pid 10378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.006338][T10378] Use struct sctp_sack_info instead [ 182.050089][ T40] audit: type=1400 audit(1780847381.683:7613): avc: denied { create } for pid=10382 comm="syz.0.1286" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.056781][ T40] audit: type=1400 audit(1780847381.693:7614): avc: denied { unlink } for pid=10382 comm="syz.0.1286" name="file0" dev="tmpfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.061063][T10383] overlayfs: failed to clone upperpath [ 182.101869][T10386] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1287'. [ 182.138226][ T40] audit: type=1400 audit(1780847381.773:7615): avc: denied { create } for pid=10389 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 182.153872][T10390] Process accounting resumed [ 182.169644][T10379] usb usb2: usbfs: interface 0 claimed by hub while 'syz.3.1284' sets config #1 [ 182.215332][ T40] audit: type=1400 audit(1780847381.843:7616): avc: denied { write } for pid=10394 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 182.226551][ T40] audit: type=1400 audit(1780847381.863:7617): avc: denied { create } for pid=10398 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.236857][T10400] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:254) [ 182.343549][T10405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.447113][T10415] netlink: 'syz.0.1296': attribute type 3 has an invalid length. [ 182.951779][T10431] overlayfs: failed to resolve './file1': -2 [ 183.048516][T10435] netlink: 'syz.3.1304': attribute type 2 has an invalid length. [ 183.051132][T10435] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1304'. [ 183.453607][T10449] sg_write: data in/out 1491494119/93 bytes for SCSI command 0x10-- guessing data in; [ 183.453607][T10449] program syz.1.1309 not setting count and/or reply_len properly [ 184.213173][T10462] fuse: Bad value for 'fd' [ 184.235622][T10448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.241290][T10448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.242124][T10464] 9pnet_virtio: no channels available for device syz [ 184.243671][T10448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.249607][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 184.251156][T10464] overlayfs: failed to resolve './cgroup': -2 [ 184.331507][T10475] devtmpfs: Cannot change global quota limit on remount [ 184.595176][T10480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.613539][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 184.617192][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.623095][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.627238][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.631089][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.634894][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.638902][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.642830][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.648657][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.652504][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.656551][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10481 comm=syz.1.1320 [ 184.918592][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 184.946730][T10499] bond7: entered promiscuous mode [ 184.948866][T10499] bond7: entered allmulticast mode [ 184.995336][T10504] xt_hashlimit: invalid interval [ 184.998772][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 185.033177][T10504] bond8: entered promiscuous mode [ 185.039070][T10504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 185.044613][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 185.050713][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 185.059400][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 185.090447][T10513] fuse: fd is not a fuse device [ 185.093159][T10513] fuse: fd is not a fuse device [ 185.536655][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.551174][T10535] nfs4: Bad value for 'source' [ 185.591131][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 185.657074][T10548] tmpfs: Cannot change global quota limit on remount [ 185.694692][T10551] loop2: detected capacity change from 0 to 7 [ 185.718367][T10551] Dev loop2: unable to read RDB block 7 [ 185.720228][T10551] loop2: AHDI p1 p2 [ 185.722684][T10551] loop2: partition table partially beyond EOD, truncated [ 185.878427][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 185.965831][T10576] xfs: Unknown parameter 'rmӸVryoCrם' [ 185.973609][T10576] syzkaller0: entered promiscuous mode [ 185.975340][T10576] syzkaller0: entered allmulticast mode [ 186.254577][T10604] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1356'. [ 186.258114][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.258169][ T5754] Bluetooth: hci2: command 0x2021 tx timeout [ 186.315367][T10617] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:254) [ 186.326924][T10620] netlink: 'syz.1.1360': attribute type 18 has an invalid length. [ 186.340198][ T8703] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 186.342366][T10612] misc userio: Begin command sent, but we're already running [ 186.344075][T10620] netlink: 'syz.1.1360': attribute type 18 has an invalid length. [ 186.349518][ T8703] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 186.352344][T10623] tmpfs: Bad value for 'mpol' [ 186.356299][T10623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.362063][ T8703] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 186.380812][T10623] bond4: entered promiscuous mode [ 186.383242][ T72] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 186.398909][T10626] dns_resolver: Unsupported content type (234) [ 186.455193][T10631] sctp: [Deprecated]: syz.1.1364 (pid 10631) Use of int in maxseg socket option. [ 186.455193][T10631] Use struct sctp_assoc_value instead [ 186.513687][ T5739] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 186.872556][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 186.872567][ T40] audit: type=1400 audit(1780847386.503:7654): avc: denied { mounton } for pid=10671 comm="syz.1.1374" path="/syzcgroup/unified/syz1" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 186.875786][T10675] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 186.891792][T10675] romfs: unable to set blocksize [ 186.891792][T10675] [ 186.940986][ T5739] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 187.072810][T10685] befs: (loop1): No write support. Marking filesystem read-only [ 187.076697][T10685] befs: (loop1): unable to read superblock [ 187.302706][ T5739] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 187.342584][ T40] audit: type=1400 audit(1780847386.973:7655): avc: denied { setopt } for pid=10708 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.353354][T10712] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.357337][T10712] SET target dimension over the limit! [ 187.397858][ T40] audit: type=1400 audit(1780847387.033:7656): avc: denied { mount } for pid=10716 comm="syz.0.1388" name="/" dev="hugetlbfs" ino=34365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 187.460592][T10727] netlink: 'syz.1.1391': attribute type 29 has an invalid length. [ 187.461210][ T40] audit: type=1400 audit(1780847387.093:7657): avc: denied { listen } for pid=10726 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.552389][ T40] audit: type=1400 audit(1780847387.183:7658): avc: denied { shutdown } for pid=10738 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.558954][ T40] audit: type=1400 audit(1780847387.183:7659): avc: denied { block_suspend } for pid=10738 comm="syz.1.1397" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.610824][T10741] kvm: kvm [10732]: vcpu0, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 187.630245][ T5739] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 187.842713][ T40] audit: type=1400 audit(1780847387.473:7660): avc: denied { ioctl } for pid=10755 comm="syz.3.1402" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.947171][T10758] bond5: (slave bond_slave_1): Device is not our slave [ 187.949419][T10758] bond5: option active_slave: invalid value (bond_slave_1) [ 187.952559][T10758] bond5 (unregistering): Released all slaves [ 188.091483][T10769] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 188.098119][ T40] audit: type=1400 audit(1780847387.733:7661): avc: denied { name_connect } for pid=10768 comm="syz.1.1406" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 188.179909][ T40] audit: type=1400 audit(1780847387.813:7662): avc: denied { append } for pid=10775 comm="syz.1.1408" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.188960][ T40] audit: type=1400 audit(1780847387.813:7663): avc: denied { open } for pid=10775 comm="syz.1.1408" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 189.186709][T10824] binder: 10823:10824 ioctl c0306201 2000000001c0 returned -14 [ 189.190637][T10824] binder: 10823:10824 ioctl c0306201 200000004a40 returned -14 [ 189.503738][T10831] netlink: 'syz.1.1422': attribute type 10 has an invalid length. [ 189.511692][T10831] veth0_to_bond: entered promiscuous mode [ 189.513971][T10831] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 190.166498][T10833] fuse: fd is not a fuse device [ 190.269763][T10844] fuse: Unknown parameter 'f' [ 190.364807][T10853] __nla_validate_parse: 19 callbacks suppressed [ 190.364824][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 190.399850][T10862] wg2 speed is unknown, defaulting to 1000 [ 190.437249][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 190.604653][T10872] ptrace attach of "/syz-executor exec"[5740] was attempted by "/syz-executor exec"[10872] [ 190.656660][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 190.660396][T10877] netlink: 'syz.2.1437': attribute type 7 has an invalid length. [ 190.663607][T10877] netlink: 'syz.2.1437': attribute type 8 has an invalid length. [ 190.666883][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 190.679327][T10877] erspan0: entered promiscuous mode [ 190.744023][T10877] erspan0: left promiscuous mode [ 190.901025][T10887] 9pnet_virtio: no channels available for device syz [ 191.047828][T10891] devpts: Unknown parameter 'max000000100000<(Ԅ2@' [ 191.074165][T10894] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.077968][T10894] selinux_netlink_send: 27 callbacks suppressed [ 191.077978][T10894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10894 comm=syz.2.1442 [ 191.153798][ T6279] IPVS: starting estimator thread 0... [ 191.165837][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 191.238980][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 191.245824][T10903] IPVS: using max 42 ests per chain, 100800 per kthread [ 191.318259][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.324860][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.328643][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.332566][ T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.335299][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.339325][ T39] usb 6-1: config 0 descriptor?? [ 191.451486][T10917] mac80211_hwsim hwsim6 : renamed from wlan0 [ 191.749774][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.755918][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.758499][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.760794][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.763476][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.766619][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.769741][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.772573][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.775371][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.779605][ T39] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 191.794088][ T39] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 191.931683][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 191.936337][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 191.936392][ T40] audit: type=1400 audit(1780847391.573:7678): avc: denied { bind } for pid=10937 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.241086][T10948] syzkaller0: entered promiscuous mode [ 192.243256][T10948] syzkaller0: entered allmulticast mode [ 192.397780][ T40] audit: type=1400 audit(1780847392.033:7679): avc: denied { mount } for pid=10953 comm="syz.2.1457" name="/" dev="gadgetfs" ino=7617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 192.405700][ T40] audit: type=1400 audit(1780847392.033:7680): avc: denied { mounton } for pid=10953 comm="syz.2.1457" path="/294/file0" dev="gadgetfs" ino=7617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 192.425026][ T40] audit: type=1400 audit(1780847392.053:7681): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 192.591779][ T40] audit: type=1400 audit(1780847392.223:7682): avc: denied { watch_mount } for pid=10959 comm="syz.2.1459" path="/296" dev="tmpfs" ino=1605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.600091][ T40] audit: type=1400 audit(1780847392.233:7683): avc: denied { bind } for pid=10959 comm="syz.2.