last executing test programs: 15m6.060457398s ago: executing program 4 (id=3194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x3, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fccbdf25090000000500070000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 15m3.888040289s ago: executing program 4 (id=3204): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000080)={0x0, 0xc0, 0x9fe, 0xfff, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x1}}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f00000002c0)='(') mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x100000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x68}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71}) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) 15m0.120150242s ago: executing program 4 (id=3218): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x0) 14m59.883065052s ago: executing program 4 (id=3222): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000e0004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0017eb9ec2a200000000000007020000f8ffffffb703000008000000b71e000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000940)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000005c00)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/221, 0xdd}], 0x1, &(0x7f0000000680)=""/1, 0x1}, 0x7}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/104, 0x68}], 0x1, &(0x7f0000000800)=""/145, 0x91}, 0x42b5}, {{&(0x7f00000008c0)=@l2, 0x80, &(0x7f0000002a80)=[{&(0x7f0000003400)=""/123, 0x7b}, {&(0x7f0000002a40)=""/3, 0x3}], 0x2, &(0x7f0000002ac0)=""/15, 0xf}, 0x1001125}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/137, 0xad}, {&(0x7f0000002c40)=""/194, 0xc2}], 0x2, &(0x7f0000002d80)=""/183, 0xb7}, 0x5}, {{&(0x7f0000002e40)=@qipcrtr, 0x80, &(0x7f0000003380)=[{&(0x7f0000002ec0)=""/253, 0xfd}, {&(0x7f0000002fc0)=""/195, 0xc3}, {&(0x7f00000030c0)=""/71, 0x47}, {&(0x7f0000003300)=""/31, 0x1f}, {&(0x7f0000003340)=""/16, 0x10}], 0x5, &(0x7f0000003180)=""/127, 0x7f}, 0x1b0}, {{&(0x7f0000003200)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003280)=""/28, 0x1c}], 0x1, &(0x7f0000004000)=""/4096, 0x1000}, 0x200}, {{&(0x7f0000005000)=@un=@abs, 0x80, &(0x7f0000005300)=[{&(0x7f0000005080)=""/197, 0xc5}, {&(0x7f0000005180)=""/34, 0x22}, {&(0x7f00000051c0)=""/73, 0x49}, {&(0x7f0000005240)=""/145, 0x91}], 0x4, &(0x7f0000005340)=""/60, 0x3c}, 0x8}, {{&(0x7f0000005380)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005400)=""/241, 0xf1}, {&(0x7f0000005500)=""/253, 0xfd}, {&(0x7f0000005600)=""/120, 0x87}, {&(0x7f00000056c0)=""/192, 0xc0}, {&(0x7f0000005780)=""/142, 0x8e}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/68, 0x44}, {&(0x7f0000005940)=""/146, 0x92}, {&(0x7f0000005a00)=""/38, 0x26}], 0x9, &(0x7f0000005b00)=""/218, 0xda}, 0xff}], 0x8, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xdf6df804a66cc221, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18f5ffffff00000029df3b29b809691964d2167d210000e5df1a00000033d968180120646c210000000000282020207b1af8ff00ef900fd2a10000f900000007010000f8ffffffb70200000800000600000000207bb65700bf318409489b152b655ec1ffe45de696fe283272101a346f82f5a2dee1bdc0ff3e6ab56e84967bcba726816f8f640ee75b0e772a110925234a3be135eab7d913fc1a07dac44a4022827148bb2ed8d2e7a38db74302", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 14m58.606607989s ago: executing program 4 (id=3227): inotify_add_watch(0xffffffffffffffff, 0x0, 0xd2000424) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r0, 0x0, 0x500) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) close(0x3) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000fe0954000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000001608000140000000f50900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a17f1ef2699b79ec2b3372c9aeb7d72845ac8b7e6279f710a1707211b5fdda72205b5545aead85f23a565d051571115ba46a3766f503e1fb52b78aa410c6bce1ee00a2d57a46d77700a7e6a2eb7c3072381537e"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000140000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7, 0xc3072, 0xffffffffffffffff, 0x0) 14m57.786445268s ago: executing program 4 (id=3231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\n\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000805000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 14m56.318611079s ago: executing program 32 (id=3231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\n\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000805000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 13m40.977434834s ago: executing program 3 (id=3464): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)={0x14, r5, 0x405, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a0103000000000000000007000009"], 0x110}}, 0x0) 13m37.546042094s ago: executing program 3 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00001a00000d000008001fde65ef0a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 13m36.20041772s ago: executing program 3 (id=3472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0xfc, 0x200000000000000, 0x0}) 13m35.30137144s ago: executing program 3 (id=3475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000e11c53850bd83c3775213c6ae72059"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000e0004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 13m31.814335841s ago: executing program 3 (id=3481): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000400000000000000e0000002000000000000000000000000fc00000000000000000000000000000000100008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000feffffffffffffff00000000000000000100000000000040ffffffffffffffff000000000000000000000000000000000000000000000800000a122e000000000000000000804000020000000000000800040000000000000000010000000000"], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') socket(0x10, 0x3, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 13m31.378800681s ago: executing program 3 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) sync_file_range(0xffffffffffffffff, 0x6, 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e24, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x2, 0x0, 0xb7, 0xffff8001, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80400, 0x0) ioctl$LOOP_SET_FD(r6, 0x7b9, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xf, 0x0, &(0x7f0000000080)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0xd4}}, 0x4000010) 13m30.869214214s ago: executing program 33 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) sync_file_range(0xffffffffffffffff, 0x6, 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e24, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x2, 0x0, 0xb7, 0xffff8001, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80400, 0x0) ioctl$LOOP_SET_FD(r6, 0x7b9, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xf, 0x0, &(0x7f0000000080)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0xd4}}, 0x4000010) 10.86442024s ago: executing program 6 (id=6186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 10.767557783s ago: executing program 6 (id=6187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x600008c0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) 10.684763462s ago: executing program 6 (id=6188): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 8.875905099s ago: executing program 6 (id=6193): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x8084) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r9, 0x80286f4e, 0x0) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) socket(0x10, 0x803, 0x0) 6.989121108s ago: executing program 6 (id=6205): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x255fdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r6, 0x20}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x20000000) 6.46885124s ago: executing program 5 (id=6207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa35) 6.368448839s ago: executing program 0 (id=6209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000005a00000227bd7000ffe1df250000ef005874a83c4b893504c7c58eb6461ac5dd6e4de53b1b1630129165b1dd3d176562aef289b4756f2530e8f51b03a231f4a2ecda05297d4652d85cb4fe95295dad71d7747789be9c5d8a993ae566f7f664b6169368c70b064e45c28ca3"], 0x14}}, 0x40440b0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) 6.260194138s ago: executing program 5 (id=6210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 5.098727269s ago: executing program 0 (id=6211): r0 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0xfffffffffffffff9, 0x2, 0x8) 5.027575985s ago: executing program 0 (id=6212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.024544796s ago: executing program 0 (id=6213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 3.968053824s ago: executing program 2 (id=6215): openat$vcsu(0xffffffffffffff9c, 0x0, 0x690140, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) 3.803515702s ago: executing program 2 (id=6216): syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0xfffffffe, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 3.727919909s ago: executing program 0 (id=6217): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x20e, 0x126, 0x0, &(0x7f0000000600)="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", 0x0, 0x31, 0x6000000000000000, 0x5e, 0x61}, 0x50) 3.671035804s ago: executing program 0 (id=6218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x6, 0x1, 0x0, 0xc13, 0x0, 0x3, 0x3, 0x84f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r8) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.55918903s ago: executing program 5 (id=6219): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040), 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 3.416895279s ago: executing program 5 (id=6221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000005a00000227bd7000ffe1df250000ef005874a83c4b893504c7c58eb6461ac5dd6e4de53b1b1630129165b1dd3d176562aef289b4756f2530e8f51b03a231f4a2ecda05297d4652d85cb4fe95295dad71d7747789be9c5d8a993ae566f7f664b6169368c70b064e45c28ca3"], 0x14}}, 0x40440b0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) 3.416025385s ago: executing program 6 (id=6222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.327195791s ago: executing program 1 (id=6223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.208999322s ago: executing program 1 (id=6224): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb236100"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 2.611237063s ago: executing program 2 (id=6225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac141418e060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.875332098s ago: executing program 2 (id=6226): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) mq_timedreceive(r0, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) 1.830685532s ago: executing program 5 (id=6227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 1.814226681s ago: executing program 2 (id=6228): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x20e, 0x126, 0x0, &(0x7f0000000600)="b9180bb7600a070c009e40f086dd1fff310005e03300fd3a0010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb9da6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bf2339d9ab076f484020eaa348ac0d7911e4c44905256ec2cc54cb647a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fc1bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833be1429a25773eedf63dd9f33d430f2a0a30ad7ddf52954275b3dfe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b8b19ad5de2e8b93b2e15d599bd10df85e55dfe029f4a7db0b145cb6f1ea20990a150e852e4f3f89e31f8c093ab4448bf515b61ef4f0c630638a55f34fcaeae", 0x0, 0x31, 0x6000000000000000, 0x5e, 0x61}, 0x50) 1.590935194s ago: executing program 2 (id=6229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 560.368232ms ago: executing program 5 (id=6230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff565e1, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xd, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x5a3, 0x6, 0x1, 0xc, 0x80000001, 0x7, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x54070}, 