last executing test programs: 1m28.821468424s ago: executing program 2 (id=1950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0xc4, 0x0, &(0x7f0000000500)="5e89e090030405e70c38d4bb66e3876e5c43f153d4ee2f00ef00b6ec22381b5aef9a378714230f08f941d904336bc169da3c391f539cdeb4f1723aa1cd3f337f2c4f712f825aac467db2b734fa6bd693445d8f9aaab6129dc41fcc5de823c318a5038db178fc8687de8db17389b0b6f51984b3738464a19ccd42894a983cb641ba63f558f51ff3cf7737c87cace52203263b796daba41e3b0ee8f82295d2bd07fad05f9bc38919ce8e1aacca1a2c1f3f3ef67d34e398f6c24e29372b48411c931707fc2e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000980)=[@request_death, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) 1m28.741085294s ago: executing program 2 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, r1) sched_rr_get_interval(r1, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) 1m28.691156046s ago: executing program 2 (id=1956): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) (async, rerun: 32) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@empty, @multicast2, 0x0}, &(0x7f0000000480)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000140)="22bccb519fde55bc39e23a6c4157c92225a04423ec7240313de802dbb0750da8345356bdf894a996c2ce26021d9c03a193876b515345be4437493fe79ea223c5e9e4a8e15a07315d5d0e01daa44ca99d7e97d547c8262b2485f6457a9cfb4c6eb0dc2488772819eed54cb062a283d47b84d67232a5a3d1655720fc7d088809", 0x7f}, {&(0x7f00000001c0)="89624260c691a7c78d7615c2224a9c8a3a3cab9e5c231b8ebde565949d55e4d5dd07e6c94e5e47f1b06b6964b3f56dcfeac2d9fcae502d1360b8d465e4e1477b6e8f991b57e880866f98b90ead50e696d296b681bab4b39406dea7a6ea5085da53768c2fc92f48e82002776191c4c2a07b424de4c817282931cfe4edb8f07a18f6177a5c781d0213a94dc7f2987b86dbea8e9c8b8998afb695e9ad70d491a9cc8f1e0671e68e10", 0xa7}, {&(0x7f0000000340)="3d7d995880a4740bf2e387351034a3338a68b50a3ac396c29d6e0d3a4699b238b54b8483ee80f1d2d22a55aec588212c96a5ba65e3ab584d2febfa7f775dfa7498e4af19a90106bd31e9884490902edcb665ce3b030e4fc18d90cf81d79e5a4445a700be7d6b2c7b74b949d1a4f3706c87d6e421666f59e1cae319591ad4afc194b8208394df013a093e94a82d30b37c294ec3a4d2a98be477e350b2b671b9477811484e1a1167f2fd7509bde072c4ed8fcb1cafc9dba2c902d599fe021a0c97e5282dc61e8df2ebb79f70ec5fa1f4f1", 0xd0}], 0x4, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @broadcast, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4d}}], 0x68}}, {{&(0x7f0000000540)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="b8781ec8edbbf0ecc740642340ab4941cd9cefd78e7800e997cbf64631959ccc80caa73fb9d191b127e68f91fff562845fc7df0628ce45c0701d37677939abeaa68de46c00bffe51da7f4b12b7934b78ba0661c26f5fa2064bd406ca1785f8e6686de9a2264d8683", 0x68}, {&(0x7f0000000600)="e0a5cd15b9307363b83cb62208f5079f505f4f4bbde027d05fb8677963222d69f4dd9355fffeca477a44db31884848a7d3b3eec2d0813ec2f6a374a953c307b1856de8d9afb115b93a04184e685ef8b58cc000722c827e129cfb94d9b406fdb8dd0f0c5e564759079982b6a330d399cdce1009305c095b5476b8d3a22342212aa55d1041a9e1074a203094a3873a59e97f572db230880b8a419307083bb44d65f98cc0704dfa", 0xa6}, {&(0x7f00000006c0)="432f08d4b5de688d55109036fabe1708cda5f25d62b4cd0af07e5c8f65fc51822a486d1c3ac0964526e9a2d358f171ac9647d5b7a6fe2e6a204a772883ff0e89e10bb2e2d80f8f7fb6ea1eb42dc440255931fd1114851aa07c4f3b436bec5c6994f81fb0d854dc2f02d264bb7396570e1189e50e02747efd4bd3e8306cfad1d265759862ec66bdfa23b949bace39cd56c90668c157c920462df73469d03fbb2e221fe8629c94aba5f6d96faf94d37c2994e6e23181b812893c82942b4c0512", 0xbf}, {&(0x7f0000000780)="9d1848ae2ae9908c36ad1aeb2cb124662e8681864f3e88588142a4577566ddaad0172d00019c694ba00cc691d026c3fa967820385c04", 0x36}, {&(0x7f00000007c0)="db5d4f2a18337ebfa7aba0ad07ee7e54d4e7", 0x12}], 0x5, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f0000000200)) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) chdir(&(0x7f0000000940)='./file0/../file0\x00') (async) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1020020, &(0x7f0000000300)={[{@name={'name', 0x3d, 'pim6reg0\x00'}}]}) 1m28.633739991s ago: executing program 2 (id=1959): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x8800, &(0x7f0000000400)={0x1a, 0x0, 0xd, 0x1f, 0x8, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) listen(r0, 0x7) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1000, 0x14a203, 0x0, 0x4, 0x1e, 0x14, "3397020bbe82b3b4000000000000000000000d0ec0c1b4e9b1c4369d0300d700debe9f801541473a0000000000000000000000000000000000000000003400", "a91039395064a16c1ca43f80026d1a8554fe580700ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000057000000000010e200", [0x10000, 0x400]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x40, 0x49, 0x1, 0x270bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x40, 0x49, 0x1, 0x270bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="900300002100010025bd7000ffdbdf25ac14142c000000000000000000000000ac1e01010000000000000000000000004e2400004e200003020080807e000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000001000000540002006c72772863617374362900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a7b01e7d076e6082796fdc88ac0007000a0101010000000000000000000000007f0000010000000000000000000000004e22008b4e2300030a00208032000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x390}}, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000415, 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000415, 0x0) setrlimit(0xb, &(0x7f0000000140)={0x9, 0x3ba}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r6, r6, 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioprio_get$uid(0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="c03d818f3f6e39f7b1cbf59d9b32878e739e0494dbe272c0eebc73985ceeb1f98fa32efb57019f1d417f23cd4a76d3dcebec804b175cdbe058a576d25b3ef18502e3d9d6b0c18a6f8610d4a04799d4571bc4e9775503febe", @ANYRES8=r0, @ANYRESDEC=r4, @ANYBLOB="ee6dd3cd8fbd36117ce2067b62c05a7aa8e3ddd9ec872843b8646da088f02167e82e3020272aa264cf0b5ab652348d28ac2f252d8f0b74caeb9eae", @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="c03d818f3f6e39f7b1cbf59d9b32878e739e0494dbe272c0eebc73985ceeb1f98fa32efb57019f1d417f23cd4a76d3dcebec804b175cdbe058a576d25b3ef18502e3d9d6b0c18a6f8610d4a04799d4571bc4e9775503febe", @ANYRES8=r0, @ANYRESDEC=r4, @ANYBLOB="ee6dd3cd8fbd36117ce2067b62c05a7aa8e3ddd9ec872843b8646da088f02167e82e3020272aa264cf0b5ab652348d28ac2f252d8f0b74caeb9eae", @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) io_setup(0xb, &(0x7f00000000c0)) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000000)) 1m28.628232881s ago: executing program 2 (id=1961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2001) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/time_for_children\x00') 1m28.278020151s ago: executing program 2 (id=1962): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0x7e, 0x2, &(0x7f0000000140)={0xa, "2b0802d56d7bb02cf8ed1b5a5e7600000000000000000000000200"}}) 1m28.257235363s ago: executing program 32 (id=1962): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0x7e, 0x2, &(0x7f0000000140)={0xa, "2b0802d56d7bb02cf8ed1b5a5e7600000000000000000000000200"}}) 4.901122349s ago: executing program 1 (id=2431): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={[0x7]}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x81, 0x43, 0x7, 0xffffffb5}) syz_clone(0x2800400, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r0, r0, 0x80000) 4.850451406s ago: executing program 4 (id=2432): r0 = socket(0x6, 0xa, 0x4a03) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x4e000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil}) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x406002, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x3, r2}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x881) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f00000002c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x88e63c3db193d94c}) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000400)={0x8, 0x2, 0x6, {0x9, 0x6, 0x1, 0xd}}) (async) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7d, 0x400, 0x8, 0x40020, r3, 0x800000, '\x00', r5, r3, 0x5, 0x0, 0x2, 0x1}, 0x50) (async) sendmsg$AUDIT_USER(r3, &(0x7f00000015c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f0000000540)={0x1010, 0x3ed, 0x20, 0x70bd2a, 0x25dfdbfc, "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", ["", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000001600)) (async) accept4(r3, &(0x7f0000001640)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000016c0)=0x80, 0x800) (async) r6 = socket$inet_sctp(0x2, 0x6, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000001700), &(0x7f0000001740)=0xe) write$UHID_INPUT(r3, &(0x7f0000001780)={0x8, {"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", 0x1000}}, 0x1006) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f00000027c0)={0x4d3f, 0x10001, 0x8, 0x4, 0x1000, 0x2, "210caf395c49919ef5bb8c733ed4168e", 0x2, 0x0, 0xc, 0x5, 0x87, 0x8, 0x4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000002800)) (async) r7 = userfaultfd(0x80800) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000002840)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000002880)={'mangle\x00', 0xc1, "0caa34a38356d622289a8793dba89345e8660381d0a748e6843dd5f1b6a00524e67c8ce58bd0b80ebfcafa0c792ea5bcd9f123b4ce5bd85b9fd78a21749eb6c79b1ce4382d7e210108fd03c84c54dbf4446c1999aa29bcbddb35dc07bcd06e59d203247e2e9ec92e63e02550f24476b1c3b4bcb0145711e0461a9e9f8c86fd3a48b1e03988b25424ddac6d0956d1b32a69ebd66242533f9c84cd3ed5d8a132da01ae908eee8ad6ee2ff8aa4503a290c28e0ed019997451977d4295d417d4d9bc57"}, &(0x7f0000002980)=0xe5) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) 4.600858382s ago: executing program 4 (id=2435): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) read(r0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10001, 0x0) (rerun: 32) 4.000610308s ago: executing program 3 (id=2436): r0 = open(&(0x7f0000000000)='./file0\x00', 0x402a00, 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000200)={0x3, 0x0, 0x1000, 0x7, 0x4, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x3, 0x60040) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000280)={0x211623fc}) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x2) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x1, 0x8, "5b03bc46f631162a4d186f994d50708a0a40cdb84277e5c74bbc2ab5f10654cf63d33105bb656a48a8e09731ff02046c9af14391e0bb33f89763b1f68060ee10", "adcfb9b954b3fc33e12a9c1e984378a95303fc39d05201bc097ca418840633f9", [0x7, 0x5]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x41) socket$kcm(0x29, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000480), 0x1, 0x80000) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000004c0)={0x3, 0x1, 0x9}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x100, 0x0, 0x7ff}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e22, 0x61, @mcast2, 0xa1}}, 0x7, 0x2, 0x65, 0x8, 0xf}, &(0x7f0000000640)=0x98) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f00000006c0)={0x4bc, 0x0, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x3}, 0xe0, 0x3, 0x1, 0xa728, 0x13, 'syz1\x00', "134a51d8f934d4380bff696779ef875d2b2defe33df822fd89297a274f35afb7", "6394a227fe9d55846736d29215bfde6b46b97fbbb4fffcb2f40d4d7c3af76697", [{0x388, 0xc90e, {0x3, 0x8}}, {0x4, 0x36, {0x0, 0x8}}, {0xffff, 0xb, {0x0, 0xe}}, {0x87, 0x8, {0x1, 0x8001}}, {0xa, 0x0, {0x2, 0x7}}, {0xe, 0xe, {0x2, 0x2}}, {0x9, 0xffff, {0x3, 0x8}}, {0x0, 0x8001, {0x1, 0x6263}}, {0xb, 0x5, {0x3, 0x80000000}}, {0x80, 0x7ff, {0x1, 0x6}}, {0x8, 0x1, {0x2d9555101c1f2237, 0x401}}, {0xe, 0x4, {0x1, 0x80000001}}, {0x1, 0xc, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x1}}, {0x710, 0x0, {0x0, 0x9}}, {0x4, 0x200, {0x0, 0x6}}, {0x9, 0x0, {0x1, 0x9}}, {0x6, 0xf, {0xf9349d0a9704b21b, 0x9}}, {0x398, 0x101, {0x1}}, {0x8, 0x1, {0x0, 0x3}}, {0x0, 0x7, {0x2, 0x6}}, {0x1, 0x7, {0x1, 0x6}}, {0x200, 0x6, {0x2, 0x8}}, {0x1, 0x100, {0x2, 0x9}}, {0xe, 0x3, {0x0, 0xce}}, {0x1ff, 0x6, {0x3}}, {0x1, 0x3, {0x0, 0xfffff21c}}, {0x4d95, 0x3, {0x3, 0x8001}}, {0x8, 0x4, {0x3, 0x5}}, {0xbc6, 0x34, {0x3, 0x7}}, {0x2, 0x8, {0x0, 0x2}}, {0x7ff, 0x8001, {0x1, 0x3184}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0xbc}}, {0x97bc, 0x9cf7, {0x0, 0xf3b0}}, {0xff, 0x8, {0x0, 0x2}}, {0x2, 0x4, {0x0, 0x3}}, {0xfff, 0x3, {0x0, 0x5a2}}, {0x4d79, 0x2, {0x0, 0x83}}, {0x2, 0x6, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x6, 0x3, 0x0, 0xb7c5, 0x28, 'syz1\x00', "114f659afc80407825d9275be25f1a340f6f07bc90d59b6b43ae9df3d86878e4", "4534a4ac8c8690f1dcd4ab3452632cbb5f36f2cf18f3fbafbb729700bf0b6879", [{0xfff, 0x3482, {0x0, 0xfff}}, {0x1, 0xf, {0x3, 0x7}}, {0x3a0, 0xc445, {0xabc466e63efe2d12, 0xfff}}, {0xffff, 0x1ff, {0x1}}, {0x4, 0x0, {0x1, 0x3}}, {0x7f, 0xc, {0x3, 0xfffffffd}}, {0x2, 0x1, {0x0, 0x361}}, {0xb, 0x4, {0x2, 0x7}}, {0x8, 0x9, {0x1, 0x5}}, {0x64c, 0x9, {0x0, 0x5}}, {0xf, 0x0, {0x3, 0x3ff}}, {0x9, 0xe, {0x2, 0x3}}, {0x7, 0x9, {0x3, 0x7fffffff}}, {0x64, 0x6, {0x3, 0x3726}}, {0x9b04, 0x100, {0x3, 0x7}}, {0x0, 0x4, {0x2}}, {0x40, 0x0, {0x0, 0x800}}, {0x1000, 0x0, {0x1, 0x3}}, {0x1, 0x10, {0x2, 0x5}}, {0x1f, 0x3, {0x0, 0x1}}, {0x9, 0x90f, {0x1, 0x7}}, {0x4, 0x8, {0x0, 0x2}}, {0x4e95, 0x7, {0x3, 0xee}}, {0x37f, 0x4e, {0x1, 0x6}}, {0x100, 0x0, {0x3, 0x8b34}}, {0x2, 0x4, {0x1, 0x9}}, {0xb304, 0x8001, {0x3, 0x9}}, {0x1, 0x412, {0x0, 0x40}}, {0x3, 0x1, {0x1, 0x5}}, {0x9, 0xa, {0x2, 0xf2}}, {0x8, 0x0, {0x319933d76aaed72e, 0x4}}, {0x7, 0x6, {0x0, 0x4}}, {0x1, 0x6, {0x0, 0x2}}, {0x6, 0x8, {0x2, 0xffffff6c}}, {0x10, 0x5, {0x2, 0xffffffff}}, {0x6, 0x429b, {0x0, 0xb}}, {0x2, 0x5, {0x3, 0x3}}, {0x2, 0xf8, {0x2, 0x2}}, {0xa, 0x1000, {0x3, 0x3}}, {0x2, 0x2, {0x3, 0xfffff053}}]}}}]}, 0x4bc}}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x6, 0x18}, 0xc) readv(r6, &(0x7f0000000c40), 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000c80)='erspan0\x00', 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004090}, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2fd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004082}, 0x200080c0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x1405, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001180)={'gretap0\x00', &(0x7f00000010c0)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x10000, 0x6, {{0x1f, 0x4, 0x1, 0x20, 0x7c, 0x64, 0x0, 0xb, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x2b, 0xdf, [@remote, @empty, @rand_addr=0x64010100, @loopback, @local, @empty, @loopback, @rand_addr=0x64010102, @broadcast, @private=0xa010101]}, @rr={0x7, 0xf, 0x2f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x4e, 0x1, 0x3, [{@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x50d}, {@rand_addr=0x64010100, 0xc416}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000011c0)={@private=0xa010102, @loopback, r11}, 0xc) close_range(r8, r3, 0x0) 3.748501887s ago: executing program 3 (id=2438): syz_emit_ethernet(0x46, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}, "b58b5930a0fb1f80"}}}}}, 0x0) 3.580607005s ago: executing program 3 (id=2439): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000200008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x401}}}]}, 0x3c}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x14, r3}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x2640) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) (async) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f00000003c0)=@multiplanar_mmap={0x9, 0x7, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x2, 0xabd0cf05946c5e3f, 0x2, 0x9, 0x1, 0xa, "a83247be"}, 0x800, 0x1, {&(0x7f0000000340)=[{0x9, 0x4cc484c9, {0xd207}, 0x3}, {0x81, 0x2, {0x37}, 0x4}]}, 0x7ff}) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @remote, @void, {@mpls_uc={0x8864}}}, 0x0) 3.414877761s ago: executing program 3 (id=2440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x74, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1c7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) setpgid(r1, r1) (async) setpgid(0x0, r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000740)='X', 0x1}], 0x2) (async, rerun: 32) sched_rr_get_interval(r1, &(0x7f0000000000)) (rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf7, 