last executing test programs: 1m43.442322495s ago: executing program 0 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000900)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007fc0)={0x2020}, 0x2020) 1m43.441059111s ago: executing program 0 (id=123): lsm_set_self_attr(0x0, &(0x7f0000000200)={0x66, 0xfffffffffffffffa, 0xfffffd9c, 0x7f, "6ea670669789ef387e20ef1dedc56eb1c42936d04f0f27d63522ec2012c76645006539494a3e658aed690a3f99b60852b0951bad27841e679fac4610c6d1b200b06e105e7396035a81fd22aa2b16a9d20fc99aa46a1717a08cd9b470f16f9ed24797bb82db537e2f0c254157a5e8942f3ebf5b0f10f9d4a6f0ffc8c6d511df"}, 0x9f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 1m43.350059351s ago: executing program 0 (id=124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0xc040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x291, 0x4, 0x1}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x4, 0x5f, 0x0, 0x0, 0x8, 0x3933ee4592a0bc88}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x440b0) 1m43.349622369s ago: executing program 0 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) membarrier(0x10, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x1000000000000}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r6, 0x0, 0x0, 0x800) 1m43.19850215s ago: executing program 0 (id=128): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x12) close_range(r2, r2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x9d}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="66e1b9a3bd46edf8cb89890c4b3fa9511d2d6ab6849479dce4de677b564c2463b13905002900000000001de6e91f777aad387b97857eb8257eeea20ff00436e4b4789ab18044dab020e5ae87dfa208b175c33cf2c71428dcad74c6f7b81f05ff19cb8f71b30d224560584b9c7b871a699b898f314f7b732df048e57f614d0762ae28ae27e93c0d460cd15a4caa020e0fcef4b5619a505140ba87dcb55fe4d3ad9a63418c6e5e5871cbeff9ee5e7b68dab17c239ea48cb2cd2aea9c98f0ea83193c58da20c555bc1c7c000000e1009f80643f66a472ab6b53c398fb4523ddf91d84c300000000000000000000000000000000b195e656b4ea1779748f4d8e5deb82e614c311022800000000ad1699982a09a1fe94c5e121c0c556b0136dfb97d13a30270582582f69367749d09e10a1a21399d01c653bc4d02e68477d499bd7dc5b2c1a86afaaffe0133f64dbc9f35fb7bc0d7322724c09b51b26940e3a666be7cf15c3faf673c91246bec038e471c56f3134ef0eff5f19e857697c08002000", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00d880fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYRES32=r0, @ANYBLOB="00f400080001"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0002, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) 1m42.921903986s ago: executing program 0 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83140500000000001800128008000100736974000c00028008000200ac1414bbd2484cc107114bf2815746315ba9ff6070d074d235247c349ee602244add1311700aee4cd08e39d34352b49d8d6fce8c23e1985021ac2e9f04c7fc059d7fe95d9f1641f844f95ab5b7eb60c06ebcbd913a56ef4a05d57afef0c8261089ea15a2905da22e8da8b19ca6ba0208592c0a9103bc7efd2b08d440448b80826dcf8029ad6b46ea7ee97de4d5b72a18ff31ae31c5ff2dd2c732a1036f539e8b73b82022267eb1bba8f9a19a82181b25bec334ea9384"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg(r3, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000380)='F', 0x1}], 0x1}}], 0x1, 0x5d2dd0c54751f8e3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x51, 0x0, &(0x7f0000000880)="0aaf2cea77e3d1de09f4a1652540e3712e6637c5eaa8080979ad25ff6258f356bbd88caee8e6053e655d1b2f63e5b69b10cada6278a568f4cfc20a32a49853eb796cab7fbe7fb555a8b93244eee618aff0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x5, 0x6}}]}, 0x28}}, 0x0) 1m42.872894548s ago: executing program 32 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83140500000000001800128008000100736974000c00028008000200ac1414bbd2484cc107114bf2815746315ba9ff6070d074d235247c349ee602244add1311700aee4cd08e39d34352b49d8d6fce8c23e1985021ac2e9f04c7fc059d7fe95d9f1641f844f95ab5b7eb60c06ebcbd913a56ef4a05d57afef0c8261089ea15a2905da22e8da8b19ca6ba0208592c0a9103bc7efd2b08d440448b80826dcf8029ad6b46ea7ee97de4d5b72a18ff31ae31c5ff2dd2c732a1036f539e8b73b82022267eb1bba8f9a19a82181b25bec334ea9384"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg(r3, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000380)='F', 0x1}], 0x1}}], 0x1, 0x5d2dd0c54751f8e3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x51, 0x0, &(0x7f0000000880)="0aaf2cea77e3d1de09f4a1652540e3712e6637c5eaa8080979ad25ff6258f356bbd88caee8e6053e655d1b2f63e5b69b10cada6278a568f4cfc20a32a49853eb796cab7fbe7fb555a8b93244eee618aff0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x5, 0x6}}]}, 0x28}}, 0x0) 6.601532408s ago: executing program 1 (id=1162): r0 = socket$inet6(0xa, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 6.511227242s ago: executing program 1 (id=1163): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x2, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x8, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffe, 0xff, 0x1005, 0x5f6, 0x5f33, 0x4, 0x4, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x2000009, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x40, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffbfe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r2, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2", 0x13, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000340)={0x2d, 0x8, 0xfa00, {0xffffffffffffffff, 0x93d192c45c209ba3}}, 0x10) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000000c0)=""/135, 0x87}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000066f9887f93ee942f6f455bcbc57960e40000b9ead0f32a00329766000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 5.090822921s ago: executing program 1 (id=1164): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x1000, 0x7, 0x4, 0x200, 0x6, {0x77359400}, {0x5, 0x0, 0x7, 0x8, 0x8, 0x4, "6bb169a0"}, 0x5, 0x4, {0xffffffffffffffff}, 0x1}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x100, 0xd, 0x4, 0x400, 0x3ff, {}, {0x1, 0x0, 0x8, 0x1, 0x4, 0x2d, "fd30b0b2"}, 0x3cd, 0x4, {0xffffffffffffffff}, 0x1ff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0xeb39, 0x3, 0x4, 0x20, 0x30000, {}, {0x5, 0x0, 0x4, 0x1, 0x3, 0x1, "770defaa"}, 0x2, 0x4, {&(0x7f0000000140)=[{0x0, 0xcea, {r1}, 0x7fffffff}, {0x5, 0x4, {r2}, 0xfffff801}]}, 0x3}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_newaddr={0x3c, 0x14, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x78, 0x10, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0xb, 0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x201}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000500)={0x878, 0x6}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000540)={0x1, 0x8, 0x9, 0x80, 0x3}) read$qrtrtun(r0, &(0x7f0000000580)=""/141, 0x8d) r6 = dup2(r4, r2) sendmsg$nl_route(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_delrule={0x30, 0x21, 0x4, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x3, 0x93}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x810) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000900)={0x0, 0x9}, &(0x7f0000000940)=0x8) sendmsg$nl_route(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@delneigh={0x34, 0x1d, 0x10, 0x70bd27, 0x25dfdbff, {0x3136200f40f7b987, 0x0, 0x0, r5, 0x4, 0x5, 0x1}, [@NDA_MASTER={0x8, 0x9, 0xb5c1}, @NDA_NH_ID={0x8, 0xd, 0x8ce}, @NDA_NH_ID={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40004) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000a80)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000b40)={r10, 0x7ff}, 0x8) r11 = syz_open_dev$usbfs(&(0x7f0000000b80), 0x8000000000000001, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r11, 0x80045510, &(0x7f0000000bc0)=0x9) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, r12, 0x405, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c000}, 0x400c0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000d80)=0x0) migrate_pages(r13, 0x3, &(0x7f0000000dc0)=0xfffffffffffffffb, &(0x7f0000000e00)=0xb) 4.23124693s ago: executing program 1 (id=1170): mkdir(&(0x7f0000000300)='./file0\x00', 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="66643dbbdf85e76e4af2194f0813c8afcb469aaae8d43f2b48d8486eb1e78cb0b0896f203dba85073dd14eaa9a18ba6910ec611fd2b70d87f5caa2db1020951dc5f68580a1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYRES16=r5, @ANYRESOCT=r2], 0x54}}, 0x8000) (async) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffbffffd, 0x400000, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x3, 0x1, 0x0, 0xfffffffd, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x30c6cee1, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) write$char_usb(r6, &(0x7f0000000440)="ab7bb5da902e", 0x6) r7 = socket(0x2a, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) (async) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0xf000, 0x0, 0x2, 0x3, 0x3, 0x82a, 0x9, 0x1, 0xa, 0x100, 0x0, 0x1, 0x8, 0x1100005, 0x800d, 0x0, 0x1, 0x1a448, 0x90cf, 0x40002003, 0x89, 0x2, 0xf27, 0x0, 0x800b, 0x40000000, 0x4, 0x4, 0x400, 0xfffe, 0xfffffff7]}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x8}, {0xa, 0xffff}, {0xd, 0xc}}}, 0x24}}, 0x1) mmap$xdp(&(0x7f00006ab000/0x1000)=nil, 0x1000, 0x4, 0x10010, r7, 0x100000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.029796468s ago: executing program 1 (id=1179): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x9e8, 0x0, 0xa, 0x148, 0x8d8, 0x60, 0x970, 0x2a8, 0x2a8, 0x970, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x850, 0x8b8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3ff, 0x1}, {0x9}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4e, 0x2}, {0x25a5}, {0x0, 0x1}, {0x7}, {0x8001, 0x1}, {0xe, 0x3}], [{0x8, 0x80}, {0x8, 0x3a16}, {0x8, 0x8}, {0x5, 0x8}, {0x100, 0x8}, {0x5, 0x9}, {0x9, 0x421d}, {0x7, 0x5}, {0x6, 0x80000001}, {0x4, 0x7f}, {0x6, 0xb52}], 0x1, 0xb}, {[{0x4, 0x3}, {0x6, 0x3}, {0x80000001, 0x2}, {0xd, 0x1}, {0x21}, {0xfffffff9, 0x2}, {0x37}, {0x6, 0x2}, {0x6e318da7}, {0xff, 0x2}, {0x700000, 0x2}], [{0x5, 0x4}, {0x4, 0x1}, {0x0, 0x81}, {0x7, 0x4}, {0x8, 0x4}, {0x0, 0x9}, {0x8, 0x2}, {0xa, 0x46f}, {0x8, 0x9}, {0x9ae, 0x400}, {0x400, 0x6}], 0x8, 0x2}, {[{0x8}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x8cc, 0x1}, {0x5a, 0x2}, {0x3, 0x2}, {0x4, 0x3}], [{0x5, 0xc00}, {0x4, 0xffff785e}, {0x0, 0x1}, {0x3}, {0x2, 0x3bb2}, {0x8, 0x56}, {0xf68, 0x1}, {0x4, 0x80000001}, {0xffff, 0x2a}, {0x401, 0x2}, {0x1, 0x4a8}], 0x0, 0x4}, {[{0xb}, {0x1ff, 0x2}, {0x80000001, 0x3}, {0x81, 0x2}, {0x52, 0x2}, {0x7, 0x1}, {0x6}, {0x1, 0x2}, {0x40, 0x2}, {0x4, 0x3}, {0x400, 0x2}], [{0x7, 0x2}, {0x5b, 0x1}, {0x0, 0x84b}, {0x195c}, {0x10000000}, {0x400, 0x2}, {0x68a, 0x5}, {0x101, 0x4}, {0x2c}, {0xfff, 0x4}, {0x6, 0x4}], 0x8, 0x3}, {[{0xc}, {0x71d}, {0x428}, {0x2, 0x2}, {0x7, 0x2}, {0x9, 0x2}, {0x80000000}, {0x23b}, {0x2, 0x3}, {0xfffffff7}, {0x6, 0x1}], [{0xe8, 0x4}, {0x7, 0x5}, {0xa, 0xac}, {0x8, 0xff}, {0x2, 0x2}, {0x7e7}, {0x0, 0x800}, {0x6, 0x8}, {0x6, 0xc}, {0x3, 0xc0000000}, {0x3c, 0x64e}], 0xa, 0xa}, {[{0x6, 0x1}, {0x0, 0x2}, {0x800, 0x2}, {0x8, 0x1}, {0x0, 0x1}, {0x4}, {0x789e, 0x1}, {0x5}, {0x226, 0x3}, {0x3, 0x2}, {0x65, 0x2}], [{0x71e, 0xd}, {0x6, 0x3}, {0x7, 0x501}, {0x7f, 0x10}, {0x1, 0xffffff7f}, {0x2, 0x9}, {0x6, 0x7036}, {0xf8a, 0x106}, {0x6, 0x1a}, {0x3, 0xc}, {0x8, 0x200}], 0xb, 0x2}, {[{0x0, 0x1}, {0x4358, 0x1}, {0x5, 0x1}, {0x6}, {0x8000, 0x2}, {0xa, 0x3}, {0x3, 0x2}, {0xbda, 0x1}, {0x5, 0x3}, {0x86e0, 0x3}, {0x7fffffff}], [{0xffffffff, 0x1}, {0x9, 0xe72f}, {0x9, 0xfffffff8}, {0x33, 0x8}, {0x5, 0x8}, {0x80000000, 0x94fc}, {0x600000, 0x8}, {0x1, 0x8}, {0x4, 0xfffffcff}, {0x8, 0xb}, {0x277}], 0x0, 0x3}, {[{0xf}, {0xff, 0x1}, {0x8, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x8, 0x3}, {0x9}, {0xffff, 0x3}, {0x9}, {0x8, 0x1}, {0xff}], [{0x0, 0x8}, {0x300, 0xad}, {0x8, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0x100, 0x94}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4}, {0x1, 0x2}], 0x5}, {[{0x3ff, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x1}, {0x8000}, {0xffffffff, 0x2}, {0x4}, {0x3}, {0xfffffe00, 0x1}], [{0xe99, 0x6}, {0x200d18e2, 0x4}, {0x8, 0x10}, {0x3, 0xd}, {0x5, 0x3}, {0x4, 0x8}, {0x80000000, 0x3}, {0x7f0f, 0x6}, {0x8, 0xf65ffacc}, {0x2, 0x6}, {0xf, 0x5}], 0x6, 0x6}, {[{0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xff, 0x2}, {0x5, 0x3}, {0x80000000, 0x3}, {0x0, 0x2}, {0xfffff800}, {0x4}], [{0x4, 0x6}, {0xe, 0x291a}, {0x401, 0xffff}, {0x3ff, 0x4}, {0xe976, 0x600}, {0x9, 0xc4e7}, {0xfffffff7, 0x1000}, {0x10, 0xfffffff9}, {0x4, 0x4}, {0x2, 0x8000}, {0x0, 0x3}], 0x5, 0x6}, {[{0x9, 0x2}, {0x1b, 0x1}, {0x4}, {0xe64a, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1}, {0x80000001, 0x1}, {0x6, 0x1}, {0x400, 0x3}], [{0x6, 0x10000}, {0x1a002663, 0x69}, {0x8, 0x3}, {0xebb8, 0xe0}, {0x1, 0x8}, {0x1000, 0x3}, {0x5, 0x3}, {0x3, 0x3ff}, {0x7ff, 0x1ff}, {0x8, 0x2}, {0x6, 0x6642}], 0x2, 0xb}], 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x8000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fbdbdf2500000000000000000000000000000001000000000000000000000000000000014e2100044e2400030a00008089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000008069040000000000000100000000000000d30000000000000000000000020000800600000000000000010000000000000000000100000000000100000000000000feffffffffffffff0101000000000000ff07000000000000fb000000bd6b6e00020000010000000007000000000000000a0010"], 0xd4}, 0x1, 0x0, 0x0, 0x44}, 0x800) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30ca0100000000000030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="0000000000000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00"/168], 0xf0}}, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x1b7b, &(0x7f00000001c0)={0x0, 0x973, 0x10, 0x0, 0xd0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x200102) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000000c000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) keyctl$clear(0x7, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.501424286s ago: executing program 2 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x72, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.311172311s ago: executing program 2 (id=1195): r0 = gettid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000480)=""/4096}], 0x10000000000000ba) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.040150998s ago: executing program 2 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="0fc7790066b9ff0200000f32f30f09f2abab0f20c06635000001000f22c00f01ca66b97e0b00000f32f36d360f01c5", 0x2f}], 0x1, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000bc0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.960345237s ago: executing program 1 (id=1204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000380)) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) (async) r2 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x10, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x31, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {0x10}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xb}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {0xd5d704016a3734db}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 2.959884058s ago: executing program 3 (id=1205): setuid(0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140026d13a000100002c6c38f60fd3ed7f5481dd2ffee474978d4af07465708c09a0e1a3157ac1c8274abcd28492c0508ca3352e0800000000000000595a054600955bdc14940e662f8d034929f9a3c5212a06d2658c6f280beb"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@newlinkprop={0x100, 0x6c, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc, 0x8000}, [@IFLA_VFINFO_LIST={0xd0, 0x16, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x13}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x4a, @multicast}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x8a9, 0x8000, 0x8100}}, {0x14, 0x1, {0x0, 0xf45, 0x101, 0x88a8}}, {0x14, 0x1, {0x4, 0x805, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0x5bc, 0x3}}, {0x14, 0x1, {0x6, 0x864, 0xc0, 0x88a8}}, {0x14, 0x1, {0xffffffc0, 0x31, 0xc}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x800, 0x4}}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4b}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r2 = syz_open_dev$media(&(0x7f00000011c0), 0x7, 0x20002) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) dup(r2) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000080)={r4, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c0000"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r6}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000080)={0x4, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101142, 0x40) syz_clone3(&(0x7f0000000380)={0x100400, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r7], 0x1}, 0x58) 2.861211648s ago: executing program 3 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)=0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x2) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) (async) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r2, 0x2d, 0x1001, r0, 0x0) (async) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)=0x2) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) 2.860600477s ago: executing program 2 (id=1207): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000d00)=""/18, 0x12}], 0x100000000000028a, 0x7, 0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b050001000000000000000000c20000f4ff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x3, 0x0, 0x0, 0xbf, 0x0, 0xf0, "18a6fc23"}, 0x5, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000002e00)=[{r5, 0x8006}], 0x1, &(0x7f0000002e80), 0x0, 0x0) sendfile(r4, r4, 0x0, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000301000018110000", @ANYRES32=r2, @ANYRES64=r3, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfff7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000940)=0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000300", @ANYRES32=r13, @ANYBLOB="14007000050002000000000004000300040007000a0018000303030303030000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x2d, 0xf9, 0x8, 0x5feb, 0x86, @loopback, @private1, 0x1, 0x7, 0x1, 0x1}}) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="182f145b40425c2cc9243c59c5d9a927e81785bc13c305a1958e32e4c8d323b9e01ec3cf8efa5f01e04fd74fbd387c50c4835b13cbc4cfb93d4d024977586480a909918de2626c5c273d92ef71e10f24f59dba2f5a91d868d711cb74c2f1bbdb9e06c1a185085955cd9df0528ff47998c736ea8c6dfc7a477b67848d4307dfe0a2846af77014a0d3d64a7cc79907d331e5", 0x91}, {&(0x7f0000000380)="4b2d691663ca1794d1f403bdd2bdede7d760ceb55930b840e6e3ad32b1529325a6f24fcda912286303eaf90a4c76e02ee5e3f5634c8cc4340faf261f925a2765996900cfe52cf6cdbc99f0d6f224384f8b6333a9a03532a0c2191b9a847259", 