0x400c840) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r3, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 199.08748ms ago: executing program 1 (id=6231): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040), 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 106.471291ms ago: executing program 1 (id=6232): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e38bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00'}, 0x94) 105.9153ms ago: executing program 1 (id=6233): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=6234): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029800030100f1000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904844d"], 0x0) kernel console output (not intermixed with test programs): mode [ 1728.404152][T26141] veth1_to_bridge: entered promiscuous mode [ 1728.410205][T26141] veth1_to_bridge: entered allmulticast mode [ 1728.420905][T26141] veth0_to_bond: entered promiscuous mode [ 1728.468240][T26141] veth0_to_bond: entered allmulticast mode [ 1728.565187][T26141] veth1_to_bond: entered promiscuous mode [ 1728.585275][T26141] veth1_to_bond: entered allmulticast mode [ 1728.668344][T26141] veth0_to_team: entered promiscuous mode [ 1728.688323][T26141] veth0_to_team: entered allmulticast mode [ 1728.888946][T26141] veth1_to_team: entered promiscuous mode [ 1728.894683][T26141] veth1_to_team: entered allmulticast mode [ 1729.008040][T26141] veth0_to_batadv: entered promiscuous mode [ 1729.019690][T26141] veth0_to_batadv: entered allmulticast mode [ 1729.041465][T26141] batadv_slave_0: entered promiscuous mode [ 1729.058229][T26141] batadv_slave_0: entered allmulticast mode [ 1729.078086][T26141] veth1_to_batadv: entered promiscuous mode [ 1729.087632][T26141] veth1_to_batadv: entered allmulticast mode [ 1729.114724][T26141] batadv_slave_1: entered promiscuous mode [ 1729.127903][T26141] batadv_slave_1: entered allmulticast mode [ 1729.175801][T26141] xfrm0: entered promiscuous mode [ 1729.182478][T26141] xfrm0: entered allmulticast mode [ 1729.216181][T26141] veth0_to_hsr: entered promiscuous mode [ 1729.220016][ T29] audit: type=1400 audit(1775614055.474:2079): avc: denied { read write } for pid=26156 comm="syz.2.5126" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1729.249728][T26141] veth0_to_hsr: entered allmulticast mode [ 1729.262301][T26141] hsr_slave_0: entered allmulticast mode [ 1729.283474][T26141] veth1_to_hsr: entered promiscuous mode [ 1729.283771][ T29] audit: type=1400 audit(1775614055.474:2080): avc: denied { open } for pid=26156 comm="syz.2.5126" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1729.322183][T26141] veth1_to_hsr: entered allmulticast mode [ 1729.448522][T26141] hsr_slave_1: entered allmulticast mode [ 1729.825987][T26141] hsr0: entered promiscuous mode [ 1729.884970][T26141] hsr0: entered allmulticast mode [ 1729.922498][ T29] audit: type=1400 audit(1775614055.574:2081): avc: denied { getopt } for pid=26158 comm="syz.2.5127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1729.961762][T26141] veth1_virt_wifi: entered promiscuous mode [ 1730.038685][T26141] veth1_virt_wifi: entered allmulticast mode [ 1730.142758][T26141] veth0_virt_wifi: entered promiscuous mode [ 1730.180964][T26141] veth0_virt_wifi: entered allmulticast mode [ 1730.213877][T26141] veth1_vlan: entered allmulticast mode [ 1730.235162][T26141] veth0_vlan: entered allmulticast mode [ 1730.258873][T26141] vlan0: entered promiscuous mode [ 1730.268680][T26141] vlan0: entered allmulticast mode [ 1730.276463][T26141] vlan1: entered promiscuous mode [ 1730.287492][T26141] vlan1: entered allmulticast mode [ 1730.298456][T26141] macvlan0: entered promiscuous mode [ 1730.311046][T26141] macvlan0: entered allmulticast mode [ 1730.323500][T26141] macvlan1: entered promiscuous mode [ 1730.358697][T26141] macvlan1: entered allmulticast mode [ 1730.376978][T26141] ipvlan0: entered promiscuous mode [ 1730.382594][T26141] ipvlan0: entered allmulticast mode [ 1730.403983][T26141] ipvlan1: entered promiscuous mode [ 1730.410920][T26141] ipvlan1: entered allmulticast mode [ 1730.417582][T26141] veth1_macvtap: entered allmulticast mode [ 1730.435018][T26141] veth0_macvtap: entered allmulticast mode [ 1730.452631][T26141] macvtap0: entered promiscuous mode [ 1730.589885][T26141] macvtap0: entered allmulticast mode [ 1730.603877][T26141] macsec0: entered promiscuous mode [ 1730.615905][T26141] macsec0: entered allmulticast mode [ 1730.630910][T26141] geneve0: entered promiscuous mode [ 1730.636468][T26141] geneve0: entered allmulticast mode [ 1730.705041][T26141] geneve1: entered promiscuous mode [ 1730.730592][T26141] geneve1: entered allmulticast mode [ 1730.744975][T26141] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1730.754762][T26141] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1730.766742][T26141] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1730.775688][T26141] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1730.794553][T26141] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1730.824213][T26141] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 1730.846110][T26141] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 1730.859797][T26141] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 1730.869853][T26141] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1730.888700][T26141] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 1730.903081][T26141] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 1730.915334][T26178] input: syz1 as /devices/virtual/input/input45 [ 1730.918511][T26141] erspan0.1: entered promiscuous mode [ 1730.931197][T26141] erspan0.1: entered allmulticast mode [ 1730.941304][T26141] bond1: entered allmulticast mode [ 1730.951380][T26141] vlan2: entered promiscuous mode [ 1730.956578][T26141] bridge2: entered promiscuous mode [ 1730.962019][T26141] bridge2: entered allmulticast mode [ 1730.967375][T26141] bond3: entered allmulticast mode [ 1730.973942][T26141] bond4: entered allmulticast mode [ 1730.979774][T26141] bond5: entered allmulticast mode [ 1730.985230][T26141] bond6: entered allmulticast mode [ 1730.992142][T26141] bond7: entered allmulticast mode [ 1730.997855][T26141] bond8: entered allmulticast mode [ 1731.004343][T26141] bond9: entered promiscuous mode [ 1731.010271][T26141] gretap1: entered promiscuous mode [ 1731.015605][T26141] bond9: entered allmulticast mode [ 1731.021183][T26141] gretap1: entered allmulticast mode [ 1731.027329][T26141] vlan3: entered promiscuous mode [ 1731.032859][T26141] bond11: entered promiscuous mode [ 1731.038195][T26141] bond11: entered allmulticast mode [ 1731.043813][T26141] bond12: entered allmulticast mode [ 1731.049874][T26141] bond13: entered allmulticast mode [ 1731.055420][T26141] bond14: entered allmulticast mode [ 1731.061263][T26141] bond15: entered promiscuous mode [ 1731.066406][T26141] bond15: entered allmulticast mode [ 1731.086054][T26163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.093170][T26163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.100630][T26163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.107709][T26163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.151798][T26163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1731.321648][T26187] syzkaller0: entered promiscuous mode [ 1731.327163][T26187] syzkaller0: entered allmulticast mode [ 1731.450819][T26195] ¾x9ÿ: renamed from lo (while UP) [ 1731.709903][T26209] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 1733.553522][ T29] audit: type=1400 audit(1775614059.804:2082): avc: denied { mount } for pid=26239 comm="syz.0.5155" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1733.597658][ T29] audit: type=1400 audit(1775614059.834:2083): avc: denied { search } for pid=26239 comm="syz.0.5155" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1733.677203][ T29] audit: type=1400 audit(1775614059.834:2084): avc: denied { search } for pid=26239 comm="syz.0.5155" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1733.728866][ T29] audit: type=1400 audit(1775614059.834:2085): avc: denied { search } for pid=26239 comm="syz.0.5155" name="/" dev="configfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1734.503368][T26254] syzkaller0: entered promiscuous mode [ 1734.511183][T26254] syzkaller0: entered allmulticast mode [ 1735.125622][T26222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1736.502319][ T29] audit: type=1400 audit(1775614062.754:2086): avc: denied { read } for pid=26267 comm="syz.5.5164" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1736.585510][ T29] audit: type=1400 audit(1775614062.784:2087): avc: denied { open } for pid=26267 comm="syz.5.5164" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1736.668297][ T29] audit: type=1400 audit(1775614062.784:2088): avc: denied { ioctl } for pid=26267 comm="syz.5.5164" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1736.731835][ T29] audit: type=1400 audit(1775614062.984:2089): avc: denied { read } for pid=26275 comm="syz.2.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1736.784884][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5168'. [ 1737.081749][ T29] audit: type=1400 audit(1775614063.324:2090): avc: denied { mount } for pid=26277 comm="syz.1.5168" name="/" dev="rpc_pipefs" ino=126591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1737.705516][ T29] audit: type=1400 audit(1775614063.954:2091): avc: denied { unmount } for pid=17719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1737.946589][T26306] syzkaller0: entered promiscuous mode [ 1737.973364][T26306] syzkaller0: entered allmulticast mode [ 1738.138783][T26313] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1738.145338][T26313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1738.185061][T26313] vhci_hcd vhci_hcd.0: Device attached [ 1738.458405][ T5880] usb 44-1: SetAddress Request (2) to port 0 [ 1738.483737][ T5880] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1738.582052][T26316] vhci_hcd: connection reset by peer [ 1738.601134][ T1155] vhci_hcd vhci_hcd.5: stop threads [ 1738.614113][ T1155] vhci_hcd vhci_hcd.5: release socket [ 1738.640853][ T1155] vhci_hcd vhci_hcd.5: disconnect device [ 1738.725060][T26346] input: syz0 as /devices/virtual/input/input47 [ 1738.840268][T26351] netlink: 'syz.1.5190': attribute type 1 has an invalid length. [ 1739.952372][ T29] audit: type=1400 audit(1775614066.184:2092): avc: denied { setattr } for pid=26379 comm="syz.1.5192" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1740.215761][T26411] 9pnet_virtio: no channels available for device syz [ 1740.710504][T26436] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5200'. [ 1740.788248][ T29] audit: type=1400 audit(1775614066.984:2093): avc: denied { map } for pid=26426 comm="syz.1.5200" path="socket:[125888]" dev="sockfs" ino=125888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1741.014442][ T29] audit: type=1400 audit(1775614067.244:2094): avc: denied { execmod } for pid=26426 comm="syz.1.5200" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=126745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1742.310891][ T29] audit: type=1400 audit(1775614067.334:2095): avc: denied { read } for pid=26438 comm="syz.5.5204" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1742.339704][ T29] audit: type=1400 audit(1775614067.334:2096): avc: denied { open } for pid=26438 comm="syz.5.5204" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1742.398122][ T29] audit: type=1400 audit(1775614067.344:2097): avc: denied { ioctl } for pid=26438 comm="syz.5.5204" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1743.002319][T26475] bad cache= option: l [ 1743.002319][T26475] [ 1743.009865][T26475] CIFS: VFS: bad cache= option: l [ 1743.657912][T26501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5216'. [ 1744.660928][ T5880] usb 44-1: device descriptor read/8, error -110 [ 1744.699444][T26481] 9pnet_virtio: no channels available for device syz [ 1744.797152][T26505] tipc: Enabled bearer , priority 10 [ 1745.066812][T26509] ¾x9ÿ„⃪ןã: renamed from lo (while UP) [ 1745.128586][ T5880] usb usb44-port1: attempt power cycle [ 1745.150630][T26512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5222'. [ 1745.159823][T26512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5222'. [ 1745.247107][ T29] audit: type=1400 audit(1775614071.464:2098): avc: denied { getopt } for pid=26507 comm="syz.6.5222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1745.994413][T16016] tipc: Node number set to 2976636980 [ 1746.165231][T26523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1746.171778][T26523] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1746.207125][T26523] vhci_hcd vhci_hcd.0: Device attached [ 1746.388539][ T5880] usb usb44-port1: unable to enumerate USB device [ 1746.478289][T21881] usb 34-1: SetAddress Request (2) to port 0 [ 1746.490316][T21881] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1746.707652][T26524] vhci_hcd: connection closed [ 1746.718365][T26387] vhci_hcd vhci_hcd.0: stop threads [ 1746.769845][T26387] vhci_hcd vhci_hcd.0: release socket [ 1746.790116][T26387] vhci_hcd vhci_hcd.0: disconnect device [ 1747.022403][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5226'. [ 1748.966109][T26552] lo speed is unknown, defaulting to 1000 [ 1749.266865][T26558] syzkaller0: entered promiscuous mode [ 1749.272511][T26558] syzkaller0: entered allmulticast mode [ 1749.713212][T26532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1749.788073][ T29] audit: type=1400 audit(1775614076.034:2099): avc: denied { read } for pid=26568 comm="syz.0.5237" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1750.201766][T26585] 9pnet_virtio: no channels available for device syz [ 1750.487283][T26590] syzkaller0: entered promiscuous mode [ 1750.514535][T26590] syzkaller0: entered allmulticast mode [ 1751.808666][T21881] usb 34-1: device descriptor read/8, error -110 [ 1753.159679][T21881] usb usb34-port1: attempt power cycle [ 1753.208649][T26625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1753.358482][T26636] syzkaller0: entered promiscuous mode [ 1753.363983][T26636] syzkaller0: entered allmulticast mode [ 1753.418821][T13278] Bluetooth: hci0: unexpected subevent 0x04 length: 18 > 11 [ 1753.517166][T26641] evm: overlay not supported [ 1753.829034][T21881] usb usb34-port1: unable to enumerate USB device [ 1754.046187][T26652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26652 comm=syz.0.5256 [ 1754.076899][T26652] hub 8-0:1.0: USB hub found [ 1754.088095][T26652] hub 8-0:1.0: 1 port detected [ 1754.482192][T26656] syzkaller0: entered promiscuous mode [ 1754.538070][T26656] syzkaller0: entered allmulticast mode [ 1754.878087][ T29] audit: type=1400 audit(1775614081.104:2100): avc: denied { name_bind } for pid=26661 comm="syz.5.5268" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1755.110650][ T29] audit: type=1804 audit(1775614081.364:2101): pid=26669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.5271" name="file0" dev="ramfs" ino=128053 res=1 errno=0 [ 1755.307481][T26675] syzkaller0: entered promiscuous mode [ 1755.314217][T26675] syzkaller0: entered allmulticast mode [ 1756.140703][T26694] lo speed is unknown, defaulting to 1000 [ 1757.422751][T26701] input: syz0 as /devices/virtual/input/input48 [ 1757.429982][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'. [ 1757.734903][T26710] syzkaller0: entered promiscuous mode [ 1757.772695][T26710] syzkaller0: entered allmulticast mode [ 1758.108532][T16039] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1758.289106][T16039] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1758.298048][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.308579][T16039] usb 2-1: config 0 has no interfaces? [ 1758.318366][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.421005][T16039] usb 2-1: config 0 has no interfaces? [ 1758.461465][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.599026][T26731] lo speed is unknown, defaulting to 1000 [ 1759.469749][T16039] usb 2-1: config 0 has no interfaces? [ 1759.721099][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.737070][T16039] usb 2-1: config 0 has no interfaces? [ 1759.744736][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.754999][T16039] usb 2-1: config 0 has no interfaces? [ 1759.761400][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.783767][T16039] usb 2-1: config 0 has no interfaces? [ 1759.794893][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.814109][T16039] usb 2-1: config 0 has no interfaces? [ 1759.823431][T16039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.848028][T16039] usb 2-1: config 0 has no interfaces? [ 1759.866156][T16039] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1759.910730][T16039] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1759.928169][T16039] usb 2-1: Product: syz [ 1760.018160][T16039] usb 2-1: Manufacturer: syz [ 1760.026976][T16039] usb 2-1: SerialNumber: syz [ 1760.042558][T16039] usb 2-1: config 0 descriptor?? [ 1761.020448][T26734] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1761.292781][T25323] usb 2-1: USB disconnect, device number 104 [ 1761.345903][T26743] syzkaller0: entered promiscuous mode [ 1761.360681][T26743] syzkaller0: entered allmulticast mode [ 1761.554875][T26753] syzkaller0: entered promiscuous mode [ 1761.560792][T26753] syzkaller0: entered allmulticast mode [ 1761.891395][T26770] syzkaller0: entered promiscuous mode [ 1761.897004][T26770] syzkaller0: entered allmulticast mode [ 1762.049870][ T5914] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1762.242397][ T5914] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1762.251599][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.279073][ T5914] usb 1-1: Product: syz [ 1762.283378][ T5914] usb 1-1: Manufacturer: syz [ 1762.290368][ T5914] usb 1-1: SerialNumber: syz [ 1762.337702][T26781] syzkaller0: entered promiscuous mode [ 1762.345799][T26781] syzkaller0: entered allmulticast mode [ 1762.392407][ T29] audit: type=1400 audit(1775614088.644:2102): avc: denied { setopt } for pid=26783 comm="syz.5.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1762.417031][ T29] audit: type=1400 audit(1775614088.644:2103): avc: denied { connect } for pid=26783 comm="syz.5.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1762.499778][T26786] syzkaller0: entered promiscuous mode [ 1762.505504][T26786] syzkaller0: entered allmulticast mode [ 1762.786955][T26795] syzkaller0: entered promiscuous mode [ 1762.804054][T26795] syzkaller0: entered allmulticast mode [ 1762.844063][ T29] audit: type=1400 audit(1775614089.094:2104): avc: denied { name_bind } for pid=26799 comm="syz.2.5321" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1762.883511][T26801] syzkaller0: entered promiscuous mode [ 1762.889257][T26801] syzkaller0: entered allmulticast mode [ 1763.159214][T26806] random: crng reseeded on system resumption [ 1764.180056][T26810] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1764.215108][ T29] audit: type=1400 audit(1775614089.904:2105): avc: denied { shutdown } for pid=26802 comm="syz.6.5322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1764.287839][T26811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.295026][T26811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.302513][T26811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.309629][T26811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.360874][T26811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1764.957882][ T5914] rtl8150 1-1:1.0: couldn't reset the device [ 1764.964098][ T5914] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1764.978336][ T29] audit: type=1400 audit(1775614091.174:2106): avc: denied { execute } for pid=26813 comm="syz.1.5323" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1764.982172][ T5914] usb 1-1: USB disconnect, device number 98 [ 1765.191323][ T29] audit: type=1400 audit(1775614091.194:2107): avc: denied { append } for pid=26813 comm="syz.1.5323" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1765.633826][ T29] audit: type=1326 audit(1775614091.604:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26816 comm="syz.6.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1765.658716][ T29] audit: type=1326 audit(1775614091.604:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26816 comm="syz.6.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1765.694162][ T29] audit: type=1326 audit(1775614091.604:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26816 comm="syz.6.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1765.746209][ T29] audit: type=1326 audit(1775614091.604:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26816 comm="syz.6.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1765.863415][T26815] loop6: detected capacity change from 0 to 2640 [ 1765.877614][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.885777][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.907383][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.919055][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.941578][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.955887][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.965981][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.990774][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.001941][T24607] ldm_validate_partition_table(): Disk read failed. [ 1766.009753][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.024983][T24607] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.046435][T24607] Dev loop6: unable to read RDB block 0 [ 1766.061061][T24607] loop6: unable to read partition table [ 1766.073562][T26815] ldm_validate_partition_table(): Disk read failed. [ 1766.088232][T26815] Dev loop6: unable to read RDB block 0 [ 1766.096279][T26815] loop6: unable to read partition table [ 1766.112824][T26836] syzkaller0: entered promiscuous mode [ 1766.128172][T26815] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1766.142452][T26836] syzkaller0: entered allmulticast mode [ 1766.380017][T26847] syzkaller0: entered promiscuous mode [ 1766.385599][T26847] syzkaller0: entered allmulticast mode [ 1767.085298][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5340'. [ 1767.106314][T26855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.114544][T26855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.266031][T26855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.308645][T16016] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1767.336100][T26855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.479473][T16016] usb 2-1: config 0 has no interfaces? [ 1767.485154][T16016] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1767.521830][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1767.521847][ T29] audit: type=1400 audit(1775614093.734:2134): avc: denied { read write } for pid=26860 comm="syz.5.5339" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1767.578916][T16016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.589395][T16016] usb 2-1: config 0 descriptor?? [ 1767.597511][ T29] audit: type=1400 audit(1775614093.734:2135): avc: denied { open } for pid=26860 comm="syz.5.5339" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1767.648452][T26872] netlink: 'syz.5.5339': attribute type 12 has an invalid length. [ 1767.793017][T26866] bridge5: port 1(erspan0) entered blocking state [ 1767.803466][T25323] usb 2-1: USB disconnect, device number 105 [ 1767.812195][T26866] bridge5: port 1(erspan0) entered disabled state [ 1767.888190][T26866] erspan0: entered allmulticast mode [ 1767.923384][T26866] erspan0: entered promiscuous mode [ 1767.929359][T26866] bridge5: port 1(erspan0) entered blocking state [ 1767.935834][T26866] bridge5: port 1(erspan0) entered forwarding state [ 1767.975932][T26387] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.001225][T26387] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.023512][T26387] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.109890][T26387] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.393601][T26896] syzkaller0: entered promiscuous mode [ 1768.399171][T26896] syzkaller0: entered allmulticast mode [ 1768.779139][T26905] lo speed is unknown, defaulting to 1000 [ 1769.743871][T26912] hub 8-0:1.0: USB hub found [ 1769.751592][ T29] audit: type=1400 audit(1775614095.984:2136): avc: denied { create } for pid=26884 comm="syz.2.