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.632455][ T40] audit: type=1400 audit(1780847392.263:7684): avc: denied { nlmsg_read } for pid=10962 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.761769][ T6279] usb 6-1: USB disconnect, device number 17 [ 192.834262][T10985] netlink: 'syz.3.1467': attribute type 2 has an invalid length. [ 192.839946][T10985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1467'. [ 192.872232][ T8703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 192.876175][ T8703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 192.880563][ T8703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.957733][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 192.960854][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 193.024759][ T8703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 193.030229][ T8703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 193.034484][ T8703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.097739][ T40] audit: type=1400 audit(1780847392.733:7685): avc: denied { execute } for pid=11007 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 193.112151][ T40] audit: type=1400 audit(1780847392.733:7686): avc: denied { execute_no_trans } for pid=11007 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 193.128009][ T8703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 193.131162][ T8703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 193.134327][ T8703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.164743][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.171976][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.180317][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.188873][T11009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1475'. [ 193.189372][T11017] fuse: Unknown parameter '017777777777777777777770000000000000000000000300000000000000000000' [ 193.191633][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.195890][T11009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11009 comm=syz.3.1475 [ 193.201390][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.210296][ T40] audit: type=1400 audit(1780847392.843:7687): avc: denied { mounton } for pid=11014 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 193.230574][ T8703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 193.233799][ T8703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 193.237795][ T8703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.268171][T11021] fuse: Unknown parameter '' [ 193.292767][T11024] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 193.425070][ T8703] bridge_slave_1: left allmulticast mode [ 193.429261][ T8703] bridge_slave_1: left promiscuous mode [ 193.432759][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.441194][ T8703] bridge_slave_0: left allmulticast mode [ 193.449502][ T8703] bridge_slave_0: left promiscuous mode [ 193.453504][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.467278][T11037] fuse: fd is not a fuse device [ 193.611210][ T8703] bond2 (unregistering): (slave geneve2): Releasing active interface [ 193.850121][ T8703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.853173][ T8703] bond_slave_0: left promiscuous mode [ 193.856435][ T8703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.859458][ T8703] bond_slave_1: left promiscuous mode [ 193.870093][ T8703] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 193.874038][ T8703] dummy0: left promiscuous mode [ 193.886781][ T8703] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 193.890722][ T8703] veth0_to_bond: left promiscuous mode [ 193.894017][ T8703] bond0 (unregistering): Released all slaves [ 193.916195][ T8703] bond1 (unregistering): Released all slaves [ 193.930724][ T8703] bond2 (unregistering): Released all slaves [ 193.952696][ T8703] bond3 (unregistering): Released all slaves [ 193.963267][ T8703] bond4 (unregistering): Released all slaves [ 193.987509][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.995733][ T8695] bond0: (slave dummy0): link status definitely down, disabling slave [ 194.003159][ T8695] bond0: now running without any active interface! [ 194.058988][ T8703] tipc: Left network mode [ 194.085320][T11014] wg2 speed is unknown, defaulting to 1000 [ 194.210369][T11079] tls_set_device_offload_rx: netdev not found [ 194.253846][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.504771][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.538097][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.540415][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.542599][T11014] bridge_slave_0: entered allmulticast mode [ 194.545859][T11014] bridge_slave_0: entered promiscuous mode [ 194.549700][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.551964][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.554217][T11014] bridge_slave_1: entered allmulticast mode [ 194.557153][T11014] bridge_slave_1: entered promiscuous mode [ 194.576526][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.580819][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.611049][T11014] team0: Port device team_slave_0 added [ 194.618052][T11014] team0: Port device team_slave_1 added [ 194.669870][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.671997][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.682882][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.687655][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.689925][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.700403][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.715043][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 194.758985][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.762136][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.766320][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.769395][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.774952][ T8703] virt_wifi0: left allmulticast mode [ 194.782599][ T8703] virt_wifi0: left promiscuous mode [ 194.785218][ T8703] veth1_macvtap: left promiscuous mode [ 194.790112][ T8703] veth0_macvtap: left promiscuous mode [ 194.792479][ T8703] veth1_vlan: left promiscuous mode [ 194.794735][ T8703] veth0_vlan: left promiscuous mode [ 194.846013][ T5746] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 194.984564][T11014] hsr_slave_0: entered promiscuous mode [ 194.987055][T11014] hsr_slave_1: entered promiscuous mode [ 194.989408][T11014] debugfs: 'hsr0' already exists in 'hsr' [ 194.991229][T11014] Cannot create hsr debugfs directory [ 195.153004][T11014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.157659][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.160381][T11014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.163831][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.166431][T11014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.170072][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.172744][T11014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.176334][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.191471][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.193691][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.196573][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.198928][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.226686][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.235265][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.237966][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.245349][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.256932][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.259235][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.264661][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.266892][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.295672][ T5739] Bluetooth: hci1: command tx timeout [ 195.502414][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.634312][T11014] veth0_vlan: entered promiscuous mode [ 195.641195][T11014] veth1_vlan: entered promiscuous mode [ 195.655297][T11014] veth0_macvtap: entered promiscuous mode [ 195.660459][T11014] veth1_macvtap: entered promiscuous mode [ 195.672571][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.679681][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.685788][ T8695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.688544][ T8695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.691644][ T8695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.694342][ T8695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.764960][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.767906][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.781787][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.784190][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.940518][T11147] __nla_validate_parse: 1 callbacks suppressed [ 195.940529][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'. [ 196.252989][T11172] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.306712][T11183] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 196.433088][T11194] xt_HMARK: spi-set and port-set can't be combined [ 196.522852][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 196.525441][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 196.717998][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.723546][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.728407][T11212] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.731190][T11212] UDF-fs: Scanning with blocksize 512 failed [ 196.734615][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.738333][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.741653][T11212] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.744123][T11212] UDF-fs: Scanning with blocksize 1024 failed [ 196.748052][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.751982][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.755687][T11212] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.758900][T11212] UDF-fs: Scanning with blocksize 2048 failed [ 196.762358][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.770001][T11212] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.774077][T11212] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.777360][T11212] UDF-fs: Scanning with blocksize 4096 failed [ 196.780217][T11212] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 196.917620][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 196.971457][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 196.971470][ T40] audit: type=1400 audit(1781371684.579:7708): avc: denied { create } for pid=11222 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 196.979891][ T40] audit: type=1400 audit(1781371684.579:7709): avc: denied { write } for pid=11222 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 197.021051][T11227] block nbd0: not configured, cannot reconfigure [ 197.023212][T11227] block nbd0: not configured, cannot reconfigure [ 197.075396][T11233] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 197.251918][T11251] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 197.255758][T11252] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1528'. [ 197.317291][T11253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1529'. [ 197.331364][T11253] x_tables: duplicate underflow at hook 1 [ 197.407944][ T5739] Bluetooth: hci1: command tx timeout [ 197.443817][ T40] audit: type=1400 audit(1781371685.034:7710): avc: denied { write } for pid=11257 comm="syz.2.1531" path="socket:[38396]" dev="sockfs" ino=38396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.546369][T11273] lo: left promiscuous mode [ 197.566471][T11273] gretap0: left allmulticast mode [ 197.585546][T11273] bridge0: port 3(syz_tun) entered disabled state [ 197.591830][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.595297][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.650095][T11273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.655497][T11273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.703074][T11273] bond2: left promiscuous mode [ 197.705644][T11273] hsr1: left promiscuous mode [ 197.729766][ T1223] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.733631][ T1223] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.736973][ T1223] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.740703][ T1223] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.746178][ T1223] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.750100][ T1223] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.771803][T11280] macsec2: entered promiscuous mode [ 197.774155][T11280] macsec2: entered allmulticast mode [ 197.809721][ T985] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 197.964122][ T985] usb 9-1: Using ep0 maxpacket: 8 [ 197.968006][ T985] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.971524][ T985] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.974743][ T985] usb 9-1: config 0 interface 0 has no altsetting 0 [ 197.976947][ T985] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.979665][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.983938][ T985] usb 9-1: config 0 descriptor?? [ 198.066574][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.069940][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.073808][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.076711][T11286] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 198.081503][T11286] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 198.086623][T11286] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 198.091644][T11286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.102757][T11286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.117031][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.128572][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.133701][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.136509][T11286] xfrm0 speed is unknown, defaulting to 1000 [ 198.374634][T11310] syzkaller0: entered promiscuous mode [ 198.377526][T11310] syzkaller0: entered allmulticast mode [ 198.411797][ T985] hid_parser_main: 5 callbacks suppressed [ 198.411815][ T985] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 198.417247][ T985] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 198.420626][ T985] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 198.423534][ T985] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 198.426144][ T985] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 198.429250][ T985] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 198.627511][T11275] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1537'. [ 198.689233][ T845] usb 9-1: USB disconnect, device number 2 [ 199.140413][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.257038][T11315] syzkaller1: entered promiscuous mode [ 199.258769][T11315] syzkaller1: entered allmulticast mode [ 199.479449][ T40] audit: type=1400 audit(1781371687.016:7711): avc: denied { getopt } for pid=11326 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.508491][ T34] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 199.558678][ T5739] Bluetooth: hci1: command tx timeout [ 199.662960][ T34] usb 9-1: not running at top speed; connect to a high speed hub [ 199.666277][ T34] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 199.669719][ T34] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 199.674814][ T34] usb 9-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 199.677986][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.680857][ T34] usb 9-1: Product: syz [ 199.682629][ T34] usb 9-1: Manufacturer: 웺띭敱哴梭짘귭⬍㖨䧌黋ꃺ牮밂ⲯꁳ䄑꟣锗ฏ괜﵅ꁶ霪똭ᔉ㝞碲鵂ᔴ麽攔붻ᬛ礔⨹肀긒も믇သ楤ꔳ薄ꯘ꺜䬐▣䦡到厖Ѽ㒍輓醗꧆ꢣ鄀덾㚪퉾䑐ᘶ伣㙡﴾뙌舓૫摴▌娽挷쯰猛৛Ỵႆꂩ왉禖릌护碅떨Ꮐ [ 199.691452][ T34] usb 9-1: SerialNumber: syz [ 199.908392][ T34] usb 9-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 199.911611][ T34] usb 9-1: found format II with max.bitrate = 128, frame size=0 [ 199.914064][ T34] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 199.918701][ T34] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 199.943201][ T34] usb 9-1: USB disconnect, device number 3 [ 199.957991][ T8037] udevd[8037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.365588][T11333] fusectl: Unknown parameter '' [ 200.367706][T11333] fuse: Unknown parameter 'f' [ 200.448890][T11339] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 200.749749][T11357] xt_hashlimit: size too large, truncated to 1048576 [ 200.796521][ T40] audit: type=1400 audit(1781371688.303:7712): avc: denied { setopt } for pid=11359 comm="syz.3.