last executing test programs: 51.290242329s ago: executing program 0 (id=1224): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x0, 0x6}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x2800) ioctl$EVIOCGABS20(r3, 0x80184520, 0x0) 51.285891452s ago: executing program 0 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4041) syz_emit_ethernet(0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000008b4fb486d5c29908000ad89aa0318f7b000037"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x886040) 51.14880393s ago: executing program 0 (id=1230): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/67) semget$private(0x0, 0x0, 0x400) (async) r0 = semget$private(0x0, 0x0, 0x400) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000080)=""/58) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x6, 0x6]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000380)={{0x3, r2, r3, 0xee01, r4, 0x23, 0xfff}, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x22000, 0x0) r6 = signalfd(r5, &(0x7f0000000440)={[0xfffffffffffffffd]}, 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000500)={0x0, @private, @broadcast}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000880) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000880) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r9, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) semctl$IPC_RMID(r0, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000880)=[0x3, 0x2], 0x2) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000008c0)={0x0, 0x2, 0x3ff, 0x7f}) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000008c0)={0x0, 0x2, 0x3ff, 0x7f}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000940)=""/35) semget$private(0x0, 0x4, 0x40) (async) r10 = semget$private(0x0, 0x4, 0x40) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r6, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x32, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r6, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x32, &(0x7f0000000c40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r5}, &(0x7f0000000e80), &(0x7f0000000ec0)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r5, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x9, 0x4, 0x1, 0x0, 0x2, 0xffffffffffffffff, 0x4, '\x00', r1, r6, 0x1, 0x3, 0x3}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x9, 0x4, 0x1, 0x0, 0x2, 0xffffffffffffffff, 0x4, '\x00', r1, r6, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x1f, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xd, 0x8, 0x6, 0x6, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x3, 0xf, 0x100, 0x8}, 0x10, r12, r5, 0x8, &(0x7f0000000fc0)=[r5, r5, 0xffffffffffffffff, r13, 0x1, r14], &(0x7f0000001000)=[{0x1, 0x4, 0x1, 0x4}, {0x3, 0x2, 0x10}, {0x3, 0x4, 0xb, 0xc}, {0x0, 0x2, 0xb, 0x7}, {0x2, 0x2, 0x3, 0x9}, {0x3, 0x2, 0xa, 0x1}, {0x4, 0x5, 0x1, 0x2}, {0x0, 0x5, 0x6, 0x9}], 0x10, 0xb}, 0x94) semctl$IPC_STAT(r10, 0x0, 0x2, &(0x7f0000001140)=""/137) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000001200)=""/47) (async) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000001200)=""/47) socket$netlink(0x10, 0x3, 0x15) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000001240)=""/248) (async) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000001240)=""/248) 51.081253944s ago: executing program 0 (id=1232): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x7, [0x2], [0x80ffff, 0x0, 0x2], [], [0x400000000000001]}) syz_emit_ethernet(0x356, &(0x7f0000000080)={@random="e33110495bfd", @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "b79af4", 0x31c, 0x11, 0x0, @empty, @private0, {[@dstopts={0x67, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xdd}, @calipso={0x7, 0x30, {0x1, 0xa, 0x43, 0x7, [0x6, 0x4f, 0x80000001, 0x227, 0x53a]}}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x7, 0x10, 0x2, [@dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1]}, @hopopts={0x3a, 0x43, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @generic={0x0, 0xad, "09104175d605735b362d3465e6af570f3feca40cb54a553ba4161e117dcf0dacdb1778665b68b144aa81dc0e833de7a69e5407e5c1bfd51bc6ad24e79437591bad9c6c615cba50f8d0bd5ae0a3e5603bc24fa278dc0db05756de706c0d9fcb98c426cce739e4b4d3401638b19ff620d98deb1ca4b265ec0e6bff4be80a8aef13f669898dac9bab0e2b88c5a9cfe35a9962ebff25cb452e513728f1fc68d90a4a7fffc617fbc71ed3d6331fb554"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @generic={0x4, 0xba, "c718ccafb67aa8c3ac2551a5ee15050f14d1ae50ac9c3d110eedb281621683dbfb3a3d2d3cd98772f0a40dbf0dfa5810188194ad223081f7b080914dfb01df3c42b59ec20abc8db80ff761cb2f9dff0cdc7d493606813628c77e28c40d70da8e27289d28bb866e94595a91924026bf341171aa12b6e22fe7429d1a0b6ddde63d2fdb8a2b31722ffb5b5bb6930513593500dd2404bf751fa64b7d977625f772b84756f91a454b4f2fc40ebfbdade2362ca7ebccc1aae246ffc65f"}, @generic={0xc, 0x89, "9ff606403ea4c7b24e420c01e5af1352787924a96404db3b5bba5ec65b4d6085ed13968513fd316c6f6f9b9e7e27c00e0225db8eb8aa94aa1244e0639a466744cefaaa1554753c8caee9204892f9fd6bdfcc212d13aa162d54ef1798e1a31321a6140e1dbc6e0581dc92a346d192d1da0264a49094d97d2fc26446e1eb7a96c6e0a8d46375ad0e3ee2"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x0, 0x0, 0xfb, 0x0, 0x0, 0xe, 0x64}], {0x4e20, 0x4e22, 0x74, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}, "ad23fb0de7c44fa8656bf708db18cc91360a5969a62576b58b6a3c83da42c8f4eb6d182bc21a5ddb9f263723094ae771516ca8d02e1f2da565b34f886b6f955e3363ad878b3e9a5a51641faf9ec751de7fd0ac591d0a09a0c62bddd3966b77b3a43ef559213550ac"}}}}}}}, 0x0) 51.080136371s ago: executing program 0 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0xf, 0x800, 0x11, 0x1d, 0x9, 0x5}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010000000000e90000", @ANYRES32=r8, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e0003000000"], 0x40}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010000000000e90000", @ANYRES32=r8, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e0003000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0xe0, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0xe0}}, 0x24000004) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0xe0, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x17}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0xe0}}, 0x24000004) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 50.763194271s ago: executing program 0 (id=1235): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000380)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 35.722058725s ago: executing program 32 (id=1235): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000380)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 15.497891636s ago: executing program 3 (id=1589): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcf7ff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.372606299s ago: executing program 3 (id=1593): r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000c4973e80000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0, 0x2c, 0x1d}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha224-arm64-neon\x00'}}, &(0x7f0000000140)="a0dfd85a1115092a4e3d216506c8ecc824329f8ec5f298bf537c36fc74debdd54d32e6f0a9ac9e2132d79982", &(0x7f0000000100)=""/29) 15.309977764s ago: executing program 3 (id=1595): r0 = userfaultfd(0x80001) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000278000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb) 15.241654126s ago: executing program 3 (id=1597): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000800)=r1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "0ac2e90db8ea9b42ab9c0000000000000000000000000000000fe4ffffff00", "2c4216954ce13f9ac712efe0c94f7781d625a196e19abceb603800", "23f8b4d3ea8e139730273ece0ff6857b7df746298827090d7276ecd802899a7a", "195d1dbd16aae8800a2d650cb9743e1a06bade385bf5095a39cec682f6366c2a", "41cb0a4600aa99f48f0c01728a0ba0b9cf6a2c2c5ed1992ad9214f556ed91842", "e642a87f7cfbf1f6e52eaf1e", 0x3000, 0x4, 0x4, 0x8f, 0x8}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x7}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 15.112343452s ago: executing program 3 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000140)={{0x70000, 0x6000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0xe000, 0x8000000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x9, 0x3, 0x9, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400608, 0x6, 0x8000, 0x8080000, [0x6, 0x5, 0x5, 0xe]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0xfe, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r6, &(0x7f0000001280)='\f', 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = getpid() getpriority(0x1, r7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r9, 0x401) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008001300", @ANYRES32=0x0, @ANYBLOB="02800000"], 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x1, 0x0, &(0x7f000000f000/0x2000)=nil}) 15.038817566s ago: executing program 3 (id=1601): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.700146354s ago: executing program 1 (id=1699): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2c}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r4, 0x25, 0x0, @val=@perf_event={0x429}}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x4, @void}, 0x10) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 3.642909441s ago: executing program 1 (id=1702): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000380)=0x10) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @private=0xa010101}, 0x82, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='wg0\x00', 0x63, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x98, "90c6446da2053b1344b3c82b4f57cf08356ea051e5b00dc0ee8f6a2f5ef24718da3985d83de35eb436dd080335b33368451157277f856dd77718d5aac4445c9aebe54ef4d398c8d892c8f28802bef96da8b2a55446f300ffe2cd8dbd7805ff8e57e65aa044f941b18c47ea930506abaf8fcdd2dbfe8a2ad6c2200ed1ca5fcefa5eabf7cb9ec9b26674fe13c80ae2968bbe4601a0b23913a9"}, &(0x7f0000000240)=0xa0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000340)={r6, 0x3}, 0x8) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000000c0), 0x4) close_range(r4, r5, 0x2) 3.593364664s ago: executing program 1 (id=1703): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) 2.223138274s ago: executing program 2 (id=1717): syz_emit_ethernet(0x77, &(0x7f0000001180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3d, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x3c, 0x0, @private1, @mcast1, [@hopopts={0x2c}], "c6214c55d1"}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r1, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2a9, 0x0, 0x0, 0x10000015, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000059", [0xc, 0xfffffffffffffffd]}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @multicast1, 0x0}, &(0x7f0000000180)=0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2f6}, [@generic={0x7, 0xa, 0x0, 0xfff, 0xde98}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x60, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000300)={0x3, 0xff}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x10, 0x7f, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r4, r5], &(0x7f0000000480)=[{0x2, 0x1, 0x2, 0x1}, {0x3, 0x1, 0x3, 0x4}, {0x1, 0x2, 0x10, 0xb}, {0x2, 0x4, 0xc}, {0x3, 0x5, 0x3, 0x6}, {0x5, 0x5, 0x4, 0x1}, {0x0, 0x2, 0x6, 0x6}, {0x5, 0x5, 0x10, 0x5}], 0x10, 0x7ff}, 0x94) 2.217364852s ago: executing program 2 (id=1718): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7ba980f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0xfffffff7, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x1, 0x7, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @private=0xa010101}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @multicast1}}]}, 0x410) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x128, 0x1403, 0x400, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) 991.766657ms ago: executing program 2 (id=1719): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/86, 0x56) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x800000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000bc3000/0x1000)=nil, 0x1000}, 0x6}) 990.443766ms ago: executing program 2 (id=1720): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@xfs_parent={0x1c, 0x82, {0x8, 0x9, 0x9, 0x2}}, &(0x7f0000000140), 0x600) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}}, 0x4000090) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x7ff) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002400), 0x1010c1, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000002440)={'\x00', 0x80000000, 0x0, 0x29}) getpeername$packet(r4, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002500)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000025c0)={'ip_vti0\x00', &(0x7f0000002540)={'gre0\x00', r5, 0x8000, 0x700, 0x9, 0xfffffffd, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0xad, 0x0, 0x8, [0x54, 0x7, 0x7da, 0x8, 0x3]}]}}}}}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000002780)={0x1, 0x2, 0x1000, 0xbd, &(0x7f0000002600)="f28197f72d1761539883048b2825a46cbbb3e654bf5172036f2f60f57991be3b88707d23d1654881179447df2cae9425d5c50dc09d235204c8c25459d55f88b534e9f940f4ad66db252a135e10525d97c232bcef09eada84c99b8f2a42a3b84a8a06f08ee45534d10aec13fee7cec489ed4b82e3bd5b61a379ff79cbe2cd897dd186099d429fdd750e19048d58663a799fb60c8f3b5d602629f12e0df63223fcfd7cff2d7e07f5a28ef0f9dbe6c2c646e8c5b5a958bb7b992eb438fbd3", 0x85, 0x0, &(0x7f00000026c0)="290e216d401e3a9490e2159c75ba768564b4ff689320bd3a13e3dc0171626b9ac2c298b7a42b0cd8146243623661c25c4d577a415692fe7a631e77942ee11176fd511d9789bd42f07727231ce09605f054ccc5906566545283c0728a3bf3cfb8f9091d3a7ea888af2aa0e7257017c60d8ad29bfc7f27773d3e64bebb8f772d84de9e143d54"}) (async) ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000002880)={&(0x7f0000002800)='\x00', &(0x7f0000002840)='/dev/ptp1\x00', 0xc}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x810, r0, 0xb6ad9000) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000028c0)) (async, rerun: 32) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002900)={0x1, 0x1, 0x5, 0x79, 0x0, 0x78}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000029c0)={'erspan0\x00', &(0x7f0000002940)={'syztnl2\x00', r5, 0x8, 0x0, 0x5, 0x3, {{0x10, 0x4, 0x2, 0x1b, 0x40, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xad, 0x3, 0x8, [{@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x200}, {@loopback, 0x1}, {@broadcast, 0x9}, {@remote, 0x3}]}]}}}}}) clock_gettime(0x0, &(0x7f0000002a00)={0x0, 0x0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000002a40)={0xd3d2, 0x8, 0x4, 0x70000, 0x6, {}, {0x5, 0xc, 0xda, 0x8, 0x80, 0xe1, "2fa00d39"}, 0xb, 0x4, {0xffffffffffffffff}, 0x7fff, 0x0, r4}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002b40)=@multiplanar_fd={0xa, 0xe, 0x4, 0x20, 0x2, {r6, r7/1000+10000}, {0x2, 0x0, 0x12, 0x9, 0xfe, 0x92, "166ad77d"}, 0x0, 0x4, {&(0x7f0000002ac0)=[{0x5, 0xffff, {r8}, 0x9}, {0x6, 0x40000, {r4}, 0x10}]}, 0xffffffff, 0x0, r4}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002c80)={'gretap0\x00', &(0x7f0000002bc0)={'gre0\x00', r5, 0x7, 0x0, 0x6, 0x10, {{0x1d, 0x4, 0x0, 0x7, 0x74, 0x65, 0x0, 0x5, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0x47, 0x0, 0x2, [0x4]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x0, [{@empty, 0x4}, {@private=0xa010101, 0xfffffffd}, {@empty, 0xa}]}, @ssrr={0x89, 0x17, 0x14, [@empty, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0xc, 0xe1, 0x0, 0xf, [0x7ff, 0x4]}, @generic={0x82, 0xa, "081fedc73d666042"}, @rr={0x7, 0xf, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback]}]}}}}}) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002cc0), 0x800, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000002ec0)={0x2, &(0x7f0000002e80)=[{0x10001, 0xe5, &(0x7f0000002d00)="8ab6e38c8ae97c7456ae381ec63f563e642a531694e9aa449ee13841a4f6b207c1a8bad8c7525be132a7c4cb28edd311bc9b304356bef72846a19bea055215b91393e4fcbba21973e1a9638f661deb394747465789774a655f2e31a8ae20c0c6fe14f1bb2f56a433f4e45e20d87530950f6f07c27219dc7cc2924f23990c27267e68b105143a120ed33f468b8b74999100a0132f5a249587d784bd654bc28a172533d2dac07e4a4f6238d70677ccd037d01b2501ca39b2d172e2442839a8c9706660dd8e2f81d59abfdbef41e11f4c423e3dc47ff0ad42c05c3df303dafb70f2654ea963ee", 0x1}, {0x8, 0x50, &(0x7f0000002e00)="8e977b77789c4101270d64c3f70614abd80520e89732254b9187a43192fca5121ddb373bfe1125b6d93be9c3f284188c611f09cbb8251085759b71bb0a8e821eb1efe53be9fc65383537e32f29bd42f6"}]}) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x20, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003000), 0x400000, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd5}, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) 800.856649ms ago: executing program 2 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1, 0x7}}, './file0/file0\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) read$watch_queue(r6, 0x0, 0x2160) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) close(r8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff9, 0x4031, 0xffffffffffffffff, 0xb7b56000) io_uring_register$IORING_REGISTER_RING_FDS(r10, 0x14, &(0x7f0000001780), 0x1) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000304000000000400000000000000cd01c728232cb6c2161dac9a21252338126102f0185369650cc1b4d6a97c3e965d4126906a9fcc742c4b1bdfcfa67a7cf14d4f4c24657512f9ae7dd7552bec08847233094a6dc0f8aef1657eb799443718afeafbe097e7ec673c9eeb2e7f3e404af254dd5870a6818d0468e66ecc037109925d4897601ba0ef097304842f6d676c012b67d2ecbd4e25c1381ce3f11779c8859797d6efdd56cacc3fb325be4c9416b7b7859630c438a0e7f043c8af3f51d07b8d", @ANYRES32=0x0, @ANYBLOB="001000008a0000002c00128008000100736974002000028014000b00fc02000000000000000000000000000108000200ffffffff"], 0x4c}, 0x1, 0x2000000000000000}, 0x0) 733.073175ms ago: executing program 4 (id=1724): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x80, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@xino_auto}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 642.967356ms ago: executing program 2 (id=1725): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xe3) (async) r2 = getpid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace$getenv(0x4201, r2, 0x3ff, &(0x7f0000000040)) (async) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) (async) fcntl$lock(r0, 0x25, &(0x7f0000000740)={0x2, 0x5, 0x140000000000000, 0x322eec54, r1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000600)={'trans=virtio,', {[{@posixacl}, {@ignoreqv}, {@cache_readahead}, {@debug={'debug', 0x3d, 0x7fffffff}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}, {@subj_role={'subj_role', 0x3d, '\xf8'}}]}}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept(r6, 0x0, &(0x7f0000000700)) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) (async) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) read(r5, &(0x7f00000001c0)=""/396, 0x18c) 532.249888ms ago: executing program 1 (id=1726): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x10, 0x700, 0x3, 0x474b7b8f, {{0x1b, 0x4, 0x2, 0x1, 0x6c, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @private=0xa010100, {[@ssrr={0x89, 0xf, 0x51, [@multicast1, @rand_addr=0x64010100, @local]}, @rr={0x7, 0x1b, 0x6b, [@loopback, @multicast1, @empty, @multicast2, @multicast2, @multicast2]}, @timestamp={0x44, 0x2c, 0x59, 0x0, 0x2, [0x7fff, 0x7bc5, 0x5, 0xfffffffa, 0x6, 0x3820, 0x7, 0x36, 0x8, 0x9]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x10, 0x700, 0x3, 0x474b7b8f, {{0x1b, 0x4, 0x2, 0x1, 0x6c, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @private=0xa010100, {[@ssrr={0x89, 0xf, 0x51, [@multicast1, @rand_addr=0x64010100, @local]}, @rr={0x7, 0x1b, 0x6b, [@loopback, @multicast1, @empty, @multicast2, @multicast2, @multicast2]}, @timestamp={0x44, 0x2c, 0x59, 0x0, 0x2, [0x7fff, 0x7bc5, 0x5, 0xfffffffa, 0x6, 0x3820, 0x7, 0x36, 0x8, 0x9]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000005408000000bd4a3e54c30000070000005043ebfaf2b29a1dbf181dab8d010765f7879162ad03e4ecbde14592f69fdaee198ce243622e8b5a32ab020b9154abc4e26bf80f4d07cdcf76b2e12c59d98763a0fec472cdfbfd13f800000000ab4a469cdd8cde4c24", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000100fc02000000000000000000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x16c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48840}, 0x4004800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 530.280845ms ago: executing program 4 (id=1727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x200, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffe0}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x22004091) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x200, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffe0}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x22004091) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42884}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) (async) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x7, 0x40000a, 0x1ff}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r9, 0x89e2, &(0x7f00000004c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x64}}, 0xd4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x64}}, 0xd4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 433.031137ms ago: executing program 1 (id=1728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000538000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xffffffffffffffd2, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x7fffffffffffffff, 0x0, 0x2, 0x0, 0x4, 0x2], 0x1000, 0x1144}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) 432.05019ms ago: executing program 4 (id=1729): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x800000000000003c}, 0x60) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0xe625}], 0x1, 0x2160, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4a26, 0x400, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0x49, 0x0, 0x4}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) statx(r5, &(0x7f0000000000)='./file0\x00', 0x4000, 0x40, &(0x7f00000000c0)) 222.955096ms ago: executing program 4 (id=1730): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x1, 0x30bd25, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4d1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x71a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 152.4855ms ago: executing program 4 (id=1731): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002080)={0x14, r3, 0x1, 0x70bd2c, 0x1000800}, 0x14}, 0x1, 0xff07, 0x0, 0x40000}, 0x22000080) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) lsetxattr$security_evm(&(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000300), &(0x7f0000000380)=@v2={0x3, 0x4, 0xa}, 0x9, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r6 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000380)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="6c06b91a72176b0843f52c4b12d4e5bdfa0b8710055284b128833cc1f361f7e8fc2bbed747cd824424c1b54e28e395bf558fca19490547340102fc01a48022341dc249e06db9908f3381bd193ac2d52a399e8a9e58080bf1947985f90c12b06f5fdfd070a951d1e66fae586d9ae0bd2abeffd8ec30ea47ee37a3e39027770e706175d35b91de2966d17fa9ec5b8668822f71b694534532e44e7c4c60ba9f86d3e23510e8f1b3cbbc4c4eacfdeb16e1d81856de4dd038007499dd41f76b06eb487d934c6b12d213fa7594d73c9fba46921e9de9bbf85e96e2ddc9c50f82248c72552e2a19", 0xe4}, {&(0x7f0000000500)}, {&(0x7f0000000540)="9dda81a06da00225f060d65355812a071466e4325ea29f07ed8e5fdfec871af141cd2432fb5167bb9faf9927", 0x2c}, {&(0x7f0000000580)="46ac92a86c9e8c2cbc7fe18f1cac117776dfad4bd6c603298a08b3531b1c4cb2eac9475a77be7eb20aafa475dd2af2d889515f0c9c", 0x35}, {&(0x7f00000005c0)="2ade837e8cd166a2bf17ac4bf67d1ce5995456db73176ac9c97986b0f24d3eb8370f4d7a46b41d07b86aa8e122285c865db63c8f6ad44d382d9acbb883564c189b78db179213f6f393b8baeee0bb95275100bc7656b7458db250497bbd2541e1b866710eebd1", 0x66}], 0x5, &(0x7f00000006c0)=[{0x1010, 0x1, 0x4, "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"}, {0x40, 0x119, 0x400, "d43b4c70a03a7420fff3f02c1fb5b2dcda42f8a02cf51bf033af96a2cafdc4413f95d7dfe01126b43fa507b7df1b7ef5"}, {0xf0, 0x111, 0x3, "29334e5586826d71c403bf4cd231bebf753a2c59715bb713148db201896f1c7e8433cb314a6108e2ddded9296500a187c56b9cb9e7541210e64feb4618c639ec7fce835cbf385c2df5b43a852516a2f1a3833ec3a4d5e608ba101f49d4590568a3d16d2c1dfb13d368abacbf6cb13ef6d49cbea0ade9f7aa716ab2c01f322022210d8cb6e4cca171afd69589f2110e04499fc03c5d24cbd8dbb4e37c6cede72f3f13e66cd853e8a933d7bce79ccda2bea36c1e19a3a3c54c35b756ccbe20a2c998ad5afb1f12160b3bf575d66896892051f51d2108faf1320c02a7592736"}, {0x50, 0x10e, 0xfffffffa, "b44056e02e97236bc08ecc268d765e3bfec30af617132ad14d4f1774a4849f755b583b1e5bf810c6d8b775a155e223f8c6fcb5e67bc5150192bbffba"}], 0x1190}}, {{&(0x7f0000001880)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001900)="5cd5853e13a41f6db3ca8faad99a663598252bd682683085953ef2e28b443fb45489717f9fda28e547c5db7de6fc662e7d7c68866e875e81fa41610af048b1ca3bee769b694d7eecfe4aa291b1b0a1b7955f0b5543f343380d74d724167088904a6aeaf0e12ee3a2fc7a2f4e0fc19c93d7341a53658a948298654cbcb4e8fcdf89db1606a7cb03145fff036e16c3f9354a20bcac18ae8b3aede4722e206ac159a11958c72629e2d8fb3de691aea009ad30ebbd76139fc62d94b7cdc5fe299fbc03f9ee3c6925", 0xc6}, {&(0x7f0000001a00)="d73bd1efd73e6d9b6c9f6dc195c4bf469842d5e2450738229310b1eb7102855d4182695fd193a576902f94990171d6e66eb64221476ddb955e443a93f3f86bc93ba5508598c14a05f2ad651e24cad3ad58d24789f4185b6d0b71299e66c72c7574672531e1cac122c54e743fecac59a3073a15aa3f6ec1e691", 0x79}, {&(0x7f0000001a80)="7010cd9e79c594d5219313d21dcc557593b37e8d860f0e2e6b97f6caa5465b40890c0971faf4a5a7732fc1ed77609f2a6653fa44ee1db38c", 0x38}, {&(0x7f0000001ac0)="7ae0ee2b72af5fed8700081d2ae006f7f25d43c1b26738b45255d4a02db671e32cf592275fd9cebe5b0f057fbbd74e8dfb12c82f5caf1cf3e7ff878551eafe2e7809c67259900bb315c4f7e0ac6b02f3a4ad2cc6f951c2ca32377aa7f0087be132e7a257c48e53e5610f30ef2fdd64194e2e", 0x72}, {&(0x7f0000001b40)="c1da990e7d93788780d98d97a89d313bf328a70e35b20c103863e086a59bf87aead32702eda6", 0x26}], 0x5, &(0x7f0000001c00)=[{0x40, 0x107, 0x63e, "2096a068bde00d80cd81da852325863a40dda68220a445be1571f5d2271fb908ccd1aaf9890d80f98fd3"}, {0x30, 0x5, 0x61, "30e8a994a02f1bf57cc8c3710ea24763dd7fe9e628844b5ef6007953"}, {0xf8, 0xff, 0xa5, "665db2d031592fe90af866dbab41e669f9ad0f315336fef5e78550cf6e0642384ad51aa211db3333331cf0436798f8e603a95d4052186d174d9647ee7ed562935c2bfcee12a3186180abc9a84b8bcebbb3d491fc6522c935a6906bea3ec502ef94ba0650c841c9d43e515af1360632a7f6f630099ad5d6f50f4119902d0978541fb1d10221bd5edcfbb136b0f566da75e2041e77794cfe3ebf963d1dbf59bb60d1ee41ede7607a29ad0c659ed98b51f0be6b3f8360e365a8ef9a11714cf8b0d3da5816e2cbb996d6fb29143e868fe851ba8c83cb1ed0d7819db9f85228ede296bd7a"}, {0xd8, 0x1, 0x2, "f00e3a8d1e1b2f8a9e8416af890e60b4a84a4a99d336ec26aceea1fa3516431eb4e87580d89fcdc39ecfd3f57de01af9ef7e5fb2be6f40c2afe0bd0d0315f0e8c538ab89938b5f27ab83d527d8db8f2005551059852d10b03b96078bcada69ac60f8b651becedb5bdc9aa4217eaa8ccf9f3de9127c663bcab0b8779dd5d347dccd6bbb9416f393d40e2450ce54f928a87f3218fbd753a54cfc81d55d7b602c17bfa6123fc77841ddb5368156bca71d38a39a13063bdb56e041ac8478e6af9eb9ff"}, {0x80, 0x117, 0x0, "ab18dde9cab727b921f7e52d191c6e61f920771aeafee3a14e05164b3f89daee48e30b62771f0d348349347657f221be7ee87d0bb6a1e8501042e6a31fa54f86e83cf95a457fd01cbb5aa0f5b4aec30a51f067b4e3d44d9009ae442bbf4ecca7a9c707c13da8c2686e10ab52d45f7a1c"}, {0x50, 0x10b, 0x0, "29f9fcedf5aca99017e02e285156fd6dc9f3e7b2a7c2c2b7a450b3075afe805b4bfab6738f7acd6a904fdb1caf719f0cb50b83af1ae586381086a7e3bf8c978e"}, {0x20, 0x10f, 0x5, "a3056a3095a5af425784eb443d904177"}, {0xc0, 0x111, 0x8be4, "ed22396f6bc3665380ce980201854f68c47155c7dacdd8bb030be22a095199dd7e02e1d518bde545d69c1daffc73ce20d1eacfaf1727eec8eff363703a390848f47738c0ffd6186dfce8b6eaf919bc57def982178868abf0a4f0607d14269aca105d4922ff84d48a80207833f5a29833d0d1c0da269a235597136bfaeb01d800dc85216a61c427f779e4a2a3d3dc4547cc901322fa937771a436fcbac14d61e7eecd6f9436967b6cefe7"}], 0x3f0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) 152.044895ms ago: executing program 1 (id=1732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000340)={0x18, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800dd8dfcffffff000000000200000000000006000000000600150002000000100016800c00028008000100"], 0x34}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0xd, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x2, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0x0, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x0, 0x7f, 0x2004cb, 0x1, 0xffffff, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x9]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}) 22.683865ms ago: executing program 4 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x6, 0xffff}, {0xc, 0x1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/243, 0xf3}, 0x23d}], 0x1, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) getsockopt$bt_BT_POWER(r3, 0x11, 0x9, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 33 (id=1601): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): nnection handle 200 [ 148.844967][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.848878][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.852700][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.856032][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.870880][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.874183][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.877834][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.881512][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.884721][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.888728][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.892233][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.895774][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.899365][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.902375][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.905818][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.909519][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.912791][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.916141][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.919897][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.923410][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.926708][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.929648][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.933482][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.936816][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.940335][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.943882][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.948187][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.951560][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.954861][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.960127][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.963589][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.966921][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.970427][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.973986][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.977408][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.980851][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.984152][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.989028][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.992914][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.996325][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 148.999619][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.002919][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.006262][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.009813][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.013123][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.016490][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.020171][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.023515][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.026827][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.030536][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 149.637188][ T9160] binder: 9159:9160 ioctl c0306201 200000000480 returned -14 [ 149.712668][ T9161] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.208731][ T9177] fuse: Bad value for 'fd' [ 150.328412][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 150.431121][ T9192] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 150.590916][ T9196] netlink: 14 bytes leftover after parsing attributes in process `syz.3.918'. [ 152.165084][ T9192] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 152.220346][ T9198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.616171][ T9216] netlink: 220 bytes leftover after parsing attributes in process `syz.3.924'. [ 153.128066][ T5637] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 153.280189][ T5637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.283693][ T5637] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.287010][ T5637] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.293990][ T5637] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.297619][ T5637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.300628][ T5637] usb 7-1: Product: syz [ 153.302335][ T5637] usb 7-1: Manufacturer: syz [ 153.304123][ T5637] usb 7-1: SerialNumber: syz [ 153.318309][ T5637] hub 7-1:1.0: bad descriptor, ignoring hub [ 153.320494][ T5637] hub 7-1:1.0: probe with driver hub failed with error -5 [ 153.462229][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 153.462243][ T40] audit: type=1400 audit(1776474440.661:579): avc: denied { getopt } for pid=9233 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.490166][ T9234] trusted_key: encrypted_key: insufficient parameters specified [ 153.531050][ T5637] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.726439][ T40] audit: type=1400 audit(1776474440.921:580): avc: denied { read write } for pid=9226 comm="syz.2.929" name="lp0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 153.745442][ T40] audit: type=1400 audit(1776474440.921:581): avc: denied { open } for pid=9226 comm="syz.2.929" path="/dev/usb/lp0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 153.759019][ T40] audit: type=1400 audit(1776474440.961:582): avc: denied { module_request } for pid=9256 comm="syz.1.940" kmod="net-pf-10-proto-3-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 153.776140][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.784269][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.810620][ T9267] netlink: 'syz.1.940': attribute type 11 has an invalid length. [ 153.813475][ T9267] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.940'. [ 153.975201][ T29] usb 7-1: USB disconnect, device number 11 [ 153.997149][ C0] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 154.000420][ C0] sr 2:0:0:0: [sr0] tag#6 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 154.004890][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 154.005078][ T40] audit: type=1400 audit(1776474441.201:583): avc: denied { bpf } for pid=9269 comm="syz.1.942" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.011648][ T9273] 9p: Invalid gid '0x00000000ffffffff' [ 154.023094][ T9271] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 154.027274][ T29] usblp0: removed [ 154.028897][ T9273] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 154.061571][ T9272] bond0: (slave syz_tun): Releasing backup interface [ 154.105764][ T9271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.176038][ T40] audit: type=1400 audit(1776474441.371:584): avc: denied { mount } for pid=9280 comm="syz.2.945" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 154.188241][ T40] audit: type=1400 audit(1776474441.391:585): avc: denied { search } for pid=9280 comm="syz.2.945" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.200430][ T40] audit: type=1400 audit(1776474441.401:586): avc: denied { search } for pid=9280 comm="syz.2.945" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.211835][ T40] audit: type=1400 audit(1776474441.401:587): avc: denied { read open } for pid=9280 comm="syz.2.945" path="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.220666][ T40] audit: type=1400 audit(1776474441.401:588): avc: denied { search } for pid=9280 comm="syz.2.945" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.237303][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 154.241996][ T9283] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 154.454565][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 154.471132][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 154.525959][ T9318] xt_nat: multiple ranges no longer supported [ 154.681644][ T9326] netlink: 'syz.2.960': attribute type 12 has an invalid length. [ 154.755834][ T9329] netlink: 'syz.2.960': attribute type 4 has an invalid length. [ 154.804808][ T9320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.866983][ T9334] bond9: entered promiscuous mode [ 154.932952][ T9340] xt_hashlimit: size too large, truncated to 1048576 [ 154.949810][ T9337] netlink: 'syz.0.963': attribute type 7 has an invalid length. [ 154.954938][ T9337] netlink: 'syz.0.963': attribute type 8 has an invalid length. [ 154.987752][ T9344] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 155.063280][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 155.314611][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=9366 comm=syz.0.973 [ 155.413111][ T9381] macvtap1: entered promiscuous mode [ 155.415539][ T9381] macvtap1: entered allmulticast mode [ 155.421140][ T9381] veth1_vlan: entered allmulticast mode [ 155.428029][ T39] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 155.474106][ T9389] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.579412][ T39] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 155.584706][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.593196][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.596814][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.600363][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.603825][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.608441][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.611892][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.615001][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.619134][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.622833][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.626355][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.632152][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.635603][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.639716][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.645233][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.650043][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.653596][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.658205][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.661959][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.666465][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.671865][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.677134][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.681701][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.686645][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.700029][ T39] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 155.704007][ T39] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 155.707380][ T39] usb 7-1: Product: syz [ 155.709446][ T39] usb 7-1: Manufacturer: syz [ 155.710963][ T39] usb 7-1: SerialNumber: syz [ 155.726676][ T39] usb 7-1: config 0 descriptor?? [ 155.739728][ T39] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 155.799412][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.806446][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.811829][ T9420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.942313][ T9] usb 7-1: USB disconnect, device number 12 [ 155.959485][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 156.040687][ T9439] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.994'. [ 156.327184][ T9461] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 156.369587][ T9460] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 156.373283][ T9460] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1001'. [ 156.376327][ T9460] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 156.380323][ T9460] netlink: 'syz.1.1001': attribute type 8 has an invalid length. [ 156.387691][ T9460] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1001'. [ 156.390987][ T9460] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1001'. [ 158.067249][ T9501] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 158.078325][ T9501] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 158.085805][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 158.234046][ T9487] bridge_slave_0: left allmulticast mode [ 158.236645][ T9487] bridge_slave_0: left promiscuous mode [ 158.245069][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.257072][ T9487] bridge_slave_1: left allmulticast mode [ 158.267665][ T9487] bridge_slave_1: left promiscuous mode [ 158.270484][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.283570][ T9487] bond0: (slave bond_slave_0): Releasing backup interface [ 158.290489][ T9487] bond0: (slave bond_slave_1): Releasing backup interface [ 158.300717][ T9487] team0: Port device team_slave_0 removed [ 158.305758][ T9487] team0: Port device team_slave_1 removed [ 158.311103][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.314834][ T9487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.322812][ T9487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.384007][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 158.390277][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 158.431768][ T9519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1014'. [ 158.447011][ T9521] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.453806][ T9514] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.460366][ T9514] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 158.464256][ T9514] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.466261][ T9521] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 158.467093][ T9514] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 158.471830][ T9521] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.475349][ T9521] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 158.539459][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 158.543391][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 158.591751][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 158.597899][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 158.693866][ T9560] Invalid option length (1047674) for dns_resolver key [ 158.743110][ T9564] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 158.752011][ T9564] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 158.812283][ T9577] netlink: 'syz.3.1033': attribute type 2 has an invalid length. [ 158.898725][ T6000] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 159.058505][ T6000] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 159.063364][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.067496][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.072310][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.076444][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.080514][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.085237][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.089555][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.093703][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.103548][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.107999][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.112122][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.116907][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.121049][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.124981][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.130585][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.134720][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.138916][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.143803][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.147884][ T29] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 159.149316][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.154036][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.158925][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.163083][ T6000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.166961][ T6000] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.171677][ T6000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.176964][ T6000] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.181078][ T6000] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.184627][ T6000] usb 7-1: Product: syz [ 159.186525][ T6000] usb 7-1: Manufacturer: syz [ 159.188831][ T6000] usb 7-1: SerialNumber: syz [ 159.193457][ T6000] usb 7-1: config 0 descriptor?? [ 159.205924][ T6000] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 159.288016][ T29] usb 6-1: device descriptor read/64, error -71 [ 159.401347][ T6000] usb 7-1: USB disconnect, device number 13 [ 159.405151][ T6000] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 159.537710][ T29] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 159.685311][ T29] usb 6-1: device descriptor read/64, error -71 [ 159.811393][ T29] usb usb6-port1: attempt power cycle [ 160.114615][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 160.114634][ T40] audit: type=1400 audit(1776474703.313:598): avc: denied { audit_write } for pid=9655 comm="syz.0.1044" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 160.207965][ T29] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 160.238402][ T29] usb 6-1: device descriptor read/8, error -71 [ 160.500436][ T29] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 160.531905][ T29] usb 6-1: device descriptor read/8, error -71 [ 160.653137][ T29] usb usb6-port1: unable to enumerate USB device [ 161.718497][ T9654] __nla_validate_parse: 2 callbacks suppressed [ 161.718515][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 161.727725][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 161.731557][ T9654] netlink: 'syz.3.1043': attribute type 20 has an invalid length. [ 161.841617][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 161.847669][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 161.850894][ T9654] netlink: 'syz.3.1043': attribute type 20 has an invalid length. [ 161.940719][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 161.950668][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 161.999106][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 162.035267][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 162.046730][ T8675] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.065081][ T9692] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.117678][ T9696] evm: overlay not supported [ 162.147274][ T9702] netlink: 'syz.3.1058': attribute type 89 has an invalid length. [ 162.148512][ T5637] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 162.150344][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 162.279782][ T9714] xt_hashlimit: size too large, truncated to 1048576 [ 162.312288][ T5637] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.319719][ T5637] usb 5-1: can't read configurations, error -71 [ 162.390966][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'. [ 162.458675][ T53] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 162.551882][ T9727] fuse: Bad value for 'fd' [ 162.609658][ T53] usb 6-1: unable to get BOS descriptor or descriptor too short [ 162.620366][ T53] usb 6-1: not running at top speed; connect to a high speed hub [ 162.623936][ T53] usb 6-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 162.633191][ T53] usb 6-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 162.639586][ T53] usb 6-1: config 1 interface 0 has no altsetting 0 [ 162.647113][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.653434][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.663565][ T53] usb 6-1: Product: syz [ 162.665054][ T53] usb 6-1: Manufacturer: syz [ 162.666639][ T53] usb 6-1: SerialNumber: syz [ 162.671354][ T9708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.674207][ T9708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.913463][ T53] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.964924][ T53] usb 6-1: USB disconnect, device number 14 [ 163.220303][ T9738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.377080][ T9750] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 163.405727][ T9750] romfs: unable to set blocksize [ 163.405727][ T9750] [ 163.513498][ T9773] usb usb9: usbfs: process 9773 (syz.2.1080) did not claim interface 0 before use [ 163.586005][ T40] audit: type=1400 audit(1776474706.783:599): avc: denied { set_context_mgr } for pid=9785 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 163.609211][ T40] audit: type=1400 audit(1776474706.803:600): avc: denied { cmd } for pid=9783 comm="syz.1.1083" path="socket:[31074]" dev="sockfs" ino=31074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.652195][ T9786] binder: 9785:9786 ioctl c0306201 200000000640 returned -22 [ 164.016947][ T40] audit: type=1400 audit(1776474707.213:601): avc: denied { lock } for pid=9812 comm="syz.3.1091" path="socket:[29977]" dev="sockfs" ino=29977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.076268][ T40] audit: type=1400 audit(1776474707.263:602): avc: denied { bind } for pid=9812 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 164.220343][ T9822] fuse: Unknown parameter 'gro' [ 164.264193][ T40] audit: type=1400 audit(1776474707.463:603): avc: denied { create } for pid=9828 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.315714][ T9829] bond10: ARP target 9.0.0.0 is already present [ 164.317922][ T9829] bond10: option arp_ip_target: invalid value (9) [ 164.322821][ T9829] bond10 (unregistering): Released all slaves [ 164.490007][ T9846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9846 comm=syz.3.1096 [ 164.814176][ T9856] netlink: 'syz.3.1100': attribute type 21 has an invalid length. [ 164.871922][ T40] audit: type=1400 audit(1776474708.073:604): avc: denied { ioctl } for pid=9855 comm="syz.3.1100" path="socket:[30112]" dev="sockfs" ino=30112 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.876742][ T9858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=9858 comm=syz.0.1101 [ 164.888194][ T9858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9858 comm=syz.0.1101 [ 164.898435][ T9858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9858 comm=syz.0.1101 [ 165.005893][ T9864] /dev/loop3: Can't lookup blockdev [ 165.038546][ T9848] kvm: kvm [9847]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 165.328276][ T9874] binder: 9873:9874 ioctl c0306201 200000000640 returned -22 [ 165.377574][ T40] audit: type=1400 audit(1776474708.573:605): avc: denied { read write } for pid=9875 comm="syz.0.1106" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.390956][ T40] audit: type=1400 audit(1776474708.573:606): avc: denied { open } for pid=9875 comm="syz.0.1106" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.436894][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.441666][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.447148][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.451452][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.454677][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.458621][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.465619][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.469514][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.473122][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.476994][ T5637] hid-generic 0006:000F:0009.0003: unknown main item tag 0x0 [ 165.485706][ T40] audit: type=1400 audit(1776474708.683:607): avc: denied { setopt } for pid=9875 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.540109][ T9876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 165.542862][ T9876] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.563611][ T9876] vhci_hcd vhci_hcd.0: Device attached [ 165.565939][ T9883] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 165.575114][ T9880] vhci_hcd: connection closed [ 165.580044][ T8677] vhci_hcd vhci_hcd.0: stop threads [ 165.584392][ T5637] hid-generic 0006:000F:0009.