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1769.772208][T26912] hub 8-0:1.0: 1 port detected [ 1769.888289][T26917] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5353'. [ 1771.477909][T26929] overlayfs: failed to resolve './file2': -2 [ 1771.546880][T26917] lo speed is unknown, defaulting to 1000 [ 1771.868863][T26940] syzkaller0: entered promiscuous mode [ 1771.874459][T26940] syzkaller0: entered allmulticast mode [ 1772.181525][T26954] netlink: 'syz.1.5366': attribute type 1 has an invalid length. [ 1772.203176][T26959] overlayfs: failed to resolve './file2': -2 [ 1772.263898][T26954] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1772.385953][T26974] syzkaller0: entered promiscuous mode [ 1772.391678][T26974] syzkaller0: entered allmulticast mode [ 1772.745644][ T29] audit: type=1326 audit(1775614098.804:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825461][ T29] audit: type=1326 audit(1775614098.804:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825493][ T29] audit: type=1326 audit(1775614098.804:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825516][ T29] audit: type=1326 audit(1775614098.804:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825537][ T29] audit: type=1326 audit(1775614098.804:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825561][ T29] audit: type=1326 audit(1775614098.804:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825582][ T29] audit: type=1326 audit(1775614098.804:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825605][ T29] audit: type=1326 audit(1775614098.804:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825627][ T29] audit: type=1326 audit(1775614098.804:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1772.825648][ T29] audit: type=1326 audit(1775614098.804:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26967 comm="syz.1.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91d79c819 code=0x7ffc0000 [ 1773.514762][T26999] overlayfs: failed to resolve './file2': -2 [ 1773.679020][T27003] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 1773.799580][T27003] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1773.886592][T27011] syzkaller0: entered promiscuous mode [ 1773.913161][T27011] syzkaller0: entered allmulticast mode [ 1775.603419][T27041] netlink: 'syz.1.5399': attribute type 1 has an invalid length. [ 1775.694710][T27041] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1775.719440][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1775.756594][T27048] syzkaller0: entered promiscuous mode [ 1775.798985][T27048] syzkaller0: entered allmulticast mode [ 1775.829504][T27050] bridge_slave_1: left allmulticast mode [ 1775.853204][T27050] bridge_slave_1: left promiscuous mode [ 1775.875423][T27050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.903302][T27050] bridge_slave_0: left allmulticast mode [ 1775.910054][T27050] bridge_slave_0: left promiscuous mode [ 1775.915853][T27050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.269076][T27077] syzkaller0: entered promiscuous mode [ 1777.276829][T27077] syzkaller0: entered allmulticast mode [ 1777.497899][T27085] syzkaller0: entered promiscuous mode [ 1777.503741][T27085] syzkaller0: entered allmulticast mode [ 1777.526946][T27089] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1777.533497][T27089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1777.542251][T27089] vhci_hcd vhci_hcd.0: Device attached [ 1777.584523][T27089] hub 1-0:1.0: USB hub found [ 1777.590033][T27089] hub 1-0:1.0: 1 port detected [ 1777.842346][T27069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1777.856042][T27090] vhci_hcd: connection closed [ 1777.859461][ T1011] vhci_hcd vhci_hcd.2: stop threads [ 1777.885023][ T1011] vhci_hcd vhci_hcd.2: release socket [ 1777.890922][ T1011] vhci_hcd vhci_hcd.2: disconnect device [ 1778.269054][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 1778.269067][ T29] audit: type=1326 audit(1775614104.524:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbf9c819 code=0x7ffc0000 [ 1778.528942][ T29] audit: type=1326 audit(1775614104.524:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1778.633430][ T29] audit: type=1326 audit(1775614104.524:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1778.774202][ T29] audit: type=1326 audit(1775614104.564:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1778.897816][ T29] audit: type=1326 audit(1775614104.564:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1779.001002][ T29] audit: type=1326 audit(1775614104.564:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1779.049147][T27112] random: crng reseeded on system resumption [ 1779.535595][ T29] audit: type=1326 audit(1775614104.564:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1779.752145][ T29] audit: type=1326 audit(1775614104.564:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1779.918391][ T29] audit: type=1326 audit(1775614104.564:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1779.942006][ T29] audit: type=1326 audit(1775614104.564:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27100 comm="syz.5.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cbf9c4ab code=0x7ffc0000 [ 1781.128575][T27121] syzkaller0: entered promiscuous mode [ 1781.135014][T27121] syzkaller0: entered allmulticast mode [ 1781.577708][T27138] syzkaller0: entered promiscuous mode [ 1781.618134][T27138] syzkaller0: entered allmulticast mode [ 1783.369411][T27140] binder: 27139:27140 ioctl c0306201 200000000640 returned -22 [ 1783.703244][T27188] loop6: detected capacity change from 0 to 2640 [ 1783.710721][T27188] buffer_io_error: 27 callbacks suppressed [ 1783.710744][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.728062][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.750264][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.765276][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.788930][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.818286][T27188] Buffer I/O error on dev loop6, logical block 0, async page read [ 1783.868922][T27188] Buffer I/O error on dev loop6, logical block 1, async page read [ 1783.907359][T27192] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1783.916874][T27188] loop6: unable to read partition table [ 1783.934702][T27192] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1783.934855][T27188] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 1783.997480][T27192] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1784.098594][T27140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.108414][T27140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.288783][T11982] lo speed is unknown, defaulting to 1000 [ 1784.298403][T26398] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.307672][T26398] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.317019][T11982] syz2: Port: 1 Link DOWN [ 1784.327873][T26398] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.336939][T26398] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.368366][T27201] netlink: 'syz.0.5447': attribute type 1 has an invalid length. [ 1784.403913][ T5179] ldm_validate_partition_table(): Disk read failed. [ 1784.412727][ T5179] Dev loop6: unable to read RDB block 0 [ 1784.450689][ T5179] loop6: unable to read partition table [ 1784.620772][T27207] syzkaller0: entered promiscuous mode [ 1784.658176][T27207] syzkaller0: entered allmulticast mode [ 1785.617030][T27214] lo speed is unknown, defaulting to 1000 [ 1785.867784][T27224] binder: BINDER_SET_CONTEXT_MGR already set [ 1785.873821][T27224] binder: 27223:27224 ioctl 4018620d 200000001000 returned -16 [ 1785.898904][T27224] syz_tun: entered allmulticast mode [ 1785.904981][T27224] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1785.913510][T27224] mroute: pending queue full, dropping entries [ 1785.924179][T27224] syz_tun: left allmulticast mode [ 1786.210378][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.220784][T27232] syzkaller0: entered promiscuous mode [ 1786.242955][T27232] syzkaller0: entered allmulticast mode [ 1786.304038][T27237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1786.520947][T27242] syzkaller0: entered promiscuous mode [ 1786.526834][T27242] syzkaller0: entered allmulticast mode [ 1786.684835][T27247] syzkaller0: entered promiscuous mode [ 1786.713523][T27247] syzkaller0: entered allmulticast mode [ 1786.757096][T27254] fuse: Unknown parameter '0x0000000000000005' [ 1786.785591][T27254] misc userio: Invalid payload size [ 1786.786159][T27249] syzkaller0: entered promiscuous mode [ 1786.791354][T27254] misc userio: The device must be registered before sending interrupts [ 1786.806338][T27249] syzkaller0: entered allmulticast mode [ 1786.808845][T27254] misc userio: Invalid payload size [ 1787.055088][T27256] bridge3: entered allmulticast mode [ 1787.067067][T27257] ªªªªª»: renamed from hsr0 [ 1788.038711][T27275] exFAT-fs (nbd5): unable to read boot sector [ 1788.044875][T27275] exFAT-fs (nbd5): failed to read boot sector [ 1788.053125][T27275] exFAT-fs (nbd5): failed to recognize exfat type [ 1789.584324][T27281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.591759][T27281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.625145][T27277] ceph: No mds server is up or the cluster is laggy [ 1789.632915][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1789.639265][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1789.645345][T27281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1789.683010][ T5914] lo speed is unknown, defaulting to 1000 [ 1789.688919][ T5914] syz2: Port: 1 Link ACTIVE [ 1789.902285][T27286] syzkaller0: entered promiscuous mode [ 1789.902307][T27286] syzkaller0: entered allmulticast mode [ 1790.373643][T27297] fuse: Bad value for 'fd' [ 1790.535379][T27299] syzkaller0: entered promiscuous mode [ 1790.554795][T27299] syzkaller0: entered allmulticast mode [ 1790.583115][T27301] syzkaller0: entered promiscuous mode [ 1790.595434][T27301] syzkaller0: entered allmulticast mode [ 1792.614645][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1795.012061][T27366] lo speed is unknown, defaulting to 1000 [ 1795.690432][T27371] 9pnet_virtio: no channels available for device syz [ 1796.878137][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1796.878157][ T29] audit: type=1400 audit(1775614122.944:2299): avc: denied { name_bind } for pid=27373 comm="syz.6.5499" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1796.907061][T27379] netlink: 'syz.1.5502': attribute type 21 has an invalid length. [ 1797.226569][T27379] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1797.348051][T27381] ubi: mtd0 is already attached to ubi31 [ 1797.823012][T27379] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1797.931274][T27379] netlink: 'syz.1.5502': attribute type 1 has an invalid length. [ 1797.972031][T13278] Bluetooth: hci3: hcon ffff88809ca90000 sent 0 < count 511 [ 1798.007982][ T29] audit: type=1400 audit(1775614124.254:2300): avc: denied { write } for pid=27378 comm="syz.1.5502" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1798.134052][ T29] audit: type=1400 audit(1775614124.314:2301): avc: denied { lock } for pid=27378 comm="syz.1.5502" path="socket:[130688]" dev="sockfs" ino=130688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1798.614123][T27400] syzkaller0: entered promiscuous mode [ 1798.632060][T27400] syzkaller0: entered allmulticast mode [ 1798.656883][T27406] usb usb7: usbfs: process 27406 (syz.5.5511) did not claim interface 0 before use [ 1798.706031][ T29] audit: type=1326 audit(1775614124.954:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.6.5512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51c319c819 code=0x0 [ 1798.843460][T27412] bridge0: port 3(batadv1) entered blocking state [ 1798.857813][T27412] bridge0: port 3(batadv1) entered disabled state [ 1798.868760][T27412] batadv1: entered allmulticast mode [ 1798.875190][ T29] audit: type=1400 audit(1775614125.124:2303): avc: denied { create } for pid=27403 comm="syz.6.5512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1798.902746][T27412] batadv1: entered promiscuous mode [ 1798.924790][T27417] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5515'. [ 1799.288119][T27434] usb usb7: usbfs: process 27434 (syz.0.5524) did not claim interface 0 before use [ 1799.328119][T26400] batman_adv: batadv1: IGMP Querier appeared [ 1799.334146][T26400] batman_adv: batadv1: MLD Querier appeared [ 1799.468762][T27438] input: syz0 as /devices/virtual/input/input49 [ 1799.605573][T27445] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1801.075725][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1801.086575][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1801.096027][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1801.105244][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1801.114310][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1801.374903][T27469] syzkaller0: entered promiscuous mode [ 1801.412505][T27469] syzkaller0: entered allmulticast mode [ 1801.581505][T13278] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1801.852527][ T29] audit: type=1326 audit(1775614128.004:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.019027][ T29] audit: type=1326 audit(1775614128.004:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.544842][ T29] audit: type=1326 audit(1775614128.004:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.640279][T27510] usb usb7: usbfs: process 27510 (syz.6.5546) did not claim interface 0 before use [ 1802.695597][ T29] audit: type=1326 audit(1775614128.004:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.841121][ T29] audit: type=1326 audit(1775614128.004:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.888866][ T29] audit: type=1326 audit(1775614128.004:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1802.983803][ T29] audit: type=1326 audit(1775614128.004:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1803.023156][ T29] audit: type=1326 audit(1775614128.004:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1803.048584][ T29] audit: type=1326 audit(1775614128.004:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1803.072732][T27520] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5551'. [ 1803.154062][ T29] audit: type=1326 audit(1775614128.004:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1803.180616][T27523] ¾x9ÿ„⃪ןã: renamed from lo [ 1803.254366][ T29] audit: type=1326 audit(1775614128.004:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27481 comm="syz.0.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aa39c819 code=0x7ffc0000 [ 1803.371219][T27529] syz_tun: entered allmulticast mode [ 1803.390693][T27529] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1803.399248][T27529] mroute: pending queue full, dropping entries [ 1805.034541][T27542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1805.041082][T27542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1805.255678][T13278] Bluetooth: hci1: hcon ffff888029e20000 sent 1 < count 511 [ 1805.275621][T27558] netlink: 'syz.0.5563': attribute type 13 has an invalid length. [ 1805.344145][T27558] netlink: 'syz.0.5563': attribute type 17 has an invalid length. [ 1805.385083][T27542] vhci_hcd vhci_hcd.0: Device attached [ 1805.414506][T16016] lo speed is unknown, defaulting to 1000 [ 1806.452110][T27565] 9pnet_virtio: no channels available for device syz [ 1806.484030][ T5914] usb 36-1: SetAddress Request (2) to port 0 [ 1806.490528][ T5914] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1807.211984][T27558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.238545][T27558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.255621][T27558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1807.280002][T16016] lo speed is unknown, defaulting to 1000 [ 1807.479354][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 1807.479372][ T29] audit: type=1400 audit(1775614133.724:2442): avc: denied { firmware_load } for pid=27560 comm="syz.6.5565" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1807.479657][T27565] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1807.520525][T27565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1807.530172][T27565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1808.958427][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5573'. [ 1809.015526][T27543] vhci_hcd: connection reset by peer [ 1809.059865][T26387] vhci_hcd vhci_hcd.1: stop threads [ 1809.066032][T27592] erspan0: left allmulticast mode [ 1809.075517][T26387] vhci_hcd vhci_hcd.1: release socket [ 1809.081508][T27592] erspan0: left promiscuous mode [ 1809.088753][T26387] vhci_hcd vhci_hcd.1: disconnect device [ 1809.100114][T27592] bridge5: port 1(erspan0) entered disabled state [ 1809.394026][T27617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5581'. [ 1810.722669][T27623] 9pnet_virtio: no channels available for device syz [ 1810.782167][ T29] audit: type=1400 audit(1775614137.034:2443): avc: denied { listen } for pid=27631 comm="syz.0.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1810.803084][ T29] audit: type=1400 audit(1775614137.034:2444): avc: denied { accept } for pid=27631 comm="syz.0.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1810.870314][ T29] audit: type=1400 audit(1775614137.114:2445): avc: denied { bind } for pid=27626 comm="syz.6.5583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1810.904985][T27635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.913790][T27635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.161979][T27639] syzkaller0: entered promiscuous mode [ 1811.181664][T27639] syzkaller0: entered allmulticast mode [ 1811.355224][T27643] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1811.361765][T27643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1811.424881][T27643] vhci_hcd vhci_hcd.0: Device attached [ 1811.649826][T16016] usb 34-1: SetAddress Request (6) to port 0 [ 1811.679221][T16016] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1812.172181][ T5914] usb 36-1: device descriptor read/8, error -110 [ 1812.902133][T16039] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1813.058020][T16039] usb 6-1: Using ep0 maxpacket: 32 [ 1813.065160][T16039] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1813.078020][T16039] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1813.096898][T16039] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1813.120215][T16039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1813.132785][T16039] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1813.143172][T16039] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1813.163752][T16039] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1813.173426][T27649] vhci_hcd: connection reset by peer [ 1813.180649][T16039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.188957][ T9723] vhci_hcd vhci_hcd.0: stop threads [ 1813.194147][ T9723] vhci_hcd vhci_hcd.0: release socket [ 1813.208554][ T9723] vhci_hcd vhci_hcd.0: disconnect device [ 1813.219383][T16039] usb 6-1: config 0 descriptor?? [ 1813.300624][ T5914] usb usb36-port1: attempt power cycle [ 1813.371396][T27674] syzkaller0: entered promiscuous mode [ 1813.400831][T27674] syzkaller0: entered allmulticast mode [ 1813.436609][T16039] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1813.634036][T16039] usb 6-1: USB disconnect, device number 39 [ 1813.894641][ T5914] usb usb36-port1: unable to enumerate USB device [ 1814.618643][T16039] usblp0: removed [ 1815.159897][T27696] syzkaller0: entered promiscuous mode [ 1815.165474][T27696] syzkaller0: entered allmulticast mode [ 1815.278440][ T29] audit: type=1400 audit(1775614141.534:2446): avc: denied { connect } for pid=27697 comm="syz.2.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1816.776283][T16016] usb 34-1: device descriptor read/8, error -110 [ 1816.860729][ T29] audit: type=1326 audit(1775614143.094:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.915810][ T29] audit: type=1326 audit(1775614143.094:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982408][ T29] audit: type=1326 audit(1775614143.094:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982458][ T29] audit: type=1326 audit(1775614143.094:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982496][ T29] audit: type=1326 audit(1775614143.094:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982533][ T29] audit: type=1326 audit(1775614143.094:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982571][ T29] audit: type=1326 audit(1775614143.094:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982608][ T29] audit: type=1326 audit(1775614143.094:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1816.982646][ T29] audit: type=1326 audit(1775614143.094:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.6.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c319c819 code=0x7ffc0000 [ 1817.618582][T16016] usb usb34-port1: attempt power cycle [ 1817.758400][ T5914] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1817.919737][ T5914] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1817.919784][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.925512][ T5914] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1817.925540][ T5914] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1817.925561][ T5914] usb 3-1: Manufacturer: syz [ 1817.933579][ T5914] usb 3-1: config 0 descriptor?? [ 1818.090160][ T5914] rc_core: IR keymap rc-hauppauge not found [ 1818.090217][ T5914] Registered IR keymap rc-empty [ 1818.109131][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1818.198904][T16016] usb usb34-port1: unable to enumerate USB device [ 1818.205426][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 1818.595489][T27738] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 540d, magic 54 != 6b] [ 1819.292149][T27757] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 1819.292201][T27757] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 1819.319322][T27756] lo speed is unknown, defaulting to 1000 [ 1819.774116][T16016] usb 3-1: USB disconnect, device number 99 [ 1820.639712][T27778] random: crng reseeded on system resumption [ 1820.758578][ T5914] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1821.016103][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 1821.094593][ T5914] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 1821.203224][ T5914] usb 2-1: config 0 has no interface number 1 [ 1821.307153][ T5914] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1821.445784][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.508394][ T5914] usb 2-1: Product: syz [ 1821.521400][ T5914] usb 2-1: Manufacturer: syz [ 1821.548501][ T5914] usb 2-1: SerialNumber: syz [ 1821.572908][ T5914] usb 2-1: config 0 descriptor?? [ 1821.714165][ T5914] viperboard 2-1:0.61: version 0.00 found at bus 002 address 106 [ 1821.766602][ T5914] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1821.803140][ T5914] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1822.204213][ T5914] viperboard 2-1:0.0: version 0.00 found at bus 002 address 106 [ 1822.303627][ T5914] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1822.453107][T27815] 9pnet_virtio: no channels available for device syz [ 1822.481148][ T5914] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1822.503692][ T5914] usb 2-1: USB disconnect, device number 106 [ 1823.145347][T27826] exFAT-fs (nbd6): unable to read boot sector [ 1823.151530][T27826] exFAT-fs (nbd6): failed to read boot sector [ 