0x5f}, {&(0x7f0000000400)="75ebb21e92f6237020e95ef9d7c25ce3794394732f40a2755f64110c76c67cadb3abd6aa9401e4516ab9", 0x2a}, {&(0x7f0000000440)="636382687735ad0591f5cfd5ab1cb4ec9463ccdba7de25969bc6f9ff3b70644a38657d787e056cd6d337965064047740b857e99cd75e30ee97a4a4715334217fb4270e82e36b34121b6c6a7148ce02f652e06919de544351cb8a0ecde3adc1f43c46ca45eee8fc9bc61000261beef2e9ec01367b8e486afbb6206d005a54c947f11491c62ad8db0b89f80d4b0643f3d21ce4b79435301bf4dfdc9dfb4895", 0x9e}, {&(0x7f0000000500)="7056a82dbe8dc9f02e", 0x9}, {&(0x7f0000000540)="b1cd8966fc1259e897ad739462a10d0a82c395ae9781e1c8bb189cc34a87420e659265da0c39602d3bf6e86f610e1ef687af5fa8b7ca90b01c9f0069fefde5a635050cd799361be02f389ea37c5fd208729662dee35f4d699467f036c58619abedc896d5030ad9b2e9969a8cca54f2d1f3ad9a70afc7aa20239293bb19c605ff37f564beaee64e46d68c756aa49127689319d381fbb41566fc9b89b3714ecc5a6ab9de92782daf17719d18dbef8f24526691d2854d3f6bf92d2c920f04075f926708d4c0011683833beb45131f7581cf24807fcb4e6d93a3ccda596c97", 0xdd}, {&(0x7f0000000640)="f80ef8a182ecf99e3ba350ce7bb3e8ea0d059458253d0c62d2206d83d35535c27f80797d06eb9d2394431a0df80efe23611cc5f97b9de52f3214750d9b35d3f3033022e1dc00984492d3ad6db74d4514cb52793d3adbeeb95ef436ce530f41cf491bd4069a07983ac344020353f808311d1534f1ba8f9a686cf36dae52a37e656299fcfc47e42f32968a35acd0b55c0bcf2618213836b47ae71b365ca5e6ef76444d46889b24b25c3fb589b62c3aaf63f80eb7c1a2282ae2b905cd17df03f5397509e04f2fae5feb10909d6e04db078594091c4114e0a4e4c5772f0daac53b41075325365129e7491ec4c759080442cff6b241393d79", 0xf6}, {&(0x7f0000000840)="11bf7da96fd986466538d7b4ea45f1d3bb72fe110983c61777c320af04cf64d24ebfbd39edfcb6ed045874c13e1b61a623ecf892a139e38473bcc0474bd9861f2f092b0d1e29ec164a09c630f72c2e9a2eca957b9b9028bd4a213772a22b70209e5da57a025489079e6f5ef4cf101fd452d3136b4e58d7bc5924455d423457c78c343121d4d6baffa77c310414773216e087cf4f60ae0128f848937d29aceb4a324e7f3412c4c19e3500255a9964ef70cf8b986bc3dc7725a3f5fe522bd5cffc3f1e88b412e1e56905e550f8bd08591b58a84977b20b68cfd8e8c3af7c17f45301c762f41e87f54e2adf204bee938e", 0xef}, {&(0x7f0000000740)="f9629c", 0x3}, {&(0x7f00000009c0)="a2c4d4fdfb490adcb180e11f0d037ac45b71f0208bc06b16647c630ed0d86c9f19e6348bca51418d5d6fe34cde63ee80f6093b4d5e1c4102ea29ae4c5d406348c089a6b32c37498d3832f1fff233a0eb5933bdd6cbce1472654229a08eed4e6d95165734c39af808f49b62c50d928836b6eca4236b416713716dd85963ed618e9cf6949b0131e34042d6a769a111d75735d62b31fa66c99ae2992c4020f837d6c4a1f8cfe943aa468bed23052254b1314bd92494156e3fbef8a005cd79278f1418723a014952c3e4a79edfa8ac922692faa99005ea659813fe437181bc43fefa9ef6a0e09226744d8806fbecf618", 0xee}], 0xa, &(0x7f0000000f80)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x42, [@loopback, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x1, [{@broadcast, 0x1ff}]}, @noop, @timestamp_prespec={0x44, 0x4, 0x73, 0x3, 0x4}, @cipso={0x86, 0x39, 0x2, [{0x0, 0xb, "9324a6bceaeb0d1d24"}, {0x6, 0x8, "e96a37341eb0"}, {0x2, 0xa, "679dd32d13c4845e"}, {0x6, 0x7, "796f57136c"}, {0x6, 0xf, "a71db1fc49a0fc05e1413c0677"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x28000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @rand_addr=0x64010101, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xc0}, 0x2000c014) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "bcc9387f71327d8bcf7f54c8deee1cbefdb5db016ecc15d120a489d2182cf40e726dd9255e431891f9df09629a8cbf924649b223d6bd830daf81be41bc2b5a700ab68dea7b42f4d619a552078e35b149"}, 0xd8) 2.801563184s ago: executing program 3 (id=1208): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x80, 0x80000, 0xffffffffffffffff}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r1, 0xc1, 0x71}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'blake2b-384\x00'}}, &(0x7f0000000380)="2c31d4fd57fb141ed41a71c005110980c2bdfb07401d3941cdcbb9f4c1615805950bd24f48e44fa382f1664b52bfc65f02f899b2f63572b843bcc9c74a088100c0a9e7723fa0815e06975eb95acdb454a8dfb19876a1918b04351a2ff280ae54590a680e8a82e916987902fc251502ee9ba16f89b69ec4b1491cc335acb18330214f15a3505526b1ee0d0809b5c63cfec34c212703fa08e1f63e92e3d4ca6df68920f33b255fdcd26d4e7c03738e10c118d52ede5b0670a5582971dba9ea877bfb", &(0x7f0000000500)=""/113) (async, rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x1000, 0x1003, 0x5ab}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000100)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}]}, 0x1, 0x1}, 0x1) keyctl$KEYCTL_WATCH_KEY(0x3, r1, 0xffffffffffffffff, 0x0) 2.794056718s ago: executing program 3 (id=1209): syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="1a000000a6b7692a4cd945eb4cb072cd13170e00000000000000000000a20c28e33587f3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4ea1, @local}, 0x10) 2.731571219s ago: executing program 3 (id=1210): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4000, 0x40000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x40000000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r5, 0x1, 0x10000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xe0, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1b1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x436}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x892}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040041}, 0x50) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKSSZGET(r7, 0x1268, &(0x7f0000000040)) 2.731091623s ago: executing program 3 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x2b34, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000480)={{0x4000, 0x70000, 0xf, 0x6, 0x1, 0x0, 0x80, 0x3, 0x1, 0x9c, 0xb, 0x6}, {0x100000, 0xeeee8000, 0xa, 0xf6, 0x7, 0x3, 0x2, 0x6, 0x4, 0x8, 0x3, 0xc8}, {0xe000, 0x6000, 0x10, 0xf2, 0x9, 0x0, 0x9, 0x40, 0x5, 0x4, 0x7, 0x8}, {0xa000, 0xeeee8000, 0x9, 0x9, 0x1, 0x8, 0x0, 0x5, 0x3f, 0xcf, 0x4, 0x8}, {0x40000, 0x80a0000, 0x8, 0xb0, 0x0, 0xe, 0x6, 0x0, 0xc, 0x7, 0x1, 0xa}, {0x8000000, 0xdddd1000, 0x3, 0x2, 0x4, 0x1, 0x4, 0x9, 0xe, 0x7e, 0xfd, 0x2}, {0x40000, 0x26000, 0x8, 0x3d, 0x5, 0x9, 0x6, 0x6, 0x1, 0x61, 0xdf, 0x7}, {0x2000, 0x0, 0xf, 0x4d, 0xf, 0xff, 0x0, 0x8, 0x0, 0x51, 0xe4, 0x2}, {0xeeee0000, 0x5}, {0x4000, 0xd0}, 0x10000, 0x0, 0x6000, 0x50, 0x7, 0x9003, 0x100000, 0x1, [0x1, 0x3ff, 0x3a, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000bdb6878386002d4900000008000300", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e725f696e6f6410733d322c00190bb5ba81fc579ff2b9c0fb496fbdb13104200e101ab84764fb01c145471a8539fa9165f70695a8e86bab0afedc8fbb024a11b1332ea8d6"]) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000ffffffffffff0800450000380000000000019078ac1e0001ac1414aa050090781200183f2500000000000000007ba6010000ffffffffe000000200186371ae"], 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) chdir(&(0x7f0000000100)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r9, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x20000}], 0x1, 0x5, 0xa, 0x14) 1.99860969s ago: executing program 2 (id=1215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0xcd, 0x3, 0x2}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.949761496s ago: executing program 2 (id=1216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r3, 0x0, 0x0) (async) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, &(0x7f00000002c0)=""/106, 0x6a) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000a00"], 0x10) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async, rerun: 32) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async, rerun: 32) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x6, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0x1, 0x5, 0x4240, 0x1000200004, 0x4, 0x0, 0x0, 0x1], 0x8080000, 0x1c980}) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030425bd7000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="018c000107b000001c0012800b00010062726964676500000c0002800500170000000000f0e71ac3e41708cf714f6b1a562d097c708f8e58c071e5eaa04c732984e3d74a93fe814ba6a4cb8d7d4350be2329dbd9fb5961ae40e557bbcc06c104d9fb5d1b8304133b6fb86883712d655f0cbd7831f7bd81b24237264a899a71adcfe9c61f2d7a357b6eddb0146d00"/154], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setreuid(0xee00, 0x0) (async) setreuid(0x0, 0x0) (async, rerun: 32) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) (rerun: 32) 640.50677ms ago: executing program 4 (id=1225): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x9, 0xdc, 0x2, 0x32314142, [0x1, 0x1], [0x8, 0x5], 0x1}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000100)={0xf, 0x165, 0x7af9, 0x200000, 0xa7}) getsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, &(0x7f0000000040)) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_pgetevents(r1, 0x7, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000001c0)={r5, r6+60000000}, 0x0) clock_settime(0x7, &(0x7f00000003c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x4) 371.414133ms ago: executing program 4 (id=1226): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x878, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x84c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_SEL={0x404, 0x5, {0x10, 0x1, 0x6, 0x3, 0x2, 0x1ff, 0x9, 0x6, [{0xffff, 0x1, 0xca, 0x5}, {0x10000, 0x401, 0x400, 0x101}, {0x2, 0x1, 0xf577, 0x8}, {0x400, 0x400, 0xfa, 0x9}, {0x7, 0xad, 0x6, 0x162}, {0x9c, 0x5, 0xaeb9, 0x2}, {0x0, 0x3, 0x3, 0x9}, {0x8, 0x5, 0x10001, 0xb398}, {0x4, 0x3, 0x7fff, 0xfff}, {0xe, 0xfffffffd, 0xa2, 0x6}, {0xd, 0x6, 0x8, 0x1ff}, {0x8, 0x1, 0x1, 0x8}, {0x7, 0x8, 0x9381}, {0x7, 0x4e, 0x6, 0x6}, {0x3, 0x9, 0x4, 0x8}, {0x7, 0x0, 0x9, 0x9}, {0x43, 0xfffffff7, 0xfffffffb, 0x6}, {0x0, 0x9963, 0x80000001, 0xc78}, {0xd8bc, 0x8, 0x6, 0x4199}, {0x8, 0x0, 0x23f0, 0x8001}, {0x7, 0x33a600de, 0xfffffffa, 0xb}, {0x9, 0x6, 0x0, 0x4}, {0x3, 0x1, 0x6, 0x3ff}, {0xfffffeff, 0x2, 0x8, 0x6}, {0x8, 0xfff, 0xff, 0x2}, {0xb2, 0x6, 0x19c75361, 0xf}, {0x2f7, 0xb4, 0x10001, 0x9}, {0x4, 0x100, 0x7, 0x7fff}, {0x9, 0x240, 0x9aa6, 0x8}, {0x4, 0x9, 0x3, 0xa}, {0x2, 0x6, 0x3, 0x3}, {0xc, 0xfdc, 0x3ff, 0x2}, {0x5, 0x3, 0xfffffffa, 0x4}, {0x50be16e4, 0xe4, 0x29d, 0xff}, {0xb2, 0x5, 0xd5, 0x544}, {0x80000, 0xff, 0x401, 0x7}, {0x6, 0x2, 0x4, 0x8}, {0x10000, 0x1, 0x4, 0xf1}, {0x1, 0x401, 0x7fffffff, 0x3}, {0x7, 0x1, 0x10, 0x5}, {0xb37, 0x6, 0x916, 0x101}, {0x1ff, 0x6}, {0xffffffff, 0xffff, 0x2, 0x5}, {0x6, 0x400, 0x0, 0x8}, {0x4, 0x1ff, 0x9, 0x100}, {0xdf742206, 0x91b, 0x2, 0xe132}, {0x8, 0x4, 0xffffffff, 0x81}, {0x98, 0x7, 0x649eec32, 0x100}, {0x2, 0x1, 0x2, 0xe}, {0x9, 0x7, 0x3, 0xa1f}, {0x1ff, 0x9, 0x6, 0x6}, {0x1, 0x84ef, 0x8, 0x7}, {0x8, 0x0, 0x2, 0x3}, {0x0, 0x3, 0xb583, 0xd8}, {0x6, 0x9, 0x7f, 0x9}, {0x4, 0x9, 0x4, 0x5}, {0x7, 0x7, 0x3, 0x3}, {0x436e, 0x3, 0x3, 0x9}, {0x4, 0x401, 0x6, 0x7fffffff}, {0x5, 0x9, 0x80, 0xffff1420}, {0x2ed, 0x8, 0x3, 0x2}, {0x2d, 0x0, 0xe, 0x7}, {0x7, 0xfffffff4, 0x7d, 0x5b45}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_HASH={0x8, 0x2, 0xe0}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4329, 0x1000, 0x4, 0x5977, 0x0, 0x6, 0x3, 0x1, 0xe98f, 0x3ff, 0x7fff, 0x28, 0x2c87bfc2, 0x9, 0x4, 0x0, 0x3, 0x5, 0x9d60, 0x7, 0x6, 0x7, 0x8, 0x6f, 0x7, 0x5, 0x80000001, 0x3edce04d, 0xf4, 0x6, 0x401, 0x6, 0xf06, 0xd, 0xd, 0x3, 0x3, 0x8, 0x6, 0x8, 0x7fffffff, 0x9, 0xaa4, 0x7fff, 0x6, 0x7, 0x5, 0xffffffff, 0x6, 0x7, 0x400, 0x3, 0x69ff, 0xea, 0x7cd, 0x7ff, 0x6, 0x0, 0x3, 0x6, 0x4, 0x6, 0xf7bb, 0x6, 0x7, 0x10, 0x6, 0x8, 0x5, 0x9, 0x1, 0x8, 0x7, 0x80000000, 0x1000, 0xfffffffa, 0x3, 0x56b4a30f, 0x4, 0x7, 0x7, 0x7, 0x1, 0x7, 0x170, 0x8000, 0x2, 0x0, 0xfffffffd, 0x4, 0xffffffff, 0x9000, 0x2, 0x7, 0xc, 0x0, 0x9, 0xffff, 0x2, 0x40000000, 0x100, 0x3, 0x1, 0x1, 0x7, 0x9, 0x7, 0xffff, 0x6, 0x333, 0x8, 0x9, 0x0, 0x8997, 0x5, 0x7fff, 0x3, 0x8, 0x4, 0x1, 0x1, 0xa7b, 0x6000000, 0x401, 0x4, 0x6, 0xd, 0xe8, 0x4, 0x4, 0x3ff, 0x2401abcf, 0x10001, 0x7, 0x2, 0x7, 0x3, 0x9, 0x6, 0x8, 0xffffb891, 0xc6, 0x8, 0xec7, 0xe, 0x4, 0x2a, 0x183, 0xfffffc00, 0x0, 0x4, 0x9, 0xfe, 0x5, 0x10001, 0x7, 0x9, 0x8, 0x7fffffff, 0x21c, 0x675f, 0x5, 0x8, 0x8e52, 0x9, 0xfffffffc, 0x8, 0x9, 0xffff, 0x7, 0x1, 0x83b, 0x8, 0x8f, 0x3, 0x10, 0xf, 0x8, 0x5a7, 0x2, 0x1, 0x5, 0xff, 0x46e, 0x0, 0x6, 0xfff, 0x41e0, 0xffffffff, 0x1000, 0xae, 0x2, 0x9, 0x9, 0x800, 0x4, 0x5, 0x10001, 0xf5, 0x12000000, 0x60, 0x5, 0x9, 0xec, 0x101, 0x8, 0x1, 0x6, 0x6, 0xfffffff7, 0x8, 0x1000, 0x0, 0x6, 0x2d, 0x6, 0xb9, 0x1d7, 0x7f, 0x6, 0xb, 0x7, 0x6, 0x2, 0xd, 0x3d48, 0x5, 0x8, 0x9, 0x9, 0x6, 0x4, 0x5, 0x2, 0xd6b, 0x3, 0xeb4, 0x9, 0x5, 0xa000000, 0x80000000, 0x3, 0x0, 0x1, 0xa, 0x401, 0x3ff, 0x7, 0x6, 0x6, 0x7, 0x2, 0xfffffffb, 0x9, 0x80000001, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xef}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_DIVISOR={0x8, 0x4, 0x7a}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x802000, @loopback}, {0xa, 0x4, 0xfffffffd, @mcast2}, 0x3, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0xdfffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r9, &(0x7f0000000000)="93e00b810394c135be20f7fd004e9a412f408042d170ce3b17bb8a7251de6d60442f8654930b5b2cab565caf8b2e6e35dc0ea549495d410673998f3cede13199ed657fa5a59f437b5bd67023c483", 0x4e, 0x8080, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 268.48594ms ago: executing program 4 (id=1227): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2c, 0x800, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x0, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x2a, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x49}, {0xffff1000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x2, 0x10, 0xfa, 0x29, 0x9, 0x9}, {0x9000, 0x40000, 0xf, 0x9, 0x5, 0x1, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x1000, 0xe, 0x0, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0x1, 0x6}, {0x1, 0xeeef0000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x9, 0x5, 0x0, 0x8}, {0x100000, 0x405}, {0x80a0000, 0x81}, 0x60000010, 0x0, 0x40000, 0x61, 0x5, 0xa800, 0x800f900, 0x0, [0x6, 0xfffffffffffffffe, 0x3, 0x1]}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0212475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 267.269218ms ago: executing program 4 (id=1228): setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200005614520186dd60000000001406ff0000000000000102fe8000000000000000000000000000aa4eea8be1a9f2ac18533fee1bb322f597cdd4db67652f47d1b5bca3e2386109542541d39dd176355a21c8d844205d9c795622", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) pread64(r1, &(0x7f0000000240)=""/152, 0x98, 0xe1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x13, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018"], 0x34}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="d78a", 0x2}], 0x1}, 0x48043) unshare(0x62040200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001f5d3787d176ea70fcdbdf2502001000090000070f000000"], 0x1c}}, 0x44004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006800e9a100d6221ad51711b0068fbe59bbb29b78e58ca05c012f8e2bbc94c1129e8917021174d5d2417c578df408629e038bb4ccda2adc07e202c7acebe1e0562f5cb611a1b6faeb5b1d47a92066169692b18e0b4f092d1517fe7f56e30de19816bc562575f65b2736ac011797bd19b09ae6f396bac071d3835c06ae86af96d832379399d660dc4de3c0fd294127dc65165281d3567c67cf"], 0x18}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff000001000000000000000000", 0x50}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 774.655µs ago: executing program 4 (id=1229): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x0, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r3, r4, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r3, &(0x7f0000000100)) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) eventfd(0xf) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)={{0x107, 0x6, 0x3, 0x158, 0x9e, 0x80, 0x225, 0x2}, "a30f51fd45cb8c935f6b81dcdb8ad413cab8e0252e34d86a7f1792c5df9215fe2be48bd3a9eda28fcdd5942fba78d038bccb98071ce5223cf2f58ce0c67415df4aa18bcf4e42285639e38ff6ecb05fd840f743bead839a355bc72cf104012016916356e4cb8b89c9b08f36cc31891472fd7d609862753ac03f80ddcb3d803b4431e711d83d64c3ac866a75607c293859bc0348c9e5351b5aec463285dcb74329e94c4216c48bb48540b0381e5d8751df50ba7103a1b15619b7a1c7a9f94e60c84ecd6b99824ebf0b39013e7f66f27b9a8c612655e3dd44de7bb707d07908f8b73616770de4eeb6aa495c4471d96298bd4c527ea842037d"}, 0x117) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) close(r6) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x0, 0x180) 0s ago: executing program 4 (id=1230): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000040000900fffffffffddb7e000000000000001f000800018004003380"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'syzkaller0\x00', {}, 0x42b}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r9, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x7fffffff, @loopback, 0x10}}}, 0x3a) getpeername(r9, 0x0, &(0x7f0000000540)) kernel console output (not intermixed with test programs): total_active_anon 184541184 [ 77.051508][ T6527] total_inactive_file 0 [ 77.053616][ T6527] total_active_file 53248 [ 77.055018][ T6527] total_unevictable 0 [ 77.056361][ T6527] anon_cost 0 [ 77.057454][ T6527] file_cost 0 [ 77.058543][ T6527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.134,pid=6535,uid=0 [ 77.063281][ T6527] Memory cgroup out of memory: Killed process 6535 (syz.2.134) total-vm:98576kB, anon-rss:1228kB, file-rss:48664kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 77.187065][ T6513] syz.2.134 (6513) used greatest stack depth: 17384 bytes left [ 78.147255][ T6980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.222312][ T6989] JFS: charset not found [ 78.236882][ T6992] netlink: 52 bytes leftover after parsing attributes in process `syz.3.238'. [ 78.241316][ T40] audit: type=1400 audit(1771995050.689:398): avc: denied { setcheckreqprot } for pid=6988 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.251431][ T40] audit: type=1400 audit(1771995050.689:399): avc: denied { accept } for pid=6988 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.440432][ T7016] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 78.443148][ T7016] netlink: 232 bytes leftover after parsing attributes in process `syz.4.243'. [ 78.540477][ T40] audit: type=1400 audit(1771995050.989:400): avc: denied { mount } for pid=7026 comm="syz.2.245" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.547785][ T40] audit: type=1400 audit(1771995050.989:401): avc: denied { remount } for pid=7026 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.580777][ T40] audit: type=1400 audit(1771995051.029:402): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.623765][ T40] audit: type=1400 