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 165.597004][ T8677] vhci_hcd vhci_hcd.0: release socket [ 165.601163][ T8677] vhci_hcd vhci_hcd.0: disconnect device [ 165.623793][ T9888] fuse: Bad value for 'fd' [ 165.669485][ T9892] netlink: 'syz.3.1111': attribute type 3 has an invalid length. [ 165.677575][ T9892] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 165.678251][ T9885] fido_id[9885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.682359][ T9893] netlink: 'syz.3.1111': attribute type 3 has an invalid length. [ 165.697613][ T9893] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 165.732510][ T9897] qnx6: unable to read the first superblock [ 165.738527][ T9897] qnx6: unable to read the first superblock [ 165.740690][ T9897] qnx6: unable to read the first superblock [ 166.076015][ T9907] ip6gre1: entered promiscuous mode [ 166.079089][ T9907] ip6gre1: entered allmulticast mode [ 166.111203][ T9902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.181317][ T40] audit: type=1400 audit(1776474709.383:608): avc: denied { read } for pid=9910 comm="syz.3.1116" dev="nsfs" ino=4026533303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.197801][ T40] audit: type=1400 audit(1776474709.383:609): avc: denied { open } for pid=9910 comm="syz.3.1116" path="net:[4026533303]" dev="nsfs" ino=4026533303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.219815][ T40] audit: type=1400 audit(1776474709.413:610): avc: denied { block_suspend } for pid=9910 comm="syz.3.1116" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.547943][ T836] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.710149][ T836] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 166.715914][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.721026][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.726563][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.730858][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.734744][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.739872][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.744381][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.748955][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.753524][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.759270][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.763020][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.765964][ T40] audit: type=1400 audit(1776474709.963:611): avc: denied { read } for pid=9940 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.767900][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.782068][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.785904][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.793459][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.798822][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.803121][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.808302][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.812477][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.816628][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.821990][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.825944][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.831621][ T836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.836256][ T836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.842630][ T836] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 166.846520][ T836] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 166.850351][ T836] usb 5-1: Product: syz [ 166.852041][ T836] usb 5-1: Manufacturer: syz [ 166.853601][ T836] usb 5-1: SerialNumber: syz [ 166.860709][ T836] usb 5-1: config 0 descriptor?? [ 166.867020][ T836] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.870208][ T40] audit: type=1400 audit(1776474710.073:612): avc: denied { setopt } for pid=9945 comm="syz.1.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 166.872713][ T9946] overlayfs: missing 'lowerdir' [ 167.074600][ T836] usb 5-1: USB disconnect, device number 11 [ 167.084299][ T836] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 167.235398][ T9970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.659382][ T9984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.669522][ T9984] overlayfs: failed to set xattr on upper [ 167.672145][ T9984] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.675489][ T9984] overlayfs: ...falling back to index=off. [ 167.678134][ T9984] overlayfs: ...falling back to uuid=null. [ 167.680574][ T9984] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 168.120224][ T40] audit: type=1400 audit(1776474711.323:613): avc: denied { create } for pid=9992 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.127791][ T40] audit: type=1400 audit(1776474711.323:614): avc: denied { listen } for pid=9992 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.632627][ T9981] __nla_validate_parse: 74 callbacks suppressed [ 169.632641][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 169.639882][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 169.691918][ T9999] binder: 9998:9999 ioctl c0306201 200000000080 returned -14 ( [ 169.938246][ T836] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 170.119034][ T836] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.122533][ T836] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.125604][ T836] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.129468][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.134565][ T9999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.184657][ T836] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.235808][T10021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.465417][ T54] usb 7-1: USB disconnect, device number 14 [ 170.629620][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1153'. [ 170.675617][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 170.675629][ T40] audit: type=1400 audit(1776474713.873:617): avc: denied { load_policy } for pid=10049 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 170.687799][T10050] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 170.690189][T10050] SELinux: failed to load policy [ 170.692049][T10051] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 170.699228][T10051] SELinux: failed to load policy [ 170.758413][T10057] veth1_to_batadv: entered promiscuous mode [ 170.767947][ T40] audit: type=1400 audit(1776474713.963:618): avc: denied { name_bind } for pid=10049 comm="syz.2.1155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 171.326987][T10067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.592227][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 171.823223][T10097] CIFS: VFS: UNC: path must begin with // or \\ [ 171.826270][T10097] Malformed UNC in devname [ 171.826270][T10097] [ 171.831062][T10097] CIFS: VFS: Malformed UNC in devname [ 171.867719][ T53] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 171.908487][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 171.913366][ T40] audit: type=1400 audit(1776474715.103:619): avc: denied { shutdown } for pid=10098 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.049717][ T53] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 172.054565][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.059206][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.064140][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.068225][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.072153][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.076746][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.081487][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.085183][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.090030][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.094642][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.099623][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.104595][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.121715][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.125969][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.130868][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.135539][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.139285][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.143494][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.146760][T10112] binder: 10111:10112 unknown command 0 [ 172.147985][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.150046][T10112] binder: 10111:10112 ioctl c0306201 200000000080 returned -22 [ 172.153090][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.161259][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.169726][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.170464][T10112] binder: BINDER_SET_CONTEXT_MGR already set [ 172.173817][ T53] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.175985][T10112] binder: 10111:10112 ioctl 4018620d 200000000240 returned -16 [ 172.180583][ T40] audit: type=1400 audit(1776474715.383:620): avc: denied { call } for pid=10111 comm="syz.0.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 172.191715][ T836] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 172.194960][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.200352][ T53] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.204373][ T53] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.207930][ T53] usb 7-1: Product: syz [ 172.209723][ T53] usb 7-1: Manufacturer: syz [ 172.212325][ T53] usb 7-1: SerialNumber: syz [ 172.222460][ T53] usb 7-1: config 0 descriptor?? [ 172.246909][ T53] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 172.298533][T10122] ip6gre2: entered promiscuous mode [ 172.300414][T10122] ip6gre2: entered allmulticast mode [ 172.325136][T10126] tipc: Enabling of bearer rejected, failed to enable media [ 172.359805][ T836] usb 6-1: Using ep0 maxpacket: 8 [ 172.363862][ T836] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 172.368060][ T836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 172.372967][ T836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.376999][ T836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.385406][ T836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.392113][ T836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.395817][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.442287][ T53] usb 7-1: USB disconnect, device number 15 [ 172.451416][ T53] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 172.613171][ T836] usb 6-1: GET_CAPABILITIES returned 0 [ 172.616142][ T836] usbtmc 6-1:16.0: can't read capabilities [ 172.925438][T10135] xt_CONNSECMARK: invalid mode: 0 [ 173.049584][ T6247] usb 6-1: USB disconnect, device number 15 [ 173.072025][ T40] audit: type=1400 audit(1776474716.273:621): avc: denied { append } for pid=10138 comm="syz.0.1180" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 173.085143][T10139] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1180'. [ 173.143843][T10145] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 173.233083][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 173.241911][T10152] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1184'. [ 173.247103][T10152] program syz.2.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.248870][T10151] program syz.2.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.298738][ T1121] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 173.302034][T10158] Cannot find del_set index 2 as target [ 173.306546][ T1121] ata1.00: irq_stat 0x40000000 [ 173.310412][ T1121] ata1.00: failed command: ZAC MANAGEMENT OUT [ 173.312675][ T1121] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 15 [ 173.312675][ T1121] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 173.319562][ T1121] ata1.00: status: { DRDY ERR } [ 173.321284][ T1121] ata1.00: error: { ABRT } [ 173.322896][ T1121] ata1.00: device reported invalid CHS sector 0 [ 173.388242][ T1121] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 173.392918][ T1121] ata1.00: irq_stat 0x40000000 [ 173.394766][ T1121] ata1.00: failed command: ZAC MANAGEMENT OUT [ 173.396986][ T1121] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 12 [ 173.396986][ T1121] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 173.402513][ T1121] ata1.00: status: { DRDY ERR } [ 173.404179][ T1121] ata1.00: error: { ABRT } [ 173.405883][ T1121] ata1.00: device reported invalid CHS sector 0 [ 173.673683][T10178] unsupported nla_type 4111 [ 173.689525][T10178] netlink: zone id is out of range [ 173.692019][T10178] netlink: zone id is out of range [ 173.694896][T10178] netlink: set zone limit has 8 unknown bytes [ 173.935448][T10198] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 174.111746][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1205'. [ 174.114937][T10210] unsupported nlmsg_type 40 [ 174.275890][T10213] libceph: resolve '4' (ret=-3): failed [ 174.434146][T10219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.608013][T10226] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1209'. [ 174.678884][T10236] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 174.765240][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 174.766286][ T40] audit: type=1400 audit(1776474717.963:622): avc: denied { read } for pid=10239 comm="syz.2.1213" dev="sockfs" ino=32467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.880621][ T40] audit: type=1400 audit(1776474718.083:623): avc: denied { bind } for pid=10248 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.903990][ T40] audit: type=1400 audit(1776474718.083:624): avc: denied { name_bind } for pid=10248 comm="syz.3.1218" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 174.918976][ T40] audit: type=1400 audit(1776474718.083:625): avc: denied { node_bind } for pid=10248 comm="syz.3.1218" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 174.992303][T10259] Can't find a SQUASHFS superblock on nullb0 [ 175.034206][T10264] netlink: 'syz.3.1221': attribute type 2 has an invalid length. [ 175.113477][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 175.117430][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 175.182782][T10277] usb usb7: usbfs: process 10277 (syz.0.1224) did not claim interface 0 before use [ 175.195004][ T40] audit: type=1400 audit(1776474718.393:626): avc: denied { getopt } for pid=10278 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.244962][T10285] tmpfs: Bad value for 'mpol' [ 175.299208][T10287] wireguard0: entered allmulticast mode [ 175.459362][T10303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1233'. [ 175.462601][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1233'. [ 175.600816][ T5937] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 175.886521][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 176.042107][T10317] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.046184][T10317] devpts: Bad value for 'max' [ 176.130413][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 176.130431][ T40] audit: type=1400 audit(1776474719.333:629): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 176.686481][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.878310][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 177.076250][T10364] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 177.087291][ T40] audit: type=1400 audit(1776474720.283:630): avc: denied { ioctl } for pid=10362 comm="syz.1.1252" path="pid:[4026533866]" dev="nsfs" ino=4026533866 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.127812][ T6000] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 177.223396][ T1121] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 177.241420][ T1121] ata1.00: configured for UDMA/100 [ 177.277778][ T6000] usb 7-1: device descriptor read/64, error -71 [ 177.415327][T10386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.464796][T10392] netlink: 189664 bytes leftover after parsing attributes in process `syz.3.1260'. [ 177.547983][ T6000] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 177.645613][ T40] audit: type=1400 audit(1776474720.843:631): avc: denied { read } for pid=10400 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 177.654640][T10403] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.689146][ T6000] usb 7-1: device descriptor read/64, error -71 [ 177.697416][ T40] audit: type=1400 audit(1776474720.893:632): avc: denied { ioctl } for pid=10409 comm="syz.3.1266" path="socket:[32648]" dev="sockfs" ino=32648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.777472][T10417] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 177.798041][ T6000] usb usb7-port1: attempt power cycle [ 178.037334][T10436] /dev/sr0: Can't lookup blockdev [ 178.078811][ T5937] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 178.147834][ T6000] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 178.169027][ T6000] usb 7-1: device descriptor read/8, error -71 [ 178.170737][T10440] MTD: Couldn't look up '/dev/sr0': -13 [ 178.175043][T10440] /dev/sr0: Can't lookup blockdev [ 178.413665][ T6000] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 178.430785][ T6000] usb 7-1: device descriptor read/8, error -71 [ 178.545955][ T6000] usb usb7-port1: unable to enumerate USB device [ 179.954333][T10465] xt_hashlimit: max too large, truncated to 1048576 [ 179.985261][T10465] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.319203][T10473] overlayfs: failed to resolve './file0': -2 [ 181.251128][T10489] netlink: 'syz.1.1289': attribute type 10 has an invalid length. [ 181.254296][T10489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1289'. [ 181.278911][T10489] team0: entered promiscuous mode [ 181.281443][T10489] team0: entered allmulticast mode [ 181.285774][ T40] audit: type=1400 audit(1776474724.483:633): avc: denied { checkpoint_restore } for pid=10491 comm="syz.2.1290" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.287034][T10489] bridge0: port 1(team0) entered blocking state [ 181.308110][ T40] audit: type=1400 audit(1776474724.493:634): avc: denied { execstack } for pid=10491 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.317933][T10489] bridge0: port 1(team0) entered disabled state [ 181.333098][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 181.353157][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 181.378361][ T40] audit: type=1400 audit(1776474724.573:635): avc: denied { name_connect } for pid=10501 comm="syz.2.1292" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 181.735428][T10523] No such timeout policy "syz1" [ 181.804420][ T40] audit: type=1400 audit(1776474725.003:636): avc: denied { read } for pid=10524 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.869036][T10526] program syz.2.