1823.157613][T27826] exFAT-fs (nbd6): failed to recognize exfat type [ 1824.056011][T27825] loop5: detected capacity change from 0 to 7 [ 1824.139028][T27825] Dev loop5: unable to read RDB block 7 [ 1824.148139][T27825] loop5: unable to read partition table [ 1824.154272][T27825] loop5: partition table beyond EOD, truncated [ 1824.208083][T27825] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1824.425204][T27833] vivid-000: disconnect [ 1824.544386][T27834] random: crng reseeded on system resumption [ 1825.017872][T27828] vivid-000: reconnect [ 1825.284008][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 1825.284025][ T29] audit: type=1400 audit(1775614151.534:2538): avc: denied { setopt } for pid=27838 comm="syz.2.5649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1825.442132][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5652'. [ 1825.638778][ T5914] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1825.788212][T27857] syz_tun: entered allmulticast mode [ 1825.933535][ T5914] usb 1-1: device descriptor read/64, error -71 [ 1827.363615][T27867] syzkaller0: entered promiscuous mode [ 1827.369334][T27867] syzkaller0: entered allmulticast mode [ 1827.397610][ T5914] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1827.685349][ T5914] usb 1-1: device descriptor read/64, error -71 [ 1827.813262][ T5914] usb usb1-port1: attempt power cycle [ 1828.141148][T27886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5663'. [ 1828.190230][ T5914] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1828.228601][ T5914] usb 1-1: device descriptor read/8, error -71 [ 1829.848247][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.854236][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.863116][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.874737][T27878] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1829.956409][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.966151][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.973505][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.980754][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.987910][T27878] wg1 speed is unknown, defaulting to 1000 [ 1829.995199][T27878] wg1 speed is unknown, defaulting to 1000 [ 1830.029936][T27894] ¾x9ÿ: renamed from lo (while UP) [ 1830.150639][T27900] random: crng reseeded on system resumption [ 1830.906520][T27906] binder: 27904:27906 ioctl 4018620d 0 returned -22 [ 1831.044070][T27906] binder: 27904:27906 ioctl c0306201 200000000180 returned -14 [ 1831.795107][T27923] siw: device registration error -23 [ 1833.038859][T27949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5678'. [ 1833.759815][T27985] binder: 27975:27985 ioctl c0306201 200000000640 returned -22 [ 1835.891511][T28049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1836.259822][T28049] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1836.271356][T28049] overlayfs: failed to look up (tracing) for ino (-66) [ 1836.449482][ T29] audit: type=1400 audit(1775614162.114:2539): avc: denied { mount } for pid=28032 comm="syz.1.5699" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1836.770602][ T29] audit: type=1400 audit(1775614162.124:2540): avc: denied { mounton } for pid=28032 comm="syz.1.5699" path="/526/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1836.794136][ T29] audit: type=1400 audit(1775614162.684:2541): avc: denied { write } for pid=28032 comm="syz.1.5699" path="socket:[132855]" dev="sockfs" ino=132855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1837.975358][ T29] audit: type=1400 audit(1775614164.224:2542): avc: denied { unmount } for pid=17719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1838.293295][T28077] netlink: 8752 bytes leftover after parsing attributes in process `syz.6.5711'. [ 1838.373857][T28075] syzkaller0: entered promiscuous mode [ 1838.408087][T28075] syzkaller0: entered allmulticast mode [ 1838.435085][T28079] netlink: 'syz.5.5712': attribute type 29 has an invalid length. [ 1838.466760][T28083] netlink: 'syz.5.5712': attribute type 29 has an invalid length. [ 1838.818886][T28099] exFAT-fs (nbd1): unable to read boot sector [ 1838.825064][T28099] exFAT-fs (nbd1): failed to read boot sector [ 1838.831504][T28099] exFAT-fs (nbd1): failed to recognize exfat type [ 1840.320937][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5725'. [ 1841.840968][T28150] fuse: Bad value for 'fd' [ 1841.897340][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5737'. [ 1841.924014][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5737'. [ 1841.943767][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5737'. [ 1841.969755][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5737'. [ 1841.981137][T28157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5738'. [ 1841.988607][T28154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1842.020658][T28160] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1842.157040][ T29] audit: type=1400 audit(1775614168.404:2543): avc: denied { read } for pid=28169 comm="syz.1.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1842.222093][ T29] audit: type=1400 audit(1775614168.474:2544): avc: denied { read } for pid=28167 comm="syz.6.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1842.483668][T28197] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5755'. [ 1842.501375][T28197] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5755'. [ 1842.821203][T28224] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1842.951387][T28224] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1842.974722][T28224] overlayfs: failed to look up (tracing) for ino (-66) [ 1843.212015][T28230] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1843.240275][T28230] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1843.583664][T28241] fuse: Bad value for 'group_id' [ 1843.628128][T28241] fuse: Bad value for 'group_id' [ 1843.714274][T28246] __nla_validate_parse: 2 callbacks suppressed [ 1843.714294][T28246] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1843.889809][T28262] netlink: 'syz.1.5784': attribute type 29 has an invalid length. [ 1843.916422][T28262] netlink: 'syz.1.5784': attribute type 29 has an invalid length. [ 1843.963483][T28262] netlink: 'syz.1.5784': attribute type 29 has an invalid length. [ 1844.028427][T28269] netlink: 'syz.1.5784': attribute type 29 has an invalid length. [ 1844.338068][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1844.422819][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1844.440135][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1844.452937][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1844.464360][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1844.486229][ T29] audit: type=1400 audit(1775614170.734:2545): avc: denied { mounton } for pid=28277 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1844.578963][T28277] ¾x9ÿ speed is unknown, defaulting to 1000 [ 1844.586341][T28277] wg1 speed is unknown, defaulting to 1000 [ 1844.678296][T28282] netlink: 'syz.1.5791': attribute type 3 has an invalid length. [ 1844.900320][T28277] chnl_net:caif_netlink_parms(): no params data found [ 1845.053834][T28277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.068043][ T29] audit: type=1400 audit(1775614171.304:2546): avc: denied { name_bind } for pid=28289 comm="syz.6.5793" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1845.068104][T28277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.098780][T28277] bridge_slave_0: entered allmulticast mode [ 1845.106572][T28277] bridge_slave_0: entered promiscuous mode [ 1845.118060][T28277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.128367][T28277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.148506][T28277] bridge_slave_1: entered allmulticast mode [ 1845.156849][T28277] bridge_slave_1: entered promiscuous mode [ 1845.193063][ T29] audit: type=1400 audit(1775614171.304:2547): avc: denied { name_connect } for pid=28289 comm="syz.6.5793" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1845.197338][T28277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.228551][T28277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.251286][T28294] netlink: 8752 bytes leftover after parsing attributes in process `syz.6.5794'. [ 1845.322514][T28277] team0: Port device team_slave_0 added [ 1845.359563][T28277] team0: Port device team_slave_1 added [ 1845.432605][T28277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.448521][T28277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.498086][T28277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.515795][T28277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.524528][T28277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.658020][T28277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.668769][T28304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1845.675263][T28304] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1845.851409][T28277] hsr_slave_0: entered promiscuous mode [ 1845.878832][T28277] hsr_slave_1: entered promiscuous mode [ 1845.888699][T28304] vhci_hcd vhci_hcd.0: Device attached [ 1846.198024][ T5914] usb 36-1: SetAddress Request (6) to port 0 [ 1846.198550][T28318] netlink: 4563 bytes leftover after parsing attributes in process `syz.2.5800'. [ 1846.205171][ T5914] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1846.245162][T28305] vhci_hcd: connection closed [ 1846.246030][ T1155] vhci_hcd vhci_hcd.1: stop threads [ 1846.255969][ T1155] vhci_hcd vhci_hcd.1: release socket [ 1846.308060][ T1155] vhci_hcd vhci_hcd.1: disconnect device [ 1846.539010][T13278] Bluetooth: hci4: command tx timeout [ 1846.833669][ T5922] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1846.905525][T28277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1846.971563][T28277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1846.985920][T28277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1846.998006][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1847.006374][T28277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1847.194468][T28277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1847.234493][T28277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1847.249550][ T5922] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1847.279234][T26400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.286357][T26400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1847.324457][T28277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1847.336127][T28277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1847.354761][T26400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.361915][T26400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1847.437383][T28345] fuse: Bad value for 'group_id' [ 1847.442674][T16016] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1847.448007][ T5922] usb 6-1: device descriptor read/64, error -71 [ 1847.467611][T28345] fuse: Bad value for 'group_id' [ 1847.576205][ T5922] usb usb6-port1: attempt power cycle [ 1847.609253][T16016] usb 2-1: Using ep0 maxpacket: 32 [ 1847.615862][T16016] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 1847.624137][T16016] usb 2-1: config 0 has no interface number 1 [ 1847.636611][T16016] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1847.645842][T16016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.655563][T16016] usb 2-1: Product: syz [ 1847.656230][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1847.660925][T16016] usb 2-1: Manufacturer: syz [ 1847.725827][T16016] usb 2-1: SerialNumber: syz [ 1847.734684][T28277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1847.773768][T16016] usb 2-1: config 0 descriptor?? [ 1847.861814][T28277] veth0_vlan: entered promiscuous mode [ 1847.873851][T28277] veth1_vlan: entered promiscuous mode [ 1847.901025][T16016] viperboard 2-1:0.61: version 0.00 found at bus 002 address 107 [ 1847.913250][T28277] veth0_macvtap: entered promiscuous mode [ 