0xc, "2b5b44eb0008a3499d49288ce62450c0d13800cac48e4c126126b1b68693ba2bd052eb3e02999eb0cb06c09c39bb0574d6aac4f5fdbb079de9243962c7ef370fed0fe86a6cd3ffd92e3e59811c3dbc9fce3aa85fa8e0b62db52c12ef3ec8a08bf299fd06556bb793d5516a4eaa038a76d94bd9fb56ae532bdefffab8f0214e29b991b6fcba1fca84cdbe26f525607a87a7e537e8d111537177030239618105c64a96b846be60f41a8e667bf6850ec63ae253bfc5f52dc36b4c9092e9611c461c60a97951f4bd212e37dae69a1a32081976ba85871209cc7e461030247f00afd6a11ffb7087bab351014c3082eec0f4b6d84657"}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x8feaca848b7d8efd}]}, @NFT_MSG_NEWRULE={0x168, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x11c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x378}, 0x1, 0x0, 0x0, 0x10}, 0x4040) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) 2.840420452s ago: executing program 3 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c001a8008000100"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.65909677s ago: executing program 3 (id=2443): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0x7e, 0x2, &(0x7f0000000140)={0xa, "2b0802d56d7bb02cf8ed1b5a5e760000000000000000000300"}}) 2.46120916s ago: executing program 0 (id=2444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xf, 0x4, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x1, 0xffffffff, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x12848001}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getqdisc={0x34, 0x26, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {0x8, 0x8}, {0x9, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x53e6ae24b32c30d1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x8, 0xb4, 0x1, 0x1, @tick=0xab, {0x5, 0x6}, {0xfd, 0x2}, @addr={0x9, 0xf}}, {0x3, 0x1, 0x5d, 0x5, @tick=0x8, {0x4, 0x5}, {0x0, 0x6}, @connect={{0x9}, {0xb0, 0x6}}}, {0x6, 0x8, 0x5, 0x1, @tick=0x8000, {0x1, 0x3}, {0x91, 0xea}, @quote={{0x1a, 0x4}, 0x4000, &(0x7f0000000040)={0x80, 0x0, 0xff, 0x17, @tick=0x1ff, {0x3, 0x4}, {0xc4}, @connect={{0xfa, 0x5}, {0x42, 0x1}}}}}, {0x1, 0x2, 0x4, 0x7f, @time={0xe, 0x5}, {0x0, 0x1}, {0x9, 0x5}, @quote={{0x0, 0x3}, 0x5, &(0x7f0000000080)={0x6b, 0xcb, 0xc, 0x4, @time={0x1, 0x3}, {0x1, 0x2}, {0x5, 0x4}, @quote={{0x8}, 0x2}}}}, {0x10, 0x5, 0x8, 0x2, @tick=0xfffffff8, {0x9, 0x52}, {0x8, 0x95}, @connect={{0x2, 0x10}, {0x6e, 0xf}}}, {0x74, 0x9, 0xff, 0xff, @tick=0x10001, {0x1, 0x9}, {0x7, 0xc6}, @quote={{0x8b, 0x5d}, 0x5, &(0x7f00000000c0)={0x0, 0x80, 0x9, 0xf, @time={0x1, 0xc24}, {0x5, 0x5}, {0x7, 0x9}, @time=@tick=0x2}}}, {0x5, 0xd, 0x7f, 0x4, @tick=0x8, {0x1, 0x40}, {0xd, 0x4}, @raw8={"d4516560525a533df9c3153a"}}, {0x3, 0x2, 0x5, 0x7, @tick=0x90, {0x8, 0x4}, {0x3f, 0x4}, @addr={0x0, 0x7}}, {0xff, 0x80, 0x80, 0x81, @tick=0x7ff, {0xe3, 0x4}, {0x8, 0xcd}, @raw32={[0x2000000, 0x37a, 0x3]}}], 0xfc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@deltaction={0x18c, 0x31, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff0}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfa63}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x18c}}, 0x44000) 2.308660171s ago: executing program 0 (id=2445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ae0c00000000030000002108000000000000e4ffffff00f3ff0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r0}, 0x38) 2.250527616s ago: executing program 0 (id=2446): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getpid() r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x60, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x42}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008400}, 0x4004001) 2.119381661s ago: executing program 1 (id=2447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) 1.929564018s ago: executing program 1 (id=2448): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000082505a8a440000102030109021b00010100a00009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000640)={r3, 0x5, 0x5}) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0}, &(0x7f00000002c0)=0x8) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r7, 0x4004e502, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000300)={r6, 0x1, 0xca3}, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x604, 0x0) 1.778352292s ago: executing program 0 (id=2449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) 1.658726092s ago: executing program 0 (id=2450): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x240200) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) r3 = syz_open_dev$sg(&(0x7f0000000380), 0xff5, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000c00)={0x1000, ""/4096}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "7f532c2291dbec63", "14fc3744023ec9fdd1bcdf1f6d3a5fe93613be8c4335a43addcd52d05374575d", "9ace886b", "e8d2cb694ea14e72"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x398, 0x398, 0xe8, 0x398, 0x2c8, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x6, 0x200, 0x81, 0x1, 0xffff0001, 0x7f0, 0x2]}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x1a0, 0x1e0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x2, 0x1, 0x9, 0xba4, 0x890, 0x2004}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@multicast1, [0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}, [0x0, 0xffffff00, 0xff000000, 0xff], @ipv6=@loopback, [0xff, 0xff, 0xff, 0xff0000ff], 0xc8f, 0x2, 0x2c, 0x4e23, 0x4e21, 0x4e24, 0x4e20, 0x82, 0x200}, 0x100, 0x32, 0x4e21, 0x4e24, 0x4e23, 0x4e21}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x240200) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) (async) syz_open_dev$sg(&(0x7f0000000380), 0xff5, 0x0) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000c00)={0x1000, ""/4096}) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "7f532c2291dbec63", "14fc3744023ec9fdd1bcdf1f6d3a5fe93613be8c4335a43addcd52d05374575d", "9ace886b", "e8d2cb694ea14e72"}, 0x38) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x398, 0x398, 0xe8, 0x398, 0x2c8, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x6, 0x200, 0x81, 0x1, 0xffff0001, 0x7f0, 0x2]}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x1a0, 0x1e0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x2, 0x1, 0x9, 0xba4, 0x890, 0x2004}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@multicast1, [0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}, [0x0, 0xffffff00, 0xff000000, 0xff], @ipv6=@loopback, [0xff, 0xff, 0xff, 0xff0000ff], 0xc8f, 0x2, 0x2c, 0x4e23, 0x4e21, 0x4e24, 0x4e20, 0x82, 0x200}, 0x100, 0x32, 0x4e21, 0x4e24, 0x4e23, 0x4e21}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) 1.570995114s ago: executing program 4 (id=2451): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000130a010100000000030000000000000909000100"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4042) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) 1.045039252s ago: executing program 4 (id=2452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0xcf, 0xaf, ""/175}, &(0x7f0000000100)=0xcf, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xe) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) fchdir(r6) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50b) keyctl$get_persistent(0x16, 0x0, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a05cbee30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c3157f00000000000000a06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11a400000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e6dafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e097585ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366510000000000000009dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f236ed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde000006c06d4d551e81ee73459cf1c00000000001700000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d69358e885ddf5387e419c64847b8953070cdefe7d6a35197638e929f8f3c005f9de3fe351def9ed56ae893924f22833399ebbbe4b882afd215f99e1e83cf4ee8696ed4a448acf76b39b72d413edd3c4481327e10c0bf268fd674f68dfc3c2066f98466d6a7224f43a6a8e8f3886dc3ac864fe67344395151b39a98605e0e44786cc5ef28f6a522031992df6daa"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x3ff}, 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) 967.178456ms ago: executing program 0 (id=2453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 966.404313ms ago: executing program 4 (id=2454): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x41081, &(0x7f0000000200)={[{@nr_inodes}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad5600008100000800"/24, 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r1, r2, &(0x7f00000001c0), 0x5) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0x8}) 840.806384ms ago: executing program 1 (id=2455): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) getcwd(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000002000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='alarmtimer_suspend\x00', r3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010003001000fdffff7f00000000000000000c000200010014001500000a"], 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, 0x1}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f0000002040)='./file0\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048020}, 0x0) 291.015758ms ago: executing program 1 (id=2456): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 433.982µs ago: executing program 1 (id=2457): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0xffffffff, 0x3cb}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) madvise(&(0x7f0000aa4000/0x1000)=nil, 0x1000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x2000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) setreuid(0xee01, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x0, 0x0, 0xfffffffc, 0x1, 0xffff8001, 0x0, 0x5379be1c}}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) 0s ago: executing program 4 (id=2458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xfe, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xa, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210e3000cd7a0100", 0xe, 0x4, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="6ae6d40ff62b563d4146d2eba3342c1ea5ec2a8243c9f3d52979a7cc8a9842635ebed7cc43d2b8306c0e82ed972abd553a591adc13c067d989b1813ac8df437d4788cfcd1a69e8e3956dab71971d04bdee7aa137333cc2ff21e26207a86bfbcffbe1d25908"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB="2c63616368657461673d2b2a2d237d275c5e2c616e616d653d252c287b5d2524242c00eaac32e1002ef0ab0eb1ae6c08978cd5c7ec03ba4b7e25497be03a878e824d9e7d4719fe01ea546f3a39b9b8d4788de70abe004a953f83a179d358db85851987ea3e03e89b39fbae96db51680213e6c025b5014a158712d23c5d92354cbce53f180d5ba51a8bd946514293e4f17899ba88861e83491e1fc749788c67e86168118733d64363759bd5cadac3d2a1d7cdde5f933cae36d9fb4c2cdacb7b3b79fd1eac4def44c7a844c9e429f9c183"]) splice(r14, 0x0, r13, 0x0, 0x7, 0x8) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) r16 = dup(r15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r16, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0x7}, 0x90) kernel console output (not intermixed with test programs): 014] usb 5-1: config 0 descriptor?? [ 184.952217][ T6014] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 185.154053][ T6014] usb 5-1: USB disconnect, device number 26 [ 185.160418][ T7911] net_ratelimit: 35 callbacks suppressed [ 185.160428][ T7911] bond3: (slave lo): failed to get link speed/duplex [ 185.271007][ T7911] bond3: (slave lo): failed to get link speed/duplex [ 185.317252][ T6017] usb 7-1: USB disconnect, device number 14 [ 185.347956][T12567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1941'. [ 185.390582][ T12] bond3: (slave lo): failed to get link speed/duplex [ 185.415229][T12573] netlink: 'syz.2.1943': attribute type 8 has an invalid length. [ 185.487358][T12577] gfs2: path_lookup on \\éƒ8< ‘Ô$®$‘&6n @ôMºò<ÖAÛ×¾Y@gÌÊ [ 185.487358][T12577] @£þ%ÉÅÄ–·b§R.£`fdÜ‹rBl{‚\¾A [ 185.487358][T12577] Í='ZŽ±Ãj$vïw–\\¢üã¸Çª returned error -2 [ 185.494731][T12575] usb usb7: usbfs: process 12575 (syz.2.1944) did not claim interface 2 before use [ 185.510776][ T7911] bond3: (slave lo): failed to get link speed/duplex [ 185.514905][T12577] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 185.517419][T12577] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 185.575677][T12586] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 185.620653][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 185.679070][ T40] audit: type=1400 audit(185.619:848): avc: denied { call } for pid=12589 comm="syz.2.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 185.690251][ T40] audit: type=1400 audit(185.629:849): avc: denied { transfer } for pid=12589 comm="syz.2.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 185.741109][ T12] bond3: (slave lo): failed to get link speed/duplex [ 185.850434][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 185.960952][ T12] bond3: (slave lo): failed to get link speed/duplex [ 186.070531][ T1144] bond3: (slave lo): failed to get link speed/duplex [ 186.169478][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.180322][ T1144] bond3: (slave lo): failed to get link speed/duplex [ 186.238668][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.242006][ T40] audit: type=1400 audit(186.189:850): avc: denied { ioctl } for pid=12627 comm="syz-executor" path="socket:[43547]" dev="sockfs" ino=43547 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.251408][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.256288][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.259322][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.262951][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.265664][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.333058][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.392010][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.399008][T12627] chnl_net:caif_netlink_parms(): no params data found [ 186.478230][T12627] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.480594][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.482962][T12627] bridge_slave_0: entered allmulticast mode [ 186.485591][T12627] bridge_slave_0: entered promiscuous mode [ 186.488882][T12627] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.491282][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.493563][T12627] bridge_slave_1: entered allmulticast mode [ 186.496158][T12627] bridge_slave_1: entered promiscuous mode [ 186.526669][T12627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.533796][T12627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.559406][T12627] team0: Port device team_slave_0 added [ 186.561705][ T12] bridge_slave_1: left allmulticast mode [ 186.563552][ T12] bridge_slave_1: left promiscuous mode [ 186.566342][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.572183][ T12] bridge_slave_0: left allmulticast mode [ 186.574599][ T12] bridge_slave_0: left promiscuous mode [ 186.576696][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.669339][ T40] audit: type=1400 audit(186.609:851): avc: denied { bind } for pid=12635 comm="syz.0.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.679703][ T40] audit: type=1400 audit(186.609:852): avc: denied { listen } for pid=12635 comm="syz.0.