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.860786][T11369] netlink: 'syz.4.1566': attribute type 3 has an invalid length. [ 200.865144][T11369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1566'. [ 200.939898][ T40] audit: type=1400 audit(1781371688.439:7713): avc: denied { write } for pid=11370 comm="syz.3.1567" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.940645][T11371] xt_hashlimit: size too large, truncated to 1048576 [ 200.949349][ T40] audit: type=1400 audit(1781371688.439:7714): avc: denied { open } for pid=11370 comm="syz.3.1567" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 200.995175][ T5739] Bluetooth: hci2: Malformed Event: 0x02 [ 201.184099][T11394] tipc: Enabling not permitted [ 201.185842][T11394] tipc: Enabling of bearer rejected, failed to enable media [ 201.190048][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 201.294477][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 201.301907][ T8696] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.302480][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 201.306499][ T8696] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.310116][ T8696] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.313372][ T8696] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.691381][ T5739] Bluetooth: hci1: command tx timeout [ 202.612940][T11430] ksmbd: Unknown IPC event: 1, ignore. [ 202.647490][T11434] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 202.651955][T11434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.695082][T11441] cgroup: Unknown subsys name 'cpuset' [ 202.712267][T11441] syzkaller1: entered promiscuous mode [ 202.714011][T11441] syzkaller1: entered allmulticast mode [ 202.723212][T11445] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 202.732368][T11445] openvswitch: netlink: IP tunnel TTL not specified. [ 202.930310][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1595'. [ 202.965592][T11481] loop5: detected capacity change from 0 to 7 [ 202.989271][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 202.992248][ C2] buffer_io_error: 11 callbacks suppressed [ 202.992255][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 203.006459][T11483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.023770][T11481] overlayfs: failed to resolve './file1': -2 [ 203.181742][T11500] xt_hashlimit: overflow, rate too high: 0 [ 203.439688][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 203.516743][T11510] SQUASHFS error: Failed to read block 0x0: -5 [ 203.520346][T11510] unable to read squashfs_super_block [ 203.524574][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 203.537476][T11509] bond6: entered promiscuous mode [ 203.539400][T11509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.565980][T11518] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 203.569546][ T40] audit: type=1400 audit(1781371691.010:7715): avc: denied { write } for pid=11512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.603188][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 203.614666][ T34] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 203.616226][ T40] audit: type=1400 audit(1781371691.059:7716): avc: denied { write } for pid=11523 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.621809][ T34] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 203.629561][ T34] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 203.632168][ T34] usb 9-1: config 250 has no interface number 0 [ 203.635100][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 203.635232][ T34] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 203.643901][ T34] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 203.646871][ T34] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.649809][ T34] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.653791][ T34] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 203.658222][ T34] usb 9-1: config 250 interface 228 has no altsetting 0 [ 203.660764][ T5451] veth0_vlan: left promiscuous mode [ 203.661785][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 203.665810][ T34] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 203.668199][ T5451] veth0_vlan: entered promiscuous mode [ 203.670473][ T34] usb 9-1: Product: syz [ 203.671782][ T34] usb 9-1: SerialNumber: syz [ 203.673637][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1612'. [ 203.680168][ T40] audit: type=1400 audit(1781371691.118:7717): avc: denied { ioctl } for pid=11535 comm="syz.2.1611" path="socket:[38894]" dev="sockfs" ino=38894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 203.691129][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 203.692971][ T34] hub 9-1:250.228: bad descriptor, ignoring hub [ 203.699362][ T34] hub 9-1:250.228: probe with driver hub failed with error -5 [ 203.720703][T11541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1613'. [ 203.739817][ T5739] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 203.768515][ T40] audit: type=1400 audit(1781371691.206:7718): avc: denied { write } for pid=11542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.778958][T11549] xt_hashlimit: size too large, truncated to 1048576 [ 203.822512][ T40] audit: type=1400 audit(1781371691.255:7719): avc: denied { write } for pid=11557 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.895576][T11569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1621'. [ 203.899347][ T34] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 203.997858][ T5739] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 204.102938][ T40] audit: type=1400 audit(1781371691.530:7720): avc: denied { read write } for pid=11497 comm="syz.4.1603" name="lp0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 204.112200][ T40] audit: type=1400 audit(1781371691.530:7721): avc: denied { open } for pid=11497 comm="syz.4.1603" path="/dev/usb/lp0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 204.232747][ T40] audit: type=1400 audit(1781371691.657:7722): avc: denied { write } for pid=11606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.292223][ T40] audit: type=1400 audit(1781371691.716:7723): avc: denied { write } for pid=11616 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.315530][ T5739] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 204.351271][ T40] audit: type=1400 audit(1781371691.775:7724): avc: denied { mount } for pid=11620 comm="syz.0.1634" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 204.518797][T11500] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 204.524005][T11500] usb 9-1: device reset changed ep0 maxpacket size! [ 204.535984][ T34] usb 9-1: USB disconnect, device number 4 [ 204.542908][ T34] usblp0: removed [ 204.674527][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 204.678586][T11653] bridge0: port 3(ipvlan2) entered blocking state [ 204.681657][T11653] bridge0: port 3(ipvlan2) entered disabled state [ 204.684868][T11653] ipvlan2: entered allmulticast mode [ 204.688988][T11653] ipvlan2: left allmulticast mode [ 204.719563][T11650] bond7: option primary: mode dependency failed, not supported in mode broadcast(3) [ 204.723472][T11650] bond7 (unregistering): Released all slaves [ 204.837988][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 204.841019][ T34] usb 9-1: config 0 has no interfaces? [ 204.845367][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 204.848990][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.851513][ T34] usb 9-1: Product: syz [ 204.852748][ T34] usb 9-1: Manufacturer: syz [ 204.854075][ T34] usb 9-1: SerialNumber: syz [ 204.857173][ T34] usb 9-1: config 0 descriptor?? [ 204.939307][T11672] overlayfs: missing 'lowerdir' [ 204.995763][T11677] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 205.000698][T11677] veth0_to_bond: entered promiscuous mode [ 205.002753][T11677] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 205.062878][T11681] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 205.064793][ T34] usb 9-1: USB disconnect, device number 5 [ 205.086611][T11681] cramfs: wrong magic [ 205.115084][T11684] wg2 speed is unknown, defaulting to 1000 [ 205.201909][T11684] xfrm0 speed is unknown, defaulting to 1000 [ 205.618973][ T5739] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 207.121167][T11742] binder: 11740:11742 unknown command 0 [ 207.123552][T11742] binder: 11740:11742 ioctl c0306201 200000000480 returned -22 [ 207.374964][T11757] netlink: 'syz.3.1667': attribute type 12 has an invalid length. [ 208.301349][T11695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.359112][ T5739] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 208.367896][T11767] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 208.395113][T11772] : entered promiscuous mode [ 208.399573][T11762] __nla_validate_parse: 3 callbacks suppressed [ 208.399588][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 208.406282][T11762] bridge_slave_0: left allmulticast mode [ 208.409967][T11762] bridge_slave_0: left promiscuous mode [ 208.411890][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.422519][T11777] fuse: fd is not a fuse device [ 208.502355][T11790] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 208.608769][T11800] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 208.615066][T11800] netlink: 'syz.3.1678': attribute type 16 has an invalid length. [ 208.617615][T11800] netlink: 'syz.3.1678': attribute type 17 has an invalid length. [ 208.629579][T11800] team0: left promiscuous mode [ 208.632877][T11800] team_slave_0: left promiscuous mode [ 208.634652][T11800] team_slave_1: left promiscuous mode [ 208.649753][T11800] vlan0: left promiscuous mode [ 208.668257][T11800] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 208.673691][T11800] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 208.816552][T11814] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.997659][T11818] /dev/nullb0: Can't lookup blockdev [ 209.064329][T11822] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 209.064498][T11823] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 209.072213][ T10] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 209.222160][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 209.226711][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 209.230452][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 209.234176][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.237058][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.239622][ T10] usb 8-1: Product: syz [ 209.243489][ T10] usb 8-1: Manufacturer: syz [ 209.246410][ T10] usb 8-1: SerialNumber: syz [ 209.254590][ T10] usb 8-1: config 0 descriptor?? [ 209.266198][ T10] usb 8-1: selecting invalid altsetting 0 [ 209.357890][ T5739] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 209.438088][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 209.438098][ T40] audit: type=1400 audit(1781371696.780:7746): avc: denied { audit_read } for pid=11831 comm="syz.2.1688" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.470868][T11814] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.474953][T11834] pimreg9: entered allmulticast mode [ 209.478117][ T10] usb 8-1: USB disconnect, device number 17 [ 209.546730][ T40] audit: type=1400 audit(1781371696.888:7747): avc: denied { write } for pid=11842 comm="syz.4.1690" name="/" dev="9p" ino=80216121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.560558][ T40] audit: type=1400 audit(1781371696.888:7748): avc: denied { remove_name } for pid=11842 comm="syz.4.1690" name="file2" dev="9p" ino=80216127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.569720][ T40] audit: type=1400 audit(1781371696.888:7749): avc: denied { rmdir } for pid=11842 comm="syz.4.1690" name="file2" dev="9p" ino=80216127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.626628][T11849] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 209.692917][ T40] audit: type=1400 audit(1781371697.026:7750): avc: denied { accept } for pid=11853 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.761327][T11858] FAT-fs (nullb0): bogus number of reserved sectors [ 209.763543][T11858] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 212.508878][T11834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.689757][ T5739] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 212.749573][ T40] audit: type=1800 audit(1781371700.048:7751): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1699" name="nullb0" dev="tmpfs" ino=2020 res=0 errno=0 [ 212.756615][ T40] audit: type=1400 audit(1781371700.048:7752): avc: denied { create } for pid=11887 comm="syz.0.