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.874519][T10526] ata1.00: invalid command format 0 [ 182.006912][ T40] audit: type=1400 audit(1776474725.203:637): avc: denied { create } for pid=10531 comm="syz.2.1303" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 182.057742][ T40] audit: type=1400 audit(1776474725.253:638): avc: denied { mounton } for pid=10531 comm="syz.2.1303" path="/301/file0/file0" dev="9p" ino=81264735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.137029][ T40] audit: type=1400 audit(1776474725.333:639): avc: denied { write } for pid=10531 comm="syz.2.1303" path="socket:[34113]" dev="sockfs" ino=34113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.148688][ T40] audit: type=1400 audit(1776474725.353:640): avc: denied { listen } for pid=10531 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.157068][ T40] audit: type=1400 audit(1776474725.353:641): avc: denied { accept } for pid=10531 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.182939][ T40] audit: type=1400 audit(1776474725.383:642): avc: denied { append } for pid=10538 comm="syz.1.1305" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 182.291503][T10544] ip6gre1: entered promiscuous mode [ 182.294454][T10544] ip6gre1: entered allmulticast mode [ 182.313174][T10545] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 182.320408][T10545] overlayfs: overlapping lowerdir path [ 182.518346][T10557] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1311'. [ 182.568896][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1313'. [ 182.677931][T10564] comedi comedi3: comedi_test: 32771 microvolt, 70 microsecond waveform attached [ 183.478425][ T8676] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 183.645349][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 183.652158][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1319'. [ 183.656767][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 183.662282][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1319'. [ 183.989499][ T5937] Bluetooth: hci2: unexpected event for opcode 0x7662 [ 184.979722][T10612] /dev/sr0: Can't lookup blockdev [ 185.221416][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 186.253847][T10615] overlayfs: overlapping lowerdir path [ 186.906962][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 186.907031][ T40] audit: type=1400 audit(1776474730.103:650): avc: denied { shutdown } for pid=10640 comm="syz.2.1336" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.913556][T10645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.983427][ T40] audit: type=1400 audit(1776474730.183:651): avc: denied { setopt } for pid=10650 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.387714][ T39] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 187.452648][T10664] __nla_validate_parse: 1 callbacks suppressed [ 187.452660][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 187.461325][ T5937] Bluetooth: hci2: ISO packet too small [ 187.539178][ T39] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 187.543228][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.546514][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.550671][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.553714][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.556665][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.560444][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.563517][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.566498][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.570333][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.573601][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.576639][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.580757][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.583808][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.586786][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.590635][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.593767][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.596997][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.600806][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.604180][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.607352][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.611344][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.614424][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.617375][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.621082][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 187.627230][ T39] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 187.630456][ T39] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.633152][ T39] usb 6-1: Product: syz [ 187.634535][ T39] usb 6-1: Manufacturer: syz [ 187.636102][ T39] usb 6-1: SerialNumber: syz [ 187.644042][ T39] usb 6-1: config 0 descriptor?? [ 187.649673][ T39] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.856280][ T39] usb 6-1: USB disconnect, device number 16 [ 187.867085][ T39] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 188.892281][T10684] (syz.2.1348,10684,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 188.902280][T10684] (syz.2.1348,10684,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 188.904722][T10684] (syz.2.1348,10684,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 188.907436][T10684] (syz.2.1348,10684,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 189.352672][T10692] SET target dimension over the limit! [ 190.465470][T10699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 190.471181][T10699] overlayfs: failed to set xattr on upper [ 190.473539][T10699] overlayfs: ...falling back to redirect_dir=nofollow. [ 190.476253][T10699] overlayfs: ...falling back to index=off. [ 190.482203][T10699] overlayfs: ...falling back to uuid=null. [ 190.496246][T10699] overlayfs: cleanup of 'bus/work' failed (-13) [ 190.498927][T10699] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 190.501925][T10699] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 190.505405][T10699] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 190.537844][ T40] audit: type=1400 audit(1776474733.733:652): avc: denied { setopt } for pid=10703 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.612747][T10716] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 190.612747][T10716] The task syz.2.1352 (10716) triggered the difference, watch for misbehavior. [ 190.661056][T10716] tmpfs: Unknown parameter 'grpquota_inodeX [ 190.661056][T10716] ' [ 190.681774][ T40] audit: type=1400 audit(1776474733.883:653): avc: denied { getattr } for pid=10719 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 190.689528][ T40] audit: type=1400 audit(1776474733.893:654): avc: denied { ioctl } for pid=10719 comm="syz.3.1357" path="socket:[37098]" dev="sockfs" ino=37098 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 190.772188][ T40] audit: type=1400 audit(1776474733.973:655): avc: denied { execute } for pid=10721 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 190.782353][ T40] audit: type=1400 audit(1776474733.973:656): avc: denied { execute_no_trans } for pid=10721 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 190.935362][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.941541][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.947029][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.961805][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.964842][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.177651][ T6000] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 191.184489][T10742] fuse: Bad value for 'fd' [ 191.187664][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1363'. [ 191.269743][T10729] chnl_net:caif_netlink_parms(): no params data found [ 191.340901][ T6000] usb 6-1: Using ep0 maxpacket: 32 [ 191.349158][ T6000] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 168, changing to 7 [ 191.355297][ T6000] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 191.356224][T10750] /dev/nbd3: Can't lookup blockdev [ 191.359021][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.363138][ T6000] usb 6-1: Product: syz [ 191.364509][ T6000] usb 6-1: Manufacturer: 䀊 [ 191.366080][ T6000] usb 6-1: SerialNumber: syz [ 191.375237][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.382369][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.388611][T10729] bridge_slave_0: entered allmulticast mode [ 191.393009][ T40] audit: type=1326 audit(1776474734.593:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440799c819 code=0x7ffc0000 [ 191.402164][ T40] audit: type=1326 audit(1776474734.593:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440799c819 code=0x7ffc0000 [ 191.402673][T10729] bridge_slave_0: entered promiscuous mode [ 191.411386][ T40] audit: type=1326 audit(1776474734.593:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440799c819 code=0x7ffc0000 [ 191.431153][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.433875][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.436933][T10729] bridge_slave_1: entered allmulticast mode [ 191.440313][T10729] bridge_slave_1: entered promiscuous mode [ 191.463375][T10729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.470022][T10729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.475564][T10754] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 191.494968][T10729] team0: Port device team_slave_0 added [ 191.498754][T10729] team0: Port device team_slave_1 added [ 191.521169][T10729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.523635][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.534460][T10729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.542022][T10729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.544654][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.555221][T10729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.598617][ T6000] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 191.647256][ T6000] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 191.647443][ T8663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.660621][ T8663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.695406][ T8283] udevd[8283]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.735382][T10729] hsr_slave_0: entered promiscuous mode [ 191.738861][T10729] hsr_slave_1: entered promiscuous mode [ 191.741540][T10729] debugfs: 'hsr0' already exists in 'hsr' [ 191.743956][T10729] Cannot create hsr debugfs directory [ 191.805193][ T39] usb 6-1: USB disconnect, device number 17 [ 191.869122][ T8663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.873429][ T8663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.011775][ T8663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.015364][ T8663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.129096][ T8663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.132564][ T8663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.150218][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 192.150231][ T40] audit: type=1400 audit(1776474735.353:760): avc: denied { write } for pid=10795 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.195303][T10796] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1377'. [ 192.301518][T10800] futex_wake_op: syz.2.1378 tries to shift op by -1; fix this program [ 192.314269][T10729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.346561][T10729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.359690][T10729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.380021][T10729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.450067][T10729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.458540][T10813] netlink: 'syz.1.1381': attribute type 5 has an invalid length. [ 192.460575][T10729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.465291][T10729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.476612][T10729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.791301][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 192.889172][ T8663] team0: Port device geneve0 removed [ 193.098305][ T5937] Bluetooth: hci4: command tx timeout [ 193.155418][ T8663] bond0 (unregistering): Released all slaves [ 193.163438][ T8663] bond1 (unregistering): Released all slaves [ 193.180114][ T8663] bond2 (unregistering): Released all slaves [ 193.191291][ T8663] bond3 (unregistering): Released all slaves [ 193.332506][ T8663] tipc: Disabling bearer [ 193.347081][ T8663] tipc: Left network mode [ 193.591813][ T8663] hsr_slave_0: left promiscuous mode [ 193.595100][ T8663] hsr_slave_1: left promiscuous mode [ 193.623120][ T8663] veth1_to_batadv: left promiscuous mode [ 193.628485][ T8663] veth1_vlan: left allmulticast mode [ 193.631001][ T8663] veth1_macvtap: left promiscuous mode [ 193.633384][ T8663] veth0_macvtap: left promiscuous mode [ 193.636523][ T8663] veth1_vlan: left promiscuous mode [ 193.640419][ T8663] veth0_vlan: left promiscuous mode [ 195.178416][ T5937] Bluetooth: hci4: command tx timeout [ 195.215789][T10800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.372383][T10729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.394275][T10729] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.400977][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'. [ 195.403581][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.411833][ T8665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.416333][ T40] audit: type=1400 audit(1776474738.613:761): avc: denied { setopt } for pid=10841 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.436233][ T5646] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.444633][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.448074][ T8665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.482741][T10847] /dev/loop3: Can't lookup blockdev [ 195.610988][T10858] fuse: Bad value for 'fd' [ 195.620161][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1389'. [ 195.664022][T10729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.715053][ T5646] 8021q: adding VLAN 0 to HW filter on device eth3 [ 195.720970][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 195.728928][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 196.090679][T10729] veth0_vlan: entered promiscuous mode [ 196.103019][T10729] veth1_vlan: entered promiscuous mode [ 196.119480][ T40] audit: type=1400 audit(1776474739.313:762): avc: denied { compute_member } for pid=10897 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 196.129589][ T5646] 8021q: adding VLAN 0 to HW filter on device eth4 [ 196.180003][T10898] syzkaller0: entered promiscuous mode [ 196.182645][T10898] syzkaller0: entered allmulticast mode [ 196.199568][T10729] veth0_macvtap: entered promiscuous mode [ 196.206741][T10729] veth1_macvtap: entered promiscuous mode [ 197.258629][ T5937] Bluetooth: hci4: command tx timeout [ 198.599164][T10729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.608031][T10729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.622824][ T8665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.626206][ T8665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.656433][ T8665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.661245][ T8665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.684253][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 198.786049][ T5646] 8021q: adding VLAN 0 to HW filter on device eth5 [ 198.885480][ T8678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.894201][ T8678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.926533][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 198.928698][ T8663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.932908][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 198.935817][ T8663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.939477][ T40] audit: type=1400 audit(1776474742.143:763): avc: denied { mounton } for pid=10729 comm="syz-executor" path="/syzkaller.FO0MvR/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 198.949514][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 198.953391][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 198.965861][ T40] audit: type=1400 audit(1776474742.163:764): avc: denied { mounton } for pid=10729 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 199.012517][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 199.339156][ T5937] Bluetooth: hci4: command tx timeout [ 199.373697][T10952] cgroup: release_agent respecified [ 199.552401][T10965] netlink: 'syz.2.1410': attribute type 17 has an invalid length. [ 199.555118][T10965] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1410'. [ 199.647194][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 199.713101][T10975] syzkaller0: entered promiscuous mode [ 199.715025][T10975] syzkaller0: entered allmulticast mode [ 199.722558][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 199.894137][T10978] sctp: [Deprecated]: syz.1.1415 (pid 10978) Use of int in max_burst socket option. [ 199.894137][T10978] Use struct sctp_assoc_value instead [ 199.913409][T10982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 199.918571][T10982] overlay: Unknown parameter '/' [ 199.930649][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1416'. [ 199.938072][ T40] audit: type=1400 audit(1776474743.133:765): avc: denied { search } for pid=10979 comm="syz.4.1416" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 199.957597][ T40] audit: type=1400 audit(1776474743.133:766): avc: denied { search } for pid=10979 comm="syz.4.1416" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 199.971737][ T40] audit: type=1400 audit(1776474743.153:767): avc: denied { search } for pid=10979 comm="syz.4.1416" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.080447][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.084044][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.318601][ T40] audit: type=1400 audit(1776474743.523:768): avc: denied { accept } for pid=10994 