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.686308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 186.852433][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.856542][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.861187][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 186.867969][ T12] bond0 (unregistering): Released all slaves [ 186.873180][T12627] team0: Port device team_slave_1 added [ 186.900168][T12627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.902469][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.910704][T12627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.916437][T12627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.918701][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.926986][T12627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.953345][T12627] hsr_slave_0: entered promiscuous mode [ 186.955600][T12627] hsr_slave_1: entered promiscuous mode [ 186.957732][T12627] debugfs: 'hsr0' already exists in 'hsr' [ 186.959623][T12627] Cannot create hsr debugfs directory [ 187.008310][T12649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=12649 comm=syz.0.1968 [ 187.047513][T12653] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 187.050022][T12653] netlink: 'syz.0.1969': attribute type 2 has an invalid length. [ 187.099127][T12657] : renamed from bond0 [ 187.104672][T12627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.111426][T12627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.122757][T12627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.127283][T12627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.173705][ T12] hsr_slave_0: left promiscuous mode [ 187.176201][ T12] hsr_slave_1: left promiscuous mode [ 187.178191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.181378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.184286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.186788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.202886][ T12] veth1_macvtap: left promiscuous mode [ 187.204810][ T12] veth0_macvtap: left promiscuous mode [ 187.206609][ T12] veth1_vlan: left promiscuous mode [ 187.208297][ T12] veth0_vlan: left promiscuous mode [ 187.484811][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.505881][ T12] team0 (unregistering): Port device team_slave_0 removed [ 187.760686][T12627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.772975][T12627] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.778714][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.781746][ T7911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.789033][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.791470][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.944463][T12694] __nla_validate_parse: 6 callbacks suppressed [ 187.944475][T12694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1976'. [ 187.949330][T12694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1976'. [ 187.956475][T12693] syzkaller0: entered promiscuous mode [ 187.958236][T12693] syzkaller0: entered allmulticast mode [ 187.965451][T12627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.115725][T12627] veth0_vlan: entered promiscuous mode [ 188.126944][T12627] veth1_vlan: entered promiscuous mode [ 188.143210][T12627] veth0_macvtap: entered promiscuous mode [ 188.147453][T12627] veth1_macvtap: entered promiscuous mode [ 188.155863][T12627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.164752][T12627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.173778][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.176561][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.182642][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.185618][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.223130][ T7911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.225613][ T7911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.237803][ T40] audit: type=1400 audit(188.179:853): avc: denied { listen } for pid=12714 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.248633][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.253092][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.259836][ T40] audit: type=1400 audit(188.199:854): avc: denied { mount } for pid=12627 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.331364][ T5933] Bluetooth: hci1: command tx timeout [ 188.637338][T12739] FAT-fs (loop4): unable to read boot sector [ 188.648143][T12739] fuse: Bad value for 'fd' [ 188.676802][ T40] audit: type=1400 audit(188.619:855): avc: denied { mounton } for pid=12740 comm="syz.4.1984" path="/6/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 188.821402][T12750] befs: (nbd4): unable to read superblock [ 188.917821][T12754] x_tables: duplicate underflow at hook 1 [ 188.998536][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 189.129972][T12781] 9pnet_virtio: no channels available for device syz [ 189.217929][T12778] random: crng reseeded on system resumption [ 189.271398][ T40] audit: type=1400 audit(189.219:856): avc: denied { mounton } for pid=12796 comm="syz.0.2000" path="/524/file1" dev="autofs" ino=44598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 189.277394][T12798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 189.281585][T12798] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.284022][T12797] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 189.286444][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.291089][T12797] vhci_hcd vhci_hcd.0: Device attached [ 189.291874][T12798] vhci_hcd vhci_hcd.0: Device attached [ 189.295104][T12799] vhci_hcd: connection closed [ 189.295297][T12800] vhci_hcd: connection closed [ 189.296656][ T1145] vhci_hcd vhci_hcd.0: stop threads [ 189.300410][ T1145] vhci_hcd vhci_hcd.0: release socket [ 189.302637][ T1145] vhci_hcd vhci_hcd.0: disconnect device [ 189.307083][ T1145] vhci_hcd vhci_hcd.0: stop threads [ 189.309267][ T1145] vhci_hcd vhci_hcd.0: release socket [ 189.311907][ T1145] vhci_hcd vhci_hcd.0: disconnect device [ 189.341433][T12804] ref_ctr increment failed for inode: 0x6a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026820c40 [ 189.742791][T12820] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.782316][T12822] syzkaller0: entered promiscuous mode [ 189.784039][T12822] syzkaller0: entered allmulticast mode [ 189.789453][ T40] audit: type=1400 audit(189.729:857): avc: denied { lock } for pid=12821 comm="syz.4.2005" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.074905][T12836] (syz.0.2012,12836,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 190.074944][ T40] audit: type=1400 audit(190.019:858): avc: denied { create } for pid=12835 comm="syz.0.2012" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.180803][ T1145] net_ratelimit: 22 callbacks suppressed [ 190.180816][ T1145] bond3: (slave lo): failed to get link speed/duplex [ 190.200968][T12838] netlink: 'syz.0.2013': attribute type 8 has an invalid length. [ 190.203503][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 190.285098][T12846] bond3: option mode: unable to set because the bond device has slaves [ 190.302214][ T7906] bond3: (slave lo): failed to get link speed/duplex [ 190.398782][T12847] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.410410][ T5933] Bluetooth: hci1: command tx timeout [ 190.455645][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 190.458615][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 190.488156][ T40] audit: type=1400 audit(190.429:859): avc: denied { read } for pid=12853 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.488864][T12854] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 190.800267][ T6019] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 190.950273][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 190.953980][ T6019] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.956304][ T6019] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.959119][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.963859][ T6019] usb 6-1: config 0 descriptor?? [ 191.375505][ T6019] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 191.418045][T12872] cgroup: Name too long [ 191.527228][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 191.573963][ T6019] usb 6-1: USB disconnect, device number 34 [ 191.885307][T12912] bridge0: port 3(veth0_to_bridge) entered blocking state [ 191.888347][T12912] bridge0: port 3(veth0_to_bridge) entered disabled state [ 191.891542][T12912] veth0_to_bridge: entered allmulticast mode [ 191.894290][T12912] veth0_to_bridge: entered promiscuous mode [ 191.896472][T12912] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.902246][T12912] bridge0: port 3(veth0_to_bridge) entered blocking state [ 191.904649][T12912] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 192.015633][T12921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12921 comm=syz.4.2037 [ 192.158250][T12937] overlay: ./file0 is not a directory [ 192.353582][ T40] audit: type=1400 audit(192.299:860): avc: denied { ioctl } for pid=12941 comm="syz.4.2043" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.401807][T12942] random: crng reseeded on system resumption [ 192.405264][T12943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2043'. [ 192.490315][ T5933] Bluetooth: hci1: command tx timeout [ 192.554766][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2048'. [ 192.825872][T12969] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.829027][T12969] overlayfs: missing 'lowerdir' [ 192.831118][ T837] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 192.879902][T12972] dlm: no locking on control device [ 192.882696][ T5933] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 192.890819][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.897280][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.902276][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.906370][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.910410][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.914345][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.000309][ T837] usb 5-1: Using ep0 maxpacket: 8 [ 193.004336][ T837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.007392][ T837] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 193.012544][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.018917][ T837] usb 5-1: config 0 descriptor?? [ 193.026770][T12979] netlink: 'syz.4.2056': attribute type 6 has an invalid length. [ 193.041255][T12979] netlink: 'syz.4.2056': attribute type 4 has an invalid length. [ 193.044603][T12979] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2056'. [ 193.094718][T12982] netlink: 'syz.1.2057': attribute type 9 has an invalid length. [ 193.098046][T12982] netlink: 'syz.1.2057': attribute type 11 has an invalid length. [ 193.101718][T12982] netlink: 'syz.1.2057': attribute type 12 has an invalid length. [ 193.105037][T12982] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2057'. [ 193.116245][T12982] netlink: 'syz.1.2057': attribute type 9 has an invalid length. [ 193.119536][T12982] netlink: 'syz.1.2057': attribute type 11 has an invalid length. [ 193.123226][T12982] netlink: 'syz.1.2057': attribute type 12 has an invalid length. [ 193.126599][T12982] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2057'. [ 193.255547][T12996] EXT4-fs (nbd4): unable to read superblock [ 193.443627][ T837] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 193.483774][ T40] audit: type=1400 audit(193.429:861): avc: denied { getopt } for pid=13006 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 193.491427][T13007] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2065'. [ 193.576675][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 193.601011][T13012] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.642933][ T40] audit: type=1400 audit(193.589:862): avc: denied { write } for pid=13014 comm="syz.4.2068" path="socket:[45433]" dev="sockfs" ino=45433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.648511][ T837] usb 5-1: USB disconnect, device number 27 [ 193.696186][T13020] gfs2: error -5 reading superblock [ 193.726432][T13024] FAULT_INJECTION: forcing a failure. [ 193.726432][T13024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.731827][T13024] CPU: 1 UID: 0 PID: 13024 Comm: syz.1.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.731844][T13024] Tainted: [L]=SOFTLOCKUP [ 193.731848][T13024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.731855][T13024] Call Trace: [ 193.731859][T13024] [ 193.731863][T13024] dump_stack_lvl+0x16c/0x1f0 [ 193.731882][T13024] should_fail_ex+0x512/0x640 [ 193.731902][T13024] _copy_from_iter+0x2a4/0x16c0 [ 193.731920][T13024] ? __pfx_avc_has_perm+0x10/0x10 [ 193.731932][T13024] ? __pfx__copy_from_iter+0x10/0x10 [ 193.731950][T13024] ? sock_has_perm+0x258/0x2f0 [ 193.731962][T13024] ? __pfx_sock_has_perm+0x10/0x10 [ 193.731976][T13024] hci_sock_sendmsg+0x46d/0x26b0 [ 193.731992][T13024] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 193.732009][T13024] sock_write_iter+0x566/0x610 [ 193.732025][T13024] ? __pfx_sock_write_iter+0x10/0x10 [ 193.732045][T13024] ? bpf_lsm_file_permission+0x9/0x10 [ 193.732056][T13024] ? security_file_permission+0x71/0x210 [ 193.732077][T13024] ? rw_verify_area+0xcf/0x6c0 [ 193.732091][T13024] vfs_write+0x7d3/0x11d0 [ 193.732105][T13024] ? __pfx_sock_write_iter+0x10/0x10 [ 193.732120][T13024] ? __pfx_vfs_write+0x10/0x10 [ 193.732133][T13024] ? find_held_lock+0x2b/0x80 [ 193.732157][T13024] ksys_write+0x1f8/0x250 [ 193.732170][T13024] ? __pfx_ksys_write+0x10/0x10 [ 193.732187][T13024] do_syscall_64+0xcd/0xf80 [ 193.732203][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.732214][T13024] RIP: 0033:0x7f6460b8f7c9 [ 193.732223][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.732233][T13024] RSP: 002b:00007f645edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.732244][T13024] RAX: ffffffffffffffda RBX: 00007f6460de5fa0 RCX: 00007f6460b8f7c9 [ 193.732250][T13024] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 193.732256][T13024] RBP: 00007f645edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.732262][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.732269][T13024] R13: 00007f6460de6038 R14: 00007f6460de5fa0 R15: 00007ffcf0b5a1f8 [ 193.732282][T13024] [ 194.169988][T13039] pim6reg: entered allmulticast mode [ 194.259405][ T40] audit: type=1400 audit(194.199:863): avc: denied { connect } for pid=13040 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.436597][ T40] audit: type=1400 audit(194.379:864): avc: denied { allowed } for pid=13045 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.461687][ T40] audit: type=1400 audit(194.399:865): avc: denied { create } for pid=13045 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.467766][ T40] audit: type=1400 audit(194.399:866): avc: denied { write } for pid=13045 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.524612][T13053] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 194.527083][T13053] audit: out of memory in audit_log_start [ 194.561004][ T40] audit: type=1400 audit(194.419:867): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.573298][ T5933] Bluetooth: hci1: command tx timeout [ 194.588654][T13054] NILFS (nullb0): couldn't find nilfs on the device [ 194.594222][ T40] audit: type=1400 audit(194.419:868): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.947500][T13074] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 195.190251][ C2] net_ratelimit: 24209 callbacks suppressed [ 195.190263][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.190335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 195.192340][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.196150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 195.199858][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.203529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 195.207277][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.211064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 195.214822][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.218546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 195.291430][T13082] FAULT_INJECTION: forcing a failure. [ 195.291430][T13082] name failslab, interval 1, probability 0, space 0, times 0 [ 195.295337][T13082] CPU: 0 UID: 0 PID: 13082 Comm: syz.1.