audit(1771995051.079:403): avc: denied { mounton } for pid=7036 comm="syz.3.248" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.693658][ T40] audit: type=1400 audit(1771995051.149:404): avc: denied { create } for pid=7045 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.703278][ T40] audit: type=1400 audit(1771995051.149:405): avc: denied { ioctl } for pid=7045 comm="syz.3.250" path="socket:[14808]" dev="sockfs" ino=14808 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.716253][ T40] audit: type=1400 audit(1771995051.159:406): avc: denied { read write } for pid=7045 comm="syz.3.250" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.738759][ T40] audit: type=1400 audit(1771995051.159:407): avc: denied { open } for pid=7045 comm="syz.3.250" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.778409][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 78.895571][ T7082] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 79.016372][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'. [ 79.094805][ T7087] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 79.103992][ T7087] erspan1: entered allmulticast mode [ 79.105910][ T830] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.215622][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 79.252017][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 79.263073][ T830] usb 9-1: too many configurations: 170, using maximum allowed: 8 [ 79.278184][ T830] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.281106][ T830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.285411][ T830] usb 9-1: Product: syz [ 79.286807][ T830] usb 9-1: Manufacturer: syz [ 79.288354][ T830] usb 9-1: SerialNumber: syz [ 79.293033][ T830] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.300798][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 79.317410][ T5977] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.331912][ T39] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.357602][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.264'. [ 79.394462][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.265'. [ 79.440123][ T7110] netlink: 'syz.1.266': attribute type 39 has an invalid length. [ 79.504255][ T39] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.507448][ T39] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.511121][ T39] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.514161][ T39] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.516762][ T39] usb 8-1: Product: syz [ 79.518115][ T39] usb 8-1: Manufacturer: syz [ 79.519620][ T39] usb 8-1: SerialNumber: syz [ 79.525258][ T39] usb 8-1: config 0 descriptor?? [ 79.529937][ T39] usb 8-1: selecting invalid altsetting 0 [ 79.539782][ T830] usb 9-1: USB disconnect, device number 2 [ 79.730340][ T6011] usb 8-1: USB disconnect, device number 2 [ 79.853950][ T7116] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 79.981920][ T7116] usb 6-1: device descriptor read/64, error -71 [ 80.073564][ T7134] netlink: zone id is out of range [ 80.196795][ T7145] MTD: Couldn't look up './bus': -15 [ 80.242089][ T7116] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 80.331905][ T5934] Bluetooth: hci0: command 0x0405 tx timeout [ 80.342258][ T5977] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 80.344907][ T5977] ath9k_htc: Failed to initialize the device [ 80.358001][ T830] usb 9-1: ath9k_htc: USB layer deinitialized [ 80.382191][ T7116] usb 6-1: device descriptor read/64, error -71 [ 80.395549][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.483131][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.492791][ T7116] usb usb6-port1: attempt power cycle [ 80.514016][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.517977][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.521565][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.527820][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.530923][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.547497][ T7172] wg1 speed is unknown, defaulting to 1000 [ 80.601260][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.604715][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.633144][ T7176] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 80.639820][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.644730][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.686959][ T840] wg1 speed is unknown, defaulting to 1000 [ 80.688845][ T840] syz2: Port: 1 Link DOWN [ 80.694435][ T7176] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.704552][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.710109][ T46] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.714864][ T46] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.725154][ T7175] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 80.727808][ T840] wg1 speed is unknown, defaulting to 1000 [ 80.728164][ T46] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.732832][ T46] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.781585][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.849850][ T7172] chnl_net:caif_netlink_parms(): no params data found [ 80.862453][ T7116] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 80.882309][ T7116] usb 6-1: device descriptor read/8, error -71 [ 80.936087][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.938658][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.941233][ T7172] bridge_slave_0: entered allmulticast mode [ 80.944935][ T7172] bridge_slave_0: entered promiscuous mode [ 80.957561][ T7172] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.960026][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.962571][ T7172] bridge_slave_1: entered allmulticast mode [ 80.966616][ T7172] bridge_slave_1: entered promiscuous mode [ 80.981094][ T13] bridge_slave_1: left allmulticast mode [ 80.983383][ T13] bridge_slave_1: left promiscuous mode [ 80.985269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.989879][ T13] bridge_slave_0: left allmulticast mode [ 80.991835][ T13] bridge_slave_0: left promiscuous mode [ 80.993854][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.125463][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.129582][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.132349][ T7116] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 81.135992][ T13] bond0 (unregistering): Released all slaves [ 81.140408][ T13] bond1 (unregistering): Released all slaves [ 81.152314][ T7116] usb 6-1: device descriptor read/8, error -71 [ 81.154677][ T7172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.161575][ T7172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.176994][ T7172] team0: Port device team_slave_0 added [ 81.180158][ T7172] team0: Port device team_slave_1 added [ 81.201455][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.203932][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.216262][ T7172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.223858][ T7172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.226109][ T7172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.235088][ T7172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.272149][ T7116] usb usb6-port1: unable to enumerate USB device [ 81.282656][ T7172] hsr_slave_0: entered promiscuous mode [ 81.285720][ T7172] hsr_slave_1: entered promiscuous mode [ 81.287941][ T7172] debugfs: 'hsr0' already exists in 'hsr' [ 81.289907][ T7172] Cannot create hsr debugfs directory [ 81.480070][ T13] hsr_slave_0: left promiscuous mode [ 81.483974][ T13] hsr_slave_1: left promiscuous mode [ 81.487987][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.490403][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.497934][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.500224][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.505906][ T13] veth1_macvtap: left promiscuous mode [ 81.508104][ T13] veth0_macvtap: left promiscuous mode [ 81.510256][ T13] veth1_vlan: left promiscuous mode [ 81.512297][ T13] veth0_vlan: left promiscuous mode [ 81.616502][ T13] team0 (unregistering): Port device team_slave_1 removed [ 81.629946][ T13] team0 (unregistering): Port device team_slave_0 removed [ 81.854878][ T7233] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.003563][ T7172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.007713][ T7172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.011682][ T7172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.023879][ T7172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.069238][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.078099][ T7172] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.084487][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.086840][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.092662][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.095039][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.201383][ T7172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.313680][ T7255] random: crng reseeded on system resumption [ 82.355791][ T7263] overlayfs: failed to resolve './file0': -2 [ 82.365533][ T7172] veth0_vlan: entered promiscuous mode [ 82.370382][ T7172] veth1_vlan: entered promiscuous mode [ 82.381234][ T7172] veth0_macvtap: entered promiscuous mode [ 82.388126][ T7172] veth1_macvtap: entered promiscuous mode [ 82.395868][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.400216][ T7172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.408778][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411778][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.415732][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.418617][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.463321][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.465822][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.479019][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.482936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.571927][ T5934] Bluetooth: hci0: command tx timeout [ 82.583176][ T7278] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.858164][ T7323] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 82.861750][ T7323] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 82.967265][ T7335] sg_write: data in/out 63015/10 bytes for SCSI command 0xff-- guessing data in; [ 82.967265][ T7335] program syz.3.319 not setting count and/or reply_len properly [ 83.142842][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.258355][ T7361] __nla_validate_parse: 7 callbacks suppressed [ 83.258367][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.4.328'. [ 83.281028][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 83.281081][ T40] audit: type=1400 audit(1771995055.729:461): avc: denied { accept } for pid=7358 comm="syz.3.327" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.293070][ T40] audit: type=1400 audit(1771995055.749:462): avc: denied { read } for pid=7358 comm="syz.3.327" path="socket:[19767]" dev="sockfs" ino=19767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.301887][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 83.305627][ T39] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.310911][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 83.315791][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 83.324635][ T39] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 83.328489][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.332584][ T39] usb 7-1: Product: syz [ 83.334393][ T39] usb 7-1: Manufacturer: syz [ 83.336350][ T39] usb 7-1: SerialNumber: syz [ 83.340966][ T39] usb 7-1: config 0 descriptor?? [ 83.381878][ T39] rc_core: IR keymap rc-streamzap not found [ 83.383874][ T39] Registered IR keymap rc-empty [ 83.386710][ T39] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 83.391494][ T39] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 83.545615][ T7330] netlink: 'syz.2.317': attribute type 30 has an invalid length. [ 83.545746][ T40] audit: type=1400 audit(1771995055.999:463): avc: denied { ioctl } for pid=7329 comm="syz.2.317" path="/dev/input/event4" dev="devtmpfs" ino=2910 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.567093][ T7330] bond1: option arp_missed_max: invalid value (0) [ 83.569194][ T7330] bond1: option arp_missed_max: allowed values 1 - 255 [ 83.575632][ T7330] bond1 (unregistering): Released all slaves [ 83.597403][ T7397] netlink: 'syz.4.341': attribute type 10 has an invalid length. [ 83.599895][ T7397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.341'. [ 83.648705][ T830] usb 7-1: USB disconnect, device number 3 [ 83.773534][ T1025] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.914762][ T7399] Cannot find del_set index 4 as target [ 83.923258][ T1025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.926858][ T1025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.930026][ T1025] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.942370][ T1025] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.949125][ T1025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.953984][ T1025] usb 8-1: config 0 descriptor?? [ 83.992705][ T7406] netlink: 64 bytes leftover after parsing attributes in process `syz.1.344'. [ 83.996860][ T7406] netlink: 64 bytes leftover after parsing attributes in process `syz.1.344'. [ 84.106663][ T40] audit: type=1400 audit(1771995056.559:464): avc: denied { create } for pid=7411 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.112709][ T40] audit: type=1400 audit(1771995056.559:465): avc: denied { connect } for pid=7411 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.157463][ T40] audit: type=1400 audit(1771995056.609:466): avc: denied { watch_reads } for pid=7415 comm="syz.1.347" path="/91" dev="tmpfs" ino=497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.289031][ T7422] QAT: Device 2 not found [ 84.368133][ T1025] hid_parser_main: 190 callbacks suppressed [ 84.368173][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.373784][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.376304][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.378857][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.381241][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.383871][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.386554][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.388943][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.391385][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.393787][ T1025] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 84.409293][ T1025] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 84.451997][ T830] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 84.547787][ T40] audit: type=1400 audit(1771995056.999:467): avc: denied { getopt } for pid=7428 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.613841][ T830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.618053][ T830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.622949][ T830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.625873][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.635245][ T5977] usb 8-1: USB disconnect, device number 3 [ 84.651987][ T5934] Bluetooth: hci0: command tx timeout [ 84.832538][ T830] usb 7-1: GET_CAPABILITIES returned 0 [ 84.834437][ T830] usbtmc 7-1:16.0: can't read capabilities [ 85.038908][ T7420] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32 [ 85.044005][ T830] usb 7-1: USB disconnect, device number 4 [ 85.214273][ T40] audit: type=1400 audit(1771995057.669:468): avc: denied { ioctl } for pid=7445 comm="syz.3.357" path="socket:[19838]" dev="sockfs" ino=19838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.261094][ T7452] sp0: Synchronizing with TNC [ 85.316268][ T7465] binder: 7450:7465 ioctl c0306201 200000000640 returned -22 [ 85.320862][ T7453] binder: 7450:7453 ioctl c0306201 200000000040 returned -14 [ 85.388486][ T7469] FAT-fs (sr0): bogus number of reserved sectors [ 85.390519][ T7469] FAT-fs (sr0): Can't find a valid FAT filesystem [ 85.423133][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 85.426022][ T40] audit: type=1400 audit(1771995057.879:469): avc: denied { getopt } for pid=7476 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.470072][ T7486] ip6t_REJECT: ECHOREPLY is not supported [ 85.479792][ T40] audit: type=1400 audit(1771995057.929:470): avc: denied { accept } for pid=7484 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 85.480063][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 85.493869][ T7486] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 85.613045][ T7499] XFS (nbd2): SB validate failed with error -5. [ 86.085553][ T7450] [U] [ 86.306897][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 86.312992][ T7512] bond0: entered promiscuous mode [ 86.314662][ T7512] bond_slave_0: entered promiscuous mode [ 86.316595][ T7512] bond_slave_1: entered promiscuous mode [ 86.319563][ T7512] batadv_slave_0: entered promiscuous mode [ 86.321702][ T7512] batadv_slave_0: left promiscuous mode [ 86.328540][ T7512] bond0: left promiscuous mode [ 86.330337][ T7512] bond_slave_0: left promiscuous mode [ 86.332475][ T7512] bond_slave_1: left promiscuous mode [ 86.426611][ T7520] autofs4:pid:7520:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(809004142.3223858), cmd(0xc018937c) [ 86.431592][ T7520] autofs4:pid:7520:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c) [ 86.516827][ T7537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.381'. [ 86.522415][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 86.557143][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 86.631371][ T7550] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 86.669349][ T24] cfg80211: failed to load regulatory.db [ 86.708755][ T7554] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 86.716246][ T7555] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 86.742053][ T5934] Bluetooth: hci0: command tx timeout [ 86.824776][ T7565] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.903228][ T7571] netlink: zone id is out of range [ 86.904963][ T7571] netlink: zone id is out of range [ 86.906754][ T7571] netlink: zone id is out of range [ 86.908532][ T7571] netlink: zone id is out of range [ 86.910257][ T7571] netlink: zone id is out of range [ 86.910371][ T7571] netlink: zone id is out of range [ 86.910401][ T7571] netlink: zone id is out of range [ 86.910411][ T7571] netlink: zone id is out of range [ 86.910467][ T7571] netlink: zone id is out of range [ 86.910487][ T7571] netlink: zone id is out of range [ 86.989011][ T7583] ipt_REJECT: TCP_RESET invalid for non-tcp [ 87.084921][ T7590] netlink: 'syz.4.402': attribute type 3 has an invalid length. [ 88.314783][ T7641] 9pnet_virtio: no channels available for device syz [ 88.317296][ T7641] 9pnet_virtio: no channels available for device syz [ 88.319617][ T7641] 9pnet_virtio: no channels available for device syz [ 88.321872][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 88.321880][ T40] audit: type=1400 audit(1771995060.769:482): avc: denied { mounton } for pid=7639 comm="syz.2.419" path="/83/file0" dev="9p" ino=72614017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.326592][ T7641] 9pnet_virtio: no channels available for device syz [ 88.333826][ T7641] 9pnet_virtio: no channels available for device syz [ 88.336285][ T7641] 9pnet_virtio: no channels available for device syz [ 88.338688][ T7641] 9pnet_virtio: no channels available for device syz [ 88.340912][ T7641] 9pnet_virtio: no channels available for device syz [ 88.343688][ T7641] 9pnet_virtio: no channels available for device syz [ 88.346332][ T7641] 9pnet_virtio: no channels available for device syz [ 88.348782][ T7641] 9pnet_virtio: no channels available for device syz [ 88.351603][ T7641] 9pnet_virtio: no channels available for device syz [ 88.354589][ T7641] 9pnet_virtio: no channels available for device syz [ 88.357427][ T7641] 9pnet_virtio: no channels available for device syz [ 88.360541][ T7641] 9pnet_virtio: no channels available for device /dev/vhost-vsock [ 88.363609][ T7641] 9pnet_virtio: no channels available for device /dev/vhost-vsock [ 88.366283][ T7641] 9pnet_virtio: no channels available for device /dev/vhost-vsock [ 88.369125][ T7641] 9pnet_virtio: no channels available for device /dev/vhost-vsock [ 88.481860][ T1025] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.538418][ T7655] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 88.542986][ T40] audit: type=1400 audit(1771995060.999:483): avc: denied { relabelto } for pid=7654 comm="syz.4.424" name="cpu.stat" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 88.551713][ T40] audit: type=1400 audit(1771995060.999:484): avc: denied { associate } for pid=7654 comm="syz.4.424" name="cpu.stat" dev="tmpfs" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 88.564184][ T40] audit: type=1400 audit(1771995061.019:485): avc: denied { append } for pid=7654 comm="syz.4.424" path="/45/cpu.stat" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 88.598627][ T7662] sp0: Synchronizing with TNC [ 88.600480][ T7661] [U] ` [ 88.602037][ T5934] Bluetooth: hci0: Dropping invalid advertising data [ 88.605697][ T5934] Bluetooth: hci0: Malformed LE Event: 0x02 [ 88.607821][ T5934] Bluetooth: hci0: Dropping invalid advertising data [ 88.610599][ T5934] Bluetooth: hci0: Malformed LE Event: 0x02 [ 88.621889][ T40] audit: type=1400 audit(1771995061.069:486): avc: denied { append } for pid=7663 comm="syz.3.423" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.629982][ T40] audit: type=1400 audit(1771995061.079:487): avc: denied { unlink } for pid=7172 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 88.652690][ T1025] usb 6-1: Using ep0 maxpacket: 16 [ 88.655767][ T1025] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.655775][ T7668] __nla_validate_parse: 3 callbacks suppressed [ 88.655790][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 88.659484][ T1025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.668657][ T1025] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 88.671711][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.674500][ T1025] usb 6-1: Product: syz [ 88.676043][ T1025] usb 6-1: Manufacturer: syz [ 88.677552][ T1025] usb 6-1: SerialNumber: syz [ 88.681626][ T1025] usb 6-1: config 0 descriptor?? [ 88.709665][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.712767][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.744363][ T40] audit: type=1400 audit(1771995061.199:488): avc: denied { connect } for pid=7671 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.752360][ T7672] xt_hashlimit: size too large, truncated to 1048576 [ 88.823346][ T5934] Bluetooth: hci0: command tx timeout [ 88.876428][ T7685] overlay: ./file1 is not a directory [ 88.880783][ T40] audit: type=1400 audit(1771995061.329:489): avc: denied { create } for pid=7684 comm="syz.2.433" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.890592][ T7688] /dev/sr0: Can't lookup blockdev [ 88.905583][ T40] audit: type=1400 audit(1771995061.359:490): avc: denied { unlink } for pid=5926 comm="syz-executor" name="file0" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.915502][ T6017] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 88.965496][ T40] audit: type=1400 audit(1771995061.419:491): avc: denied { mount } for pid=7695 comm="syz.4.437" name="/" dev="rpc_pipefs" ino=18244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 89.026460][ T7702] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 89.029875][ T7702] netlink: 'syz.4.440': attribute type 7 has an invalid length. [ 89.033598][ T7702] netlink: 'syz.4.440': attribute type 8 has an invalid length. [ 89.036583][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.440'. [ 89.072075][ T6017] usb 8-1: Using ep0 maxpacket: 8 [ 89.075577][ T6017] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.078200][ T6017] usb 8-1: config 179 has no interface number 0 [ 89.080214][ T6017] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 89.085059][ T6017] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 89.088748][ T6017] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 89.092820][ T6017] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 89.096416][ T6017] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.100742][ T6017] usb 8-1: config 179 interface 65 has no altsetting 0 [ 89.104147][ T6017] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 89.106990][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.112384][ T7670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.124222][ T6017] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input8 [ 89.173725][ T5319] input input8: unable to receive magic message: -110 [ 89.178965][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 89.185451][ T5319] input input8: unable to receive magic message: -32 [ 89.191355][ T5319] input input8: unable to receive magic message: -32 [ 89.201931][ T5319] input input8: unable to receive magic message: -32 [ 89.207346][ T5319] input input8: unable to receive magic message: -32 [ 89.229918][ T7111] input input8: unable to receive magic message: -32 [ 89.237713][ T5319] input input8: unable to receive magic message: -32 [ 89.240445][ T7719] Bluetooth: MGMT ver 1.23 [ 89.246457][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 89.250386][ T5319] input input8: unable to receive magic message: -32 [ 91.252493][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 91.256871][ T1025] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9 [ 91.268012][ T1025] imon:send_packet: packet tx failed (-71) [ 91.281952][ T1025] imon 6-1:0.0: panel buttons/knobs setup failed [ 91.331922][ T1025] rc_core: IR keymap rc-imon-pad not found [ 91.334500][ T1025] Registered IR keymap rc-empty [ 91.335861][ T7731] tmpfs: Bad value for 'mpol' [ 91.335944][ T7730] tmpfs: Bad value for 'mpol' [ 91.336727][ T1025] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 91.347630][ T1025] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 91.353625][ T1025] imon:send_packet: packet tx failed (-71) [ 91.372002][ T1025] imon 6-1:0.0: remote input dev register failed [ 91.374820][ T1025] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 91.384701][ T7734] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 91.392590][ T1025] imon 6-1:0.0: unable to initialize intf0, err 0 [ 91.396010][ T1025] imon:imon_probe: failed to initialize context! [ 91.398567][ T1025] imon 6-1:0.0: unable to register, err -19 [ 91.404813][ T1025] usb 6-1: USB disconnect, device number 7 [ 91.470524][ T7735] vivid-000: ================= START STATUS ================= [ 91.473494][ T7735] vivid-000: Test Pattern: 75% Colorbar [ 91.475507][ T7735] vivid-000: Fill Percentage of Frame: 100 [ 91.477401][ T7735] vivid-000: Horizontal Movement: No Movement [ 91.479394][ T7735] vivid-000: Vertical Movement: No Movement [ 91.481283][ T7735] vivid-000: OSD Text Mode: All [ 91.483064][ T7735] vivid-000: Show Border: false [ 91.484885][ T7735] vivid-000: Show Square: false [ 91.486647][ T7735] vivid-000: Sensor Flipped Horizontally: false [ 91.488683][ T7735] vivid-000: Sensor Flipped Vertically: true [ 91.490664][ T7735] vivid-000: Insert SAV Code in Image: false [ 91.492719][ T7735] vivid-000: Insert EAV Code in Image: false [ 91.494660][ T7735] vivid-000: Insert Video Guard Band: false [ 91.496576][ T7735] vivid-000: Reduced Framerate: true [ 91.498281][ T7735] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 91.500784][ T7735] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 91.503436][ T7735] vivid-000: Enable Capture Cropping: true [ 91.505321][ T7735] vivid-000: Enable Capture Composing: false [ 91.507289][ T7735] vivid-000: Enable Capture Scaler: true [ 91.509091][ T7735] vivid-000: Timestamp Source: End of Frame [ 91.511454][ T7735] vivid-000: Colorspace: sRGB [ 91.513494][ T7735] vivid-000: Transfer Function: Default [ 91.515769][ T7735] vivid-000: Y'CbCr Encoding: Default [ 91.517975][ T7735] vivid-000: HSV Encoding: Hue 0-179 [ 91.520146][ T7735] vivid-000: Quantization: Limited Range [ 91.522583][ T7735] vivid-000: Apply Alpha To Red Only: false [ 91.525036][ T7735] vivid-000: Standard Aspect Ratio: 4x3 [ 91.527316][ T7735] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 91.530451][ T7735] vivid-000: DV Timings: 640x480p59 inactive [ 91.532769][ T7735] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 91.535635][ T7735] vivid-000: Maximum EDID Blocks: 2 [ 91.537718][ T7735] vivid-000: Limited RGB Range (16-235): false [ 91.540134][ T7735] vivid-000: Rx RGB Quantization Range: Automatic [ 91.542638][ T7735] vivid-000: Power Present: 0x00000001 [ 91.544623][ T7735] tpg source WxH: 320x240 (Y'CbCr) [ 91.546711][ T7735] tpg field: 1 [ 91.548140][ T7735] tpg crop: (0,0)/320x240 [ 91.549940][ T7735] tpg compose: (0,0)/320x240 [ 91.551989][ T7735] tpg colorspace: 8 [ 91.553583][ T7735] tpg transfer function: 0/2 [ 91.555218][ T7735] tpg Y'CbCr encoding: 0/1 [ 91.556935][ T7735] tpg quantization: 2/2 [ 91.558638][ T7735] tpg RGB range: 0/2 [ 91.560225][ T7735] vivid-000: ================== END STATUS ================== [ 92.198707][ T7713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.203026][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 92.262580][ T840] usb 8-1: USB disconnect, device number 4 [ 92.265384][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.321443][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 92.497928][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 92.533961][ T7765] veth1_to_batadv: entered promiscuous mode [ 92.580180][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 92.600700][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 92.931987][ T7788] input: syz1 as /devices/virtual/input/input11 [ 93.024638][ T7792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.466'. [ 93.024674][ T7793] netlink: 52 bytes leftover after parsing attributes in process `syz.2.466'. [ 93.093698][ T6528] hid_parser_main: 28 callbacks suppressed [ 93.093746][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.098291][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.101464][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.121256][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.123798][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.126132][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.128408][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.130745][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.133281][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.136178][ T6528] hid-generic FFFB:0001:01FF.0004: unknown main item tag 0x0 [ 93.142454][ T6528] hid-generic FFFB:0001:01FF.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 93.195360][ T7806] fido_id[7806]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.200346][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 93.410301][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 93.410312][ T40] audit: type=1400 audit(1771995065.859:499): avc: denied { listen } for pid=7819 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.419717][ T40] audit: type=1400 audit(1771995065.869:500): avc: denied { accept } for pid=7819 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.442009][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.611911][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 93.615643][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.620021][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.624258][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.627908][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.635514][ T24] usb 6-1: config 0 descriptor?? [ 93.812746][ T40] audit: type=1400 audit(1771995066.269:501): avc: denied { shutdown } for pid=7831 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.819547][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 93.820857][ T40] audit: type=1400 audit(1771995066.269:502): avc: denied { setopt } for pid=7831 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 93.823622][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 93.833007][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.833045][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 93.833063][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 93.833508][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.854153][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.861759][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.865438][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.053481][ T7835] wg1 speed is unknown, defaulting to 1000 [ 94.053964][ T7816] iowarrior 6-1:0.0: Error -90 while submitting URB [ 94.061059][ T24] usb 6-1: USB disconnect, device number 8 [ 94.105520][ T7842] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 94.111600][ T40] audit: type=1400 audit(1771995066.559:503): avc: denied { ioctl } for pid=7841 comm="syz.4.479" path="cgroup:[4026532887]" dev="nsfs" ino=4026532887 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.123681][ T40] audit: type=1400 audit(1771995066.579:504): avc: denied { setopt } for pid=7841 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.228471][ T40] audit: type=1400 audit(1771995066.679:505): avc: denied { sqpoll } for pid=7855 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.241974][ T40] audit: type=1400 audit(1771995066.679:506): avc: denied { mount } for pid=7852 comm="syz.3.482" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 94.274061][ T7860] netlink: 'syz.4.484': attribute type 9 has an invalid length. [ 94.286368][ T7860] geneve2: entered promiscuous mode [ 94.288182][ T7860] geneve2: entered allmulticast mode [ 94.419532][ T7866] overlayfs: failed to resolve './file1': -2 [ 94.588902][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 94.595445][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 94.775991][ T40] audit: type=1400 audit(1771995067.229:507): avc: denied { execute } for pid=7879 comm="syz.3.491" path="/proc/352/task/353/net/igmp6" dev="proc" ino=4026533396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 94.821520][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.824317][ T40] audit: type=1400 audit(1771995067.269:508): avc: denied { listen } for pid=7908 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.830385][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.113384][ T7922] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 95.125822][ T7922] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.469930][ T7937] block device autoloading is deprecated and will be removed. [ 95.555561][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 95.852304][ T6011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 95.906387][ T7963] veth3: entered promiscuous mode [ 96.061925][ T7984] netlink: 'syz.1.515': attribute type 13 has an invalid length. [ 96.080567][ T7975] futex_wake_op: syz.4.513 tries to shift op by -1; fix this program [ 102.523258][ T8023] Cannot find del_set index 0 as target [ 102.568923][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 102.740504][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 102.740516][ T40] audit: type=1400 audit(1771995075.189:514): avc: denied { getopt } for pid=8039 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 103.017912][ T8048] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 103.425243][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 103.490856][ T40] audit: type=1326 audit(1771995075.939:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.2.534" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1499c629 code=0x0 [ 103.521182][ T8062] fuse: Unknown parameter '184467440737095516150xffffffffffffffffo' [ 103.570346][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.536'. [ 103.592386][ T8069] netem: incorrect gi model size [ 103.594412][ T8069] netem: change failed [ 104.016798][ T40] audit: type=1400 audit(1771995076.469:516): avc: denied { read append } for pid=8131 comm="syz.1.549" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.031909][ T40] audit: type=1400 audit(1771995076.469:517): avc: denied { open } for pid=8131 comm="syz.1.549" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.042985][ T40] audit: type=1400 audit(1771995076.469:518): avc: denied { ioctl } for pid=8131 comm="syz.1.549" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 104.088148][ T8141] SELinux: failed to load policy [ 104.090174][ T40] audit: type=1400 audit(1771995076.539:519): avc: denied { load_policy } for pid=8134 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.175127][ T8115] cgroup: fork rejected by pids controller in /syz4 [ 104.594447][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 105.021856][ T40] audit: type=1400 audit(1771995077.469:520): avc: denied { bind } for pid=8210 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.054898][ T40] audit: type=1800 audit(1771995077.509:521): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.560" name="bus" dev="9p" ino=72614207 res=0 errno=0 [ 105.071279][ T8217] /dev/nbd4: Can't lookup blockdev [ 105.168345][ T40] audit: type=1804 audit(1771995077.619:522): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.563" name="/newroot/105/file1" dev="tmpfs" ino=567 res=1 errno=0 [ 105.237555][ T40] audit: type=1400 audit(1771995077.689:523): avc: denied { ioctl } for pid=8229 comm="syz.4.566" path="socket:[21229]" dev="sockfs" ino=21229 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.313096][ T8241] net_ratelimit: 46 callbacks suppressed [ 105.313143][ T8241] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.997804][ T8257] xt_limit: Overflow, try lower: 271964/0 [ 107.411912][ T6011] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.571959][ T6011] usb 6-1: Using ep0 maxpacket: 16 [ 107.577741][ T6011] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 107.581555][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 107.585277][ T6011] usb 6-1: Product: syz [ 107.586956][ T6011] usb 6-1: Manufacturer: syz [ 107.588892][ T6011] usb 6-1: SerialNumber: syz [ 107.594748][ T6011] usb 6-1: config 0 descriptor?? [ 107.809702][ T7116] usb 6-1: USB disconnect, device number 9 [ 107.997458][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 107.997468][ T40] audit: type=1400 audit(1771995080.449:530): avc: denied { map } for pid=8273 comm="syz.1.576" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.009005][ T40] audit: type=1400 audit(1771995080.449:531): avc: denied { execute } for pid=8273 comm="syz.1.576" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.154123][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'. [ 108.207825][ T8226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.279615][ T40] audit: type=1800 audit(1771995080.729:532): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.579" name="bus" dev="9p" ino=72614207 res=0 errno=0 [ 108.330048][ T8291] fuse: Bad value for 'fd' [ 108.334554][ T40] audit: type=1400 audit(1771995080.789:533): avc: denied { write } for pid=8290 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.397515][ T8297] binder: 8290:8297 ioctl c00c620f 200000000500 returned -22 [ 108.631414][ T8314] netlink: 'syz.2.589': attribute type 39 has an invalid length. [ 108.686554][ T8315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8315 comm=syz.2.589 [ 109.081919][ T6011] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.206250][ T40] audit: type=1800 audit(1771995081.659:534): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.591" name="bus" dev="9p" ino=72614207 res=0 errno=0 [ 109.235053][ T6011] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 105, changing to 10 [ 109.240710][ T6011] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 173, changing to 11 [ 109.245685][ T6011] usb 7-1: config 1 interface 0 has no altsetting 0 [ 109.250702][ T6011] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.40 [ 109.254000][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.257227][ T6011] usb 7-1: Product: ိ [ 109.259040][ T6011] usb 7-1: Manufacturer: ї [ 109.260983][ T6011] usb 7-1: SerialNumber: syz [ 109.491182][ T8332] netlink: 'syz.1.598': attribute type 32 has an invalid length. [ 109.495489][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 109.507188][ T8332] bond2: Setting coupled_control to off (0) [ 109.639506][ T8348] overlayfs: conflicting lowerdir path [ 109.685774][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.690348][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.710078][ T6011] usbhid 7-1:1.0: can't add hid device: -71 [ 109.712842][ T6011] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 109.722488][ T6011] usb 7-1: USB disconnect, device number 5 [ 109.828931][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 109.851169][ T8355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.859836][ T8355] macvlan2: entered promiscuous mode [ 109.861603][ T8355] macvlan2: entered allmulticast mode [ 109.864106][ T8355] bond3: entered promiscuous mode [ 109.866065][ T8355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.871647][ T8355] bond3: left promiscuous mode [ 110.066995][ T40] audit: type=1400 audit(1771995082.519:535): avc: denied { mounton } for pid=8363 comm="syz.1.608" path="/bus" dev="bpf" ino=22044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 110.070531][ T8365] overlayfs: upper fs does not support tmpfile. [ 110.093278][ T40] audit: type=1400 audit(1771995082.549:536): avc: denied { create } for pid=8370 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.100819][ T40] audit: type=1400 audit(1771995082.549:537): avc: denied { write } for pid=8370 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.111233][ T40] audit: type=1400 audit(1771995082.549:538): avc: denied { read } for pid=8370 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.117742][ T40] audit: type=1400 audit(1771995082.549:539): avc: denied { read } for pid=8370 comm="syz.4.609" dev="nsfs" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.128233][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 110.211299][ T8381] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 110.215884][ T8381] overlayfs: missing 'lowerdir' [ 110.254833][ T8384] program syz.2.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.293658][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 110.304804][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.313770][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.317909][ T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.321860][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.330002][ T24] usb 8-1: config 0 descriptor?? [ 110.492867][ T8409] netlink: 'syz.1.620': attribute type 11 has an invalid length. [ 110.495632][ T8409] netlink: 'syz.1.620': attribute type 11 has an invalid length. [ 110.498671][ T8409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.620'. [ 110.561352][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 110.666603][ T8428] can0: slcan on ttynull. [ 110.677516][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 110.680280][ T8430] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.742528][ T8427] can0 (unregistered): slcan off ttynull. [ 110.757379][ T24] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 110.766670][ T8437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.627'. [ 110.769826][ T8437] unsupported nlmsg_type 40 [ 110.785837][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'. [ 110.791954][ T8442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8442 comm=syz.1.628 [ 110.846214][ T8448] netlink: 52 bytes leftover after parsing attributes in process `syz.4.631'. [ 110.856343][ T8448] netlink: 76 bytes leftover after parsing attributes in process `syz.4.631'. [ 110.859628][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.862189][ T8448] bridge0: port 2(bridge_slave_1) entered listening state [ 110.864687][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.867105][ T8448] bridge0: port 1(bridge_slave_0) entered listening state [ 110.875385][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.877941][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.919478][ T8453] bond1: (slave bond_slave_1): Device is not our slave [ 110.921879][ T8453] bond1: option active_slave: invalid value (bond_slave_1) [ 110.926578][ T8453] bond1 (unregistering): Released all slaves [ 111.052505][ T8461] openvswitch: netlink: Unknown key attributes 2 [ 111.099851][ T8360] ip6t_srh: unknown srh invflags 4000 [ 111.203157][ T7116] usb 8-1: USB disconnect, device number 5 syzkaller syzkaller login: [ 111.601081][ T8481] fuse: Bad value for 'fd' [ 111.684199][ T8492] netlink: 'syz.2.646': attribute type 3 has an invalid length. [ 111.723806][ T8495] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.029331][ T8518] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 112.053482][ T8518] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 112.063162][ T8518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.063621][ T67] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.132211][ T8526] netlink: 'syz.1.657': attribute type 30 has an invalid length. [ 112.140131][ T416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.141117][ T8526] netlink: 'syz.1.657': attribute type 30 has an invalid length. [ 112.144161][ T416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.149510][ T416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.156557][ T416] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.188764][ T8533] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 112.194671][ T416] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.210879][ T8533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.221576][ T8532] bond5: (slave geneve2): making interface the new active one [ 112.225735][ T8532] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 112.232050][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.265605][ T8538] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.398632][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.403285][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 112.410003][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.414092][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.417209][ T24] usb 8-1: Product: syz [ 112.419009][ T24] usb 8-1: Manufacturer: syz [ 112.420961][ T24] usb 8-1: SerialNumber: syz [ 112.433418][ T24] cdc_mbim 8-1:1.0: skipping garbage [ 112.635238][ T8512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.688539][ T8562] wg1 speed is unknown, defaulting to 1000 [ 112.838334][ T8575] netlink: 'syz.4.670': attribute type 3 has an invalid length. [ 112.893614][ T8576] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 113.026420][ T8592] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.088222][ T40] kauditd_printk_skb: 150 callbacks suppressed [ 113.088268][ T40] audit: type=1400 audit(1771995085.539:690): avc: denied { bind } for pid=8596 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.108969][ T40] audit: type=1400 audit(1771995085.549:691): avc: denied { write } for pid=8596 comm="syz.2.674" path="socket:[22355]" dev="sockfs" ino=22355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.240846][ T8512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.245332][ T24] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 113.247788][ T24] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 113.250662][ T40] audit: type=1400 audit(1771995085.699:692): avc: denied { create } for pid=8618 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.257935][ T40] audit: type=1400 audit(1771995085.699:693): avc: denied { create } for pid=8618 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.361849][ T40] audit: type=1400 audit(1771995085.809:694): avc: denied { read } for pid=8635 comm="syz.2.679" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.370113][ T40] audit: type=1400 audit(1771995085.809:695): avc: denied { open } for pid=8635 comm="syz.2.679" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.383615][ T40] audit: type=1400 audit(1771995085.819:696): avc: denied { ioctl } for pid=8635 comm="syz.2.679" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.423963][ T8641] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.427374][ T8641] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 113.431106][ T8641] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.437707][ T8641] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 113.446562][ T24] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 113.452291][ T24] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 113.465564][ T24] wwan wwan0: port wwan0mbim0 attached [ 113.480943][ T24] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 8e:0b:11:d6:9e:99 [ 113.547513][ T40] audit: type=1400 audit(1771995085.999:697): avc: denied { search } for pid=5637 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.559234][ T40] audit: type=1400 audit(1771995085.999:698): avc: denied { search } for pid=5637 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.567386][ T40] audit: type=1400 audit(1771995085.999:699): avc: denied { search } for pid=5637 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.691032][ T5637] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 113.699757][ C3] wdm_int_callback: 256 callbacks suppressed [ 113.699771][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.704091][ C3] wdm_int_callback: 256 callbacks suppressed [ 113.704102][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.708315][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.710471][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.712885][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.715032][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.717307][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.719460][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.721679][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.723900][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.726524][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.728723][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.731038][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.731983][ T39] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 113.733221][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.733592][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.740044][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.742327][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.744441][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.746665][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 113.748808][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 113.752880][ T1025] usb 8-1: USB disconnect, device number 6 [ 113.755588][ T1025] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 113.868566][ T1025] wwan wwan0: port wwan0mbim0 disconnected [ 113.872944][ T8688] __nla_validate_parse: 11 callbacks suppressed [ 113.872982][ T8688] netlink: 750 bytes leftover after parsing attributes in process `syz.4.687'. [ 113.882844][ T39] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 113.887499][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.890825][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.892798][ T8691] tun0: tun_chr_ioctl cmd 1074025675 [ 113.894853][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.896269][ T8691] tun0: persist enabled [ 113.899593][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.903049][ T8691] tun0: tun_chr_ioctl cmd 1074025675 [ 113.907962][ T8691] tun0: persist enabled [ 113.914495][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.919245][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.922727][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.925793][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.926347][ T8691] fuse: blksize only supported for fuseblk [ 113.929525][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.933215][ T8691] SELinux: syz.1.688 (8691) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.934812][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.942222][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.946435][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.949872][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.956164][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.960621][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.964026][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.968087][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.973058][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.977483][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.981743][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 113.986235][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.992361][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 113.996541][ T39] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.001379][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 114.006949][ T39] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.010270][ T39] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.014441][ T39] usb 7-1: Product: syz [ 114.016077][ T39] usb 7-1: Manufacturer: syz [ 114.017586][ T39] usb 7-1: SerialNumber: syz [ 114.025957][ T39] usb 7-1: config 0 descriptor?? [ 114.033542][ T39] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 114.239194][ T840] usb 7-1: USB disconnect, device number 6 [ 114.245256][ T840] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 114.875761][ T8728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.695'. [ 115.001311][ T8749] netlink: 'syz.3.701': attribute type 20 has an invalid length. [ 115.029252][ T8754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8754 comm=syz.3.703 [ 115.035786][ T8754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8754 comm=syz.3.703 [ 115.063607][ T8760] fuseblk: Bad value for 'fd' [ 115.075512][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 115.173841][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 115.177634][ T8778] netlink: 'syz.3.709': attribute type 21 has an invalid length. [ 115.181022][ T8778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.709'. [ 115.187873][ T8778] loop2: detected capacity change from 0 to 7 [ 115.195482][ T8655] Dev loop2: unable to read RDB block 7 [ 115.198608][ T8655] loop2: unable to read partition table [ 115.201366][ T8655] loop2: partition table beyond EOD, truncated [ 115.217843][ T8778] Dev loop2: unable to read RDB block 7 [ 115.220119][ T8778] loop2: unable to read partition table [ 115.222221][ T8778] loop2: partition table beyond EOD, truncated [ 115.224697][ T8778] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 115.247061][ T5334] Dev loop2: unable to read RDB block 7 [ 115.249161][ T5334] loop2: unable to read partition table [ 115.252163][ T5334] loop2: partition table beyond EOD, truncated [ 115.266393][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.270299][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.289813][ T5334] Dev loop2: unable to read RDB block 7 [ 115.291760][ T5334] loop2: unable to read partition table [ 115.294549][ T5334] loop2: partition table beyond EOD, truncated [ 115.318892][ T5334] Dev loop2: unable to