1847.919192][T16016] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1847.932620][T28277] veth1_macvtap: entered promiscuous mode [ 1847.938820][T16016] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1847.939737][ T5922] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1847.992685][T28277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.003310][T16016] viperboard 2-1:0.0: version 0.00 found at bus 002 address 107 [ 1848.004192][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1848.085172][T28277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.085486][T16016] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1848.106970][T16016] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1848.132794][ T1155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.152822][ T1155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.165924][T16016] usb 2-1: USB disconnect, device number 107 [ 1848.192153][ T1155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.323136][ T1155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.368261][ T5922] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1848.394799][ T5922] usb 6-1: device descriptor read/8, error -71 [ 1848.492317][ T9723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.504390][ T9723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.535869][ T9723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.538700][ T5922] usb usb6-port1: unable to enumerate USB device [ 1848.570602][ T9723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.585458][ T29] audit: type=1400 audit(1775614174.834:2548): avc: denied { mounton } for pid=28277 comm="syz-executor" path="/root/syzkaller.cPgFwx/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1848.594561][T28371] fuse: Bad value for 'group_id' [ 1848.610840][T13278] Bluetooth: hci4: command tx timeout [ 1848.653887][T28371] fuse: Bad value for 'group_id' [ 1848.654579][ T29] audit: type=1400 audit(1775614174.834:2549): avc: denied { mounton } for pid=28277 comm="syz-executor" path="/root/syzkaller.cPgFwx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=134711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1848.689503][ T29] audit: type=1400 audit(1775614174.884:2550): avc: denied { mounton } for pid=28277 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1848.715451][ T29] audit: type=1400 audit(1775614174.884:2551): avc: denied { mount } for pid=28277 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1848.739137][ T29] audit: type=1400 audit(1775614174.884:2552): avc: denied { mounton } for pid=28277 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1849.314281][T28401] fuse: Bad value for 'group_id' [ 1849.330711][T28401] fuse: Bad value for 'group_id' [ 1849.553158][T28408] netlink: 'syz.0.5833': attribute type 4 has an invalid length. [ 1849.678314][T28408] netlink: 'syz.0.5833': attribute type 2 has an invalid length. [ 1849.712559][T28408] netlink: 5156 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1850.251272][T28439] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5848'. [ 1850.586087][ T29] audit: type=1326 audit(1775614176.834:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28451 comm="syz.2.5854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd92859c819 code=0x0 [ 1850.689551][T13278] Bluetooth: hci4: command tx timeout [ 1851.310514][T28474] bridge_slave_0: left allmulticast mode [ 1851.316195][T28474] bridge_slave_0: left promiscuous mode [ 1851.325336][T28474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.333534][ T5914] usb 36-1: device descriptor read/8, error -110 [ 1851.351614][T28474] bridge_slave_1: left allmulticast mode [ 1851.363257][T28474] bridge_slave_1: left promiscuous mode [ 1851.373486][T28474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.393668][T28474] bond0: (slave bond_slave_0): Releasing backup interface [ 1851.458560][T28474] bond0: (slave bond_slave_1): Releasing backup interface [ 1851.495112][T28474] team0: Port device team_slave_0 removed [ 1851.495395][T28483] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1851.512844][T28474] team0: Port device team_slave_1 removed [ 1851.521618][T28474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1851.530592][T28474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1851.550513][T28474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1851.561880][T28474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1851.579726][T28474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1851.630714][T28490] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1851.728931][ T5914] usb usb36-port1: attempt power cycle [ 1851.732922][ T29] audit: type=1400 audit(1775614177.974:2554): avc: denied { watch watch_reads } for pid=28494 comm="syz.5.5871" path="pipe:[87288]" dev="pipefs" ino=87288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1851.790168][T28497] fuse: Unknown parameter 'grou00000000000000000000' [ 1851.873540][T28501] syzkaller0: entered promiscuous mode [ 1851.891890][T28501] syzkaller0: entered allmulticast mode [ 1852.299422][ T5914] usb usb36-port1: unable to enumerate USB device [ 1852.339071][ T29] audit: type=1400 audit(1775614178.584:2555): avc: denied { ioctl } for pid=28531 comm="syz.5.5886" path="socket:[135363]" dev="sockfs" ino=135363 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1852.399465][T28541] netlink: 'syz.0.5891': attribute type 1 has an invalid length. [ 1852.542276][T28548] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5892'. [ 1852.566258][T28548] netlink: Conntrack attr has 4 unknown bytes [ 1852.568800][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5896'. [ 1852.709863][ T5914] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1852.771465][T13278] Bluetooth: hci4: command tx timeout [ 1852.899540][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 1852.920281][ T5914] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 1852.934502][ T5914] usb 1-1: config 0 has no interface number 1 [ 1852.970021][ T5914] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1852.990485][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.103148][ T5914] usb 1-1: Product: syz [ 1853.107417][ T5914] usb 1-1: Manufacturer: syz [ 1853.113406][ T29] audit: type=1400 audit(1775614179.354:2556): avc: denied { setopt } for pid=28580 comm="syz.5.5907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1853.146773][ T5914] usb 1-1: SerialNumber: syz [ 1853.152786][ T5914] usb 1-1: config 0 descriptor?? [ 1853.268502][ T5914] viperboard 1-1:0.61: version 0.00 found at bus 001 address 103 [ 1853.307493][T28592] 9pnet_virtio: no channels available for device syz [ 1853.337375][ T5914] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1853.490729][ T5914] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1853.519824][ T29] audit: type=1400 audit(1775614179.764:2557): avc: denied { write } for pid=28579 comm="syz.1.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1853.568638][ T5914] viperboard 1-1:0.0: version 0.00 found at bus 001 address 103 [ 1853.619133][ T5914] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1853.629757][ T5914] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1853.651948][T28605] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5911'. [ 1853.679438][T28605] netlink: Conntrack attr has 4 unknown bytes [ 1853.762489][ T29] audit: type=1326 audit(1775614180.014:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28602 comm="syz.2.5913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd92859c819 code=0x0 [ 1853.796080][ T5914] usb 1-1: USB disconnect, device number 103 [ 1855.835169][T28639] fuse: Unknown parameter 'group_i00000000000000000000' [ 1856.226243][T28658] netlink: 'syz.6.5931': attribute type 29 has an invalid length. [ 1856.304195][T28664] netlink: 'syz.0.5934': attribute type 1 has an invalid length. [ 1856.315776][T28661] 9pnet_virtio: no channels available for device syz [ 1856.334153][T28658] netlink: 'syz.6.5931': attribute type 29 has an invalid length. [ 1856.489667][T28672] fuse: Unknown parameter 'group_i00000000000000000000' [ 1856.728637][T28679] ¾x9ÿ: renamed from lo (while UP) [ 1858.179878][T28702] netlink: 'syz.0.5949': attribute type 1 has an invalid length. [ 1858.420726][T28714] bridge_slave_0: left allmulticast mode [ 1858.440794][T28714] bridge_slave_0: left promiscuous mode [ 1858.458739][T28714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.500596][T28714] bridge_slave_1: left allmulticast mode [ 1858.508133][T28714] bridge_slave_1: left promiscuous mode [ 1858.515755][T28714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.527522][T28714] bond0: (slave bond_slave_0): Releasing backup interface [ 1858.538703][T28714] bond0: (slave bond_slave_1): Releasing backup interface [ 1858.562636][T28714] team0: Port device team_slave_0 removed [ 1858.579787][T28714] team0: Port device team_slave_1 removed [ 1858.585962][T28714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.598973][T28714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1858.606720][T28714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1858.624799][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5956'. [ 1858.874733][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5961'. [ 1858.893632][T28738] fuse: Unknown parameter 'grou00000000000000000000' [ 1859.180216][T28752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1859.266753][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1859.276252][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1859.311177][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1859.350364][T17303] syz_tun (unregistering): left allmulticast mode [ 1859.442826][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1859.450905][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1859.676481][T28767] 9pnet_virtio: no channels available for device syz [ 1859.759258][T28756] ¾x9ÿ speed is unknown, defaulting to 1000 [ 1859.766476][T28756] wg1 speed is unknown, defaulting to 1000 [ 1860.312697][T28781] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5974'. [ 1860.706759][T28800] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1860.713308][T28800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1860.722293][T26402] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 1861.378545][T28800] vhci_hcd vhci_hcd.0: Device attached [ 1861.388947][T28801] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1861.414910][ T1011] vhci_hcd vhci_hcd.5: stop threads [ 1861.438075][ T1011] vhci_hcd vhci_hcd.5: release socket [ 1861.443533][ T1011] vhci_hcd vhci_hcd.5: disconnect device [ 1861.457477][T28756] chnl_net:caif_netlink_parms(): no params data found [ 1861.572195][T13278] Bluetooth: hci5: command tx timeout [ 1861.705949][T28756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.719718][T28756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.727558][T28756] bridge_slave_0: entered allmulticast mode [ 1861.749326][T28756] bridge_slave_0: entered promiscuous mode [ 1861.851480][T28756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.870985][T28756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.967409][T28829] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1862.840950][T28756] bridge_slave_1: entered allmulticast mode [ 1862.847703][T28756] bridge_slave_1: entered promiscuous mode [ 1862.866842][T28756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.877546][T28756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.149629][T28756] team0: Port device team_slave_0 added [ 1863.170976][T28833] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1863.200699][T28756] team0: Port device team_slave_1 added [ 1863.255885][T28840] netlink: 'syz.1.5984': attribute type 1 has an invalid length. [ 1863.377736][T28852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1863.463152][T28847] bond12: (slave geneve3): making interface the new active one [ 1863.669072][T28855] usb usb7: usbfs: process 28855 (syz.0.5989) did not claim interface 0 before use [ 1863.678763][T28855] usb