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.295358][T13082] Tainted: [L]=SOFTLOCKUP [ 195.295362][T13082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.295369][T13082] Call Trace: [ 195.295373][T13082] [ 195.295377][T13082] dump_stack_lvl+0x16c/0x1f0 [ 195.295397][T13082] should_fail_ex+0x512/0x640 [ 195.295417][T13082] should_failslab+0xc2/0x120 [ 195.295432][T13082] kmem_cache_alloc_node_noprof+0x86/0x800 [ 195.295444][T13082] ? __alloc_skb+0x156/0x410 [ 195.295458][T13082] ? __alloc_skb+0x156/0x410 [ 195.295466][T13082] __alloc_skb+0x156/0x410 [ 195.295475][T13082] ? __alloc_skb+0x35d/0x410 [ 195.295484][T13082] ? __pfx___alloc_skb+0x10/0x10 [ 195.295499][T13082] hci_sock_sendmsg+0x1b0c/0x26b0 [ 195.295516][T13082] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 195.295534][T13082] sock_write_iter+0x566/0x610 [ 195.295550][T13082] ? __pfx_sock_write_iter+0x10/0x10 [ 195.295569][T13082] ? bpf_lsm_file_permission+0x9/0x10 [ 195.295580][T13082] ? security_file_permission+0x71/0x210 [ 195.295596][T13082] ? rw_verify_area+0xcf/0x6c0 [ 195.295611][T13082] vfs_write+0x7d3/0x11d0 [ 195.295625][T13082] ? __pfx_sock_write_iter+0x10/0x10 [ 195.295641][T13082] ? __pfx_vfs_write+0x10/0x10 [ 195.295653][T13082] ? find_held_lock+0x2b/0x80 [ 195.295679][T13082] ksys_write+0x1f8/0x250 [ 195.295692][T13082] ? __pfx_ksys_write+0x10/0x10 [ 195.295710][T13082] do_syscall_64+0xcd/0xf80 [ 195.295726][T13082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.295737][T13082] RIP: 0033:0x7f6460b8f7c9 [ 195.295747][T13082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.295757][T13082] RSP: 002b:00007f645edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.295768][T13082] RAX: ffffffffffffffda RBX: 00007f6460de5fa0 RCX: 00007f6460b8f7c9 [ 195.295775][T13082] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 195.295781][T13082] RBP: 00007f645edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.295787][T13082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.295793][T13082] R13: 00007f6460de6038 R14: 00007f6460de5fa0 R15: 00007ffcf0b5a1f8 [ 195.295807][T13082] [ 195.544081][T13091] fuse: Bad value for 'fd' [ 195.546470][T13084] syzkaller1: entered promiscuous mode [ 195.548289][T13084] syzkaller1: entered allmulticast mode [ 195.633353][T13094] netlink: 'syz.0.2095': attribute type 12 has an invalid length. [ 195.639001][T13094] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2095'. [ 195.774253][T13098] netlink: 'syz.0.2097': attribute type 6 has an invalid length. [ 195.777154][T13098] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2097'. [ 195.893664][T13098] syz_tun: refused to change device tx_queue_len [ 196.001545][T13101] xt_l2tp: v2 doesn't support IP mode [ 196.239379][T13125] gtp0: entered promiscuous mode [ 196.243417][T13117] qnx6: unable to read the first superblock [ 196.245377][T13117] qnx6: unable to read the first superblock [ 196.247228][T13117] qnx6: unable to read the first superblock [ 196.265797][T13118] qnx6: unable to read the first superblock [ 196.267805][T13118] qnx6: unable to read the first superblock [ 196.269714][T13118] qnx6: unable to read the first superblock [ 196.284087][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 196.749521][T13150] Invalid source name [ 196.754351][T13150] UBIFS error (pid: 13150): cannot open "./file0", error -22 [ 196.754693][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 196.771822][T13143] efs: device does not support 512 byte blocks [ 196.773917][T13143] device does not support 512 byte blocks [ 196.773917][T13143] [ 196.835079][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 196.892293][T13151] set match dimension is over the limit! [ 196.934838][T13158] input: syz0 as /devices/virtual/input/input22 [ 197.424086][T13189] usb usb8: check_ctrlrecip: process 13189 (syz.1.2121) requesting ep 01 but needs 81 [ 197.427417][T13189] usb usb8: usbfs: process 13189 (syz.1.2121) did not claim interface 0 before use [ 197.614988][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13203 comm=syz.1.2125 [ 197.873743][T13210] FAULT_INJECTION: forcing a failure. [ 197.873743][T13210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.877931][T13210] CPU: 1 UID: 0 PID: 13210 Comm: syz.0.2128 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.877949][T13210] Tainted: [L]=SOFTLOCKUP [ 197.877953][T13210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.877960][T13210] Call Trace: [ 197.877964][T13210] [ 197.877968][T13210] dump_stack_lvl+0x16c/0x1f0 [ 197.877988][T13210] should_fail_ex+0x512/0x640 [ 197.878008][T13210] _copy_to_user+0x32/0xd0 [ 197.878026][T13210] simple_read_from_buffer+0xcb/0x170 [ 197.878043][T13210] proc_fail_nth_read+0x197/0x240 [ 197.878056][T13210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.878068][T13210] ? rw_verify_area+0xcf/0x6c0 [ 197.878079][T13210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.878090][T13210] vfs_read+0x1e4/0xcf0 [ 197.878104][T13210] ? __pfx___mutex_lock+0x10/0x10 [ 197.878122][T13210] ? __pfx_vfs_read+0x10/0x10 [ 197.878138][T13210] ? __fget_files+0x20e/0x3c0 [ 197.878157][T13210] ksys_read+0x12a/0x250 [ 197.878170][T13210] ? __pfx_ksys_read+0x10/0x10 [ 197.878187][T13210] do_syscall_64+0xcd/0xf80 [ 197.878203][T13210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.878215][T13210] RIP: 0033:0x7f5facb8e1dc [ 197.878224][T13210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.878234][T13210] RSP: 002b:00007f5fada40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.878245][T13210] RAX: ffffffffffffffda RBX: 00007f5facde5fa0 RCX: 00007f5facb8e1dc [ 197.878252][T13210] RDX: 000000000000000f RSI: 00007f5fada400a0 RDI: 0000000000000003 [ 197.878258][T13210] RBP: 00007f5fada40090 R08: 0000000000000000 R09: 0000000000000000 [ 197.878264][T13210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.878270][T13210] R13: 00007f5facde6038 R14: 00007f5facde5fa0 R15: 00007fff763bdc08 [ 197.878284][T13210] [ 198.323581][T13230] __nla_validate_parse: 10 callbacks suppressed [ 198.323593][T13230] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2133'. [ 198.607847][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 198.618544][T13242] validate_nla: 2 callbacks suppressed [ 198.618556][T13242] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 198.634902][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 198.656124][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 198.670058][T13242] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 198.678366][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 198.678378][ T40] audit: type=1400 audit(198.629:990): avc: denied { read write } for pid=13239 comm="syz.4.2129" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.691404][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 198.709592][ T40] audit: type=1400 audit(198.629:991): avc: denied { open } for pid=13239 comm="syz.4.2129" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.728360][ T40] audit: type=1400 audit(198.649:992): avc: denied { create } for pid=13239 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.751135][ T40] audit: type=1400 audit(198.649:993): avc: denied { bind } for pid=13239 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.814806][ T40] audit: type=1400 audit(198.759:994): avc: denied { write } for pid=13239 comm="syz.4.2129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 198.854265][T13243] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 198.861262][ T40] audit: type=1400 audit(198.809:995): avc: denied { create } for pid=13246 comm="syz.0.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.891774][ T40] audit: type=1400 audit(198.809:996): avc: denied { setopt } for pid=13246 comm="syz.0.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.918167][ T40] audit: type=1400 audit(198.809:997): avc: denied { ioctl } for pid=13246 comm="syz.0.2138" path="socket:[47333]" dev="sockfs" ino=47333 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.018801][T13252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.243621][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.325199][ T40] audit: type=1400 audit(199.129:998): avc: denied { create } for pid=13260 comm="syz.3.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.337946][T13266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13266 comm=syz.0.2143 [ 199.353369][ T40] audit: type=1400 audit(199.149:999): avc: denied { write } for pid=13260 comm="syz.3.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.561144][T13269] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.872039][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 200.073984][T13274] : (slave bond_slave_1): Releasing backup interface [ 200.200265][ C0] net_ratelimit: 65457 callbacks suppressed [ 200.200267][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.200278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 200.200423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 200.202306][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.206125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 200.209804][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.213597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 200.217317][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.221115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 200.224745][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.278487][T13294] tmpfs: Bad value for 'mpol' [ 201.133040][T13313] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.528909][ T837] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 202.551582][T13342] nbd: must specify an index to disconnect [ 203.143072][ T837] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.145885][ T837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.149070][ T837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.184114][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.187558][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.276764][ T837] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.279667][ T837] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.287345][ T837] usb 6-1: Product: syz [ 203.288707][ T837] usb 6-1: Manufacturer: syz [ 203.373631][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 203.375337][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 203.413820][ T837] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 203.415727][ T837] cdc_wdm 6-1:1.0: Unknown control protocol [ 203.591136][T13338] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 203.777481][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 203.777492][ T40] audit: type=1400 audit(203.719:1017): avc: denied { listen } for pid=13346 comm="syz.4.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.786047][ T40] audit: type=1400 audit(203.739:1018): avc: denied { ioctl } for pid=13346 comm="syz.4.2164" path="socket:[47725]" dev="sockfs" ino=47725 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.913725][ T40] audit: type=1400 audit(203.859:1019): avc: denied { listen } for pid=13351 comm="syz.0.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.921124][T13347] tmpfs: Bad value for 'mpol' [ 203.956881][ T6017] usb 6-1: USB disconnect, device number 35 [ 204.519847][T13356] 9pnet_virtio: no channels available for device syz [ 204.527781][ T40] audit: type=1400 audit(204.469:1020): avc: denied { getopt } for pid=13355 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.544894][ T40] audit: type=1400 audit(204.489:1021): avc: denied { mount } for pid=13355 comm="syz.1.2166" name="/" dev="overlay" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 204.587516][T13358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2165'. [ 205.210339][ C0] net_ratelimit: 63518 callbacks suppressed [ 205.210352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 205.210429][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.212566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 205.217800][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.221899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 205.227112][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.231682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 205.236826][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.241524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 205.246647][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.412988][ T40] audit: type=1400 audit(205.359:1022): avc: denied { name_bind } for pid=13364 comm="syz.4.2168" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 205.482515][ T40] audit: type=1400 audit(205.429:1023): avc: denied { accept } for pid=13366 comm="syz.4.2169" lport=34624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.753215][ T40] audit: type=1400 audit(205.699:1024): avc: denied { read } for pid=13370 comm="syz.0.2167" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.772602][ T40] audit: type=1400 audit(205.699:1025): avc: denied { open } for pid=13370 comm="syz.0.2167" path="/584/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.793209][T13372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.797536][T13372] block device autoloading is deprecated and will be removed. [ 205.804487][ T40] audit: type=1400 audit(205.749:1026): avc: denied { ioctl } for pid=13370 comm="syz.0.2167" path="/584/file0/file0" dev="fuse" ino=0 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 205.943387][T13371] md: superblock version 795439716 not known [ 205.946173][T13371] md: couldn't set array info. -22 [ 205.965413][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 207.658192][T13375] ucma_write: process 186 (syz.4.2171) changed security contexts after opening file descriptor, this is not allowed. [ 207.904949][T13378] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 207.971598][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 208.484254][T13399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13399 comm=syz.4.2177 [ 209.085081][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 209.085096][ T40] audit: type=1400 audit(209.029:1036): avc: denied { shutdown } for pid=13421 comm="syz.0.2182" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.108971][ T40] audit: type=1400 audit(209.049:1037): avc: denied { ioctl } for pid=13421 comm="syz.0.2182" path="cgroup:[4026532879]" dev="nsfs" ino=4026532879 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.560215][ C0] sched: DL replenish lagged too much [ 210.220237][ C0] net_ratelimit: 70353 callbacks suppressed [ 210.220249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 210.220308][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.222338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 210.226288][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.229897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 210.233671][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.237382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 210.241107][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.244845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 210.248526][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.822743][ T40] audit: type=1400 audit(210.769:1038): avc: denied { create } for pid=13434 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.840852][T13437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 210.843647][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.860504][T13437] vhci_hcd vhci_hcd.0: Device attached [ 210.878615][ T40] audit: type=1400 audit(210.819:1039): avc: denied { ioctl } for pid=13434 comm="syz.3.2186" path="socket:[49215]" dev="sockfs" ino=49215 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.911850][T13435] overlayfs: failed to resolve './file0': -2 [ 210.921499][T13444] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2185'. [ 211.031857][ T6017] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 211.091666][ T6017] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 211.171089][T13437] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 211.173337][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.196925][T13437] vhci_hcd vhci_hcd.0: Device attached [ 211.208944][T13446] vhci_hcd: connection closed [ 211.209124][T12896] vhci_hcd vhci_hcd.4: stop threads [ 211.212528][T12896] vhci_hcd vhci_hcd.4: release socket [ 211.221723][T12896] vhci_hcd vhci_hcd.4: disconnect device [ 211.286349][T13438] vhci_hcd: connection reset by peer [ 211.291340][T12896] vhci_hcd vhci_hcd.4: stop threads [ 211.293205][T12896] vhci_hcd vhci_hcd.4: release socket [ 211.300497][T12896] vhci_hcd vhci_hcd.4: disconnect device [ 211.382934][ T40] audit: type=1400 audit(211.329:1040): avc: denied { create } for pid=13448 comm="syz.0.