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.787856][ T40] audit: type=1400 audit(1781371700.087:7753): avc: denied { read } for pid=11884 comm="syz.2.1702" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 212.795714][ T40] audit: type=1400 audit(1781371700.087:7754): avc: denied { open } for pid=11884 comm="syz.2.1702" path="/354/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 212.819808][T11892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.823651][T11892] block device autoloading is deprecated and will be removed. [ 212.830541][T11885] md: md2 stopped. [ 212.833681][ T40] audit: type=1400 audit(1781371700.127:7755): avc: denied { ioctl } for pid=11884 comm="syz.2.1702" path="/354/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 212.864208][T11885] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 212.892013][T11908] cgroup2: Unknown parameter 'euid<00000000000000060929' [ 212.895118][T11908] cgroup2: Unknown parameter 'euid<00000000000000060929' [ 212.955492][T11913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1707'. [ 212.960792][T11913] overlayfs: failed to clone upperpath [ 213.053724][T11923] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 213.064672][T11923] bond7: entered promiscuous mode [ 213.066429][T11923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.070309][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 213.073153][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 213.087331][T11923] bond7: (slave bridge4): making interface the new active one [ 213.089807][T11923] bridge4: entered promiscuous mode [ 213.092451][T11923] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 213.230782][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 213.382159][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 213.386638][ T10] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 213.389683][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.392282][ T10] usb 9-1: Product: syz [ 213.393659][ T10] usb 9-1: Manufacturer: syz [ 213.395163][ T10] usb 9-1: SerialNumber: syz [ 213.399162][ T10] usb 9-1: config 0 descriptor?? [ 213.405929][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 213.408801][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 213.414055][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.417537][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 213.420888][ T10] usb 9-1: media controller created [ 213.428140][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.451853][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 213.454714][T11938] netlink: 'syz.3.1716': attribute type 30 has an invalid length. [ 213.457191][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 213.460501][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 213.463343][T11938] netlink: 'syz.3.1716': attribute type 30 has an invalid length. [ 213.465807][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 213.608496][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 213.635288][ T10] DVB: Unable to find symbol mt352_attach() [ 213.637185][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 213.685549][ T10] rc_core: IR keymap rc-dvico-portable not found [ 213.688252][ T10] Registered IR keymap rc-empty [ 213.692948][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 213.699635][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input25 [ 213.706396][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 213.709346][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 213.812100][T11919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.815741][T11919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.818483][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 213.891053][ T985] usb 9-1: USB disconnect, device number 6 [ 213.914191][ T985] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 214.046003][T11954] cifs: Bad value for 'gid' [ 214.047499][T11954] cifs: Bad value for 'gid' [ 214.078785][T11956] openvswitch: netlink: Missing key (keys=40, expected=100) [ 214.277732][T11963] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1722'. [ 214.520091][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 214.520106][ T40] audit: type=1400 audit(1781371701.798:7765): avc: denied { write } for pid=11984 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.614874][ T40] audit: type=1400 audit(1781371701.887:7766): avc: denied { write } for pid=11987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.675687][ T40] audit: type=1400 audit(1781371701.947:7767): avc: denied { bind } for pid=12002 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 214.682777][ T40] audit: type=1326 audit(1781371701.957:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.3.1731" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2079ce59 code=0x0 [ 214.704514][ T40] audit: type=1400 audit(1781371701.977:7769): avc: denied { write } for pid=12001 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.748851][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 214.752949][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 214.833958][ T40] audit: type=1400 audit(1781371702.105:7770): avc: denied { write } for pid=12018 comm="syz.4.1736" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.834053][T12019] random: crng reseeded on system resumption [ 214.844476][ T40] audit: type=1400 audit(1781371702.115:7771): avc: denied { write } for pid=12002 comm="syz.3.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 214.853032][ T40] audit: type=1400 audit(1781371702.125:7772): avc: denied { ioctl } for pid=12018 comm="syz.4.1736" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.853285][T12020] Restarting kernel threads ... [ 214.862393][ T40] audit: type=1400 audit(1781371702.125:7773): avc: denied { write } for pid=12018 comm="syz.4.1736" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 214.876605][T12020] Done restarting kernel threads. [ 215.354788][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805851c800: rx timeout, send abort [ 215.364790][ T40] audit: type=1400 audit(1781371702.640:7774): avc: denied { read } for pid=5131 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 215.538411][T12043] Invalid ELF header type: 0 != 1 [ 215.541894][T12043] Invalid ELF header type: 3 != 1 [ 215.543750][T12043] Invalid ELF header type: 2 != 1 [ 215.552460][T12043] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 215.859720][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805851d400: rx timeout, send abort [ 215.864153][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805851c800: abort rx timeout. Force session deactivation [ 216.301605][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 216.367665][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805851d400: abort rx timeout. Force session deactivation [ 216.433016][ T34] usb 9-1: device descriptor read/64, error -71 [ 216.675511][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 216.806417][ T34] usb 9-1: device descriptor read/64, error -71 [ 216.917498][ T34] usb usb9-port1: attempt power cycle [ 216.972824][T12105] overlayfs: failed to clone lowerpath [ 217.042303][T12109] overlayfs: failed to clone upperpath [ 217.184808][T12114] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 217.190310][T12114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.194717][T12114] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 217.198425][T12114] overlayfs: maximum fs stacking depth exceeded [ 217.260288][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 217.282279][ T34] usb 9-1: device descriptor read/8, error -71 [ 217.522446][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 217.542882][ T34] usb 9-1: device descriptor read/8, error -71 [ 217.653690][ T34] usb usb9-port1: unable to enumerate USB device [ 218.399288][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 218.406391][T12179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.775132][T12200] Invalid source name [ 218.776674][T12200] UBIFS error (pid: 12200): cannot open "ubifs", error -22 [ 218.780811][T12200] usb usb8: usbfs: process 12200 (syz.3.1789) did not claim interface 0 before use [ 218.953199][T12207] sctp: [Deprecated]: syz.2.1792 (pid 12207) Use of int in max_burst socket option deprecated. [ 218.953199][T12207] Use struct sctp_assoc_value instead [ 219.094095][T12215] pimreg: entered allmulticast mode [ 219.639389][T12255] binder: BINDER_SET_CONTEXT_MGR already set [ 219.641685][T12255] binder: 12254:12255 ioctl 4018620d 200000000100 returned -16 [ 219.716904][T12257] xt_hashlimit: size too large, truncated to 1048576 [ 219.786517][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1812'. [ 219.839145][T12268] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1815'. [ 219.840582][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 219.844962][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 219.852129][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1815'. [ 219.856390][ T8700] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.861485][ T8700] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.865338][ T8700] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.869352][ T8700] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.897760][T12272] random: crng reseeded on system resumption [ 219.961902][T12274] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 219.992650][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 219.992661][ T40] audit: type=1400 audit(1781371707.231:7793): avc: denied { setopt } for pid=12277 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.128664][ T40] audit: type=1326 audit(1781371707.360:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.2.1823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa05d39ce59 code=0x0 [ 220.430150][ T40] audit: type=1400 audit(1781371707.658:7795): avc: denied { mounton } for pid=12316 comm="syz.0.1831" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.432481][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 220.443060][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1830'. [ 220.517015][T12325] ip6t_srh: unknown srh invflags 51E8 [ 220.618974][T12328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1836'. [ 220.877821][ T59] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 221.019159][T12353] fuse: fd is not a fuse device [ 221.035484][T12351] pim6reg: entered allmulticast mode [ 221.050706][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 221.062710][ T59] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.067548][ T59] usb 9-1: config 0 has no interfaces? [ 221.070772][ T59] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.073980][ T59] usb 9-1: config 0 has no interfaces? [ 221.076963][ T59] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.081538][ T59] usb 9-1: config 0 has no interfaces? [ 221.085548][ T59] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.088648][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.091455][ T59] usb 9-1: Product: syz [ 221.092755][ T59] usb 9-1: Manufacturer: syz [ 221.094233][ T59] usb 9-1: SerialNumber: syz [ 221.097078][ T59] usb 9-1: config 0 descriptor?? [ 221.131639][T12366] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1845'. [ 221.456319][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.466614][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.470574][ T5754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.479676][ T5754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.489491][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.778150][T12392] wg2 speed is unknown, defaulting to 1000 [ 221.819672][T12416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12416 comm=syz.2.1857 [ 221.876043][T12392] xfrm0 speed is unknown, defaulting to 1000 [ 221.922605][T12421] binder: BINDER_SET_CONTEXT_MGR already set [ 221.927840][T12421] binder: 12420:12421 ioctl 4018620d 200000000100 returned -16 [ 221.940888][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 222.321110][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.324833][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.328281][T12392] bridge_slave_0: entered allmulticast mode [ 222.347568][T12392] bridge_slave_0: entered promiscuous mode [ 222.352133][T12449] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 222.356327][T12449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.362891][T12449] team0: Port device netdevsim1 added [ 222.365511][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.368086][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.370769][T12392] bridge_slave_1: entered allmulticast mode [ 222.373487][T12392] bridge_slave_1: entered promiscuous mode [ 222.415780][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.420288][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.434624][T12392] team0: Port device team_slave_0 added [ 222.437627][T12392] team0: Port device team_slave_1 added [ 222.454665][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.456796][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.456811][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.457608][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.457616][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.457629][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.492435][T12455] wg2 speed is unknown, defaulting to 1000 [ 222.593226][T12392] hsr_slave_0: entered promiscuous mode [ 222.596384][T12459] autofs4:pid:12459:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 222.600601][T12392] hsr_slave_1: entered promiscuous mode [ 222.605212][T12392] debugfs: 'hsr0' already exists in 'hsr' [ 222.607260][T12392] Cannot create hsr debugfs directory [ 222.737380][T12455] xfrm0 speed is unknown, defaulting to 1000 [ 222.740740][T12456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12456 comm=syz.2.1867 [ 222.833703][ T40] audit: type=1400 audit(1781371710.052:7796): avc: denied { ioctl } for pid=12470 comm="syz.3.1871" path="socket:[45104]" dev="sockfs" ino=45104 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.841794][T12471] xt_hashlimit: size too large, truncated to 1048576 [ 223.233555][ T5885] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 223.405680][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 223.410234][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 223.414668][ T5885] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 223.417884][ T5885] usb 8-1: config 8 has no interface number 0 [ 223.420275][ T5885] usb 8-1: config 8 interface 188 has no altsetting 0 [ 223.428338][ T5885] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 223.431513][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.435183][ T5885] usb 8-1: Product: syz [ 223.436917][ T5885] usb 8-1: Manufacturer: syz [ 223.438578][ T5885] usb 8-1: SerialNumber: syz [ 223.561125][T12392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.566414][ T5754] Bluetooth: hci4: command tx timeout [ 223.576005][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.579731][T12392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.585570][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.589457][T12392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.595996][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.599769][T12392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.608456][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.645454][T12507] afs: Unknown parameter 'dynyd兪U[("P^*mrQz[ VV᠒K!JrZ$` v:7;"d(w 0ϲΐ-w<ߚIJE |y4QOze@s^e yM"ɕM/ [ 223.645454][T12507] C9Q@m#q }*8M3'h la#YjSЭZH [ 223.645454][T12507] &k7RU [ 223.645454][T12507] LLC-0)|+-6-+*1;;o{*^V!