read RDB block 7 [ 115.320805][ T5334] loop2: unable to read partition table [ 115.322869][ T5334] loop2: partition table beyond EOD, truncated [ 115.359495][ T8791] ptrace attach of "/syz-executor exec"[5926] was attempted by "/syz-executor exec"[8791] [ 115.604606][ T8803] Option ''MO' to dns_resolver key: bad/missing value [ 115.806215][ T8812] gfs2: not a GFS2 filesystem [ 116.042990][ T8843] /dev/sr0: Can't lookup blockdev [ 116.249090][ T8870] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 116.261099][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.266583][ T8870] bridge_slave_1: left allmulticast mode [ 116.268449][ T8870] bridge_slave_1: left promiscuous mode [ 116.270355][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.377772][ T8883] capability: warning: `syz.2.748' uses 32-bit capabilities (legacy support in use) [ 116.778122][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 116.874496][ T8914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.759'. [ 117.177840][ T8919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8919 comm=syz.4.761 [ 118.156724][ T8934] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 118.159676][ T8928] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 118.242542][ T8947] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.768'. [ 118.279264][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 118.279276][ T40] audit: type=1400 audit(1771995090.729:771): avc: denied { kexec_image_load } for pid=8948 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 118.358324][ T40] audit: type=1400 audit(1771995090.809:772): avc: denied { create } for pid=8962 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.462337][ T40] audit: type=1400 audit(1771995090.919:773): avc: denied { create } for pid=8973 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.486284][ T40] audit: type=1400 audit(1771995090.919:774): avc: denied { write } for pid=8973 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.492880][ T40] audit: type=1400 audit(1771995090.929:775): avc: denied { getopt } for pid=8973 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.511570][ T8978] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 118.556246][ T40] audit: type=1400 audit(1771995091.009:776): avc: denied { setopt } for pid=8979 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.571895][ T40] audit: type=1400 audit(1771995091.019:777): avc: denied { bind } for pid=8979 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.598932][ T40] audit: type=1400 audit(1771995091.019:778): avc: denied { write } for pid=8979 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.605624][ T40] audit: type=1400 audit(1771995091.019:779): avc: denied { create } for pid=8979 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 118.670794][ T40] audit: type=1400 audit(1771995091.119:780): avc: denied { mounton } for pid=8981 comm="syz.2.779" path="/176/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 119.179882][ T9022] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.188405][ T9022] CIFS mount error: No usable UNC path provided in device string! [ 119.188405][ T9022] [ 119.191891][ T9022] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.247152][ T9026] fuse: Bad value for 'fd' [ 119.451901][ T5934] Bluetooth: hci0: command 0x080f tx timeout [ 119.454519][ T9043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.457327][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.462985][ T9043] vhci_hcd vhci_hcd.0: Device attached [ 119.486017][ T9044] vhci_hcd: connection closed [ 119.486302][ T12] vhci_hcd vhci_hcd.2: stop threads [ 119.490069][ T12] vhci_hcd vhci_hcd.2: release socket [ 119.497534][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 119.503920][ T9050] syz.4.801(9050): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 119.527095][ T9052] netlink: 'syz.1.802': attribute type 8 has an invalid length. [ 119.544501][ T9054] fuse: Unknown parameter 'f' [ 119.612641][ T9062] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 119.616360][ T9062] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 119.632329][ T9062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 119.644649][ T9065] __nla_validate_parse: 1 callbacks suppressed [ 119.644660][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 119.650079][ T9069] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.660772][ T9062] bond6: (slave veth9): Enslaving as an active interface with a down link [ 119.670985][ T9062] bond6: (slave dummy0): making interface the new active one [ 119.675101][ T9062] dummy0: entered promiscuous mode [ 119.677349][ T9062] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 119.681129][ T9062] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 119.684016][ T9062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 119.688239][ T9062] bond6: (slave dummy0): Releasing active interface [ 119.758259][ T9075] loop6: detected capacity change from 0 to 2640 [ 119.761321][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.764499][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.767081][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.769583][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.772219][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.781872][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.785758][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.788290][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.790976][ T9075] ldm_validate_partition_table(): Disk read failed. [ 119.793323][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.795909][ T9075] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.798353][ T9075] Dev loop6: unable to read RDB block 0 [ 119.800171][ T9075] loop6: unable to read partition table [ 119.806023][ T9075] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 119.890043][ T9078] tipc: Enabling of bearer rejected, failed to enable media [ 119.893265][ T840] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 119.901651][ T9088] CIFS mount error: No usable UNC path provided in device string! [ 119.901651][ T9088] [ 119.906162][ T9088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.919797][ T9088] pimreg: entered allmulticast mode [ 119.923668][ T9088] pimreg: left allmulticast mode [ 120.040298][ T9091] binder: 9090:9091 ioctl 400c620e 200000000780 returned -22 [ 120.051870][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 120.057311][ T840] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.061027][ T840] usb 8-1: config 179 has no interface number 0 [ 120.063864][ T840] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 120.068310][ T840] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 120.073191][ T840] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 120.077778][ T840] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 120.078105][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 120.082672][ T840] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.087617][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 120.090156][ T840] usb 8-1: config 179 interface 65 has no altsetting 0 [ 120.096027][ T840] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 120.099290][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.105639][ T9066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.112988][ T840] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input13 [ 120.155494][ T5319] input input13: unable to receive magic message: -110 [ 120.175028][ T5319] input input13: unable to receive magic message: -32 [ 120.178349][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 120.183542][ T5319] input input13: unable to receive magic message: -32 [ 120.187305][ T5319] input input13: unable to receive magic message: -32 [ 120.190567][ T5319] input input13: unable to receive magic message: -32 [ 120.202062][ T5319] input input13: unable to receive magic message: -32 [ 120.305459][ T9112] evm: overlay not supported [ 120.313748][ T39] usb 8-1: USB disconnect, device number 7 [ 120.313850][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.424392][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 120.647803][ T9130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.827'. [ 120.651193][ T9130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.827'. [ 120.829396][ T9134] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 120.980797][ T9141] netlink: 'syz.3.830': attribute type 8 has an invalid length. [ 120.984483][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 121.203060][ T9156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.833'. [ 121.206464][ T9156] netlink: 'syz.3.833': attribute type 6 has an invalid length. [ 121.209248][ T9156] netlink: 'syz.3.833': attribute type 5 has an invalid length. [ 121.212309][ T9156] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 121.262495][ T9166] tmpfs: Bad value for 'mpol' [ 121.523242][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 121.526398][ T9193] netlink: 'syz.3.842': attribute type 18 has an invalid length. [ 121.542460][ T5934] Bluetooth: hci0: command 0x080f tx timeout [ 121.544449][ T9192] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.544537][ T9192] block device autoloading is deprecated and will be removed. [ 121.553391][ T9195] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 121.555947][ T9195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.677910][ T9193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.685181][ T9193] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.702787][ T9193] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.716293][ T9193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.721393][ T9193] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.736031][ T9193] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.741550][ T9193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.745026][ T9193] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.750627][ T9193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.780026][ T9193] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.805676][ T9193] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.945313][ T9233] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.948855][ T9233] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.970657][ T9234] program syz.3.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.063105][ T9243] ip6_vti0: Master is either lo or non-ether device [ 122.148551][ T9247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.186572][ T9255] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 122.225394][ T9255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.703517][ T9265] Bluetooth: MGMT ver 1.23 [ 122.802745][ T9269] kvm: user requested TSC rate below hardware speed [ 122.808696][ T9269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 123.208599][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.702107][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.746941][ T9283] fuse: Bad value for 'fd' [ 123.782101][ T5934] Bluetooth: hci0: command 0x080f tx timeout [ 123.782162][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 123.782332][ T5285] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.805406][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 123.805426][ T40] audit: type=1326 audit(1771995096.259:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d259c629 code=0x7ffc0000 [ 123.831997][ T40] audit: type=1326 audit(1771995096.259:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d259c629 code=0x7ffc0000 [ 123.842893][ T40] audit: type=1326 audit(1771995096.259:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc7d259c629 code=0x7ffc0000 [ 123.853990][ T40] audit: type=1326 audit(1771995096.259:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d259c629 code=0x7ffc0000 [ 123.864704][ T40] audit: type=1326 audit(1771995096.259:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d259c629 code=0x7ffc0000 [ 123.874693][ T40] audit: type=1326 audit(1771995096.259:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc7d255cece code=0x7ffc0000 [ 123.884261][ T40] audit: type=1326 audit(1771995096.259:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc7d255cece code=0x7ffc0000 [ 123.893741][ T40] audit: type=1326 audit(1771995096.259:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7d259c392 code=0x7ffc0000 [ 123.903659][ T40] audit: type=1326 audit(1771995096.259:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc7d259c457 code=0x7ffc0000 [ 123.913727][ T40] audit: type=1326 audit(1771995096.259:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.4.874" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc7d259c457 code=0x7ffc0000 [ 123.942081][ T9293] bridge_slave_1: left allmulticast mode [ 123.944730][ T9293] bridge_slave_1: left promiscuous mode [ 123.947342][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.953514][ T9293] bridge_slave_0: left allmulticast mode [ 123.956070][ T9293] bridge_slave_0: left promiscuous mode [ 123.958657][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.023868][ T9301] random: crng reseeded on system resumption [ 124.054138][ T9297] wg1 speed is unknown, defaulting to 1000 [ 124.260149][ T9298] openvswitch: netlink: Invalid VLAN frame [ 124.273549][ T9318] xt_hashlimit: size too large, truncated to 1048576 [ 124.397668][ T9331] fuse: Bad value for 'fd' [ 124.404217][ T9331] vxcan2: entered promiscuous mode [ 124.414179][ T9331] fuse: Bad value for 'fd' [ 124.489864][ T9333] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 124.544096][ T9337] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 124.544102][ T9338] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 124.550644][ T9335] 9p: Bad value for 'rfdno' [ 124.558782][ T9337] bond2: (slave geneve2): making interface the new active one [ 124.561486][ T9337] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.566486][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.569450][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.577236][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.580168][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.933398][ T9363] __nla_validate_parse: 69 callbacks suppressed [ 124.933410][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 124.947460][ T9364] Invalid source name [ 124.948831][ T9364] UBIFS error (pid: 9364): cannot open "./file0", error -22 [ 124.967133][ T9363] hfs: can't find a HFS filesystem on dev sr0 [ 125.067638][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 125.077452][ T9374] netlink: 344 bytes leftover after parsing attributes in process `syz.4.902'. [ 125.094895][ T9371] Illegal XDP return value 4233912320 on prog (id 93) dev N/A, expect packet loss! [ 125.140521][ T9381] 9pnet_virtio: no channels available for device syz [ 125.217753][ T9385] bond8: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 125.225241][ T9385] bond8 (unregistering): Released all slaves [ 125.436651][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'. [ 125.463374][ T9423] wg1 speed is unknown, defaulting to 1000 [ 125.771869][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.778791][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 125.851749][ T9448] kAFS: unable to lookup cell '/,cL' [ 125.861956][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 125.863996][ T5940] Bluetooth: hci0: command 0x080f tx timeout [ 125.865964][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.938814][ T9458] 5gQ[: renamed from lo [ 126.063864][ T5934] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 126.105629][ T9467] loop4: detected capacity change from 0 to 7 [ 126.125676][ T9467] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 126.127500][ T9467] loop4: partition table partially beyond EOD, truncated [ 126.133187][ T9467] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 126.177299][ T8655] udevd[8655]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.421668][ T9484] /dev/loop4: Can't lookup blockdev [ 126.607057][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.946'. [ 126.910019][ T9528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.951'. [ 126.913510][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 126.920779][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 126.989362][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 127.106127][ T9538] wg1 speed is unknown, defaulting to 1000 [ 127.322558][ T9548] overlay: Unknown parameter 'func' [ 127.472961][ T9563] CIFS: Unable to determine destination address [ 127.491031][ T9565] program syz.3.