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 211.617980][ T40] audit: type=1400 audit(211.559:1041): avc: denied { name_bind } for pid=13459 comm="syz.0.2190" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 211.645270][T13460] sp0: Synchronizing with TNC [ 211.652930][ T40] audit: type=1400 audit(211.579:1042): avc: denied { node_bind } for pid=13459 comm="syz.0.2190" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 211.669940][ T40] audit: type=1400 audit(211.579:1043): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 212.018110][ T40] audit: type=1400 audit(211.959:1044): avc: denied { read } for pid=13467 comm="syz.0.2193" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.043381][ T40] audit: type=1400 audit(211.979:1045): avc: denied { open } for pid=13467 comm="syz.0.2193" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.055123][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 213.101722][T13504] 9pnet_virtio: no channels available for device syz [ 213.819328][T13435] delete_channel: no stack [ 213.930662][ T6018] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 214.091204][ T6018] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 214.101324][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.104957][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.115175][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.121010][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.124493][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.139167][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.144971][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.148485][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.160371][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.164253][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.167929][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.178030][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.188998][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.194859][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.203831][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.215873][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 214.215883][ T40] audit: type=1400 audit(214.009:1055): avc: denied { mount } for pid=13517 comm="syz.0.2204" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 214.229836][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.229862][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.229876][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.231116][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.231139][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.231153][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.232025][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.275216][ T6018] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.285064][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.296037][ T6018] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 214.299571][ T6018] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 214.312940][ T6018] usb 6-1: Product: syz [ 214.314682][ T6018] usb 6-1: Manufacturer: syz [ 214.324796][ T6018] usb 6-1: SerialNumber: syz [ 214.345281][ T6018] usb 6-1: config 0 descriptor?? [ 214.353423][ T40] audit: type=1400 audit(214.299:1056): avc: denied { execute } for pid=13520 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 214.393347][ T6018] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.414201][ T40] audit: type=1400 audit(214.319:1057): avc: denied { execute_no_trans } for pid=13520 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 214.564954][ T6018] usb 6-1: USB disconnect, device number 36 [ 214.582786][ T6018] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 214.854656][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.876555][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.905150][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.973219][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.042021][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.055237][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.149457][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.176039][ T40] audit: type=1400 audit(215.119:1058): avc: denied { mounton } for pid=13521 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 215.230251][ C2] net_ratelimit: 70650 callbacks suppressed [ 215.230263][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.230308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 215.232327][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.236133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 215.239875][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.243648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 215.247390][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.251119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 215.254853][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.258611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 215.298810][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.398909][T13521] chnl_net:caif_netlink_parms(): no params data found [ 215.485053][ T40] audit: type=1400 audit(215.409:1059): avc: denied { create } for pid=13526 comm="syz.3.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.496277][ T40] audit: type=1400 audit(215.439:1060): avc: denied { connect } for pid=13526 comm="syz.3.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.509577][ T40] audit: type=1400 audit(215.439:1061): avc: denied { listen } for pid=13526 comm="syz.3.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.520833][ T40] audit: type=1400 audit(215.439:1062): avc: denied { accept } for pid=13526 comm="syz.3.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.561054][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 216.013476][ T40] audit: type=1400 audit(215.949:1063): avc: denied { map } for pid=13537 comm="syz.3.2208" path="socket:[49731]" dev="sockfs" ino=49731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 216.025750][ T40] audit: type=1400 audit(215.949:1064): avc: denied { read } for pid=13537 comm="syz.3.2208" path="socket:[49731]" dev="sockfs" ino=49731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 216.240716][ T6017] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 216.553428][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.560645][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.568713][T13521] bridge_slave_0: entered allmulticast mode [ 216.575209][T13521] bridge_slave_0: entered promiscuous mode [ 216.597397][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.607248][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.614597][T13521] bridge_slave_1: entered allmulticast mode [ 216.619422][T13521] bridge_slave_1: entered promiscuous mode [ 216.666533][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.672751][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.697035][T13521] team0: Port device team_slave_0 added [ 216.704945][T13521] team0: Port device team_slave_1 added [ 216.724643][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.726948][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.736740][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.742480][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.744724][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.756227][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.861688][ T46] bridge_slave_0: left allmulticast mode [ 216.864077][ T46] bridge_slave_0: left promiscuous mode [ 216.866131][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.898674][T13559] 9pnet_virtio: no channels available for device syz [ 217.378505][ T5933] Bluetooth: hci0: command tx timeout [ 217.558236][ T46] dvmrp8 (unregistering): left allmulticast mode [ 217.600497][ T46] dvmrp17 (unregistering): left allmulticast mode [ 218.006244][ T46] bond1 (unregistering): (slave bridge3): Releasing active interface [ 218.858451][ T46]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.880098][ T46]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 218.893571][ T46]  (unregistering): Released all slaves [ 219.147371][ T46] bond1 (unregistering): Released all slaves [ 219.309162][ T46] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 219.323160][ T46] bond2 (unregistering): Released all slaves [ 219.465830][ T5933] Bluetooth: hci0: command tx timeout [ 219.521118][ T46] bond3 (unregistering): (slave lo): Removing an active aggregator [ 219.528341][ T46] bond3 (unregistering): (slave lo): Releasing backup interface [ 219.538171][ T46] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 219.547749][ T46] lo: left promiscuous mode [ 219.551947][ T46] bond3 (unregistering): Released all slaves [ 219.752264][ T46] bond4 (unregistering): (slave veth3): Releasing active interface [ 219.767155][ T46] bond4 (unregistering): Released all slaves [ 219.982300][ T46] : left promiscuous mode [ 220.123211][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 220.123222][ T40] audit: type=1400 audit(220.069:1071): avc: denied { create } for pid=13594 comm="syz.3.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.140655][ T40] audit: type=1400 audit(220.079:1072): avc: denied { bind } for pid=13594 comm="syz.3.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.147424][ T40] audit: type=1400 audit(220.079:1073): avc: denied { write } for pid=13594 comm="syz.3.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.240227][ C2] net_ratelimit: 70455 callbacks suppressed [ 220.240240][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.240331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 220.242236][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.245968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 220.249654][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.253459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 220.257205][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.260928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 220.264863][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.268320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 220.328997][ T40] audit: type=1400 audit(220.269:1074): avc: denied { write } for pid=13602 comm="syz.3.2227" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.430278][ T6014] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 220.580263][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 220.585635][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 220.600383][ T6014] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 220.605414][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.611704][ T6014] usb 6-1: Product: syz [ 220.613244][ T6014] usb 6-1: Manufacturer: syz [ 220.614707][ T6014] usb 6-1: SerialNumber: syz [ 220.635071][ T6014] usb 6-1: config 0 descriptor?? [ 220.639556][ T6014] hub 6-1:0.0: bad descriptor, ignoring hub [ 220.642101][ T6014] hub 6-1:0.0: probe with driver hub failed with error -5 [ 220.645947][ T6014] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 221.544508][ T5933] Bluetooth: hci0: command tx timeout [ 221.838671][ T40] audit: type=1400 audit(221.779:1075): avc: denied { ioctl } for pid=13612 comm="syz.3.2228" path="socket:[50744]" dev="sockfs" ino=50744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.141010][ T40] audit: type=1400 audit(222.089:1076): avc: denied { connect } for pid=13612 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.271465][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 222.806623][ T46] tipc: Left network mode [ 222.843031][T13521] hsr_slave_0: entered promiscuous mode [ 222.852200][T13521] hsr_slave_1: entered promiscuous mode [ 222.863541][T13521] debugfs: 'hsr0' already exists in 'hsr' [ 222.866213][T13521] Cannot create hsr debugfs directory [ 223.017567][ T40] audit: type=1400 audit(222.959:1077): avc: denied { setopt } for pid=13623 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.040298][ T40] audit: type=1400 audit(222.979:1078): avc: denied { read } for pid=13623 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.493126][ T6017] usb 6-1: USB disconnect, device number 37 [ 223.611063][ T46] hsr_slave_0: left promiscuous mode [ 223.615927][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.635378][ T5933] Bluetooth: hci0: command tx timeout [ 223.672427][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.675550][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.023616][ T40] audit: type=1400 audit(223.969:1079): avc: denied { create } for pid=13659 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.037760][ T40] audit: type=1400 audit(223.989:1080): avc: denied { listen } for pid=13659 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.197186][T13665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2237'. [ 224.609297][ T46] team0 (unregistering): Port device team_slave_1 removed [ 224.687662][ T46] team0 (unregistering): Port device team_slave_0 removed [ 225.126456][T13661] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 225.250245][ C2] net_ratelimit: 69006 callbacks suppressed [ 225.250258][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.250296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 225.253348][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.255229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 225.259167][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.262890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 225.266977][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.270826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 225.274916][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.278652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 225.598152][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 225.598164][ T40] audit: type=1400 audit(225.549:1084): avc: denied { ioctl } for pid=13677 comm="syz.1.2239" path="socket:[51045]" dev="sockfs" ino=51045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.623024][T13680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 225.625161][T13680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.647981][T13680] vhci_hcd vhci_hcd.0: Device attached [ 225.661824][ T40] audit: type=1400 audit(225.609:1085): avc: denied { read write } for pid=13679 comm="syz.3.2240" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.688866][ T40] audit: type=1400 audit(225.609:1086): avc: denied { open } for pid=13679 comm="syz.3.2240" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.721473][T13688] program syz.3.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.724713][T13682] vhci_hcd: cannot find the pending unlink 1023 [ 225.785508][T13682] vhci_hcd: connection closed [ 225.785669][T12901] vhci_hcd vhci_hcd.3: stop threads [ 225.794209][T12901] vhci_hcd vhci_hcd.3: release socket [ 225.796031][T12901] vhci_hcd vhci_hcd.3: disconnect device [ 225.820388][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 225.932128][ T40] audit: type=1400 audit(225.879:1087): avc: denied { write } for pid=13690 comm="syz.4.2238" name="igmp" dev="proc" ino=4026533334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 225.946301][ T40] audit: type=1400 audit(225.889:1088): avc: denied { read } for pid=13690 comm="syz.4.2238" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.961083][ T40] audit: type=1400 audit(225.889:1089): avc: denied { open } for pid=13690 comm="syz.4.2238" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.978474][ T40] audit: type=1400 audit(225.889:1090): avc: denied { ioctl } for pid=13690 comm="syz.4.2238" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.290882][ T6017] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 226.452777][ T6017] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 226.455977][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 226.461593][ T6017] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.466731][ T40] audit: type=1400 audit(226.409:1091): avc: denied { read } for pid=13709 comm="syz.3.