/u2Y8*^oMYB-Qƫz򗈿' [ 223.676886][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.683244][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.690491][ T985] usb 9-1: USB disconnect, device number 11 [ 223.702861][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.728552][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.738922][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.741965][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.759433][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.762545][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.773285][ T5754] Bluetooth: hci2: ACL packet too small [ 223.849832][T12509] wg2 speed is unknown, defaulting to 1000 [ 223.941413][T12514] binfmt_misc: register: failed to install interpreter file ./file1 [ 223.951034][ T5885] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 223.958682][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 223.960557][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 223.976138][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.982135][ T5885] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 223.985073][ T5885] usb 8-1: media controller created [ 223.986932][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 223.988844][ T5885] dw2102: i2c transfer failed. [ 223.991819][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 223.994808][ T5885] dw2102: i2c transfer failed. [ 224.000820][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 224.004541][ T5885] dw2102: i2c transfer failed. [ 224.006173][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 224.008694][ T5885] dw2102: i2c transfer failed. [ 224.010244][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 224.012085][ T5885] dw2102: i2c transfer failed. [ 224.013645][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 224.015449][ T5885] dw2102: i2c transfer failed. [ 224.019633][ T5885] dvb-usb: MAC address: 02:02:02:02:02:02 [ 224.029540][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.058349][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 224.062011][ T5885] dw2102: command 0x0e transfer failed. [ 224.064522][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 224.067342][ T5885] dw2102: command 0x0e transfer failed. [ 224.092306][T12509] xfrm0 speed is unknown, defaulting to 1000 [ 224.151001][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.180349][T12392] veth0_vlan: entered promiscuous mode [ 224.185732][T12392] veth1_vlan: entered promiscuous mode [ 224.217530][ T1223] bridge_slave_1: left allmulticast mode [ 224.219738][ T1223] bridge_slave_1: left promiscuous mode [ 224.221579][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.225631][ T1223] bridge_slave_0: left allmulticast mode [ 224.228115][ T1223] bridge_slave_0: left promiscuous mode [ 224.232322][ T1223] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.371930][ T8700] smbdirect: ib_dev[syz1] removed [ 224.380027][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 224.381826][ T5885] dw2102: command 0x0e transfer failed. [ 224.383571][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 224.385901][ T5885] dw2102: command 0x0e transfer failed. [ 224.388508][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 224.392689][ T5885] dw2102: command 0x51 transfer failed. [ 224.397084][T12539] gfs2: error -5 reading superblock [ 224.417799][ T5885] DVB: Unable to find symbol ds3000_attach() [ 224.419776][ T5885] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 224.461886][ T1223] bridge0 (unregistering): left allmulticast mode [ 224.479716][ T5885] rc_core: IR keymap rc-su3000 not found [ 224.481506][ T5885] Registered IR keymap rc-empty [ 224.484069][ T5885] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 224.488022][ T5885] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input26 [ 224.492524][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 224.495134][ T5885] dw2102: su3000_power_ctrl: 0, initialized 1 [ 224.497132][ T5885] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 224.501003][ T5885] usb 8-1: USB disconnect, device number 18 [ 224.539808][ T5885] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 224.672665][ T1223] team0: Port device bond0 removed [ 224.676133][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.687107][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.701192][ T1223] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 224.707961][ T1223] bond0 (unregistering): Released all slaves [ 224.716522][ T1223] bond1 (unregistering): Released all slaves [ 224.729840][ T1223] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 224.734820][ T1223] bond2 (unregistering): Released all slaves [ 224.746475][ T1223] bond3 (unregistering): Released all slaves [ 224.760139][ T1223] bond4 (unregistering): Released all slaves [ 224.776113][ T1223] bond5 (unregistering): Released all slaves [ 224.789953][ T1223] bond6 (unregistering): Released all slaves [ 224.806655][ T1223] bond7 (unregistering): Released all slaves [ 224.816232][ T1223] bond8 (unregistering): Released all slaves [ 224.829217][T12392] veth0_macvtap: entered promiscuous mode [ 224.842518][T12392] veth1_macvtap: entered promiscuous mode [ 224.875442][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.880640][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.890897][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.914537][ T8697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.918449][ T8697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.941417][ T8697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.977281][ T1223] : left promiscuous mode [ 225.226103][ T1223] tipc: Disabling bearer [ 225.227859][ T1223] tipc: Left network mode [ 225.230293][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.233127][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.265770][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.268652][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.335744][ T1490] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 225.392154][T12572] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 225.421579][T12572] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 225.457470][ T40] audit: type=1400 audit(1781371712.658:7797): avc: denied { setattr } for pid=12576 comm="syz.2.1894" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 225.487556][ T1490] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.492634][ T1490] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.496412][ T1490] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.499541][ T1490] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.529815][T12553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.544806][ T1490] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.645856][ T5754] Bluetooth: hci4: command tx timeout [ 225.744583][ T1490] usb 8-1: USB disconnect, device number 19 [ 225.779819][ T1223] hsr_slave_0: left promiscuous mode [ 225.788790][ T1223] hsr_slave_1: left promiscuous mode [ 225.798761][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.805180][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.985371][T12553] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 226.022498][ T40] audit: type=1400 audit(1781371713.215:7798): avc: denied { write } for pid=12591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.074553][ T1223] team0 (unregistering): Port device team_slave_1 removed [ 226.086772][T12597] __nla_validate_parse: 4 callbacks suppressed [ 226.086865][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 226.127984][ T58] smc: removing ib device syz2 [ 226.173279][ T58] smbdirect: ib_dev[syz2] removed [ 226.190253][ T40] audit: type=1400 audit(1781371713.384:7799): avc: denied { write } for pid=12601 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.298767][T12550] kexec: Could not allocate control_code_buffer [ 226.445915][T12594] bond5: (slave bridge5): making interface the new active one [ 226.464097][T12594] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 226.505069][T12606] syzkaller0: entered promiscuous mode [ 226.507510][T12606] syzkaller0: entered allmulticast mode [ 226.552616][T12599] 9p: Could not find request transport: virtiov0he=mmap [ 227.050034][T12634] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.245631][T12654] could not open pipe file descriptor [ 227.252222][T12658] Invalid/unusable pipe [ 227.252598][T12657] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1911'. [ 227.444015][T12682] fuse: Bad value for 'fd' [ 227.582656][ T40] audit: type=1400 audit(1781371714.768:7800): avc: denied { ioctl } for pid=12687 comm="syz.4.1919" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 227.586422][T12688] QAT: Device 29 not found [ 227.625158][ T1490] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 227.745890][ T5754] Bluetooth: hci4: command tx timeout [ 227.756983][ T40] audit: type=1400 audit(1781371714.947:7801): avc: denied { ioctl } for pid=12695 comm="syz.0.1922" path="socket:[44836]" dev="sockfs" ino=44836 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.787613][ T1490] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.791210][ T1490] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.795367][ T1490] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.799566][ T1490] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.807705][ T1490] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.812601][ T1490] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.816170][ T1490] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.819061][ T1490] usb 8-1: Product: syz [ 227.820816][ T1490] usb 8-1: Manufacturer: syz [ 227.821925][ T40] audit: type=1400 audit(1781371715.007:7802): avc: denied { write } for pid=12695 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.824788][ T1490] cdc_wdm 8-1:1.0: skipping garbage [ 227.825364][T12697] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 227.835258][ T1490] cdc_wdm 8-1:1.0: skipping garbage [ 227.843263][ T1490] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 227.845132][ T1490] cdc_wdm 8-1:1.0: Unknown control protocol [ 227.910209][T12699] overlay: ./file0 is not a directory [ 228.029578][ T40] audit: type=1400 audit(1781371715.216:7803): avc: denied { read write } for pid=12669 comm="syz.3.1915" name="cdc-wdm0" dev="devtmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 228.039193][T12671] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 228.040088][T12671] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 228.045473][ T40] audit: type=1400 audit(1781371715.226:7804): avc: denied { open } for pid=12669 comm="syz.3.1915" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 228.074569][T12671] bond6: (slave geneve4): making interface the new active one [ 228.078134][T12671] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 228.082592][ T8696] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.083725][ T34] usb 8-1: USB disconnect, device number 20 [ 228.085526][ T8696] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.091200][ T8696] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.093741][ T8696] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.327756][ T40] audit: type=1400 audit(1781371715.505:7805): avc: denied { accept } for pid=12710 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 228.378395][T12715] syzkaller1: entered promiscuous mode [ 228.378409][T12715] syzkaller1: entered allmulticast mode [ 228.392421][ T40] audit: type=1400 audit(1781371715.574:7806): avc: denied { mount } for pid=12713 comm="syz.2.1927" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 228.515766][T12719] netlink: 'syz.2.1928': attribute type 39 has an invalid length. [ 228.516389][T12720] netlink: 'syz.2.1928': attribute type 39 has an invalid length. [ 239.049090][ T5754] Bluetooth: hci4: command tx timeout [ 239.050965][ T5754] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 239.055282][ T5754] Bluetooth: hci1: Injecting HCI hardware error event [ 239.058629][ T5739] Bluetooth: hci1: hardware error 0x00 [ 239.086954][T12740] misc userio: Invalid payload size [ 239.229021][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 239.229039][ T40] audit: type=1400 audit(1781371982.396:7808): avc: denied { append } for pid=12751 comm="syz.4.1938" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.358704][T12754] netlink: 'syz.0.1937': attribute type 10 has an invalid length. [ 239.369164][T12754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.372849][T12754] team0: Port device netdevsim1 added [ 239.410051][ T40] audit: type=1400 audit(1781371982.596:7809): avc: denied { setattr } for pid=12765 comm="syz.2.1942" name="file0" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 239.419788][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 239.437228][T12766] syz_tun (unregistering): left allmulticast mode [ 239.440192][T12766] syz_tun (unregistering): left promiscuous mode [ 239.445968][T12766] bridge0: port 3(syz_tun) entered disabled state [ 239.543383][T12761] pimreg: left allmulticast mode [ 239.609603][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1940'. [ 239.847196][ T40] audit: type=1400 audit(1781371983.026:7810): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 240.159920][ T34] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 240.306783][T12821] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1958'. [ 240.311518][ T34] usb 8-1: not running at top speed; connect to a high speed hub [ 240.315538][ T34] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 240.322081][ T34] usb 8-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice= 0.40 [ 240.326248][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.339906][ T34] usb 8-1: Product: ы [ 240.341439][ T34] usb 8-1: Manufacturer: 퇬ꅋ킵赈뺘仞랷 ㊎틁康陇麪㐼Ⱍ쭢䝣囝糰㮹᎗娼Ꮁ⒂鞬㙆얌鎦쒫搐킽瓿䷮䇚澊⹖立剩떀䢬ꊽ쀨滕 [ 240.346977][ T34] usb 8-1: SerialNumber: Г [ 240.392796][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 240.401504][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 240.417735][T12829] netlink: 'syz.2.1961': attribute type 5 has an invalid length. [ 240.428010][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 240.431234][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 240.563562][ T34] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 240.754658][T12865] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 240.768265][T12865] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 240.906508][T12878] netlink: 'syz.0.1974': attribute type 3 has an invalid length. [ 240.909645][T12878] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 241.110280][ T5739] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 241.220083][ T845] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 241.333284][ T34] usb 8-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 241.337371][ T34] usb 8-1: found format II with max.bitrate = 255, frame size=11955 [ 241.340066][ T34] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 241.342555][ T34] usb 8-1: unit 2 not found! [ 241.361041][ T34] usb 8-1: USB disconnect, device number 21 [ 241.377065][ T8017] udevd[8017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.415157][ T845] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.418331][ T845] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.428362][ T845] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.431378][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.470666][ T40] audit: type=1326 audit(1781371984.656:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.3.1976" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f2079ce59 code=0x0 [ 241.551868][ T5754] block nbd4: Receive control failed (result -32) [ 241.559707][T12876] block nbd4: shutting down sockets [ 241.604320][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.607386][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.615979][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.621114][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.626128][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.678090][ T845] usb 5-1: usb_control_msg returned -32 [ 241.680236][ T845] usbtmc 5-1:16.0: can't read capabilities [ 242.533875][T12902] netlink: 'syz.3.1981': attribute type 12 has an invalid length. [ 242.536349][T12902] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 242.542272][T12902] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1981'. [ 242.545484][T12902] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 242.548031][T12902] netlink: 'syz.3.1981': attribute type 2 has an invalid length. [ 242.551510][T12902] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1981'. [ 242.646726][T12905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.817705][T12912] comedi comedi0: pcl726: I/O base address or length out of range [ 242.944499][T12917] bridge7: entered promiscuous mode [ 243.082568][T12925] macsec1: entered promiscuous mode [ 243.237897][T12927] nbd: must specify a size in bytes for the device [ 243.601948][T12932] input: syz0 as /devices/virtual/input/input27 [ 243.625212][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 243.627972][T12932] netlink: 'syz.4.1992': attribute type 15 has an invalid length. [ 243.995118][ T5885] usb 5-1: USB disconnect, device number 16 [ 244.080520][T12951] [U]  [ 244.302642][T12956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.306155][T12956] block device autoloading is deprecated and will be removed. [ 244.408726][T12962] FAULT_INJECTION: forcing a failure. [ 244.408726][T12962] name failslab, interval 1, probability 0, space 0, times 1 [ 244.414895][T12962] CPU: 1 UID: 0 PID: 12962 Comm: syz.0.2001 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.414913][T12962] Tainted: [L]=SOFTLOCKUP [ 244.414917][T12962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.414924][T12962] Call Trace: [ 244.414928][T12962] [ 244.414949][T12962] dump_stack_lvl+0x100/0x190 [ 244.414972][T12962] should_fail_ex.cold+0x5/0xa [ 244.414987][T12962] ? tomoyo_realpath_from_path+0xb6/0x690 [ 244.415009][T12962] should_failslab+0xc2/0x120 [ 244.415022][T12962] __kmalloc_noprof+0xe0/0x850 [ 244.415038][T12962] ? kfree+0x1dd/0x6c0 [ 244.415055][T12962] tomoyo_realpath_from_path+0xb6/0x690 [ 244.415076][T12962] tomoyo_path_number_perm+0x23c/0x580 [ 244.415091][T12962] ? tomoyo_path_number_perm+0x22e/0x580 [ 244.415106][T12962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.415136][T12962] ? find_held_lock+0x2b/0x80 [ 244.415147][T12962] ? __fget_files+0x215/0x3d0 [ 244.415162][T12962] ? hook_file_ioctl_common+0x149/0x410 [ 244.415174][T12962] ? __fget_files+0x215/0x3d0 [ 244.415190][T12962] ? __fget_files+0x21f/0x3d0 [ 244.415206][T12962] security_file_ioctl+0xd3/0x230 [ 244.415223][T12962] __x64_sys_ioctl+0xb7/0x210 [ 244.415236][T12962] do_syscall_64+0x115/0x870 [ 244.415259][T12962] ? clear_bhb_loop+0x40/0x90 [ 244.415272][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.415283][T12962] RIP: 0033:0x7f3c9e19ce59 [ 244.415294][T12962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.415309][T12962] RSP: 002b:00007f3c9effe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.415324][T12962] RAX: ffffffffffffffda RBX: 00007f3c9e416090 RCX: 00007f3c9e19ce59 [ 244.415334][T12962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 244.415344][T12962] RBP: 00007f3c9effe090 R08: 0000000000000000 R09: 0000000000000000 [ 244.415353][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.415362][T12962] R13: 00007f3c9e416128 R14: 00007f3c9e416090 R15: 00007ffd08f70b08 [ 244.415384][T12962] [ 244.415418][T12962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.818779][T12978] xt_cluster: node mask cannot exceed total number of nodes [ 245.041215][T13012] __nla_validate_parse: 2 callbacks suppressed [ 245.041230][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 245.094983][T13018] FAULT_INJECTION: forcing a failure. [ 245.094983][T13018] name failslab, interval 1, probability 0, space 0, times 0 [ 245.098839][T13018] CPU: 1 UID: 0 PID: 13018 Comm: syz.0.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.098856][T13018] Tainted: [L]=SOFTLOCKUP [ 245.098860][T13018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.098867][T13018] Call Trace: [ 245.098871][T13018] [ 245.098875][T13018] dump_stack_lvl+0x100/0x190 [ 245.098892][T13018] should_fail_ex.cold+0x5/0xa [ 245.098908][T13018] ? tomoyo_encode2+0xfb/0x3c0 [ 245.098924][T13018] should_failslab+0xc2/0x120 [ 245.098937][T13018] __kmalloc_noprof+0xe0/0x850 [ 245.098957][T13018] tomoyo_encode2+0xfb/0x3c0 [ 245.098976][T13018] tomoyo_encode+0x29/0x50 [ 245.098992][T13018] tomoyo_realpath_from_path+0x18c/0x690 [ 245.099013][T13018] tomoyo_path_number_perm+0x23c/0x580 [ 245.099029][T13018] ? tomoyo_path_number_perm+0x22e/0x580 [ 245.099045][T13018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.099074][T13018] ? find_held_lock+0x2b/0x80 [ 245.099083][T13018] ? __fget_files+0x215/0x3d0 [ 245.099096][T13018] ? hook_file_ioctl_common+0x149/0x410 [ 245.099107][T13018] ? __fget_files+0x215/0x3d0 [ 245.099123][T13018] ? __fget_files+0x21f/0x3d0 [ 245.099140][T13018] security_file_ioctl+0xd3/0x230 [ 245.099157][T13018] __x64_sys_ioctl+0xb7/0x210 [ 245.099169][T13018] do_syscall_64+0x115/0x870 [ 245.099184][T13018] ? clear_bhb_loop+0x40/0x90 [ 245.099197][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.099208][T13018] RIP: 0033:0x7f3c9e19ce59 [ 245.099218][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.099229][T13018] RSP: 002b:00007f3c9effe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.099240][T13018] RAX: ffffffffffffffda RBX: 00007f3c9e416090 RCX: 00007f3c9e19ce59 [ 245.099247][T13018] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 245.099253][T13018] RBP: 00007f3c9effe090 R08: 0000000000000000 R09: 0000000000000000 [ 245.099259][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.099265][T13018] R13: 00007f3c9e416128 R14: 00007f3c9e416090 R15: 00007ffd08f70b08 [ 245.099280][T13018] [ 245.099289][T13018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.333946][ T34] hid-generic 0005:0007:0007.000A: item fetching failed at offset 0/2 [ 245.339258][ T34] hid-generic 0005:0007:0007.000A: probe with driver hid-generic failed with error -22 [ 245.359943][ T5885] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 245.509957][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 245.515726][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 245.520400][ T5885] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.526590][ T5885] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 245.530316][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.532916][ T5885] usb 8-1: Product: syz [ 245.534263][ T5885] usb 8-1: Manufacturer: syz [ 245.535980][ T5885] usb 8-1: SerialNumber: syz [ 245.579909][ T1490] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 245.731646][ T1490] usb 5-1: config 0 has no interfaces? [ 245.734065][ T1490] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 245.737354][ T1490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.741800][ T1490] usb 5-1: config 0 descriptor?? [ 245.753487][ T5885] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.757263][ T5885] usb 8-1: MIDIStreaming interface descriptor not found [ 245.783293][ T5885] usb 8-1: USB disconnect, device number 22 [ 245.844452][ T8038] udevd[8038]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.950863][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2016'. [ 245.953708][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2016'. [ 246.125851][ T5885] usb 5-1: USB disconnect, device number 17 [ 246.386286][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2019'. [ 246.502487][T13043] binder: 13042:13043 ioctl c040aed4 200000000040 returned -22 [ 246.598229][ T40] audit: type=1800 audit(1781371989.776:7812): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2020" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 246.772498][T13066] FAULT_INJECTION: forcing a failure. [ 246.772498][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 246.777811][T13066] CPU: 3 UID: 0 PID: 13066 Comm: syz.0.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.777829][T13066] Tainted: [L]=SOFTLOCKUP [ 246.777833][T13066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.777839][T13066] Call Trace: [ 246.777857][T13066] [ 246.777863][T13066] dump_stack_lvl+0x100/0x190 [ 246.777880][T13066] should_fail_ex.cold+0x5/0xa [ 246.777909][T13066] should_failslab+0xc2/0x120 [ 246.777922][T13066] __kmalloc_cache_noprof+0x7a/0x6f0 [ 246.777938][T13066] ? vhost_task_create+0xee/0x370 [ 246.777952][T13066] ? trace_contention_end+0x122/0x170 [ 246.777968][T13066] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 246.777986][T13066] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 246.777999][T13066] vhost_task_create+0xee/0x370 [ 246.778013][T13066] ? __pfx_vhost_task_create+0x10/0x10 [ 246.778027][T13066] ? register_lock_class+0x40/0x560 [ 246.778045][T13066] ? __pfx_vhost_task_fn+0x10/0x10 [ 246.778061][T13066] ? __pfx___mutex_lock+0x10/0x10 [ 246.778076][T13066] ? kasan_quarantine_put+0x104/0x240 [ 246.778097][T13066] kvm_mmu_post_init_vm+0x1b3/0x370 [ 246.778114][T13066] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 246.778135][T13066] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 246.778150][T13066] kvm_vcpu_ioctl+0x730/0x1720 [ 246.778163][T13066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.778174][T13066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.778188][T13066] ? do_vfs_ioctl+0x226/0x13e0 [ 246.778200][T13066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.778214][T13066] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.778236][T13066] ? __fget_files+0x215/0x3d0 [ 246.778249][T13066] ? hook_file_ioctl_common+0x149/0x410 [ 246.778265][T13066] ? selinux_file_ioctl+0x13b/0x290 [ 246.778281][T13066] ? selinux_file_ioctl+0xb6/0x290 [ 246.778298][T13066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.778310][T13066] __x64_sys_ioctl+0x18e/0x210 [ 246.778322][T13066] do_syscall_64+0x115/0x870 [ 246.778336][T13066] ? clear_bhb_loop+0x40/0x90 [ 246.778350][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.778361][T13066] RIP: 0033:0x7f3c9e19ce59 [ 246.778370][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.778381][T13066] RSP: 002b:00007f3c9effe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.778392][T13066] RAX: ffffffffffffffda RBX: 00007f3c9e416090 RCX: 00007f3c9e19ce59 [ 246.778399][T13066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 246.778405][T13066] RBP: 00007f3c9effe090 R08: 0000000000000000 R09: 0000000000000000 [ 246.778411][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.778417][T13066] R13: 00007f3c9e416128 R14: 00007f3c9e416090 R15: 00007ffd08f70b08 [ 246.778432][T13066] [ 246.785681][T13065] fuse: Bad value for 'fd' [ 247.131000][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 247.206966][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.209026][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.212342][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.215828][T13092] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 247.222410][T13092] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 247.226850][T13096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 247.228973][T13092] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 247.229737][T13096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.236043][T13096] vhci_hcd vhci_hcd.0: Device attached [ 247.242692][T13097] vhci_hcd: connection closed [ 247.242944][ T8690] vhci_hcd vhci_hcd.0: stop threads [ 247.248137][T13092] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.248969][ T8690] vhci_hcd vhci_hcd.0: release socket [ 247.255896][ T8690] vhci_hcd vhci_hcd.0: disconnect device [ 247.283604][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.297341][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.301814][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.304608][T13092] xfrm0 speed is unknown, defaulting to 1000 [ 247.305990][T13100] SELinux: Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped). [ 247.329954][ T40] audit: type=1400 audit(1781371990.506:7813): avc: denied { relabelto } for pid=13099 comm="syz.2.2035" name="6lowpan_control" dev="debugfs" ino=5447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:lvm_control_t:s0" [ 247.338353][ T40] audit: type=1400 audit(1781371990.506:7814): avc: denied { associate } for pid=13099 comm="syz.2.2035" name="6lowpan_control" dev="debugfs" ino=5447 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lvm_control_t:s0" [ 247.443359][T13110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'. [ 247.446764][T13108] FAULT_INJECTION: forcing a failure. [ 247.446764][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 247.454709][T13108] CPU: 1 UID: 0 PID: 13108 Comm: syz.3.