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.851989][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.932200][ T5940] Bluetooth: hci0: command 0x080f tx timeout [ 127.934901][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.095296][ T5934] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 130.099167][ T5934] Bluetooth: hci3: Injecting HCI hardware error event [ 130.103986][ T5934] Bluetooth: hci3: hardware error 0x00 [ 132.172008][ T5934] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 137.857237][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.859806][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.193690][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 144.193731][ T40] audit: type=1800 audit(1771995116.649:876): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.970" name="file0" dev="9p" ino=72614021 res=0 errno=0 [ 144.210358][ T9573] 9pnet_virtio: no channels available for device syz [ 144.261071][ T9583] wg1 speed is unknown, defaulting to 1000 [ 144.293616][ T9591] netlink: 'syz.2.977': attribute type 214 has an invalid length. [ 144.371681][ T9598] IPVS: Error connecting to the multicast addr [ 144.382988][ T40] audit: type=1400 audit(1771995116.839:877): avc: denied { setopt } for pid=9599 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.433955][ T40] audit: type=1400 audit(1771995116.879:878): avc: denied { read } for pid=9599 comm="syz.4.975" path="socket:[30449]" dev="sockfs" ino=30449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.471447][ T9608] __nla_validate_parse: 6 callbacks suppressed [ 144.471463][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 144.603179][ T9617] binder: 9616:9617 ioctl 4018620d 0 returned -22 [ 144.971205][ T40] audit: type=1400 audit(1771995117.419:879): avc: denied { name_bind } for pid=9629 comm="syz.2.986" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 145.125025][ T9649] ALSA: seq fatal error: cannot create timer (-19) [ 145.129947][ T9649] sit0: Caught tx_queue_len zero misconfig [ 145.236922][ T40] audit: type=1400 audit(1771995117.689:880): avc: denied { mount } for pid=9658 comm="syz.4.994" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 145.260943][ T9663] netlink: 172 bytes leftover after parsing attributes in process `syz.4.996'. [ 145.290639][ T9668] netlink: 'syz.4.997': attribute type 7 has an invalid length. [ 145.585190][ T40] audit: type=1400 audit(1771995118.039:881): avc: denied { create } for pid=9678 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 145.660327][ T40] audit: type=1400 audit(1771995118.109:882): avc: denied { name_bind } for pid=9685 comm="syz.3.1002" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 145.668304][ T40] audit: type=1400 audit(1771995118.119:883): avc: denied { name_connect } for pid=9685 comm="syz.3.1002" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 145.677156][ T40] audit: type=1400 audit(1771995118.119:884): avc: denied { setopt } for pid=9687 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 145.677231][ T9689] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1003'. [ 145.692377][ T9689] xt_socket: unknown flags 0xd0 [ 145.694223][ T9690] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1003'. [ 145.697791][ T9690] xt_socket: unknown flags 0xd0 [ 145.743553][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 145.750636][ T40] audit: type=1400 audit(1771995118.199:885): avc: denied { setattr } for pid=9695 comm="syz.3.1005" name="file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.776907][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1007'. [ 145.780909][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 145.786174][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 145.789189][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 145.792478][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 145.921993][ T9720] input: syz0 as /devices/virtual/input/input14 [ 146.771943][ T39] IPVS: starting estimator thread 0... [ 146.833671][ T9751] trusted_key: encrypted_key: master key parameter 'y/\encrypted' is invalid [ 146.862569][ T9745] IPVS: using max 43 ests per chain, 103200 per kthread [ 147.411336][ T9770] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 147.466332][ T9772] input: syz1 as /devices/virtual/input/input15 [ 147.678522][ T9776] bond8 (unregistering): Released all slaves [ 147.790654][ T9781] 9p: Could not find request transport: ~irtio [ 147.795085][ T9781] IPv6: Can't replace route, no match found [ 147.798273][ T9781] fuse: Bad value for 'fd' [ 147.944552][ T9801] syz.1.1039 (9801): /proc/9800/oom_adj is deprecated, please use /proc/9800/oom_score_adj instead. [ 148.009855][ T133] bond0: (slave bond_slave_0): interface is now down [ 148.014075][ T133] bond0: (slave bond_slave_1): interface is now down [ 148.017224][ T133] bond0: (slave syz_tun): interface is now down [ 148.019424][ T133] bond0: (slave wlan1): interface is now down [ 148.023864][ T133] bond0: now running without any active interface! [ 148.322376][ T9833] 8021q: adding VLAN 0 to HW filter on device bond8 [ 148.507344][ T9845] usb usb7: usbfs: process 9845 (syz.3.1051) did not claim interface 0 before use [ 149.239045][ T9877] tipc: Trying to set illegal importance in message [ 149.249756][ T9879] /dev/nullb0: Can't lookup blockdev [ 149.272660][ T9883] Cannot find add_set index 1 as target [ 149.275165][ T9881] binder: 9880:9881 ioctl c018620c 200000000100 returned -1 [ 149.294133][ T9887] xt_hashlimit: size too large, truncated to 1048576 [ 149.389646][ T9890] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.428476][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 149.428521][ T40] audit: type=1400 audit(1771995121.879:902): avc: denied { bind } for pid=9894 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.433318][ T9893] bond0: entered promiscuous mode [ 149.447898][ T830] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 149.448490][ T9893] bond_slave_0: entered promiscuous mode [ 149.452234][ T40] audit: type=1400 audit(1771995121.879:903): avc: denied { getopt } for pid=9894 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.452259][ T40] audit: type=1400 audit(1771995121.889:904): avc: denied { write } for pid=9894 comm="syz.3.1066" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.452281][ T40] audit: type=1400 audit(1771995121.889:905): avc: denied { open } for pid=9894 comm="syz.3.1066" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.452302][ T40] audit: type=1400 audit(1771995121.889:906): avc: denied { ioctl } for pid=9894 comm="syz.3.1066" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.511951][ T9893] bond_slave_1: entered promiscuous mode [ 149.513946][ T9893] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 149.519895][ T9893] batadv0: entered promiscuous mode [ 149.527748][ T9893] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 149.531936][ T9900] __nla_validate_parse: 51 callbacks suppressed [ 149.531975][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 149.532656][ T9893] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.541920][ T9893] bond0: left promiscuous mode [ 149.543534][ T9893] bond_slave_0: left promiscuous mode [ 149.545457][ T9893] bond_slave_1: left promiscuous mode [ 149.547367][ T9893] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 149.550137][ T9893] batadv0: left promiscuous mode [ 149.597303][ T40] audit: type=1326 audit(1771995122.049:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9902 comm="syz.3.1068" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabb9f9c629 code=0x0 [ 149.614127][ T830] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 149.631864][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.635421][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.638527][ T830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.646299][ T830] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.649210][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.668221][ T830] usb 7-1: config 0 descriptor?? [ 149.767944][ T9911] wg1 speed is unknown, defaulting to 1000 [ 149.804461][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 149.806684][ T9915] binder: 9914:9915 ioctl 4018620d 200000000100 returned -16 [ 149.809100][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 149.810545][ T40] audit: type=1400 audit(1771995122.259:908): avc: denied { set_context_mgr } for pid=9914 comm="syz.1.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.811057][ T9915] binder: 9914:9915 ioctl 4018620d 200000000100 returned -16 [ 149.821496][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 149.824573][ T9915] binder: 9914:9915 ioctl 4018620d 200000000100 returned -16 [ 149.827091][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 149.829196][ T9915] binder: 9914:9915 ioctl 4018620d 200000000100 returned -16 [ 149.862459][ T9920] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1073'. [ 150.079757][ T830] hid_parser_main: 172 callbacks suppressed [ 150.079812][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.091886][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.094303][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.096680][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.102318][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.104685][ T830] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.117294][ T830] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 150.155717][ T9938] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 150.158255][ T9938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1079'. [ 150.164498][ T9938] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1079'. [ 150.167780][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 150.220102][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 150.227784][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 150.232630][ T40] audit: type=1400 audit(1771995122.689:909): avc: denied { setattr } for pid=9942 comm="syz.3.1081" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.240841][ T40] audit: type=1400 audit(1771995122.689:910): avc: denied { mounton } for pid=9942 comm="syz.3.1081" path="/229/bus" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 150.240852][ T9944] MTD: Couldn't look up './bus': -15 [ 150.240993][ T9941] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1080'. [ 150.241271][ T9940] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1080'. [ 150.261402][ T9946] VFS: Mount too revealing [ 150.272473][ T9945] loop4: detected capacity change from 0 to 7 [ 150.279821][ T9618] buffer_io_error: 11 callbacks suppressed [ 150.279832][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.282407][ T40] audit: type=1400 audit(1771995122.729:911): avc: denied { read } for pid=9948 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.286682][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.303269][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.307712][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.310474][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.321072][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.324082][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.326515][ T9618] ldm_validate_partition_table(): Disk read failed. [ 150.328605][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.331464][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.334948][ T9618] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.336635][ T1025] Process accounting resumed [ 150.337651][ T9618] Dev loop4: unable to read RDB block 0 [ 150.337681][ T9618] loop4: unable to read partition table [ 150.350873][ T39] usb 7-1: USB disconnect, device number 7 [ 150.365530][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 150.369376][ T9956] Process accounting resumed [ 150.375129][ T9618] loop4: partition table beyond EOD, truncated [ 150.378778][ T9945] ldm_validate_partition_table(): Disk read failed. [ 150.380857][ T9945] Dev loop4: unable to read RDB block 0 [ 150.390559][ T9945] loop4: unable to read partition table [ 150.393375][ T9945] loop4: partition table beyond EOD, truncated [ 150.395517][ T9945] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 150.467563][ T9966] o2cb: This node has not been configured. [ 150.471979][ T9966] o2cb: Cluster check failed. Fix errors before retrying. [ 150.474810][ T9966] (syz.3.1089,9966,0):user_dlm_register:674 ERROR: status = -22 [ 150.477749][ T9966] (syz.3.1089,9966,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "syz1" [ 150.925768][ T13] nci: nci_rx_work: unknown MT 0x5 [ 151.049200][T10018] kvm: emulating exchange as write [ 151.698466][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.870022][ T9991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.991544][T10072] usb usb7: usbfs: process 10072 (syz.2.1108) did not claim interface 0 before use [ 154.021086][T10077] syz_tun: entered allmulticast mode [ 154.071463][T10082] openvswitch: netlink: IP tunnel dst address not specified [ 154.431058][T10123] could not allocate digest TFM handle hmac(sha1-avx2) [ 154.501905][ T830] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 154.663502][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.666982][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.670029][ T830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.681878][ T830] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.684820][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.691876][ T830] usb 7-1: config 0 descriptor?? [ 154.959305][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.967047][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.050542][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 155.050585][ T40] audit: type=1400 audit(1771995127.499:920): avc: denied { map } for pid=10150 comm="syz.1.1127" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.078036][T10156] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 155.097967][ T40] audit: type=1400 audit(1771995127.549:921): avc: denied { write } for pid=10158 comm="syz.1.1129" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 157.354064][ T830] usbhid 7-1:0.0: can't add hid device: -71 [ 157.356197][ T830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 157.370611][ T830] usb 7-1: USB disconnect, device number 8 [ 157.379128][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=10164 comm=syz.4.1130 [ 157.437369][ T40] audit: type=1400 audit(1771995129.889:922): avc: denied { mounton } for pid=10171 comm="syz.3.1134" path="/240/file0" dev="hugetlbfs" ino=34245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 157.457390][ T40] audit: type=1400 audit(1771995129.909:923): avc: granted { setsecparam } for pid=10173 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 157.469900][ T40] audit: type=1800 audit(1771995129.919:924): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1134" name="bus" dev="9p" ino=72614207 res=0 errno=0 [ 157.495574][T10168] __nla_validate_parse: 3 callbacks suppressed [ 157.495620][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 157.502870][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.505375][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.506303][T10182] binder: BINDER_SET_CONTEXT_MGR already set [ 157.510400][T10182] binder: 10179:10182 ioctl 4018620d 2000000000c0 returned -16 [ 157.510543][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 157.510548][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.510699][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.510745][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.510773][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.510843][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.510852][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.510929][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.510936][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511012][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511020][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511086][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511093][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511161][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511168][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511234][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511241][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511313][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511320][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511398][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511404][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511468][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511475][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511538][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511544][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511608][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511616][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511679][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511685][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.511767][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.511774][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.512923][T10180] binder: BINDER_SET_CONTEXT_MGR already set [ 157.516824][T10183] binder: 10179:10183 ioctl 40189429 2000000002c0 returned -22 [ 157.520463][T10180] binder: 10179:10180 ioctl 4018620d 200000000000 returned -16 [ 157.614562][T10186] geneve3: entered promiscuous mode [ 157.616303][T10186] geneve3: entered allmulticast mode [ 157.703192][ T40] audit: type=1400 audit(1771995130.159:925): avc: denied { getopt } for pid=10191 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.709780][ T40] audit: type=1400 audit(1771995130.159:926): avc: denied { read write } for pid=10191 comm="syz.3.1135" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.710040][T10192] usb usb7: usbfs: process 10192 (syz.3.1135) did not claim interface 0 before use [ 157.719693][ T40] audit: type=1400 audit(1771995130.159:927): avc: denied { open } for pid=10191 comm="syz.3.1135" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.729429][ T40] audit: type=1400 audit(1771995130.159:928): avc: denied { ioctl } for pid=10191 comm="syz.3.1135" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.732033][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 157.738279][ T40] audit: type=1400 audit(1771995130.159:929): avc: denied { write } for pid=10191 comm="syz.3.1135" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.766725][T10186] geneve3: entered promiscuous mode [ 157.768494][T10186] geneve3: entered allmulticast mode [ 157.798400][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 157.964407][T10206] sp0: Synchronizing with TNC [ 157.974331][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 158.040922][T10211] sctp: [Deprecated]: syz.1.1141 (pid 10211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.040922][T10211] Use struct sctp_sack_info instead [ 158.102096][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 158.106019][T10214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1141'. [ 158.140813][T10218] netlink: 'syz.3.1143': attribute type 2 has an invalid length. [ 158.156226][T10218] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 158.161345][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 158.174372][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 158.278829][T10226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.377780][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 158.482003][T10245] netlink: 'syz.2.1153': attribute type 21 has an invalid length. [ 158.484531][T10245] netlink: 'syz.2.1153': attribute type 6 has an invalid length. [ 158.541074][T10252] bond3: (slave bond_slave_1): Device is not our slave [ 158.543559][T10252] bond3: option active_slave: invalid value (bond_slave_1) [ 158.547532][T10252] bond3 (unregistering): Released all slaves [ 158.584800][T10256] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 158.599638][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.769035][T10205] [U] ` [ 158.978698][ T5934] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 158.992199][T10272] loop8: detected capacity change from 