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.476285][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 226.480593][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 226.486211][ T6017] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 226.495928][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 226.510538][ T6017] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.522170][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 226.530983][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 226.543060][ T6017] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 226.545462][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 226.559778][ T6017] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.570048][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 226.579852][ T6017] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 226.586039][ T6017] usb 6-1: string descriptor 0 read error: -22 [ 226.588095][ T6017] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.593596][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.604592][ T6017] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 227.031712][ T6014] usb 6-1: USB disconnect, device number 38 [ 227.216380][ T46] IPVS: stop unused estimator thread 0... [ 227.279111][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 227.288985][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 227.325001][ T40] audit: type=1400 audit(227.269:1092): avc: denied { mounton } for pid=13741 comm="syz.3.2248" path="/381/file0" dev="9p" ino=71827695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.332188][T13743] 9pnet_virtio: no channels available for device syz [ 227.337701][ T40] audit: type=1400 audit(227.279:1093): avc: denied { mounton } for pid=13741 comm="syz.3.2248" path="/381/file0/file0" dev="9p" ino=71827727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.346886][T13743] 9pnet_virtio: no channels available for device syz [ 227.349841][T13743] 9pnet_virtio: no channels available for device syz [ 227.759129][T13521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.774908][T13521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.791741][T13521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.810694][T13521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.346425][T13761] team0 (unregistering): Port device team_slave_0 removed [ 228.357925][T13761] team0 (unregistering): Port device team_slave_1 removed [ 228.608538][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.641260][T13521] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.649617][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.651801][T12907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.681435][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.684062][T12907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.201945][T13521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.256863][T13521] veth0_vlan: entered promiscuous mode [ 229.267834][T13521] veth1_vlan: entered promiscuous mode [ 229.313566][T13521] veth0_macvtap: entered promiscuous mode [ 229.319700][T13521] veth1_macvtap: entered promiscuous mode [ 229.333965][T13521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.364090][T13521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.383206][T12907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.385956][T12907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.403371][T12907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.406172][T12907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.619075][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.629315][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.649351][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.652773][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.260286][ C2] net_ratelimit: 61616 callbacks suppressed [ 230.260299][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.260334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 230.262360][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.267124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 230.270835][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.275591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 230.279158][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.283858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 230.287609][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.292350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 230.407169][T13830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.409655][T13830] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 230.416141][T13830] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 230.707874][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 230.707885][ T40] audit: type=1400 audit(230.649:1110): avc: denied { read } for pid=13860 comm="syz.3.2269" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.728193][ T40] audit: type=1400 audit(230.669:1111): avc: denied { open } for pid=13860 comm="syz.3.2269" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.747812][ T40] audit: type=1400 audit(230.669:1112): avc: denied { ioctl } for pid=13860 comm="syz.3.2269" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.832020][ T40] audit: type=1400 audit(230.779:1113): avc: denied { create } for pid=13874 comm="syz.3.2270" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.854536][ T40] audit: type=1400 audit(230.789:1114): avc: denied { mounton } for pid=13874 comm="syz.3.2270" path="/389/file0" dev="tmpfs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.919247][T13875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2270'. [ 231.187823][ T40] audit: type=1400 audit(231.119:1115): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=2149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.230631][ T40] audit: type=1400 audit(231.179:1116): avc: denied { write } for pid=13884 comm="syz.1.2272" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.245140][ T40] audit: type=1400 audit(231.179:1117): avc: denied { map } for pid=13884 comm="syz.1.2272" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.261474][ T40] audit: type=1400 audit(231.179:1118): avc: denied { execute } for pid=13884 comm="syz.1.2272" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.114773][ T40] audit: type=1400 audit(232.059:1119): avc: denied { create } for pid=13892 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.548552][T13899] binder: 13898:13899 ioctl c018620c 200000000080 returned -22 [ 232.854461][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2276'. [ 233.201281][T13915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2280'. [ 235.270264][ C2] net_ratelimit: 67705 callbacks suppressed [ 235.270278][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.270337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 235.272891][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.277066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 235.281703][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.286052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 235.290722][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.294602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 235.299310][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.303205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 236.131268][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 236.131287][ T40] audit: type=1400 audit(236.079:1131): avc: denied { setopt } for pid=13938 comm="syz.1.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.236930][ T40] audit: type=1400 audit(236.179:1132): avc: denied { getopt } for pid=13938 comm="syz.1.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.192644][ T40] audit: type=1400 audit(238.139:1133): avc: denied { mounton } for pid=13944 comm="syz.1.2289" path="/proc/1660/cgroup" dev="proc" ino=52450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 238.218403][ T40] audit: type=1400 audit(238.139:1134): avc: denied { remount } for pid=13944 comm="syz.1.2289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 240.280305][ C2] net_ratelimit: 71158 callbacks suppressed [ 240.280313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 240.280318][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.280469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 240.282380][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.286219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 240.289903][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.293709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 240.297345][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.301165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 240.304860][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.702220][ T40] audit: type=1400 audit(242.649:1135): avc: denied { setopt } for pid=13952 comm="syz.0.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.440578][ T40] audit: type=1400 audit(243.389:1136): avc: denied { map } for pid=13958 comm="syz.1.2294" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.461927][ T40] audit: type=1400 audit(243.399:1137): avc: denied { execute } for pid=13958 comm="syz.1.2294" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.656251][ T40] audit: type=1400 audit(243.599:1138): avc: denied { ioctl } for pid=13970 comm="syz.0.2297" path="socket:[52579]" dev="sockfs" ino=52579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 243.780963][ T6017] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 243.893583][ T40] audit: type=1400 audit(243.839:1139): avc: denied { read } for pid=13979 comm="syz.0.2298" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 243.905017][T13980] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 243.911623][T13980] gre1: entered promiscuous mode [ 243.915393][ T40] audit: type=1400 audit(243.849:1140): avc: denied { accept } for pid=13950 comm="syz.3.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.935594][ T40] audit: type=1400 audit(243.849:1141): avc: denied { open } for pid=13979 comm="syz.0.2298" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 243.943086][ T40] audit: type=1400 audit(243.849:1142): avc: denied { ioctl } for pid=13979 comm="syz.0.2298" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 243.951382][ T6017] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.954824][ T6017] usb 6-1: config 0 has no interfaces? [ 243.959875][ T6017] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.965080][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.968239][ T6017] usb 6-1: Product: syz [ 243.969738][ T6017] usb 6-1: Manufacturer: syz [ 243.984711][ T40] audit: type=1400 audit(243.919:1143): avc: denied { read } for pid=13979 comm="syz.0.2298" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.005624][ T6017] usb 6-1: config 0 descriptor?? [ 244.007454][ T40] audit: type=1400 audit(243.919:1144): avc: denied { open } for pid=13979 comm="syz.0.2298" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.722301][T13982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.728564][T13982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.731125][T13982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.733342][T13982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.750805][T13982] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.771531][T13982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.773803][T13982] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 244.790683][T13982] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 244.811736][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.815695][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.903721][T13995] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.985916][T13997] mac80211_hwsim hwsim4 : renamed from wlan1 (while UP) [ 245.004079][T13999] ip6erspan0: entered promiscuous mode [ 245.290273][ C2] net_ratelimit: 68363 callbacks suppressed [ 245.290286][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.290306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 245.292472][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.296223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 245.299937][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.303709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 245.307407][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.311125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 245.314827][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.318508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 246.177368][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.597788][ T6017] usb 6-1: USB disconnect, device number 39 [ 246.733501][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.746145][T14048] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 246.753394][T14048] bridge_slave_1: left allmulticast mode [ 246.755368][T14048] bridge_slave_1: left promiscuous mode [ 246.757337][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.796465][T14048] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 246.812941][ T5293] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.815451][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.884752][ T76] bond0: (slave bridge_slave_1): interface is now down [ 246.960336][T12907] bond0: (slave bridge_slave_1): interface is now down [ 247.034932][ T46] bond0: (slave bridge_slave_1): interface is now down [ 247.110712][ T46] bond0: (slave bridge_slave_1): interface is now down [ 247.179218][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'. [ 247.183017][ T46] bond0: (slave bridge_slave_1): interface is now down [ 247.251166][T12907] bond0: (slave bridge_slave_1): interface is now down [ 247.257246][T12907] bond0: now running without any active interface! [ 248.405820][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 248.405837][ T40] audit: type=1400 audit(248.349:1162): avc: denied { append } for pid=14079 comm="syz.0.2322" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.417171][T14080] loop6: detected capacity change from 0 to 2640 [ 248.422509][T14080] buffer_io_error: 11 callbacks suppressed [ 248.422523][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.430891][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.435838][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.439252][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.442053][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.444596][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.447233][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.449753][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.452687][T14080] ldm_validate_partition_table(): Disk read failed. [ 248.454815][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.457445][T14080] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.459938][T14080] Dev loop6: unable to read RDB block 0 [ 248.466483][T14080] loop6: unable to read partition table [ 248.469144][T14080] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 248.505749][ T5342] ldm_validate_partition_table(): Disk read failed. [ 248.508049][ T5342] Dev loop6: unable to read RDB block 0 [ 248.509954][ T5342] loop6: unable to read partition table [ 248.581623][T14083] pmem0: [POWERTEC] [ 248.731326][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 248.734899][ T5933] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 248.794414][T14088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14088 comm=syz.1.2324 [ 248.800268][ T40] audit: type=1400 audit(248.739:1163): avc: denied { write } for pid=14087 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.891206][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.893277][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.939046][ T40] audit: type=1400 audit(248.879:1164): avc: denied { setopt } for pid=14092 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.953739][T14093] syzkaller1: entered promiscuous mode [ 248.955811][T14093] syzkaller1: entered allmulticast mode [ 249.100729][ T6017] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 249.255672][ T40] audit: type=1400 audit(249.199:1165): avc: denied { write } for pid=14094 comm="syz.4.2327" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.283205][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 249.295221][ T6017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 249.304080][ T6017] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 249.307433][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.333786][ T6017] usb 6-1: config 0 descriptor?? [ 249.385193][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 249.388142][T14097] nbd: illegal input index 1879048192 [ 249.431065][T14105] tmpfs: Bad value for 'mpol' [ 249.566059][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2331'. [ 249.768665][ T6017] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 249.955925][ T6017] usb 6-1: USB disconnect, device number 40 [ 249.971189][ T40] audit: type=1400 audit(249.859:1166): avc: denied { sqpoll } for pid=14111 comm="syz.0.