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.781033][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 200.812513][T11031] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 200.820689][ T40] audit: type=1400 audit(1776474744.023:769): avc: denied { relabelto } for pid=11030 comm="syz.2.1431" name="file0" dev="tmpfs" ino=1770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 200.832950][ T40] audit: type=1400 audit(1776474744.023:770): avc: denied { associate } for pid=11030 comm="syz.2.1431" name="file0" dev="tmpfs" ino=1770 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 200.876628][ T40] audit: type=1400 audit(1776474744.023:771): avc: denied { mounton } for pid=11030 comm="syz.2.1431" path="/329/file0" dev="tmpfs" ino=1770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 200.889966][ T40] audit: type=1400 audit(1776474744.043:772): avc: denied { mount } for pid=11030 comm="syz.2.1431" name="/" dev="rpc_pipefs" ino=38000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 200.903137][T11040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.910062][T11040] IPv6: NLM_F_CREATE should be set when creating new route [ 200.918212][T11041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=11041 comm=syz.3.1433 [ 201.036614][T11050] gfs2: Unknown parameter 'debugead 0 [ 201.036614][T11050] ' [ 201.783855][T11063] No source specified [ 201.785616][T11064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=11064 comm=syz.4.1439 [ 201.950667][T11086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 202.148708][T11101] ipt_REJECT: TCP_RESET invalid for non-tcp [ 202.194599][T11106] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 202.317179][T11110] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 202.411017][T11113] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 202.437302][T11114] Process accounting resumed [ 202.676671][T11125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.040559][ T5637] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 203.118652][T11143] bond6: (slave sit0): The slave device specified does not support setting the MAC address [ 203.123938][T11143] bond6: (slave sit0): Error -95 calling set_mac_address [ 203.126297][T11146] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 203.131341][T11146] fuse: Bad value for 'fd' [ 203.179770][T11148] team0: Device gtp1 is up. Set it down before adding it as a team port [ 203.221068][ T5637] usb 9-1: not running at top speed; connect to a high speed hub [ 203.226002][ T5637] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 203.233920][ T5637] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.247699][ T5637] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.251524][ T5637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.256042][ T5637] usb 9-1: Product: 盛즷䢑倡㔝죀癯ݾ깾栚಴㗕뗗皕᝵촬蠇ᅱ쀋䌽鿃攟袞ꪃ冄㖠ᆡ担ㅺ嗼ⵐ콲宦ম䙨봈鰮⽧잁읫ᬔꌋ짹Ꝛ愃㚕辻ㄮ계㿁ⶥ䏍╛캓牨愽뙷诙쾚臕㈴愬ᄾ롖ⴄꃐ믶ば䯀찗秖Ḧ樢⅗ﰃ⌊ੱ罩臍㷩阂す吲싌缐꣢ [ 203.267259][ T5637] usb 9-1: Manufacturer:  [ 203.269435][ T5637] usb 9-1: SerialNumber: 英嚝֩氾艚辚ଖ뢋镯疡팵핔난馉Უ뢪孋ॽ揇뵫뗾罋꫗掃媗ꤛশꭘ [ 203.279379][ T5637] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 203.286853][ T5637] usb 9-1: no configuration chosen from 1 choice [ 203.360790][T11162] netlink: 'syz.2.1469': attribute type 4 has an invalid length. [ 203.389067][T11163] bond10: Removing last ns target with arp_interval on [ 203.398764][T11167] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 203.408241][T11167] bond3: (slave lo): Releasing backup interface [ 203.414064][T11167] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 203.423240][T11167] lo: left promiscuous mode [ 203.435386][T11167] bridge0: port 1(team0) entered disabled state [ 203.442753][T11167] bond0: (slave dummy0): Releasing backup interface [ 203.463342][T11167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.539002][T11169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8444 sclass=netlink_route_socket pid=11169 comm=syz.2.1473 [ 203.624537][T11183] fuse: Unknown parameter 'user_i00000000000000000000' [ 203.690925][T11179] __nla_validate_parse: 18 callbacks suppressed [ 203.690947][T11179] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1477'. [ 203.739885][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.751226][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.756023][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.760889][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.765658][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.771521][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.901664][T11213] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 203.910814][T11213] CIFS mount error: No usable UNC path provided in device string! [ 203.910814][T11213] [ 203.914219][T11213] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.923212][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. [ 204.020741][T11229] mkiss: ax0: crc mode is auto. [ 204.026218][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 204.038581][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 204.041940][T11231] netlink: 'syz.1.1492': attribute type 11 has an invalid length. [ 204.044480][T11231] netlink: 'syz.1.1492': attribute type 7 has an invalid length. [ 204.128488][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 204.128500][ T40] audit: type=1400 audit(2000000002.049:783): avc: denied { create } for pid=11221 comm="syz.3.1489" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.130035][T11234] o2cb: This node has not been configured. [ 204.145114][T11234] o2cb: Cluster check failed. Fix errors before retrying. [ 204.148438][T11234] (syz.3.1489,11234,1):user_dlm_register:674 ERROR: status = -22 [ 204.151914][T11234] (syz.3.1489,11234,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 204.307724][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 204.467827][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 204.471833][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.475333][ T9] usb 6-1: config 0 has no interfaces? [ 204.480485][T11240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.480808][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 204.488662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.491775][ T9] usb 6-1: Product: syz [ 204.493237][ T9] usb 6-1: Manufacturer: syz [ 204.494929][ T9] usb 6-1: SerialNumber: syz [ 204.503034][ T9] usb 6-1: config 0 descriptor?? [ 204.711960][T11231] lo: entered allmulticast mode [ 204.717050][T11230] lo: left allmulticast mode [ 204.726800][ T9] usb 6-1: USB disconnect, device number 18 [ 205.005502][ T40] audit: type=1400 audit(2000000002.929:784): avc: denied { recv } for pid=11246 comm="syz.2.1496" saddr=10.0.2.2 src=43140 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 205.014287][ T40] audit: type=1400 audit(2000000002.929:785): avc: denied { recv } for pid=5916 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50508 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 205.151313][T11259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=11259 comm=syz.3.1500 [ 205.296627][ T53] Process accounting resumed [ 205.364128][T11270] atomic_op ffff88802fc95198 conn xmit_atomic 0000000000000000 [ 205.525211][T11266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.889402][ T9] usb 9-1: USB disconnect, device number 2 [ 206.163677][T11290] Bluetooth: hci0: unsupported parameter 255 [ 206.181661][T11290] Bluetooth: hci0: unsupported parameter 255 [ 206.549131][T11293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=11293 comm=syz.4.1511 [ 206.606420][T11299] ip6gretap0: entered promiscuous mode [ 206.810273][T11313] gretap1: entered promiscuous mode [ 206.813665][T11313] batman_adv: batadv0: Adding interface: gretap1 [ 206.816753][T11313] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 206.830801][T11313] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 206.874472][T11313] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 206.886083][T11313] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 206.889841][T11313] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 206.893017][T11313] netlink: 'syz.4.1518': attribute type 8 has an invalid length. [ 206.907192][T11318] netlink: 'syz.3.1520': attribute type 12 has an invalid length. [ 207.128645][ T39] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 207.318272][ T39] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 207.323664][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.337634][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.342142][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.346525][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.356945][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.368307][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.371843][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.377307][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.387620][ T40] audit: type=1400 audit(2000000005.309:786): avc: denied { name_bind } for pid=11359 comm="syz.3.1534" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 207.395452][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.401280][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.409841][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.417911][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.432865][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.436169][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.447884][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.456674][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.467629][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.471821][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.476976][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.485112][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.494760][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.503044][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.512817][ T39] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.518747][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.525854][ T39] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 207.537622][ T39] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.541224][ T39] usb 6-1: Product: syz [ 207.542912][ T39] usb 6-1: Manufacturer: syz [ 207.545095][ T39] usb 6-1: SerialNumber: syz [ 207.559839][ T39] usb 6-1: config 0 descriptor?? [ 207.578648][ T39] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 207.589424][T11377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.609059][T11377] team0: No ports can be present during mode change [ 207.661027][T11377] team0 (unregistering): Port device netdevsim0 removed [ 207.768972][ T2117] usb 6-1: USB disconnect, device number 19 [ 207.780868][ T2117] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 207.926981][ T40] audit: type=1400 audit(2000000005.849:787): avc: denied { setopt } for pid=11383 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.939825][ T40] audit: type=1400 audit(2000000005.859:788): avc: denied { ioctl } for pid=11383 comm="syz.3.1542" path="socket:[39507]" dev="sockfs" ino=39507 ioctlcmd=0x583e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.958165][ T40] audit: type=1400 audit(2000000005.859:789): avc: denied { bind } for pid=11383 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.990226][T11388] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 208.094100][ T40] audit: type=1400 audit(2000000006.019:790): avc: denied { listen } for pid=11391 comm="syz.3.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.109627][T11392] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 208.116507][T11392] CPU: 0 UID: 0 PID: 11392 Comm: syz.3.1545 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.116546][T11392] Tainted: [L]=SOFTLOCKUP [ 208.116554][T11392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.116568][T11392] Call Trace: [ 208.116579][T11392] [ 208.116589][T11392] dump_stack_lvl+0x100/0x190 [ 208.116875][T11392] sysfs_warn_dup.cold+0x1c/0x28 [ 208.116968][T11392] sysfs_do_create_link_sd+0x113/0x140 [ 208.117074][T11392] sysfs_create_link+0x61/0xc0 [ 208.117110][T11392] device_add+0x675/0x1920 [ 208.117242][T11392] ? __pfx_device_add+0x10/0x10 [ 208.117275][T11392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.117360][T11392] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 208.117749][T11392] wiphy_register+0x1edd/0x2d90 [ 208.117781][T11392] ? __rtnl_unlock+0xb9/0xf0 [ 208.117938][T11392] ? __pfx_wiphy_register+0x10/0x10 [ 208.117974][T11392] ? __asan_memset+0x23/0x50 [ 208.118058][T11392] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 208.118218][T11392] ieee80211_register_hw+0x3055/0x4570 [ 208.118268][T11392] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.118294][T11392] ? __pfx___debug_object_init+0x10/0x10 [ 208.118384][T11392] ? find_held_lock+0x2b/0x80 [ 208.118475][T11392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.118503][T11392] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 208.118640][T11392] ? __hrtimer_setup+0x208/0x330 [ 208.118802][T11392] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 208.118853][T11392] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.118884][T11392] ? __asan_memcpy+0x3c/0x60 [ 208.118915][T11392] hwsim_new_radio_nl+0xc5f/0x1370 [ 208.118941][T11392] ? rcu_is_watching+0x12/0xc0 [ 208.119031][T11392] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.119066][T11392] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 208.119158][T11392] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 208.119194][T11392] genl_family_rcv_msg_doit+0x214/0x300 [ 208.119225][T11392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.119269][T11392] ? bpf_lsm_capable+0x9/0x10 [ 208.119352][T11392] ? security_capable+0x80/0x260 [ 208.119489][T11392] ? ns_capable+0xd2/0xf0 [ 208.119576][T11392] genl_rcv_msg+0x560/0x800 [ 208.119606][T11392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.119634][T11392] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.119672][T11392] netlink_rcv_skb+0x159/0x420 [ 208.119707][T11392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.119734][T11392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.119781][T11392] ? netlink_deliver_tap+0x1ae/0xcc0 [ 208.119819][T11392] genl_rcv+0x28/0x40 [ 208.119841][T11392] netlink_unicast+0x585/0x850 [ 208.119881][T11392] ? __pfx_netlink_unicast+0x10/0x10 [ 208.119923][T11392] netlink_sendmsg+0x8b0/0xda0 [ 208.119963][T11392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.119994][T11392] ? __might_fault+0x60/0x140 [ 208.120082][T11392] ____sys_sendmsg+0x9e1/0xb70 [ 208.120114][T11392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.120144][T11392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.120177][T11392] ? __pfx_futex_wake_mark+0x10/0x10 [ 208.120210][T11392] ___sys_sendmsg+0x190/0x1e0 [ 208.120234][T11392] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.120293][T11392] __sys_sendmsg+0x170/0x220 [ 208.120320][T11392] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.120346][T11392] ? __x64_sys_futex+0x34f/0x4d0 [ 208.120384][T11392] ? rcu_is_watching+0x12/0xc0 [ 208.120415][T11392] do_syscall_64+0x10b/0xf80 [ 208.120439][T11392] ? clear_bhb_loop+0x40/0x90 [ 208.120464][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.120486][T11392] RIP: 0033:0x7f404d39c819 [ 208.120505][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.120523][T11392] RSP: 002b:00007f404e20b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.120541][T11392] RAX: ffffffffffffffda RBX: 00007f404d615fa0 RCX: 00007f404d39c819 [ 208.120555][T11392] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 208.120567][T11392] RBP: 00007f404d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 208.120580][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.120591][T11392] R13: 00007f404d616038 R14: 00007f404d615fa0 R15: 00007ffc45f13868 [ 208.120644][T11392] [ 208.417613][ T40] audit: type=1400 audit(2000000006.339:791): avc: denied { ioctl } for pid=11402 comm="syz.3.1548" path="socket:[38523]" dev="sockfs" ino=38523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.482061][T11407] netlink: 'syz.3.1550': attribute type 9 has an invalid length. [ 208.625931][ T40] audit: type=1400 audit(2000000006.549:792): avc: denied { connect } for pid=11417 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.669418][T11422] vcan1: entered allmulticast mode [ 208.819323][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 208.950575][T11439] bridge0: port 1(ipvlan2) entered blocking state [ 208.957671][T11439] bridge0: port 1(ipvlan2) entered disabled state [ 208.962965][T11439] ipvlan2: entered allmulticast mode [ 208.965021][T11439] bridge0: entered allmulticast mode [ 208.985350][T11439] ipvlan2: left allmulticast mode [ 208.987281][T11439] bridge0: left allmulticast mode [ 209.077642][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 209.122084][ T5937] Bluetooth: hci2: Malformed LE Event: 0x0b [ 209.128572][ T5937] Bluetooth: hci2: Invalid handle: 0x8000 > 0x0eff [ 209.249792][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 209.254558][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.258800][T11425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.258939][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 209.270382][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 209.276103][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 209.279556][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.282975][ T10] usb 6-1: Product: syz [ 209.284854][ T10] usb 6-1: Manufacturer: syz [ 209.287154][ T10] usb 6-1: SerialNumber: syz [ 209.296103][ T10] usb 6-1: config 0 descriptor?? [ 209.474199][ T40] audit: type=1400 audit(2000000007.399:793): avc: denied { setattr } for pid=11461 comm="syz.4.1565" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 