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.454727][T13108] Tainted: [L]=SOFTLOCKUP [ 247.454731][T13108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.454737][T13108] Call Trace: [ 247.454741][T13108] [ 247.454746][T13108] dump_stack_lvl+0x100/0x190 [ 247.454763][T13108] should_fail_ex.cold+0x5/0xa [ 247.454779][T13108] should_failslab+0xc2/0x120 [ 247.454792][T13108] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 247.454810][T13108] ? copy_process+0x69a/0x7ed0 [ 247.454828][T13108] ? mark_held_locks+0x40/0x70 [ 247.454845][T13108] copy_process+0x69a/0x7ed0 [ 247.454870][T13108] ? __pfx_copy_process+0x10/0x10 [ 247.454889][T13108] ? lockdep_init_map_type+0x5c/0x250 [ 247.454904][T13108] ? lockdep_init_map_type+0x5c/0x250 [ 247.454919][T13108] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 247.454933][T13108] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 247.454951][T13108] vhost_task_create+0x1db/0x370 [ 247.454966][T13108] ? __pfx_vhost_task_create+0x10/0x10 [ 247.454980][T13108] ? register_lock_class+0x40/0x560 [ 247.454997][T13108] ? __pfx_vhost_task_fn+0x10/0x10 [ 247.455014][T13108] ? __pfx___mutex_lock+0x10/0x10 [ 247.455029][T13108] ? kasan_quarantine_put+0x104/0x240 [ 247.455050][T13108] kvm_mmu_post_init_vm+0x1b3/0x370 [ 247.455067][T13108] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 247.455082][T13108] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 247.455098][T13108] kvm_vcpu_ioctl+0x730/0x1720 [ 247.455110][T13108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.455122][T13108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.455136][T13108] ? do_vfs_ioctl+0x226/0x13e0 [ 247.455148][T13108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 247.455160][T13108] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 247.455182][T13108] ? __fget_files+0x215/0x3d0 [ 247.455195][T13108] ? hook_file_ioctl_common+0x149/0x410 [ 247.455211][T13108] ? selinux_file_ioctl+0x13b/0x290 [ 247.455233][T13108] ? selinux_file_ioctl+0xb6/0x290 [ 247.455250][T13108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 247.455262][T13108] __x64_sys_ioctl+0x18e/0x210 [ 247.455274][T13108] do_syscall_64+0x115/0x870 [ 247.455289][T13108] ? clear_bhb_loop+0x40/0x90 [ 247.455302][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.455314][T13108] RIP: 0033:0x7f4f2079ce59 [ 247.455323][T13108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.455334][T13108] RSP: 002b:00007f4f1e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.455345][T13108] RAX: ffffffffffffffda RBX: 00007f4f20a15fa0 RCX: 00007f4f2079ce59 [ 247.455352][T13108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 247.455358][T13108] RBP: 00007f4f1e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.455364][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.455370][T13108] R13: 00007f4f20a16038 R14: 00007f4f20a15fa0 R15: 00007fffa2cc8dd8 [ 247.455385][T13108] [ 247.627846][T13117] validate_nla: 1 callbacks suppressed [ 247.627858][T13117] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 247.634618][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.639128][T13117] team0: entered promiscuous mode [ 247.641109][T13117] team_slave_0: entered promiscuous mode [ 247.643430][T13117] team_slave_1: entered promiscuous mode [ 247.647798][T13117] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 247.651647][T13117] bond0: (slave team0): Enslaving as an active interface with an up link [ 247.790296][T13127] loop9: detected capacity change from 0 to 127 [ 247.855716][T13129] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 248.072146][T13143] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2049'. [ 248.226652][T13147] FAULT_INJECTION: forcing a failure. [ 248.226652][T13147] name failslab, interval 1, probability 0, space 0, times 0 [ 248.231840][T13147] CPU: 2 UID: 0 PID: 13147 Comm: syz.3.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.231859][T13147] Tainted: [L]=SOFTLOCKUP [ 248.231863][T13147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.231869][T13147] Call Trace: [ 248.231874][T13147] [ 248.231878][T13147] dump_stack_lvl+0x100/0x190 [ 248.231895][T13147] should_fail_ex.cold+0x5/0xa [ 248.231911][T13147] should_failslab+0xc2/0x120 [ 248.231925][T13147] __kmalloc_cache_node_noprof+0x7d/0x770 [ 248.231937][T13147] ? __get_vm_area_node+0x101/0x330 [ 248.231952][T13147] __get_vm_area_node+0x101/0x330 [ 248.231967][T13147] __vmalloc_node_range_noprof+0x228/0x1630 [ 248.231982][T13147] ? vhost_task_create+0x1db/0x370 [ 248.231998][T13147] ? rcu_is_watching+0x12/0xc0 [ 248.232017][T13147] ? vhost_task_create+0x1db/0x370 [ 248.232035][T13147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.232053][T13147] ? rcu_is_watching+0x12/0xc0 [ 248.232073][T13147] ? trace_kmem_cache_alloc+0xd5/0x100 [ 248.232092][T13147] ? vhost_task_create+0x1db/0x370 [ 248.232111][T13147] __vmalloc_node_noprof+0xad/0xf0 [ 248.232133][T13147] ? vhost_task_create+0x1db/0x370 [ 248.232158][T13147] copy_process+0x7fb/0x7ed0 [ 248.232198][T13147] ? __pfx_copy_process+0x10/0x10 [ 248.232228][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 248.232251][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 248.232273][T13147] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 248.232294][T13147] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 248.232321][T13147] vhost_task_create+0x1db/0x370 [ 248.232343][T13147] ? __pfx_vhost_task_create+0x10/0x10 [ 248.232363][T13147] ? register_lock_class+0x40/0x560 [ 248.232391][T13147] ? __pfx_vhost_task_fn+0x10/0x10 [ 248.232416][T13147] ? __pfx___mutex_lock+0x10/0x10 [ 248.232440][T13147] ? kasan_quarantine_put+0x104/0x240 [ 248.232473][T13147] kvm_mmu_post_init_vm+0x1b3/0x370 [ 248.232499][T13147] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 248.232522][T13147] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 248.232545][T13147] kvm_vcpu_ioctl+0x730/0x1720 [ 248.232565][T13147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.232582][T13147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.232606][T13147] ? do_vfs_ioctl+0x226/0x13e0 [ 248.232625][T13147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.232642][T13147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 248.232676][T13147] ? __fget_files+0x215/0x3d0 [ 248.232696][T13147] ? hook_file_ioctl_common+0x149/0x410 [ 248.232712][T13147] ? selinux_file_ioctl+0x13b/0x290 [ 248.232728][T13147] ? selinux_file_ioctl+0xb6/0x290 [ 248.232745][T13147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.232757][T13147] __x64_sys_ioctl+0x18e/0x210 [ 248.232770][T13147] do_syscall_64+0x115/0x870 [ 248.232785][T13147] ? clear_bhb_loop+0x40/0x90 [ 248.232798][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.232810][T13147] RIP: 0033:0x7f4f2079ce59 [ 248.232820][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.232831][T13147] RSP: 002b:00007f4f1e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.232842][T13147] RAX: ffffffffffffffda RBX: 00007f4f20a15fa0 RCX: 00007f4f2079ce59 [ 248.232849][T13147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 248.232855][T13147] RBP: 00007f4f1e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.232862][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.232868][T13147] R13: 00007f4f20a16038 R14: 00007f4f20a15fa0 R15: 00007fffa2cc8dd8 [ 248.232883][T13147] [ 248.233035][T13147] syz.3.2051: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 248.299901][ T34] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 248.300692][T13147] ,cpuset=/,mems_allowed=0-1 [ 248.370176][T13147] CPU: 2 UID: 0 PID: 13147 Comm: syz.3.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.370201][T13147] Tainted: [L]=SOFTLOCKUP [ 248.370207][T13147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.370217][T13147] Call Trace: [ 248.370223][T13147] [ 248.370229][T13147] dump_stack_lvl+0x100/0x190 [ 248.370254][T13147] warn_alloc.cold+0x95/0x1c1 [ 248.370274][T13147] ? __pfx_warn_alloc+0x10/0x10 [ 248.370299][T13147] ? trace_kmalloc+0xe3/0x110 [ 248.370320][T13147] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 248.370342][T13147] ? __kasan_kmalloc+0x8a/0xb0 [ 248.370358][T13147] ? __get_vm_area_node+0x208/0x330 [ 248.370384][T13147] __vmalloc_node_range_noprof+0xccd/0x1630 [ 248.370408][T13147] ? rcu_is_watching+0x12/0xc0 [ 248.370439][T13147] ? vhost_task_create+0x1db/0x370 [ 248.370470][T13147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.370498][T13147] ? rcu_is_watching+0x12/0xc0 [ 248.370522][T13147] ? trace_kmem_cache_alloc+0xd5/0x100 [ 248.370544][T13147] ? vhost_task_create+0x1db/0x370 [ 248.370564][T13147] __vmalloc_node_noprof+0xad/0xf0 [ 248.370586][T13147] ? vhost_task_create+0x1db/0x370 [ 248.370611][T13147] copy_process+0x7fb/0x7ed0 [ 248.370653][T13147] ? __pfx_copy_process+0x10/0x10 [ 248.370682][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 248.370706][T13147] ? lockdep_init_map_type+0x5c/0x250 [ 248.370728][T13147] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 248.370749][T13147] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 248.370777][T13147] vhost_task_create+0x1db/0x370 [ 248.370798][T13147] ? __pfx_vhost_task_create+0x10/0x10 [ 248.370817][T13147] ? register_lock_class+0x40/0x560 [ 248.370844][T13147] ? __pfx_vhost_task_fn+0x10/0x10 [ 248.370868][T13147] ? __pfx___mutex_lock+0x10/0x10 [ 248.370891][T13147] ? kasan_quarantine_put+0x104/0x240 [ 248.370922][T13147] kvm_mmu_post_init_vm+0x1b3/0x370 [ 248.370947][T13147] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 248.370976][T13147] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 248.370998][T13147] kvm_vcpu_ioctl+0x730/0x1720 [ 248.371019][T13147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.371037][T13147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.371058][T13147] ? do_vfs_ioctl+0x226/0x13e0 [ 248.371077][T13147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.371095][T13147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 248.371130][T13147] ? __fget_files+0x215/0x3d0 [ 248.371151][T13147] ? hook_file_ioctl_common+0x149/0x410 [ 248.371176][T13147] ? selinux_file_ioctl+0x13b/0x290 [ 248.371203][T13147] ? selinux_file_ioctl+0xb6/0x290 [ 248.371230][T13147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.371249][T13147] __x64_sys_ioctl+0x18e/0x210 [ 248.371270][T13147] do_syscall_64+0x115/0x870 [ 248.371291][T13147] ? clear_bhb_loop+0x40/0x90 [ 248.371312][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.371329][T13147] RIP: 0033:0x7f4f2079ce59 [ 248.371344][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.371359][T13147] RSP: 002b:00007f4f1e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.371375][T13147] RAX: ffffffffffffffda RBX: 00007f4f20a15fa0 RCX: 00007f4f2079ce59 [ 248.371386][T13147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 248.371396][T13147] RBP: 00007f4f1e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.371405][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.371415][T13147] R13: 00007f4f20a16038 R14: 00007f4f20a15fa0 R15: 00007fffa2cc8dd8 [ 248.371440][T13147] [ 248.371447][T13147] Mem-Info: [ 248.430345][ T34] usb 5-1: device descriptor read/64, error -71 [ 248.430796][T13147] active_anon:36934 inactive_anon:4 isolated_anon:155 [ 248.430796][T13147] active_file:11678 inactive_file:34335 isolated_file:0 [ 248.430796][T13147] unevictable:1590 dirty:267 writeback:0 [ 248.430796][T13147] slab_reclaimable:8142 slab_unreclaimable:76325 [ 248.430796][T13147] mapped:25702 shmem:27136 pagetables:3841 [ 248.430796][T13147] sec_pagetables:302 bounce:0 [ 248.430796][T13147] kernel_misc_reclaimable:0 [ 248.430796][T13147] free:413375 free_pcp:28404 free_cma:0 [ 248.518145][T13147] Node 0 active_anon:147584kB inactive_anon:16kB active_file:46536kB inactive_file:137128kB unevictable:3568kB isolated(anon):0kB isolated(file):0kB mapped:74136kB dirty:1068kB writeback:0kB shmem:105008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:6256kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 248.531371][T13147] Node 1 active_anon:28kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:8984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 248.543602][T13147] Node 0 DMA free:12928kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:92kB free_cma:0kB [ 248.555946][T13147] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 248.558375][T13147] Node 0 DMA32 free:82996kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:147708kB inactive_anon:16kB active_file:46536kB inactive_file:137128kB unevictable:3568kB writepending:1068kB zspages:0kB present:2080628kB managed:1261088kB mlocked:36kB bounce:0kB free_pcp:80248kB local_pcp:19740kB free_cma:0kB [ 248.572122][T13147] lowmem_reserve[]: 0 0 0 0 0 [ 248.574118][T13147] Node 1 Normal free:1557864kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:33720kB local_pcp:10540kB free_cma:0kB [ 248.587956][T13147] lowmem_reserve[]: 0 0 0 0 0 [ 248.589492][T13147] Node 0 DMA: 14*4kB (UM) 15*8kB (UM) 13*16kB (UM) 12*32kB (UM) 12*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 12928kB [ 248.594596][T13147] Node 0 DMA32: 847*4kB (UME) 1811*8kB (UM) 858*16kB (UME) 147*32kB (UME) 24*64kB (UME) 64*128kB (UM) 46*256kB (UM) 27*512kB (UME) 7*1024kB (U) 2*2048kB (UM) 0*4096kB = 82900kB [ 248.600013][ T5843] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 248.600440][T13147] Node 1 Normal: 50*4kB (UM) 17*8kB (UME) 20*16kB (UME) 139*32kB (UM) 248*64kB (UME) 181*128kB (UME) 213*256kB (UME) 216*512kB (UME) 177*1024kB (UM) 20*2048kB (UME) 275*4096kB (UM) = 1557872kB [ 