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.300294][ C2] net_ratelimit: 63091 callbacks suppressed [ 250.300306][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.300365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 250.302336][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.306167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 250.309831][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.313618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 250.317277][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.321037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 250.324706][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.328458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 250.358835][ T40] audit: type=1400 audit(250.299:1167): avc: denied { create } for pid=14135 comm="syz.4.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.380257][ T40] audit: type=1400 audit(250.319:1168): avc: denied { getopt } for pid=14135 comm="syz.4.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.624015][ T40] audit: type=1400 audit(250.559:1169): avc: denied { mount } for pid=14144 comm="syz.1.2342" name="/" dev="ramfs" ino=45022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 250.905910][ T40] audit: type=1400 audit(250.849:1170): avc: denied { ioctl } for pid=14148 comm="syz.3.2343" path="socket:[45025]" dev="sockfs" ino=45025 ioctlcmd=0x891f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.980741][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.982784][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.180588][T14166] netlink: 'syz.3.2348': attribute type 2 has an invalid length. [ 251.205472][T14166] !: entered promiscuous mode [ 251.207867][T14166] netlink: 'syz.3.2348': attribute type 2 has an invalid length. [ 251.213512][T14166] !: left promiscuous mode [ 251.529781][T14178] fuse: Bad value for 'rootmode' [ 251.532867][T14179] fuse: Bad value for 'rootmode' [ 251.844650][ T40] audit: type=1400 audit(251.769:1171): avc: denied { shutdown } for pid=14184 comm="syz.4.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.310331][ C0] net_ratelimit: 67573 callbacks suppressed [ 255.310344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 255.310448][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.312575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 255.317789][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.321551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 255.326489][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.330147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 255.335029][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.340115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 255.343926][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.139448][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.156141][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.160027][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.168187][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.172687][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.176115][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.176214][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.176355][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.176451][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.176579][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 257.279027][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 257.279038][ T40] audit: type=1400 audit(257.219:1175): avc: denied { create } for pid=14219 comm="syz.0.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 257.312062][T14224] cgroup: Unknown subsys name 'io' [ 257.333737][ T40] audit: type=1400 audit(257.219:1176): avc: denied { ioctl } for pid=14219 comm="syz.0.2363" path="socket:[53527]" dev="sockfs" ino=53527 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 257.365637][T14227] netlink: 'syz.4.2365': attribute type 21 has an invalid length. [ 257.814969][ T40] audit: type=1400 audit(257.759:1177): avc: denied { ioctl } for pid=14236 comm="syz.1.2368" path="socket:[53561]" dev="sockfs" ino=53561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 257.822710][T14237] i2c i2c-1: Invalid block write size 34 [ 258.389558][ T40] audit: type=1400 audit(258.329:1178): avc: denied { accept } for pid=14247 comm="syz.0.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.700480][ T40] audit: type=1400 audit(258.649:1179): avc: denied { append } for pid=14249 comm="syz.1.2372" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 258.870004][T14255] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 259.463919][ T40] audit: type=1400 audit(259.409:1180): avc: denied { read } for pid=14270 comm="syz.1.2379" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 259.482315][ T40] audit: type=1400 audit(259.409:1181): avc: denied { open } for pid=14270 comm="syz.1.2379" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 260.320320][ C0] net_ratelimit: 65582 callbacks suppressed [ 260.320334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 260.320394][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.322462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 260.327403][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.331146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 260.336274][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.339909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 260.345093][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.348654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 260.352893][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.573733][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.493526][ T40] audit: type=1400 audit(261.439:1182): avc: denied { bind } for pid=14283 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.577117][ T40] audit: type=1400 audit(261.519:1183): avc: denied { getopt } for pid=14283 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.595850][T14298] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 262.598542][T14298] __nla_validate_parse: 28 callbacks suppressed [ 262.598552][T14298] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2386'. [ 262.612817][ T40] audit: type=1400 audit(262.549:1184): avc: denied { ioctl } for pid=14297 comm="syz.4.2386" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 262.828503][ T40] audit: type=1400 audit(262.769:1185): avc: denied { write } for pid=14308 comm="syz.4.2390" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.836242][T14309] random: crng reseeded on system resumption [ 262.840265][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 262.854700][ T40] audit: type=1400 audit(262.779:1186): avc: denied { ioctl } for pid=14308 comm="syz.4.2390" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.880351][ T40] audit: type=1400 audit(262.799:1187): avc: denied { map } for pid=14308 comm="syz.4.2390" path="socket:[53934]" dev="sockfs" ino=53934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 262.991174][ T40] audit: type=1400 audit(262.939:1188): avc: denied { setopt } for pid=14314 comm="syz.4.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.001353][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 263.012003][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.014163][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.017054][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.052138][ T29] usb 5-1: config 0 descriptor?? [ 263.276696][ T40] audit: type=1400 audit(263.219:1189): avc: denied { write } for pid=14331 comm="syz.4.2396" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.326784][T14333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2395'. [ 263.341398][T14333] program syz.3.2395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.349819][ T40] audit: type=1400 audit(263.289:1190): avc: denied { map } for pid=14331 comm="syz.4.2396" path="socket:[53998]" dev="sockfs" ino=53998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.374826][ T40] audit: type=1400 audit(263.299:1191): avc: denied { read } for pid=14331 comm="syz.4.2396" path="socket:[53998]" dev="sockfs" ino=53998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.465744][ T29] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 263.664412][ T29] usb 5-1: USB disconnect, device number 28 [ 263.729987][T14349] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 263.943214][T14351] comedi comedi0: Minor 2 specified more than once! [ 263.946551][ T40] audit: type=1400 audit(263.889:1192): avc: denied { ioctl } for pid=14350 comm="syz.3.2401" path="socket:[54046]" dev="sockfs" ino=54046 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.699504][ T40] audit: type=1400 audit(264.639:1193): avc: denied { map } for pid=14361 comm="syz.0.2405" path="socket:[54070]" dev="sockfs" ino=54070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 265.209619][T14377] mac80211_hwsim hwsim19 : renamed from wlan1 (while UP) [ 265.330256][ C0] net_ratelimit: 59375 callbacks suppressed [ 265.330269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 265.330269][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.330421][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.330425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 265.330572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 265.330611][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.330719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 265.330740][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.330882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 265.330888][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.391070][ T29] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 265.550632][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 265.553893][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.556208][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 265.559886][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.565387][ T29] usb 6-1: config 0 descriptor?? [ 266.009315][ T29] mcp2221 0003:04D8:00DD.0022: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 266.214291][ T29] usb 6-1: USB disconnect, device number 41 [ 266.889736][T14389] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 267.057987][T14391] binder: BINDER_SET_CONTEXT_MGR already set [ 267.059911][T14391] binder: 14390:14391 ioctl 4018620d 2000000001c0 returned -16 [ 267.618519][T14399] random: crng reseeded on system resumption [ 267.879726][T14384] veth1_macvtap: left allmulticast mode [ 267.997739][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 267.997751][ T40] audit: type=1400 audit(267.939:1201): avc: denied { ioctl } for pid=14410 comm="syz.0.2419" path="socket:[55308]" dev="sockfs" ino=55308 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 268.025576][ T40] audit: type=1400 audit(267.949:1202): avc: denied { setopt } for pid=14410 comm="syz.0.2419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 268.310320][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 268.375665][ T5069] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.378404][ T5069] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.389671][ T5069] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.397840][ T5069] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.412211][ T5069] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.415847][ T5069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.423279][ T5069] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.426541][ T5069] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.470622][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 268.473393][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.475367][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.478222][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.504743][ T29] usb 5-1: config 0 descriptor?? [ 268.745828][ T40] audit: type=1400 audit(268.689:1203): avc: denied { create } for pid=14421 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 268.754033][ T40] audit: type=1400 audit(268.699:1204): avc: denied { ioctl } for pid=14421 comm="syz.1.2424" path="socket:[45637]" dev="sockfs" ino=45637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 268.924578][ T29] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 268.961677][ T40] audit: type=1400 audit(268.909:1205): avc: denied { write } for pid=14425 comm="syz.3.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.968218][T14428] kAFS: No cell specified [ 268.991130][ T40] audit: type=1400 audit(268.919:1206): avc: denied { setopt } for pid=14425 comm="syz.3.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.026590][T14427] binder: BINDER_SET_CONTEXT_MGR already set [ 269.028440][T14427] binder: 14426:14427 ioctl 4018620d 200000000040 returned -16 [ 269.132910][ T29] usb 5-1: USB disconnect, device number 29 [ 269.324176][ T40] audit: type=1400 audit(269.269:1207): avc: denied { write } for pid=14433 comm="syz.3.2429" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.332568][ T40] audit: type=1400 audit(269.279:1208): avc: denied { open } for pid=14433 comm="syz.3.2429" path="/428/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.338956][ T40] audit: type=1400 audit(269.279:1209): avc: denied { ioctl } for pid=14433 comm="syz.3.2429" path="/428/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.478588][ T40] audit: type=1400 audit(269.419:1210): avc: denied { map } for pid=14442 comm="syz.1.2430" path="socket:[55468]" dev="sockfs" ino=55468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 269.851038][ T6017] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 270.012731][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.017479][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.021695][ T6017] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.027070][ T6017] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.032148][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.039040][ T6017] usb 6-1: config 0 descriptor?? [ 270.340260][ C0] net_ratelimit: 60608 callbacks suppressed [ 270.340272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 270.340286][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.342830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 270.346492][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.351107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 270.354768][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.358756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 270.363859][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.368343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:ba:d1:f7:5c:3a, vlan:0) [ 270.372111][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.486006][ T6017] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 271.136635][T14488] random: crng reseeded on system resumption [ 271.150791][T14488] Unrecognized hibernate image header format! [ 271.154925][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.158048][T14488] Unrecognized hibernate image header format! [ 271.161224][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.164397][T14488] Unrecognized hibernate image header format! [ 271.166961][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.170081][T14488] Unrecognized hibernate image header format! [ 271.191417][T14492] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 271.220562][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.223853][T14488] Unrecognized hibernate image header format! [ 271.226522][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.228975][T14488] Unrecognized hibernate image header format! [ 271.232113][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.234890][T14488] Unrecognized hibernate image header format! [ 271.237083][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.239728][T14488] Unrecognized hibernate image header format! [ 