209.516733][ T10] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 209.717210][ T53] usb 6-1: USB disconnect, device number 20 [ 209.788223][ T5637] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 209.942138][ T5637] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 209.946315][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.949805][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.954142][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.958215][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.961355][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.965198][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.968346][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.971139][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.974587][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.978332][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.981616][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.985310][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.988291][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.991182][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.994560][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 209.997601][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.000985][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.005381][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 210.008478][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.011367][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.014778][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 210.018155][ T5637] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.021315][ T5637] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.024856][ T5637] usb 9-1: config 0 interface 0 has no altsetting 0 [ 210.028793][ T5637] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.032352][ T5637] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.035581][ T5637] usb 9-1: Product: syz [ 210.037031][ T5637] usb 9-1: Manufacturer: syz [ 210.038915][ T5637] usb 9-1: SerialNumber: syz [ 210.042577][ T5637] usb 9-1: config 0 descriptor?? [ 210.050794][ T5637] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.213129][ T40] audit: type=1400 audit(2000000008.139:794): avc: denied { bind } for pid=11470 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.254772][ T5637] usb 9-1: USB disconnect, device number 3 [ 210.260960][ T5637] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 210.274654][ T40] audit: type=1400 audit(2000000008.199:795): avc: denied { map } for pid=11472 comm="syz.1.1570" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 210.309198][T11478] __nla_validate_parse: 16 callbacks suppressed [ 210.309212][T11478] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1571'. [ 210.340748][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 210.344353][T11481] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 210.410529][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.414857][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.418071][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.420511][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.423260][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.426213][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.429622][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.432160][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.434624][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.437034][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.439976][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.442555][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.445611][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.448828][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.452207][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.457490][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.462044][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.467835][T11490] binder: 11489:11490 ioctl 4020ae46 7f4408878bd0 returned -22 [ 210.543462][ T40] audit: type=1400 audit(2000000008.469:796): avc: denied { ioctl } for pid=11498 comm="syz.2.1577" path="socket:[38618]" dev="sockfs" ino=38618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.685293][ T40] audit: type=1400 audit(2000000008.609:797): avc: denied { remount } for pid=11512 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.756309][ T40] audit: type=1400 audit(2000000008.679:798): avc: denied { read } for pid=11522 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.962557][T11544] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 211.038404][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1589'. [ 211.163687][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 211.210068][T11557] netlink: 'syz.2.1591': attribute type 2 has an invalid length. [ 211.214083][T11557] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1591'. [ 211.257618][T11583] /dev/nullb0: Can't lookup blockdev [ 211.357826][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 211.361209][T11591] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.406051][T11594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1600'. [ 211.449146][T11595] vivid-004: disconnect [ 211.465902][ T40] audit: type=1400 audit(2000000009.389:799): avc: denied { mounton } for pid=11587 comm="syz.2.1598" path="/bus" dev="hugetlbfs" ino=40751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 211.489899][T11596] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 211.517406][T11588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.521845][T11588] overlayfs: failed to set xattr on upper [ 211.523756][T11588] overlayfs: ...falling back to redirect_dir=nofollow. [ 211.526055][T11588] overlayfs: ...falling back to index=off. [ 211.528315][T11588] overlayfs: ...falling back to uuid=null. [ 211.530191][T11588] overlayfs: maximum fs stacking depth exceeded [ 211.534208][T11587] vivid-004: reconnect [ 211.581627][ T40] audit: type=1400 audit(2000000009.509:800): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 211.596365][ T40] audit: type=1400 audit(2000000009.509:801): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 211.639833][T11603] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004 [ 211.937662][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 212.097639][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 212.104563][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 212.111506][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.117627][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.122189][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.125265][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.134654][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 212.343457][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 212.427568][T11618] fuse: Unknown parameter 'fl)aD JnGwb@maH' [ 212.481169][ T40] audit: type=1400 audit(2000000010.409:802): avc: denied { write } for pid=11619 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.700863][ T10] usb 7-1: USB disconnect, device number 20 [ 213.677854][T11666] xt_hashlimit: size too large, truncated to 1048576 [ 213.938001][T11683] syzkaller0: entered promiscuous mode [ 213.940440][T11683] syzkaller0: entered allmulticast mode [ 214.070577][T11683] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 216.620681][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 216.813996][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 217.118035][ T5637] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 217.267879][ T5637] usb 9-1: Using ep0 maxpacket: 32 [ 217.272808][ T5637] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 217.276629][ T5637] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 217.280483][ T5637] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 217.284300][ T5637] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.290804][ T5637] usb 9-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice= 0.40 [ 217.294291][ T5637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.296851][ T5637] usb 9-1: Product: ␁ [ 217.298534][ T5637] usb 9-1: Manufacturer: 鉤㽦迆䑋塩힟玤㧞쥰ꃼ⎁졝뛨ꚱ묂ⶭ롑承㈀矂叱涬ꉩ鍫쎱翨‴㝌践┥ꃗ涇ﰷ轭ជ鎺綃㰞靗溡আ⾸❩ꬍ쓑힟㛮²㤉建榇 [ 217.304675][ T5637] usb 9-1: SerialNumber: ꉪ䲠ߘ炘뿳헴跟ಟ꛶鱆䄂Ẩ嗼䵦夽叇虳៕꘺䐽踾౟踂蚚떝텁쑗趈삃骉兹瞰틮妇魙뙂攍ᰴᝏ莹녃桱ࣿ얧튤놬⮹튺헺䮫ᅯ寥棔摂黯Ż⪗ȵ [ 217.558250][ T5637] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.560797][ T5637] usb 9-1: MIDIStreaming interface descriptor not found [ 217.602171][ T5637] usb 9-1: USB disconnect, device number 4 [ 217.628766][ T8860] udevd[8860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.890915][T11714] Cannot find del_set index 2 as target [ 217.995786][T11715] bond5 (unregistering): Released all slaves [ 218.031043][T11725] 9pnet_virtio: no channels available for device 127.0.0.1 [ 218.034935][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 218.034946][ T40] audit: type=1400 audit(2000000015.959:804): avc: denied { listen } for pid=11724 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.388784][ T40] audit: type=1400 audit(2000000016.319:805): avc: denied { listen } for pid=11742 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.402588][T11744] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 218.405233][T11744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 218.409169][T11744] team0: entered promiscuous mode [ 218.411034][T11744] team_slave_0: entered promiscuous mode [ 218.413303][T11744] team_slave_1: entered promiscuous mode [ 218.415202][T11744] team0: entered allmulticast mode [ 218.417741][T11744] team_slave_0: entered allmulticast mode [ 218.420652][T11744] team_slave_1: entered allmulticast mode [ 218.425018][T11744] bridge0: port 2(team0) entered blocking state [ 218.427930][T11744] bridge0: port 2(team0) entered disabled state [ 218.437369][T11744] bridge0: port 2(team0) entered blocking state [ 218.440298][T11744] bridge0: port 2(team0) entered forwarding state [ 218.543638][ T40] audit: type=1400 audit(2000000016.469:806): avc: denied { ioctl } for pid=11750 comm="syz.2.1642" path="socket:[42228]" dev="sockfs" ino=42228 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.948527][T11775] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 219.014420][ T40] audit: type=1400 audit(2000000016.939:807): avc: denied { setopt } for pid=11779 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.269785][T11797] binder: 11796:11797 ioctl c0306201 200000000080 returned -14 [ 219.277833][T11798] binder: 11796:11798 ioctl c0306201 2000000003c0 returned -14 [ 219.286920][T11797] mkiss: ax0: crc mode is auto. [ 219.386763][T11801] program syz.2.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.494590][T11811] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.511040][T11810] dns_resolver: Unsupported server list version (0) [ 219.576419][T11810] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 219.650664][T11808] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.141998][T11825] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 220.197447][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1667'. [ 220.201393][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1667'. [ 220.212808][T11832] binder: 11830:11832 ioctl c0306201 200000000c00 returned -22 [ 220.269109][T11839] XFS (loop2): SB validate failed with error -5. [ 220.381180][ T2148] blk_print_req_error: 30 callbacks suppressed [ 220.381266][ T2148] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 220.450057][ T5945] Bluetooth: hci4: hcon ffff888057978000 sent 0 < count 3 [ 220.455121][ T5945] Bluetooth: hci4: hcon ffff888057978000 sent 0 < count 6 [ 220.921672][ T40] audit: type=1400 audit(2000000018.849:808): avc: denied { name_bind 0x1000000 } for pid=11862 comm="syz.2.1672" path="socket:[42308]" dev="sockfs" ino=42308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.358126][ T40] audit: type=1400 audit(2000000019.279:809): avc: denied { create } for pid=11881 comm="syz.2.1677" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.371992][ T40] audit: type=1400 audit(2000000019.279:810): avc: denied { read } for pid=11881 comm="syz.2.1677" name="file0" dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.382200][ T40] audit: type=1400 audit(2000000019.279:811): avc: denied { open } for pid=11881 comm="syz.2.1677" path="/416/file0" dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.391616][ T40] audit: type=1400 audit(2000000019.279:812): avc: denied { ioctl } for pid=11881 comm="syz.2.1677" path="/416/file0" dev="tmpfs" ino=2228 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.400112][T11882] F2FS-fs: Conflicting test_dummy_encryption options [ 221.421742][T11902] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 221.443916][T11902] bond1: entered promiscuous mode [ 221.454724][T11902] bond1: entered allmulticast mode [ 221.457733][T11902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.474999][T11902] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 221.493016][T11902] team0: Failed to send options change via netlink (err -105) [ 221.495682][T11902] team0: Port device dummy0 added [ 221.514681][ T40] audit: type=1400 audit(2000000019.439:813): avc: denied { unlink } for pid=5947 comm="syz-executor" name="file0" dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.672446][T11914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1687'. [ 221.729278][T11917] veth0_to_team: entered promiscuous mode [ 221.732511][T11917] veth0_to_team: left promiscuous mode [ 222.203159][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 222.341979][T11932] bond8: entered promiscuous mode [ 222.344367][T11932] bond8: entered allmulticast mode [ 222.654439][T11938] random: crng reseeded on system resumption [ 222.847128][T11958] program syz.4.1701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.854261][T11958] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 222.864442][T11959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.871562][T11959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.117808][ T6019] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 223.117829][ T6027] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 223.250175][ T6019] usb 6-1: device descriptor read/64, error -71 [ 223.265225][ T40] audit: type=1400 audit(2000000021.189:814): avc: denied { setattr } for pid=11971 comm="syz.2.1706" name="file0" dev="tmpfs" ino=2276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 223.276598][ T6027] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 223.280005][ T6027] usb 9-1: config 0 has no interface number 0 [ 223.284980][ T6027] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 223.289724][ T6027] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.294610][ T6027] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.308939][ T6027] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 223.314984][ T6027] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 223.318237][ T6027] usb 9-1: Product: syz [ 223.320255][ T6027] usb 9-1: SerialNumber: syz [ 223.333377][ T6027] usb 9-1: config 0 descriptor?? [ 223.340439][ T6027] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 223.346225][ T6027] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input18 [ 223.356617][T11974] netlink: 'syz.2.1707': attribute type 21 has an invalid length. [ 223.361148][T11974] netlink: 'syz.2.1707': attribute type 6 has an invalid length. [ 223.365205][T11974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1707'. [ 223.450621][ T40] audit: type=1400 audit(2000000021.379:815): avc: denied { getopt } for pid=11975 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.464575][T11976] syzkaller0: entered promiscuous mode [ 223.467042][T11976] syzkaller0: entered allmulticast mode [ 223.497694][ T6019] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 223.538885][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.541355][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.541831][ T10] usb 9-1: USB disconnect, device number 5 [ 223.543529][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 223.593250][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 223.628040][ T6019] usb 6-1: device descriptor read/64, error -71 [ 223.702656][T11978] Sensor A: ================= START STATUS ================= [ 223.705249][T11978] Sensor A: Test Pattern: 75% Colorbar [ 223.707890][T11978] Sensor A: Show Information: All [ 223.712050][T11978] Sensor A: Vertical Flip: false [ 223.713955][T11978] Sensor A: Horizontal Flip: false [ 223.715630][T11978] Sensor A: Brightness: 128 [ 223.717090][T11978] Sensor A: Contrast: 128 [ 223.718498][T11978] Sensor A: Hue: 0 [ 223.719646][T11978] Sensor A: Saturation: 128 [ 223.721367][T11978] Sensor A: Pixel Rate: 160000000 [ 223.723065][T11978] Sensor A: Horizontal Blanking: 800 [ 223.725038][T11978] Sensor A: Vertical Blanking: 3223 [ 223.727027][T11978] Sensor A: ================== END STATUS ================== [ 223.738801][ T6019] usb usb6-port1: attempt power cycle [ 223.766845][T11980] netlink: 'syz.2.1710': attribute type 3 has an invalid length. [ 223.800654][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1711'. [ 224.020613][T11987] : entered promiscuous mode [ 224.089921][ T6019] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 224.118889][ T6019] usb 6-1: device descriptor read/8, error -71 [ 224.145233][ T40] audit: type=1400 audit(2000000022.069:816): avc: denied { mounton } for pid=11990 comm="syz.2.1715" path="/433/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 224.146023][T11991] overlayfs: conflicting lowerdir path [ 224.178311][T11993] input: syz1 as /devices/virtual/input/input19 [ 224.224940][ T40] audit: type=1400 audit(2000000022.149:817): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.357648][ T6019] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 224.381502][ T6019] usb 6-1: device descriptor read/8, error -71 [ 224.487975][ T6019] usb usb6-port1: unable to enumerate USB device [ 224.527696][ T5637] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 224.689443][ T5637] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.692273][ T5637] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.695443][ T5637] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.698736][ T5637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32954, setting to 1024 [ 224.704237][ T5637] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.707166][ T5637] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.709820][ T5637] usb 7-1: Product: syz [ 224.711167][ T5637] usb 7-1: Manufacturer: syz [ 224.716367][ T5637] cdc_wdm 7-1:1.0: skipping garbage [ 224.718668][ T5637] cdc_wdm 7-1:1.0: skipping garbage [ 224.724302][ T5637] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 224.726334][ T5637] cdc_wdm 7-1:1.0: Unknown control protocol [ 224.918206][ T40] audit: type=1400 audit(2000000022.849:818): avc: denied { read write } for pid=11999 comm="syz.2.1718" name="cdc-wdm0" dev="devtmpfs" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.925078][ T2117] usb 7-1: USB disconnect, device number 21 [ 224.925846][ T40] audit: type=1400 audit(2000000022.849:819): avc: denied { open } for pid=11999 comm="syz.2.1718" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 224.999279][T11992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.460335][T12009] 9pnet_virtio: no channels available for device syz [ 225.735854][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 225.815220][ T40] audit: type=1400 audit(2000000023.739:820): avc: denied { lock } for pid=12029 comm="syz.2.1725" path="socket:[42800]" dev="sockfs" ino=42800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.824762][ T40] audit: type=1400 audit(2000000023.749:821): avc: denied { read } for pid=12029 comm="syz.2.1725" path="socket:[45424]" dev="sockfs" ino=45424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.833595][T12025] bond2 (unregistering): Released all slaves [ 225.844388][T12034] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 225.846791][T12034] overlayfs: failed to set xattr on upper [ 225.849337][T12034] overlayfs: ...falling back to redirect_dir=nofollow. [ 225.852448][T12034] overlayfs: ...falling back to index=off. [ 225.854457][T12034] overlayfs: ...falling back to uuid=null. [ 225.856383][T12034] overlayfs: ...falling back to xino=off. [ 225.858879][T12034] overlayfs: conflicting lowerdir path [ 225.932170][T12036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2132 sclass=netlink_route_socket pid=12036 comm=syz.1.1726 [ 225.950359][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 225.991516][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1727'. [ 226.025590][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 226.028718][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 226.078156][T12045] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 226.078927][ T40] audit: type=1400 audit(2000000024.009:822): avc: denied { read } for pid=12044 comm="syz.4.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.339520][T12055] netlink: 'syz.1.1732': attribute type 2 has an invalid length. [ 226.378978][T12055] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 226.544381][ C1] [ 226.545205][ C1] ============================= [ 226.546868][ C1] [ BUG: Invalid wait context ] [ 226.548580][ C1] syzkaller #0 Tainted: G L [ 226.550742][ C1] ----------------------------- [ 226.552368][ C1] syz.4.1733/12064 is trying to lock: [ 226.554347][ C1] ffff888057de52a0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 226.557984][ C1] other info that might help us debug this: [ 226.559892][ C1] context-{2:2} [ 226.561060][ C1] 3 locks held by syz.4.1733/12064: [ 226.562733][ C1] #0: ffff88803ee50f60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 226.565932][ C1] #1: ffffffff8e7e6fe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 226.569289][ C1] #2: ffff888057de57e8 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 226.572954][ C1] stack backtrace: [ 226.574283][ C1] CPU: 1 UID: 0 PID: 12064 Comm: syz.4.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.574300][ C1] Tainted: [L]=SOFTLOCKUP [ 226.574304][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.574311][ C1] Call Trace: [ 226.574316][ C1] [ 226.574320][ C1] dump_stack_lvl+0x100/0x190 [ 226.574377][ C1] __lock_acquire+0xfa4/0x2630 [ 226.574433][ C1] ? __lock_acquire+0x4a5/0x2630 [ 226.574445][ C1] ? xa_load+0x149/0x2c0 [ 226.574690][ C1] ? xa_load+0x149/0x2c0 [ 226.574708][ C1] lock_acquire+0x1b1/0x370 [ 226.574719][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 226.574731][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 226.574743][ C1] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 226.574753][ C1] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 226.574763][ C1] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 226.574774][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 226.574846][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 226.574857][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 226.574872][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 226.574882][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 226.574902][ C1] xen_timer_callback+0x1db/0x2a0 [ 226.574913][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 226.574923][ C1] ? __hrtimer_run_queues+0x383/0xa00 [ 226.574979][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 226.574992][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 226.575003][ C1] __hrtimer_run_queues+0x142/0xa00 [ 226.575019][ C1] hrtimer_interrupt+0x3e5/0x940 [ 226.575037][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 226.575054][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 226.575066][ C1] [ 226.575070][ C1] [ 226.575073][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.575086][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 226.575098][ C1] Code: 05 bb 2d 2e 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 0c f7 0e 0f 82 a4 02 00 00 8b 35 0e 40 f7 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 2d 2e 12 0f 85 ed 02 00 00 48 83 c4 [ 226.575109][ C1] RSP: 0018:ffffc90005b4f4e0 EFLAGS: 00000206 [ 226.575117][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 226.575124][ C1] RDX: 0000000000000000 RSI: ffffffff8df2a4d9 RDI: ffffffff8c1bf200 [ 226.575130][ C1] RBP: ffffffff8e7e6fe0 R08: 00000000b7862b3d R09: 0000000000000007 [ 226.575136][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 226.575142][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.575152][ C1] ? unwind_next_frame+0x3be/0x2090 [ 226.575169][ C1] ? unwind_next_frame+0x3be/0x2090 [ 226.575184][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.575202][ C1] unwind_next_frame+0xd1/0x2090 [ 226.575216][ C1] ? unwind_next_frame+0xbd/0x2090 [ 226.575230][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.575241][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.575258][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.575276][ C1] arch_stack_walk+0x94/0xf0 [ 226.575332][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.575344][ C1] stack_trace_save+0x8e/0xc0 [ 226.575360][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 226.575378][ C1] ? stack_trace_save+0x8e/0xc0 [ 226.575395][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 226.575412][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 226.575480][ C1] kasan_save_stack+0x30/0x50 [ 226.575543][ C1] ? kasan_save_stack+0x30/0x50 [ 226.575557][ C1] ? kasan_save_track+0x14/0x30 [ 226.575571][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 226.575587][ C1] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 226.575620][ C1] ? kmalloc_reserve+0x148/0x350 [ 226.575735][ C1] ? __alloc_skb+0x185/0x710 [ 226.575747][ C1] ? tcp_stream_alloc_skb+0x34/0x660 [ 226.575758][ C1] ? tcp_sendmsg_locked+0x13cd/0x4500 [ 226.575769][ C1] ? tcp_sendmsg+0x2e/0x50 [ 226.575779][ C1] ? inet_sendmsg+0xb9/0x140 [ 226.575790][ C1] ? __sys_sendto+0x446/0x4b0 [ 226.575801][ C1] ? __x64_sys_sendto+0xe0/0x1c0 [ 226.575812][ C1] ? do_syscall_64+0x10b/0xf80 [ 226.575824][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.575842][ C1] kasan_save_track+0x14/0x30 [ 226.575857][ C1] __kasan_slab_alloc+0x89/0x90 [ 226.575873][ C1] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 226.575888][ C1] ? kmalloc_reserve+0x148/0x350 [ 226.575908][ C1] ? __kasan_kfree_large+0x20/0x80 [ 226.575925][ C1] kmalloc_reserve+0x148/0x350 [ 226.575943][ C1] __alloc_skb+0x185/0x710 [ 226.575955][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 226.575967][ C1] ? alloc_pages_noprof+0xf9/0x160 [ 226.575985][ C1] tcp_stream_alloc_skb+0x34/0x660 [ 226.576003][ C1] tcp_sendmsg_locked+0x13cd/0x4500 [ 226.576024][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 226.576042][ C1] ? do_raw_spin_lock+0x128/0x260 [ 226.576061][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.576084][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 226.576175][ C1] tcp_sendmsg+0x2e/0x50 [ 226.576186][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 226.576197][ C1] inet_sendmsg+0xb9/0x140 [ 226.576207][ C1] __sys_sendto+0x446/0x4b0 [ 226.576219][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 226.576230][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 226.576241][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 226.576254][ C1] ? __sys_connect+0xe4/0x170 [ 226.576268][ C1] ? xfd_validate_state+0x129/0x190 [ 226.576281][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 226.576293][ C1] ? do_syscall_64+0x90/0xf80 [ 226.576304][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 226.576316][ C1] do_syscall_64+0x10b/0xf80 [ 226.576327][ C1] ? clear_bhb_loop+0x40/0x90 [ 226.576339][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.576349][ C1] RIP: 0033:0x7f3d7b39c819 [ 226.576358][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.576368][ C1] RSP: 002b:00007f3d7c24d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 226.576378][ C1] RAX: ffffffffffffffda RBX: 00007f3d7b616090 RCX: 00007f3d7b39c819 [ 226.576385][ C1] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000005 [ 226.576391][ C1] RBP: 00007f3d7b432c91 R08: 0000000000000000 R09: 0000000000000000 [ 226.576397][ C1] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.576403][ C1] R13: 00007f3d7b616128 R14: 00007f3d7b616090 R15: 00007ffdefe76de8 [ 226.576413][ C1] [ 226.775050][ T40] audit: type=1400 audit(2000000024.609:823): avc: denied { listen } for pid=12071 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.783087][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.800268][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.806150][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.811674][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.814430][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 226.981797][ T8680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.985418][ T8680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.145669][ T8680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.150023][ T8680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.281189][ T8680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.284818][ T8680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.333270][ T8680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.336609][ T8680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.218503][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 228.427723][ T2117] SELinux: failure in sel_netif_sid_slow(), invalid network interface (88) [ 228.490130][ T8680] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 228.493144][ T8680] bridge3 (unregistering): left promiscuous mode [ 228.619455][ T8680] bond0 (unregistering): Released all slaves [ 228.624308][ T8680] bond1 (unregistering): Released all slaves [ 228.634821][ T8680] bond2 (unregistering): Released all slaves [ 228.642125][ T8680] bond3 (unregistering): Released all slaves [ 228.650790][ T8680] bond4 (unregistering): Released all slaves [ 228.726278][ T8680] tipc: Disabling bearer [ 228.729336][ T8680] tipc: Disabling bearer [ 228.731331][ T8680] tipc: Left network mode [ 228.776680][ T5646] 8021q: adding VLAN 0 to HW filter on device eth6 [ 228.909879][ T5646] 8021q: adding VLAN 0 to HW filter on device eth7 [ 229.029830][ T5646] 8021q: adding VLAN 0 to HW filter on device eth8 [ 229.170388][ T5646] 8021q: adding VLAN 0 to HW filter on device eth9 [ 229.622213][ T8680] hsr_slave_0: left promiscuous mode [ 229.624460][ T8680] hsr_slave_1: left promiscuous mode [ 229.628827][ T8680] veth1_macvtap: left promiscuous mode [ 229.630635][ T8680] veth0_macvtap: left promiscuous mode [ 229.632485][ T8680] veth1_vlan: left promiscuous mode [ 229.634198][ T8680] veth0_vlan: left promiscuous mode [ 230.189654][ T8680] IPVS: stop unused estimator thread 0... [ 230.375282][ T8680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.472944][ T8680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.563176][ T8680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.642696][ T8680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.823375][ T8680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.826883][ T8680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.930337][ T8680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.933664][ T8680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.948792][ T5646] 8021q: adding VLAN 0 to HW filter on device eth10 [ 231.013491][ T8680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.016832][ T8680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.064357][ T5646] 8021q: adding VLAN 0 to HW filter on device eth11 [ 231.080615][ T8680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.084768][ T8680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.190462][ T5646] 8021q: adding VLAN 0 to HW filter on device eth12 [ 231.507888][ T8680] bridge_slave_1: left allmulticast mode [ 231.510269][ T8680] bridge_slave_1: left promiscuous mode [ 231.512856][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.517878][ T8680] bridge_slave_0: left allmulticast mode [ 231.520494][ T8680] bridge_slave_0: left promiscuous mode [ 231.523007][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.078060][ T8680] batman_adv: batadv0: Removing interface: gretap1 [ 232.165175][ T8680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.229226][ T8680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.269130][ T8680] bond0 (unregistering): Released all slaves [ 232.274614][ T8680] bond1 (unregistering): Released all slaves [ 232.414262][ T8680] bond2 (unregistering): (slave geneve3): Releasing active interface [ 232.531971][ T8680] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 232.535074][ T8680] bridge1 (unregistering): left promiscuous mode [ 232.681044][ T8680] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 232.684574][ T8680] bridge3 (unregistering): left promiscuous mode [ 232.989795][ T8680] bond0 (unregistering): Released all slaves [ 232.993580][ T8680] bond1 (unregistering): Released all slaves [ 232.998097][ T8680] bond2 (unregistering): Released all slaves [ 233.003521][ T8680] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 233.006455][ T8680] vxcan3: left promiscuous mode [ 233.049379][ T8680] bond3 (unregistering): Released all slaves [ 233.056029][ T8680] bond4 (unregistering): Released all slaves [ 233.060785][ T8680] bond5 (unregistering): Released all slaves [ 233.066171][ T8680] bond6 (unregistering): (slave bond7): Releasing backup interface [ 233.118501][ T8680] bond6 (unregistering): Released all slaves [ 233.125231][ T8680] bond7 (unregistering): Released all slaves [ 233.135031][ T8680] bond8 (unregistering): Released all slaves [ 233.141417][ T8680] bond9 (unregistering): Released all slaves [ 233.147691][ T8680] bond10 (unregistering): Released all slaves [ 233.155676][ T5646] 8021q: adding VLAN 0 to HW filter on device eth13 [ 233.236810][ T8680] tipc: Disabling bearer [ 233.247671][ T8680] tipc: Left network mode [ 233.289527][ T5646] 8021q: adding VLAN 0 to HW filter on device eth14 [ 233.409573][ T5646] 8021q: adding VLAN 0 to HW filter on device eth15 [ 233.569516][ T5646] 8021q: adding VLAN 0 to HW filter on device eth16 [ 233.763990][ T5646] 8021q: adding VLAN 0 to HW filter on device eth17 [ 234.541141][ T8680] hsr_slave_0: left promiscuous mode [ 234.543760][ T8680] hsr_slave_1: left promiscuous mode [ 234.546128][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.549168][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.553098][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.556151][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.562886][ T8680] hsr_slave_0: left promiscuous mode [ 234.566359][ T8680] hsr_slave_1: left promiscuous mode [ 234.573674][ T8680] veth1_macvtap: left promiscuous mode [ 234.576007][ T8680] veth0_macvtap: left promiscuous mode [ 234.578592][ T8680] veth1_vlan: left promiscuous mode [ 234.581076][ T8680] veth0_vlan: left promiscuous mode [ 234.584749][ T8680] veth1_macvtap: left promiscuous mode [ 234.586673][ T8680] veth0_macvtap: left promiscuous mode [ 234.589404][ T8680] veth1_vlan: left promiscuous mode [ 234.591649][ T8680] veth0_vlan: left promiscuous mode [ 234.743025][ T8680] team0 (unregistering): Port device team_slave_1 removed [ 234.754337][ T8680] team0 (unregistering): Port device team_slave_0 removed [ 234.786764][ T8680] team0 (unregistering): Port device dummy0 removed [ 234.810670][ T8680] pim6reg9 (unregistering): left allmulticast mode [ 235.701610][ T8680] IPVS: stop unused estimator thread 0...