248.609436][T13147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.612403][T13147] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.615236][T13147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.618137][T13147] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 248.621054][T13147] 73129 total pagecache pages [ 248.622512][T13147] 0 pages in swap cache [ 248.623821][T13147] Free swap = 124996kB [ 248.625105][T13147] Total swap = 124996kB [ 248.626385][T13147] 1048443 pages RAM [ 248.627574][T13147] 0 pages HighMem/MovableOnly [ 248.629048][T13147] 283860 pages reserved [ 248.630445][T13147] 0 pages cma reserved [ 248.670273][ T34] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.759915][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 248.766013][ T5843] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.771429][ T5843] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.775391][ T5843] usb 9-1: config 0 interface 0 has no altsetting 0 [ 248.778170][ T5843] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.783864][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.792405][ T5843] usb 9-1: config 0 descriptor?? [ 248.800050][ T34] usb 5-1: device descriptor read/64, error -71 [ 248.857909][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 248.906937][ T8699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.910419][ T8699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.910525][ T34] usb usb5-port1: attempt power cycle [ 248.940551][ T985] ------------[ cut here ]------------ [ 248.943527][ T985] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 248.949530][ T985] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#3: kworker/3:2/985 [ 248.954145][ T985] Modules linked in: [ 248.956262][ T985] CPU: 3 UID: 0 PID: 985 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.960887][ T985] Tainted: [L]=SOFTLOCKUP [ 248.962733][ T985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.967123][ T985] Workqueue: mld mld_ifc_work [ 248.969160][ T985] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 248.971992][ T985] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 87 6e 08 f7 48 8d 3d d0 a3 e7 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 8b 52 76 f7 e9 03 [ 248.980160][ T985] RSP: 0018:ffffc90005aae8b8 EFLAGS: 00010293 [ 248.982889][ T985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 248.986242][ T985] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90e7e650 [ 248.989572][ T985] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 248.992992][ T985] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803a4b4528 [ 248.996365][ T985] R13: ffff88805a5d31e8 R14: 0000000000000000 R15: dffffc0000000000 [ 248.999794][ T985] FS: 0000000000000000(0000) GS:ffff8880d6687000(0000) knlGS:0000000000000000 [ 249.003660][ T985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.006488][ T985] CR2: 00007f4f20a17dac CR3: 000000002785c000 CR4: 0000000000352ef0 [ 249.009934][ T985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000a9 [ 249.013326][ T985] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.016757][ T985] Call Trace: [ 249.018215][ T985] [ 249.019557][ T985] rate_control_send_low+0x2a8/0x7e0 [ 249.021839][ T985] rate_control_get_rate+0x1be/0x5c0 [ 249.024185][ T985] ieee80211_tx_h_rate_ctrl+0x778/0x1a20 [ 249.026595][ T985] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 249.029203][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.031409][ T985] invoke_tx_handlers_late+0xfb4/0x2750 [ 249.033795][ T985] ? lock_acquire+0x1b1/0x370 [ 249.035950][ T985] ? ieee80211_tx_h_select_key+0x2c9/0x1ca0 [ 249.038512][ T985] ieee80211_tx_dequeue+0x3821/0x5160 [ 249.040948][ T985] ? __pfx___skb_flow_dissect+0x10/0x10 [ 249.043385][ T985] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 249.045833][ T985] ? do_raw_spin_lock+0x128/0x260 [ 249.048077][ T985] ? ieee80211_next_txq+0xda/0xa50 [ 249.050354][ T985] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 249.052978][ T985] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 249.055834][ T985] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 249.058459][ T985] ? mark_held_locks+0x40/0x70 [ 249.060625][ T985] ? __local_bh_enable_ip+0x9e/0x120 [ 249.062915][ T985] ieee80211_queue_skb+0x124b/0x2220 [ 249.065267][ T985] ieee80211_tx+0x2e4/0x460 [ 249.067227][ T985] ? __pfx_ieee80211_tx+0x10/0x10 [ 249.069424][ T985] ? ieee80211_skb_resize+0x119/0x670 [ 249.071796][ T985] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 249.074156][ T985] ieee80211_xmit+0x30f/0x3e0 [ 249.076204][ T985] __ieee80211_subif_start_xmit+0x882/0x13a0 [ 249.078777][ T985] ? dst_release+0x259/0x330 [ 249.080902][ T985] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 249.083669][ T985] ? __ip6_finish_output+0x357/0xdf0 [ 249.085963][ T985] ? NF_HOOK.constprop.0+0x115/0x5a0 [ 249.088246][ T985] ? mld_sendpack+0x8f7/0xec0 [ 249.090383][ T985] ? mld_ifc_work+0x75a/0xc10 [ 249.092446][ T985] ? process_one_work+0xa0e/0x1980 [ 249.094691][ T985] ? worker_thread+0x5ef/0xe50 [ 249.096823][ T985] ? kthread+0x370/0x450 [ 249.098705][ T985] ? ret_from_fork+0x72b/0xd50 [ 249.100864][ T985] ? ret_from_fork_asm+0x1a/0x30 [ 249.102856][ T985] ieee80211_subif_start_xmit+0x111/0x1960 [ 249.105278][ T985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.107731][ T985] ? skb_network_protocol+0x2ce/0x3d0 [ 249.110052][ T985] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 249.112638][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.114718][ T985] ? __pfx_netif_skb_features+0x10/0x10 [ 249.116978][ T985] ? validate_xmit_xfrm+0x44f/0x1360 [ 249.119163][ T985] ? dev_hard_start_xmit+0x128/0x7a0 [ 249.121424][ T985] dev_hard_start_xmit+0x128/0x7a0 [ 249.123566][ T985] __dev_queue_xmit+0x1baa/0x4950 [ 249.125656][ T985] ? look_up_lock_class+0x55/0x120 [ 249.127796][ T985] ? __pfx___dev_queue_xmit+0x10/0x10 [ 249.130091][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.132177][ T985] ? do_raw_spin_lock+0x128/0x260 [ 249.134272][ T985] ? __asan_memcpy+0x3c/0x60 [ 249.136201][ T985] ? eth_header+0x120/0x1f0 [ 249.138095][ T985] neigh_resolve_output+0x51f/0x8f0 [ 249.140363][ T985] ip6_finish_output2+0xb0f/0x1ce0 [ 249.142524][ T985] __ip6_finish_output+0x357/0xdf0 [ 249.144647][ T985] ip6_output+0x2aa/0xa60 [ 249.146438][ T985] ? __pfx_ip6_output+0x10/0x10 [ 249.148542][ T985] ? __pfx_ip6_finish_output+0x10/0x10 [ 249.150878][ T985] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 249.153093][ T985] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 249.155392][ T985] ? __pfx_ip6_output+0x10/0x10 [ 249.157487][ T985] NF_HOOK.constprop.0+0x115/0x5a0 [ 249.159674][ T985] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 249.162104][ T985] ? __pfx_dst_output+0x10/0x10 [ 249.164263][ T985] mld_sendpack+0x8f7/0xec0 [ 249.166210][ T985] ? __pfx_mld_sendpack+0x10/0x10 [ 249.168336][ T985] mld_ifc_work+0x75a/0xc10 [ 249.170280][ T985] ? rcu_is_watching+0x12/0xc0 [ 249.172343][ T985] process_one_work+0xa0e/0x1980 [ 249.174434][ T985] ? __pfx_process_one_work+0x10/0x10 [ 249.176764][ T985] ? __pfx_mld_ifc_work+0x10/0x10 [ 249.178951][ T985] worker_thread+0x5ef/0xe50 [ 249.180974][ T985] ? __pfx_worker_thread+0x10/0x10 [ 249.183115][ T985] ? kthread+0x13a/0x450 [ 249.184909][ T985] ? __pfx_worker_thread+0x10/0x10 [ 249.187128][ T985] kthread+0x370/0x450 [ 249.188912][ T985] ? __pfx_kthread+0x10/0x10 [ 249.190991][ T985] ret_from_fork+0x72b/0xd50 [ 249.193011][ T985] ? __pfx_ret_from_fork+0x10/0x10 [ 249.195217][ T985] ? __switch_to+0x800/0x1100 [ 249.197231][ T985] ? __pfx_kthread+0x10/0x10 [ 249.199284][ T985] ret_from_fork_asm+0x1a/0x30 [ 249.201459][ T985] [ 249.202836][ T985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.205894][ T985] CPU: 3 UID: 0 PID: 985 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.210364][ T985] Tainted: [L]=SOFTLOCKUP [ 249.212248][ T985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.216434][ T985] Workqueue: mld mld_ifc_work [ 249.218472][ T985] Call Trace: [ 249.219935][ T985] [ 249.221239][ T985] dump_stack_lvl+0x100/0x190 [ 249.223266][ T985] vpanic+0x552/0x970 [ 249.224942][ T985] ? __pfx_vpanic+0x10/0x10 [ 249.226909][ T985] panic+0xd1/0xe0 [ 249.228520][ T985] ? __pfx_panic+0x10/0x10 [ 249.230526][ T985] ? check_panic_on_warn+0x1f/0x90 [ 249.232735][ T985] check_panic_on_warn.cold+0x19/0x34 [ 249.234942][ T985] ? __rate_control_send_low+0x610/0x760 [ 249.237265][ T985] __warn.cold+0x191/0x328 [ 249.239160][ T985] __report_bug+0x296/0x3d0 [ 249.241110][ T985] ? __rate_control_send_low+0x610/0x760 [ 249.243455][ T985] ? __pfx___report_bug+0x10/0x10 [ 249.245557][ T985] ? lockdep_hardirqs_on+0x78/0x100 [ 249.247709][ T985] ? __rate_control_send_low+0x621/0x760 [ 249.250086][ T985] report_bug_entry+0xe1/0x290 [ 249.252090][ T985] ? __rate_control_send_low+0x621/0x760 [ 249.254437][ T985] handle_bug+0x1cd/0x2a0 [ 249.256243][ T985] exc_invalid_op+0x17/0x50 [ 249.258172][ T985] asm_exc_invalid_op+0x1a/0x20 [ 249.260205][ T985] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 249.262784][ T985] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 87 6e 08 f7 48 8d 3d d0 a3 e7 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 8b 52 76 f7 e9 03 [ 249.270635][ T985] RSP: 0018:ffffc90005aae8b8 EFLAGS: 00010293 [ 249.272779][ T985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 249.275240][ T985] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90e7e650 [ 249.277681][ T985] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 249.280133][ T985] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803a4b4528 [ 249.282575][ T985] R13: ffff88805a5d31e8 R14: 0000000000000000 R15: dffffc0000000000 [ 249.285042][ T985] ? __rate_control_send_low+0x609/0x760 [ 249.286777][ T985] rate_control_send_low+0x2a8/0x7e0 [ 249.288439][ T985] rate_control_get_rate+0x1be/0x5c0 [ 249.290080][ T985] ieee80211_tx_h_rate_ctrl+0x778/0x1a20 [ 249.291840][ T985] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 249.293713][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.295251][ T985] invoke_tx_handlers_late+0xfb4/0x2750 [ 249.296968][ T985] ? lock_acquire+0x1b1/0x370 [ 249.298441][ T985] ? ieee80211_tx_h_select_key+0x2c9/0x1ca0 [ 249.300305][ T985] ieee80211_tx_dequeue+0x3821/0x5160 [ 249.301982][ T985] ? __pfx___skb_flow_dissect+0x10/0x10 [ 249.303726][ T985] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 249.305478][ T985] ? do_raw_spin_lock+0x128/0x260 [ 249.307069][ T985] ? ieee80211_next_txq+0xda/0xa50 [ 249.308687][ T985] ieee80211_handle_wake_tx_queue+0x19c/0x260 [ 249.310555][ T985] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 249.312614][ T985] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 249.314502][ T985] ? mark_held_locks+0x40/0x70 [ 249.316012][ T985] ? __local_bh_enable_ip+0x9e/0x120 [ 249.317659][ T985] ieee80211_queue_skb+0x124b/0x2220 [ 249.319310][ T985] ieee80211_tx+0x2e4/0x460 [ 249.320775][ T985] ? __pfx_ieee80211_tx+0x10/0x10 [ 249.322378][ T985] ? ieee80211_skb_resize+0x119/0x670 [ 249.324065][ T985] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 249.325752][ T985] ieee80211_xmit+0x30f/0x3e0 [ 249.327234][ T985] __ieee80211_subif_start_xmit+0x882/0x13a0 [ 249.329101][ T985] ? dst_release+0x259/0x330 [ 249.330556][ T985] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 249.332558][ T985] ? __ip6_finish_output+0x357/0xdf0 [ 249.334202][ T985] ? NF_HOOK.constprop.0+0x115/0x5a0 [ 249.335846][ T985] ? mld_sendpack+0x8f7/0xec0 [ 249.337321][ T985] ? mld_ifc_work+0x75a/0xc10 [ 249.338793][ T985] ? process_one_work+0xa0e/0x1980 [ 249.340411][ T985] ? worker_thread+0x5ef/0xe50 [ 249.341918][ T985] ? kthread+0x370/0x450 [ 249.343249][ T985] ? ret_from_fork+0x72b/0xd50 [ 249.344750][ T985] ? ret_from_fork_asm+0x1a/0x30 [ 249.346290][ T985] ieee80211_subif_start_xmit+0x111/0x1960 [ 249.348099][ T985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.349924][ T985] ? skb_network_protocol+0x2ce/0x3d0 [ 249.351611][ T985] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 249.353528][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.355065][ T985] ? __pfx_netif_skb_features+0x10/0x10 [ 249.356776][ T985] ? validate_xmit_xfrm+0x44f/0x1360 [ 249.358426][ T985] ? dev_hard_start_xmit+0x128/0x7a0 [ 249.360075][ T985] dev_hard_start_xmit+0x128/0x7a0 [ 249.361679][ T985] __dev_queue_xmit+0x1baa/0x4950 [ 249.363284][ T985] ? look_up_lock_class+0x55/0x120 [ 249.364877][ T985] ? __pfx___dev_queue_xmit+0x10/0x10 [ 249.366532][ T985] ? __lock_acquire+0x4a5/0x2630 [ 249.368086][ T985] ? do_raw_spin_lock+0x128/0x260 [ 249.369673][ T985] ? __asan_memcpy+0x3c/0x60 [ 249.371111][ T985] ? eth_header+0x120/0x1f0 [ 249.372546][ T985] neigh_resolve_output+0x51f/0x8f0 [ 249.374153][ T985] ip6_finish_output2+0xb0f/0x1ce0 [ 249.375758][ T985] __ip6_finish_output+0x357/0xdf0 [ 249.377343][ T985] ip6_output+0x2aa/0xa60 [ 249.378695][ T985] ? __pfx_ip6_output+0x10/0x10 [ 249.380229][ T985] ? __pfx_ip6_finish_output+0x10/0x10 [ 249.381918][ T985] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 249.383589][ T985] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 249.385220][ T985] ? __pfx_ip6_output+0x10/0x10 [ 249.386732][ T985] NF_HOOK.constprop.0+0x115/0x5a0 [ 249.388333][ T985] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 249.390066][ T985] ? __pfx_dst_output+0x10/0x10 [ 249.391600][ T985] mld_sendpack+0x8f7/0xec0 [ 249.393021][ T985] ? __pfx_mld_sendpack+0x10/0x10 [ 249.394634][ T985] mld_ifc_work+0x75a/0xc10 [ 249.396069][ T985] ? rcu_is_watching+0x12/0xc0 [ 249.397564][ T985] process_one_work+0xa0e/0x1980 [ 249.399111][ T985] ? __pfx_process_one_work+0x10/0x10 [ 249.400783][ T985] ? __pfx_mld_ifc_work+0x10/0x10 [ 249.402343][ T985] worker_thread+0x5ef/0xe50 [ 249.403798][ T985] ? __pfx_worker_thread+0x10/0x10 [ 249.405379][ T985] ? kthread+0x13a/0x450 [ 249.406701][ T985] ? __pfx_worker_thread+0x10/0x10 [ 249.408282][ T985] kthread+0x370/0x450 [ 249.409562][ T985] ? __pfx_kthread+0x10/0x10 [ 249.411005][ T985] ret_from_fork+0x72b/0xd50 [ 249.412458][ T985] ? __pfx_ret_from_fork+0x10/0x10 [ 249.414083][ T985] ? __switch_to+0x800/0x1100 [ 249.415558][ T985] ? __pfx_kthread+0x10/0x10 [ 249.416996][ T985] ret_from_fork_asm+0x1a/0x30 [ 249.418501][ T985] [ 249.420205][ T985] Kernel Offset: disabled [ 249.421572][ T985] Rebooting in 86400 seconds..