0 to 7 [ 158.999979][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.004242][ C2] buffer_io_error: 28 callbacks suppressed [ 159.004288][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.011125][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.014319][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.017058][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.021087][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.024711][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.028835][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.032168][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.035719][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.038757][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.041814][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.044958][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.048595][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.052616][T10272] ldm_validate_partition_table(): Disk read failed. [ 159.055702][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.059662][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.063519][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.067520][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.070389][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.073906][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 159.076807][T10272] Dev loop8: unable to read RDB block 0 [ 159.079269][T10272] loop8: unable to read partition table [ 159.081666][T10272] loop8: partition table beyond EOD, truncated [ 159.084488][T10272] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.137609][T10275] block nbd1: NBD_DISCONNECT [ 159.631892][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 159.793453][ T60] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.797809][ T60] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.800924][ T60] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.804572][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.819454][T10294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.827721][ T60] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.029877][ T60] usb 6-1: USB disconnect, device number 10 [ 160.235698][ T40] kauditd_printk_skb: 453 callbacks suppressed [ 160.235718][ T40] audit: type=1400 audit(1771995132.689:1383): avc: denied { create } for pid=10293 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.246813][ T40] audit: type=1400 audit(1771995132.699:1384): avc: denied { write } for pid=10293 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.253374][ T40] audit: type=1400 audit(1771995132.699:1385): avc: denied { prog_load } for pid=10293 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.259419][ T40] audit: type=1400 audit(1771995132.699:1386): avc: denied { bpf } for pid=10293 comm="syz.1.1163" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.268629][ T40] audit: type=1400 audit(1771995132.699:1387): avc: denied { prog_load } for pid=10293 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.275662][ T40] audit: type=1400 audit(1771995132.699:1388): avc: denied { perfmon } for pid=10293 comm="syz.1.1163" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.283069][ T40] audit: type=1400 audit(1771995132.699:1389): avc: denied { bpf } for pid=10293 comm="syz.1.1163" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.767132][ T40] audit: type=1400 audit(1771995133.219:1390): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.774702][ T40] audit: type=1400 audit(1771995133.229:1391): avc: denied { read write open } for pid=5928 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.784119][ T40] audit: type=1400 audit(1771995133.229:1392): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.528352][T10256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.584538][T10306] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.587876][T10307] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 161.588403][T10306] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 161.659266][T10314] binder_alloc: 10313: binder_alloc_buf, no vma [ 161.701402][T10326] fuse: Bad value for 'fd' [ 161.834829][T10335] input: syz0 as /devices/virtual/input/input17 [ 162.315773][T10382] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 162.433868][T10387] i2c i2c-1: Invalid block write size 34 [ 162.438909][T10395] random: crng reseeded on system resumption [ 162.578439][T10392] usb 1-1: USB disconnect, device number 2 [ 162.856602][T10423] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 162.863487][T10423] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 162.879810][T10428] MTD: Couldn't look up '/dev/sr0': -13 [ 162.881621][T10428] /dev/sr0: Can't lookup blockdev [ 163.156172][T10456] tipc: Enabling not permitted [ 163.158054][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 163.829563][T10466] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.851909][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.856269][ T830] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 163.858625][ T830] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 164.164243][T10487] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 164.166732][T10487] __nla_validate_parse: 8 callbacks suppressed [ 164.166740][T10487] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1220'. [ 165.308176][ T40] kauditd_printk_skb: 659 callbacks suppressed [ 165.308215][ T40] audit: type=1400 audit(1771995137.759:2052): avc: denied { create } for pid=10506 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.316828][ T40] audit: type=1400 audit(1771995137.759:2053): avc: denied { write } for pid=10506 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.501666][ T40] audit: type=1400 audit(1771995137.949:2054): avc: denied { create } for pid=10508 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.508407][ T40] audit: type=1400 audit(1771995137.949:2055): avc: denied { write } for pid=10508 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.516124][ T40] audit: type=1400 audit(1771995137.949:2056): avc: denied { read } for pid=10508 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.523316][ T40] audit: type=1400 audit(1771995137.949:2057): avc: denied { create } for pid=10508 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.529822][ T40] audit: type=1400 audit(1771995137.949:2058): avc: denied { module_request } for pid=10508 comm="syz.4.1226" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.538300][ T40] audit: type=1400 audit(1771995137.979:2059): avc: denied { sys_module } for pid=10508 comm="syz.4.1226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 165.545468][ T40] audit: type=1400 audit(1771995137.979:2060): avc: denied { module_request } for pid=10508 comm="syz.4.1226" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.559088][ T40] audit: type=1400 audit(1771995138.009:2061): avc: denied { create } for pid=10508 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.561526][T10509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'. [ 165.674322][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'. [ 165.708746][T10515] wg1 speed is unknown, defaulting to 1000 [ 165.739601][T10516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23839 sclass=netlink_route_socket pid=10516 comm=syz.4.1228 [ 165.933766][ T830] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 165.935846][ T830] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 165.942509][ C1] ------------[ cut here ]------------ [ 165.945030][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 165.947883][ C1] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: kworker/u32:5/133 [ 165.952177][ C1] Modules linked in: [ 165.954277][ C1] CPU: 1 UID: 0 PID: 133 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.958809][ C1] Tainted: [L]=SOFTLOCKUP [ 165.960646][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.965037][ C1] Workqueue: netns cleanup_net [ 165.967101][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 165.968862][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d a8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 165.975059][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 165.977050][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004c39951 [ 165.979528][ C1] RDX: ffff888035c8c178 RSI: ffffffff8a833240 RDI: ffffffff90dc64e0 [ 165.982044][ C1] RBP: ffff8880261cca70 R08: 0000000000000005 R09: 0000000000000000 [ 165.984563][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035c8c000 [ 165.987104][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe350 R15: 0000000000000001 [ 165.989634][ C1] FS: 0000000000000000(0000) GS:ffff8880d644a000(0000) knlGS:0000000000000000 [ 165.992463][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.994569][ C1] CR2: 00007fc7d264e9d3 CR3: 0000000056a69000 CR4: 0000000000352ef0 [ 165.997165][ C1] Call Trace: [ 165.998301][ C1] [ 165.999252][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 166.001082][ C1] call_timer_fn+0x19a/0x670 [ 166.002871][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.004483][ C1] ? debug_object_activate+0x331/0x490 [ 166.006370][ C1] ? __run_timers+0x560/0xb30 [ 166.007940][ C1] ? __run_timers+0x560/0xb30 [ 166.009506][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 166.011371][ C1] __run_timers+0x570/0xb30 [ 166.012849][ C1] ? __pfx___run_timers+0x10/0x10 [ 166.014466][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 166.016132][ C1] run_timer_base+0x114/0x190 [ 166.017649][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 166.019376][ C1] run_timer_softirq+0x1a/0x50 [ 166.020932][ C1] handle_softirqs+0x1eb/0x9e0 [ 166.022542][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.024204][ C1] __irq_exit_rcu+0xef/0x150 [ 166.025702][ C1] irq_exit_rcu+0x9/0x30 [ 166.027442][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 166.029516][ C1] [ 166.030517][ C1] [ 166.031502][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.033470][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 166.035203][ C1] Code: 05 3b 97 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 06 9b f4 0e 0f 82 c2 02 00 00 8b 35 ee ce f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 96 28 12 0f 85 02 03 00 00 48 83 c4 [ 166.041496][ C1] RSP: 0018:ffffc900028df768 EFLAGS: 00000206 [ 166.043442][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 166.045912][ C1] RDX: 0000000000000000 RSI: ffffffff8de4be56 RDI: ffffffff8c1aefa0 [ 166.048437][ C1] RBP: ffff8880565c7148 R08: 00000000002594d8 R09: ffffffff96f8bc98 [ 166.050903][ C1] R10: 0000000000000200 R11: 000000000000760b R12: 0000000000000000 [ 166.053384][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 166.055890][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 166.057640][ C1] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 166.059289][ C1] touch_wq_lockdep_map+0xad/0x1c0 [ 166.060911][ C1] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 166.062611][ C1] __flush_workqueue+0x131/0x1200 [ 166.064192][ C1] ? drain_workqueue+0xd1/0x3b0 [ 166.065693][ C1] ? drain_workqueue+0xd1/0x3b0 [ 166.067287][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 166.069045][ C1] drain_workqueue+0x175/0x3b0 [ 166.070572][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.072395][ C1] destroy_workqueue+0xc3/0xa30 [ 166.073936][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.075759][ C1] tipc_topsrv_exit_net+0x3b5/0x4b0 [ 166.077448][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.079278][ C1] ops_undo_list+0x2ee/0xab0 [ 166.080758][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 166.082413][ C1] ? cleanup_net+0x332/0x920 [ 166.083939][ C1] ? idr_destroy+0x62/0x2e0 [ 166.085424][ C1] cleanup_net+0x499/0x920 [ 166.086918][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 166.088500][ C1] ? rcu_is_watching+0x12/0xc0 [ 166.090031][ C1] process_one_work+0x9d7/0x1920 [ 166.091664][ C1] ? __pfx_process_one_work+0x10/0x10 [ 166.093382][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 166.094978][ C1] worker_thread+0x5da/0xe40 [ 166.096527][ C1] ? __pfx_worker_thread+0x10/0x10 [ 166.098191][ C1] ? kthread+0x13a/0x450 [ 166.099614][ C1] ? __pfx_worker_thread+0x10/0x10 [ 166.101305][ C1] kthread+0x370/0x450 [ 166.102673][ C1] ? __pfx_kthread+0x10/0x10 [ 166.104212][ C1] ret_from_fork+0x754/0xd80 [ 166.106078][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 166.107822][ C1] ? __switch_to+0x7b4/0x1120 [ 166.109328][ C1] ? __pfx_kthread+0x10/0x10 [ 166.110839][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.112415][ C1] [ 166.113422][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.115737][ C1] CPU: 1 UID: 0 PID: 133 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.119227][ C1] Tainted: [L]=SOFTLOCKUP [ 166.120577][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.123757][ C1] Workqueue: netns cleanup_net [ 166.125274][ C1] Call Trace: [ 166.126404][ C1] [ 166.127341][ C1] dump_stack_lvl+0x100/0x190 [ 166.128860][ C1] vpanic+0x552/0x970 [ 166.130162][ C1] ? __pfx_vpanic+0x10/0x10 [ 166.131624][ C1] panic+0xd1/0xe0 [ 166.132809][ C1] ? __pfx_panic+0x10/0x10 [ 166.134243][ C1] ? check_panic_on_warn+0x1f/0x90 [ 166.135923][ C1] check_panic_on_warn.cold+0x19/0x34 [ 166.137662][ C1] ? __queue_work+0xd08/0x1150 [ 166.139216][ C1] __warn.cold+0x191/0x348 [ 166.140620][ C1] __report_bug+0x296/0x3d0 [ 166.142055][ C1] ? __queue_work+0xd08/0x1150 [ 166.143588][ C1] ? __pfx___report_bug+0x10/0x10 [ 166.145183][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 166.146919][ C1] ? look_up_lock_class+0x55/0x120 [ 166.148567][ C1] report_bug_entry+0xe1/0x290 [ 166.150107][ C1] ? __queue_work+0xd0c/0x1150 [ 166.151622][ C1] handle_bug+0x1c9/0x2a0 [ 166.153040][ C1] exc_invalid_op+0x17/0x50 [ 166.154503][ C1] asm_exc_invalid_op+0x1a/0x20 [ 166.156084][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 166.157782][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d a8 92 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 166.163852][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 166.165802][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11004c39951 [ 166.168369][ C1] RDX: ffff888035c8c178 RSI: ffffffff8a833240 RDI: ffffffff90dc64e0 [ 166.170931][ C1] RBP: ffff8880261cca70 R08: 0000000000000005 R09: 0000000000000000 [ 166.173511][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888035c8c000 [ 166.176094][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe350 R15: 0000000000000001 [ 166.178670][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 166.180603][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 166.182380][ C1] ? __queue_work+0xcda/0x1150 [ 166.183951][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 166.185847][ C1] call_timer_fn+0x19a/0x670 [ 166.187516][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 166.189209][ C1] ? debug_object_activate+0x331/0x490 [ 166.190920][ C1] ? __run_timers+0x560/0xb30 [ 166.192432][ C1] ? __run_timers+0x560/0xb30 [ 166.193906][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 166.195795][ C1] __run_timers+0x570/0xb30 [ 166.197387][ C1] ? __pfx___run_timers+0x10/0x10 [ 166.198977][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 166.200574][ C1] run_timer_base+0x114/0x190 [ 166.202093][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 166.203788][ C1] run_timer_softirq+0x1a/0x50 [ 166.205344][ C1] handle_softirqs+0x1eb/0x9e0 [ 166.207098][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 166.208918][ C1] __irq_exit_rcu+0xef/0x150 [ 166.210399][ C1] irq_exit_rcu+0x9/0x30 [ 166.211778][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 166.213559][ C1] [ 166.214514][ C1] [ 166.215469][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.217510][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 166.219204][ C1] Code: 05 3b 97 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 06 9b f4 0e 0f 82 c2 02 00 00 8b 35 ee ce f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 96 28 12 0f 85 02 03 00 00 48 83 c4 [ 166.225289][ C1] RSP: 0018:ffffc900028df768 EFLAGS: 00000206 [ 166.227267][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 166.229742][ C1] RDX: 0000000000000000 RSI: ffffffff8de4be56 RDI: ffffffff8c1aefa0 [ 166.232279][ C1] RBP: ffff8880565c7148 R08: 00000000002594d8 R09: ffffffff96f8bc98 [ 166.234762][ C1] R10: 0000000000000200 R11: 000000000000760b R12: 0000000000000000 [ 166.237285][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 166.239782][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 166.241467][ C1] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 166.243155][ C1] touch_wq_lockdep_map+0xad/0x1c0 [ 166.244783][ C1] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 166.246513][ C1] __flush_workqueue+0x131/0x1200 [ 166.248132][ C1] ? drain_workqueue+0xd1/0x3b0 [ 166.249736][ C1] ? drain_workqueue+0xd1/0x3b0 [ 166.251337][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 166.253119][ C1] drain_workqueue+0x175/0x3b0 [ 166.254696][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.256685][ C1] destroy_workqueue+0xc3/0xa30 [ 166.258396][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.260247][ C1] tipc_topsrv_exit_net+0x3b5/0x4b0 [ 166.261885][ C1] ? __pfx_tipc_topsrv_exit_net+0x10/0x10 [ 166.263677][ C1] ops_undo_list+0x2ee/0xab0 [ 166.265176][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 166.266831][ C1] ? cleanup_net+0x332/0x920 [ 166.268300][ C1] ? idr_destroy+0x62/0x2e0 [ 166.269742][ C1] cleanup_net+0x499/0x920 [ 166.271129][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 166.272706][ C1] ? rcu_is_watching+0x12/0xc0 [ 166.274210][ C1] process_one_work+0x9d7/0x1920 [ 166.275829][ C1] ? __pfx_process_one_work+0x10/0x10 [ 166.277595][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 166.279176][ C1] worker_thread+0x5da/0xe40 [ 166.280654][ C1] ? __pfx_worker_thread+0x10/0x10 [ 166.282327][ C1] ? kthread+0x13a/0x450 [ 166.283680][ C1] ? __pfx_worker_thread+0x10/0x10 [ 166.285333][ C1] kthread+0x370/0x450 [ 166.286692][ C1] ? __pfx_kthread+0x10/0x10 [ 166.288182][ C1] ret_from_fork+0x754/0xd80 [ 166.289662][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 166.291317][ C1] ? __switch_to+0x7b4/0x1120 [ 166.292854][ C1] ? __pfx_kthread+0x10/0x10 [ 166.294346][ C1] ret_from_fork_asm+0x1a/0x30 [ 166.295863][ C1] [ 166.297571][ C1] Kernel Offset: disabled [ 166.298942][ C1] Rebooting in 86400 seconds..