271.242758][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.245508][T14488] Unrecognized hibernate image header format! [ 271.247638][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.250018][T14488] Unrecognized hibernate image header format! [ 271.252654][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.255314][T14488] Unrecognized hibernate image header format! [ 271.257424][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.263597][T14488] Unrecognized hibernate image header format! [ 271.265986][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.268565][T14488] Unrecognized hibernate image header format! [ 271.275791][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.281564][T14488] Unrecognized hibernate image header format! [ 271.286859][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.292634][T14488] Unrecognized hibernate image header format! [ 271.295930][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.298524][T14488] Unrecognized hibernate image header format! [ 271.301467][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.304217][T14488] Unrecognized hibernate image header format! [ 271.306789][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.309434][T14488] Unrecognized hibernate image header format! [ 271.312109][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.314930][T14488] Unrecognized hibernate image header format! [ 271.317167][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.319743][T14488] Unrecognized hibernate image header format! [ 271.323971][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.326920][T14488] Unrecognized hibernate image header format! [ 271.329124][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.332451][T14488] Unrecognized hibernate image header format! [ 271.334635][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.337195][T14488] Unrecognized hibernate image header format! [ 271.339303][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.343936][T14488] Unrecognized hibernate image header format! [ 271.346140][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.348659][T14488] Unrecognized hibernate image header format! [ 271.351068][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.353733][T14488] Unrecognized hibernate image header format! [ 271.356497][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.359779][T14488] Unrecognized hibernate image header format! [ 271.369972][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.379174][T14488] Unrecognized hibernate image header format! [ 271.383657][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.387021][T14488] Unrecognized hibernate image header format! [ 271.389801][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.394356][T14488] Unrecognized hibernate image header format! [ 271.397171][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.400815][T14488] Unrecognized hibernate image header format! [ 271.403715][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.407068][T14488] Unrecognized hibernate image header format! [ 271.409885][T14488] PM: hibernation: Image mismatch: architecture specific data [ 271.413859][T14488] Unrecognized hibernate image header format! [ 271.416615][T14488] PM: hibernation: Image mismatch: architecture specific data [ 272.763645][ T6017] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 272.771468][ T6017] usb 6-1: device reset changed ep0 maxpacket size! [ 272.779037][ T29] usb 6-1: USB disconnect, device number 42 [ 272.911127][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 272.914598][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 272.918216][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 272.930317][ T29] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 273.081147][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 273.084191][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.087337][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.099100][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.102298][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.104937][ T29] usb 6-1: Product: syz [ 273.106357][ T29] usb 6-1: Manufacturer: syz [ 273.107940][ T29] usb 6-1: SerialNumber: syz [ 273.317707][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 273.370889][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 273.370900][ T40] audit: type=1326 audit(273.319:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.388277][ T40] audit: type=1326 audit(273.329:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.403108][ T40] audit: type=1326 audit(273.329:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.449309][ T40] audit: type=1326 audit(273.329:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.459898][ T40] audit: type=1326 audit(273.329:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.467672][ T40] audit: type=1326 audit(273.329:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.478403][ T40] audit: type=1326 audit(273.329:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.486764][ T40] audit: type=1326 audit(273.329:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.494791][ T40] audit: type=1326 audit(273.329:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.501869][ T40] audit: type=1326 audit(273.329:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14528 comm="syz.4.2452" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c38f7c9 code=0x7ffc0000 [ 273.518312][ T6016] usb 6-1: USB disconnect, device number 43 [ 273.602808][ T6016] usblp0: removed [ 273.650740][ T5939] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 273.700714][ T29] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 273.861166][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 273.864937][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.869613][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.874099][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.878875][ T29] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.882795][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.886684][ T29] usb 5-1: config 0 descriptor?? [ 274.298910][T14531] random: crng reseeded on system resumption [ 274.333349][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 274.378676][ T29] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 274.386234][ T29] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 274.493244][T14548] syzkaller0: entered promiscuous mode [ 274.495704][T14548] syzkaller0: entered allmulticast mode [ 274.539412][ T6017] usb 5-1: USB disconnect, device number 30 [ 274.542835][ T6014] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.552163][ T6014] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.567572][ T6014] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.580793][ T6014] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.588491][ T6017] ------------[ cut here ]------------ [ 274.590738][ T6017] workqueue: work disable count underflowed [ 274.593165][ T6017] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#1: kworker/1:5/6017 [ 274.597170][ T6017] Modules linked in: [ 274.599122][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.603574][ T6017] Tainted: [L]=SOFTLOCKUP [ 274.604942][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.608774][ T6017] Workqueue: usb_hub_wq hub_event [ 274.610544][ T6017] RIP: 0010:enable_work+0x2ca/0x310 [ 274.612182][ T6017] Code: ff e8 9a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 8c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 7d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 54 e8 a3 00 e9 f7 fd ff [ 274.619184][ T6017] RSP: 0018:ffffc90003f9f348 EFLAGS: 00010087 [ 274.621751][ T6017] RAX: 000000000000a9c5 RBX: 0000000000000000 RCX: ffffc9002ed03000 [ 274.624943][ T6017] RDX: 0000000000100000 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 274.627449][ T6017] RBP: ffff888062a0d738 R08: 0000000000000005 R09: 0000000000000000 [ 274.629911][ T6017] R10: 0000000000000000 R11: ffff8880271e54b0 R12: 1ffff920007f3e6a [ 274.632373][ T6017] R13: ffffffff8fc4eb3f R14: ffff888062a0d698 R15: ffff888062a0d730 [ 274.634840][ T6017] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 274.637645][ T6017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.639712][ T6017] CR2: 000056197afc5a18 CR3: 00000000403cf000 CR4: 0000000000352ef0 [ 274.642197][ T6017] DR0: 0000000000000008 DR1: 0000000000000004 DR2: 00000000000000ed [ 274.644660][ T6017] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 274.647228][ T6017] Call Trace: [ 274.648283][ T6017] [ 274.649233][ T6017] ? __pfx_enable_work+0x10/0x10 [ 274.650801][ T6017] cancel_delayed_work_sync+0x96/0xf0 [ 274.652499][ T6017] thermal_zone_device_unregister+0x28e/0x4d0 [ 274.654402][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 274.656031][ T6017] power_supply_unregister+0x10a/0x150 [ 274.657929][ T6017] shield_remove+0x75/0x130 [ 274.659432][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 274.661059][ T6017] hid_device_remove+0xd1/0x260 [ 274.662600][ T6017] ? __pfx_hid_device_remove+0x10/0x10 [ 274.664307][ T6017] device_remove+0xcb/0x170 [ 274.665831][ T6017] device_release_driver_internal+0x44b/0x620 [ 274.667865][ T6017] bus_remove_device+0x22f/0x450 [ 274.669444][ T6017] device_del+0x396/0x9f0 [ 274.670804][ T6017] ? __pfx_device_del+0x10/0x10 [ 274.672348][ T6017] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.673924][ T6017] hid_destroy_device+0x19c/0x240 [ 274.675561][ T6017] usbhid_disconnect+0xa0/0xe0 [ 274.677383][ T6017] usb_unbind_interface+0x1dd/0x9e0 [ 274.679548][ T6017] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 274.681664][ T6017] ? __pfx_usb_unbind_interface+0x10/0x10 [ 274.683443][ T6017] device_remove+0x125/0x170 [ 274.684948][ T6017] device_release_driver_internal+0x44b/0x620 [ 274.686867][ T6017] bus_remove_device+0x22f/0x450 [ 274.688450][ T6017] device_del+0x396/0x9f0 [ 274.689825][ T6017] ? __pfx_device_del+0x10/0x10 [ 274.691365][ T6017] ? kobject_put+0x218/0x6f0 [ 274.692853][ T6017] usb_disable_device+0x355/0x820 [ 274.694447][ T6017] usb_disconnect+0x2e1/0x9e0 [ 274.695945][ T6017] hub_event+0x1d84/0x52f0 [ 274.697414][ T6017] ? __lock_acquire+0x436/0x2890 [ 274.698981][ T6017] ? do_raw_spin_unlock+0x172/0x230 [ 274.700628][ T6017] ? __pfx_hub_event+0x10/0x10 [ 274.702135][ T6017] ? debug_print_object+0x100/0x2a0 [ 274.703778][ T6017] ? finish_task_switch.isra.0+0x202/0xbd0 [ 274.705642][ T6017] ? rcu_is_watching+0x12/0xc0 [ 274.707192][ T6017] process_one_work+0x9ba/0x1b20 [ 274.708770][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 274.710467][ T6017] ? assign_work+0x1a0/0x250 [ 274.711939][ T6017] worker_thread+0x6c8/0xf10 [ 274.713430][ T6017] ? __kthread_parkme+0x19e/0x250 [ 274.715045][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 274.716721][ T6017] kthread+0x3c5/0x780 [ 274.718012][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.719476][ T6017] ? rcu_is_watching+0x12/0xc0 [ 274.721010][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.722475][ T6017] ret_from_fork+0x983/0xb10 [ 274.723938][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 274.725604][ T6017] ? __switch_to+0x7af/0x10d0 [ 274.727163][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.728636][ T6017] ret_from_fork_asm+0x1a/0x30 [ 274.730156][ T6017] [ 274.731149][ T6017] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.733267][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.736236][ T6017] Tainted: [L]=SOFTLOCKUP [ 274.737876][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.742195][ T6017] Workqueue: usb_hub_wq hub_event [ 274.744223][ T6017] Call Trace: [ 274.745354][ T6017] [ 274.746328][ T6017] dump_stack_lvl+0x3d/0x1f0 [ 274.747931][ T6017] vpanic+0x640/0x6f0 [ 274.749199][ T6017] ? enable_work+0x2ca/0x310 [ 274.750658][ T6017] panic+0xca/0xd0 [ 274.751849][ T6017] ? __pfx_panic+0x10/0x10 [ 274.753270][ T6017] check_panic_on_warn+0xab/0xb0 [ 274.754849][ T6017] __warn+0x108/0x3c0 [ 274.756108][ T6017] __report_bug+0x2a0/0x520 [ 274.757595][ T6017] ? enable_work+0x2ca/0x310 [ 274.759057][ T6017] ? __pfx___report_bug+0x10/0x10 [ 274.760644][ T6017] ? __wait_for_common+0x1e0/0x4e0 [ 274.762259][ T6017] ? enable_work+0x2c3/0x310 [ 274.763724][ T6017] ? find_held_lock+0x2b/0x80 [ 274.765239][ T6017] report_bug_entry+0xe1/0x290 [ 274.766836][ T6017] ? enable_work+0x2ca/0x310 [ 274.768287][ T6017] handle_bug+0x18a/0x260 [ 274.769663][ T6017] exc_invalid_op+0x17/0x50 [ 274.771101][ T6017] asm_exc_invalid_op+0x1a/0x20 [ 274.772635][ T6017] RIP: 0010:enable_work+0x2ca/0x310 [ 274.774264][ T6017] Code: ff e8 9a 10 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 8c 10 3a 00 e8 17 59 f3 09 e9 49 ff ff ff e8 7d 10 3a 00 48 8d 3d 36 d3 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 54 e8 a3 00 e9 f7 fd ff [ 274.780248][ T6017] RSP: 0018:ffffc90003f9f348 EFLAGS: 00010087 [ 274.782187][ T6017] RAX: 000000000000a9c5 RBX: 0000000000000000 RCX: ffffc9002ed03000 [ 274.784659][ T6017] RDX: 0000000000100000 RSI: ffffffff8184d8b3 RDI: ffffffff908babf0 [ 274.787202][ T6017] RBP: ffff888062a0d738 R08: 0000000000000005 R09: 0000000000000000 [ 274.789663][ T6017] R10: 0000000000000000 R11: ffff8880271e54b0 R12: 1ffff920007f3e6a [ 274.792186][ T6017] R13: ffffffff8fc4eb3f R14: ffff888062a0d698 R15: ffff888062a0d730 [ 274.794775][ T6017] ? enable_work+0x2c3/0x310 [ 274.796537][ T6017] ? enable_work+0x2c3/0x310 [ 274.798216][ T6017] ? __pfx_enable_work+0x10/0x10 [ 274.799782][ T6017] cancel_delayed_work_sync+0x96/0xf0 [ 274.801492][ T6017] thermal_zone_device_unregister+0x28e/0x4d0 [ 274.803399][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 274.805035][ T6017] power_supply_unregister+0x10a/0x150 [ 274.806926][ T6017] shield_remove+0x75/0x130 [ 274.808861][ T6017] ? __pfx_shield_remove+0x10/0x10 [ 274.810974][ T6017] hid_device_remove+0xd1/0x260 [ 274.812777][ T6017] ? __pfx_hid_device_remove+0x10/0x10 [ 274.814877][ T6017] device_remove+0xcb/0x170 [ 274.816838][ T6017] device_release_driver_internal+0x44b/0x620 [ 274.819379][ T6017] bus_remove_device+0x22f/0x450 [ 274.821402][ T6017] device_del+0x396/0x9f0 [ 274.822907][ T6017] ? __pfx_device_del+0x10/0x10 [ 274.824464][ T6017] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.826087][ T6017] hid_destroy_device+0x19c/0x240 [ 274.827708][ T6017] usbhid_disconnect+0xa0/0xe0 [ 274.829230][ T6017] usb_unbind_interface+0x1dd/0x9e0 [ 274.830869][ T6017] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 274.832641][ T6017] ? __pfx_usb_unbind_interface+0x10/0x10 [ 274.834951][ T6017] device_remove+0x125/0x170 [ 274.836950][ T6017] device_release_driver_internal+0x44b/0x620 [ 274.839487][ T6017] bus_remove_device+0x22f/0x450 [ 274.841318][ T6017] device_del+0x396/0x9f0 [ 274.842889][ T6017] ? __pfx_device_del+0x10/0x10 [ 274.844441][ T6017] ? kobject_put+0x218/0x6f0 [ 274.845941][ T6017] usb_disable_device+0x355/0x820 [ 274.847558][ T6017] usb_disconnect+0x2e1/0x9e0 [ 274.849224][ T6017] hub_event+0x1d84/0x52f0 [ 274.850707][ T6017] ? __lock_acquire+0x436/0x2890 [ 274.852265][ T6017] ? do_raw_spin_unlock+0x172/0x230 [ 274.853911][ T6017] ? __pfx_hub_event+0x10/0x10 [ 274.855453][ T6017] ? debug_print_object+0x100/0x2a0 [ 274.857132][ T6017] ? finish_task_switch.isra.0+0x202/0xbd0 [ 274.858999][ T6017] ? rcu_is_watching+0x12/0xc0 [ 274.860783][ T6017] process_one_work+0x9ba/0x1b20 [ 274.862349][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 274.864038][ T6017] ? assign_work+0x1a0/0x250 [ 274.865546][ T6017] worker_thread+0x6c8/0xf10 [ 274.867040][ T6017] ? __kthread_parkme+0x19e/0x250 [ 274.868648][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 274.870288][ T6017] kthread+0x3c5/0x780 [ 274.871583][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.873060][ T6017] ? rcu_is_watching+0x12/0xc0 [ 274.874569][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.876057][ T6017] ret_from_fork+0x983/0xb10 [ 274.877572][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 274.879203][ T6017] ? __switch_to+0x7af/0x10d0 [ 274.880711][ T6017] ? __pfx_kthread+0x10/0x10 [ 274.882170][ T6017] ret_from_fork_asm+0x1a/0x30 [ 274.883689][ T6017] [ 274.885293][ T6017] Kernel Offset: disabled [ 274.886676][ T6017] Rebooting in 86400 seconds..