usb7: selecting invalid altsetting 7 [ 1863.689191][T13278] Bluetooth: hci5: command tx timeout [ 1863.699554][T28847] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 1863.733253][T28756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1863.740630][T28756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1863.767737][T28756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1863.790878][T28756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1863.800271][T28756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1863.832721][T28756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.870041][T28852] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1863.894568][T26390] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1863.908391][T26390] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1864.090644][T26390] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1864.214816][T26390] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1864.257117][T28756] hsr_slave_0: entered promiscuous mode [ 1864.266976][T28756] hsr_slave_1: entered promiscuous mode [ 1864.273327][T28756] debugfs: 'hsr0' already exists in 'hsr' [ 1864.280272][T28756] Cannot create hsr debugfs directory [ 1864.533514][T26402] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1864.713245][T26402] bond11 (unregistering): (slave geneve2): Releasing active interface [ 1864.834694][T28893] 9pnet_virtio: no channels available for device syz [ 1864.915148][T26402] bond0 (unregistering): Released all slaves [ 1864.924145][T26402] bond1 (unregistering): Released all slaves [ 1864.947859][T26402] bond2 (unregistering): Released all slaves [ 1864.964927][T26402] bond3 (unregistering): Released all slaves [ 1864.982039][T26402] bond4 (unregistering): Released all slaves [ 1864.994435][T26402] bond5 (unregistering): Released all slaves [ 1865.027204][T26402] bond6 (unregistering): Released all slaves [ 1865.042226][T26402] bond7 (unregistering): Released all slaves [ 1865.089262][T26402] bond8 (unregistering): Released all slaves [ 1865.121247][T26402] bond9 (unregistering): Released all slaves [ 1865.148219][T26402] bond10 (unregistering): Released all slaves [ 1865.206147][T26402] bond11 (unregistering): Released all slaves [ 1865.298516][T26402] bond12 (unregistering): Released all slaves [ 1865.358857][T26402] bond13 (unregistering): Released all slaves [ 1865.408792][T26402] bond14 (unregistering): Released all slaves [ 1865.665890][T26402] IPVS: stopping backup sync thread 25437 ... [ 1865.728763][T13278] Bluetooth: hci5: command tx timeout [ 1865.782008][ T29] audit: type=1800 audit(1775614192.034:2559): pid=28905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5998" name="bus" dev="tmpfs" ino=3261 res=0 errno=0 [ 1866.111267][T26402] hsr_slave_0: left promiscuous mode [ 1866.153084][T26402] hsr_slave_1: left promiscuous mode [ 1867.139855][T28951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6007'. [ 1867.386064][T28951] vlan3: entered allmulticast mode [ 1867.392980][T28951] bridge7: entered allmulticast mode [ 1867.454329][T28956] bridge7: port 1(erspan0) entered blocking state [ 1867.597521][T28956] bridge7: port 1(erspan0) entered disabled state [ 1867.627782][T28956] erspan0: entered allmulticast mode [ 1867.637828][T28956] erspan0: entered promiscuous mode [ 1867.644163][T28956] bridge7: port 1(erspan0) entered blocking state [ 1867.650724][T28956] bridge7: port 1(erspan0) entered forwarding state [ 1867.821997][T13278] Bluetooth: hci5: command tx timeout [ 1868.229432][T28756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1868.268704][T28756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1868.326547][T28756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1868.350601][T28756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1868.533771][T28979] 9pnet_virtio: no channels available for device syz [ 1869.035538][T28989] 9pnet_virtio: no channels available for device syz [ 1869.161916][T28756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.199657][T28756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.222606][T26398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.229717][T26398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.240192][T26398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.247272][T26398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.946262][T28756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1870.087045][T28756] veth0_vlan: entered promiscuous mode [ 1870.130608][T28756] veth1_vlan: entered promiscuous mode [ 1870.197625][T28756] veth0_macvtap: entered promiscuous mode [ 1870.242112][T28756] veth1_macvtap: entered promiscuous mode [ 1870.457062][T28756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1870.491403][T28756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.575515][T26390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.588001][T26390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.666481][T26390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.701436][T26390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.838927][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.846799][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.952844][T26390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.989461][T26390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.152649][T29032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1871.159205][T29032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1871.175786][T29032] vhci_hcd vhci_hcd.0: Device attached [ 1871.259622][T29033] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1871.273669][ T1011] vhci_hcd vhci_hcd.1: stop threads [ 1871.284026][ T1011] vhci_hcd vhci_hcd.1: release socket [ 1871.295820][ T1011] vhci_hcd vhci_hcd.1: disconnect device [ 1871.358115][ T5880] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1871.457061][T29047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1872.306229][T29067] 9pnet_virtio: no channels available for device syz [ 1872.721853][T29075] ¾x9ÿ„⃪: renamed from lo (while UP) [ 1874.354087][T29087] random: crng reseeded on system resumption [ 1874.605819][T29092] 8021q: VLANs not supported on vcan0 [ 1874.711506][T29099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1874.723308][T29099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1874.917219][T29105] netlink: 5240 bytes leftover after parsing attributes in process `syz.5.6041'. [ 1874.927613][T29105] nbd: must specify a size in bytes for the device [ 1876.708606][T29118] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1877.010330][T29123] syzkaller0: entered promiscuous mode [ 1877.021148][T29123] syzkaller0: entered allmulticast mode [ 1877.381525][T25864] syz_tun (unregistering): left allmulticast mode [ 1877.512522][T29136] random: crng reseeded on system resumption [ 1877.624352][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1877.636502][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1877.647184][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1877.672954][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.684625][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1877.709932][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1877.717350][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1877.794154][T29137] ¾x9ÿ speed is unknown, defaulting to 1000 [ 1877.809876][T29137] wg1 speed is unknown, defaulting to 1000 [ 1877.829774][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.852205][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1877.980216][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.991129][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1878.095698][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.107088][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1878.154155][T29152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1878.372064][T29137] chnl_net:caif_netlink_parms(): no params data found [ 1878.701573][ T13] bridge_slave_1: left allmulticast mode [ 1878.736730][ T13] bridge_slave_1: left promiscuous mode [ 1878.742961][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.766441][ T13] bridge_slave_0: left allmulticast mode [ 1878.774448][ T13] bridge_slave_0: left promiscuous mode [ 1878.781142][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.284508][ T13] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1879.410433][ T13] bond12 (unregistering): (slave geneve3): Releasing active interface [ 1879.542083][ T13] team0: Port device bond0 removed [ 1879.549276][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 1879.560113][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1879.570871][ T13] bond0 (unregistering): Released all slaves [ 1879.590097][ T13] bond1 (unregistering): Released all slaves [ 1879.604047][ T13] bond2 (unregistering): Released all slaves [ 1879.618759][ T13] bond3 (unregistering): Released all slaves [ 1879.633445][ T13] bond4 (unregistering): Released all slaves [ 1879.652283][ T13] bond5 (unregistering): Released all slaves [ 1879.663082][ T13] bond6 (unregistering): Released all slaves [ 1879.673932][ T13] bond7 (unregistering): Released all slaves [ 1879.690782][ T13] bond8 (unregistering): Released all slaves [ 1879.701902][ T13] bond9 (unregistering): Released all slaves [ 1879.712704][ T13] bond10 (unregistering): Released all slaves [ 1879.732758][ T13] bond11 (unregistering): Released all slaves [ 1879.747248][ T13] bond12 (unregistering): Released all slaves [ 1879.761382][T29137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.768774][T29137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.776091][T29137] bridge_slave_0: entered allmulticast mode [ 1879.790712][T29137] bridge_slave_0: entered promiscuous mode [ 1879.801726][T29137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.816435][ T50] Bluetooth: hci2: command tx timeout [ 1879.824665][T29137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.832346][T29137] bridge_slave_1: entered allmulticast mode [ 1879.844176][T29137] bridge_slave_1: entered promiscuous mode [ 1879.920677][T29175] syzkaller0: entered promiscuous mode [ 1879.926352][T29175] syzkaller0: entered allmulticast mode [ 1879.949373][T29203] syzkaller0: entered promiscuous mode [ 1879.954880][T29203] syzkaller0: entered allmulticast mode [ 1880.309323][T29217] random: crng reseeded on system resumption [ 1880.590840][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1881.905230][ T50] Bluetooth: hci2: command tx timeout [ 1882.659590][ T13] : left promiscuous mode [ 1882.783210][T29137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.875004][T29137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.904603][ T13] IPVS: stopping backup sync thread 25440 ... [ 1882.968087][T29137] team0: Port device team_slave_0 added [ 1882.973971][T29241] syzkaller0: entered promiscuous mode [ 1882.995300][T29241] syzkaller0: entered allmulticast mode [ 1883.083118][T29137] team0: Port device team_slave_1 added [ 1883.248217][ T5880] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1883.328928][T29137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1883.346205][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.427972][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 1883.448441][ T29] audit: type=1400 audit(1775614209.684:2560): avc: denied { write } for pid=29272 comm="syz.6.6074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1883.479565][ T5880] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 1883.487675][ T5880] usb 1-1: config 0 has no interface number 1 [ 1883.495237][T29137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1883.512989][T29137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1883.529419][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.585134][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6075'. [ 1883.670635][T29137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.682607][ T5880] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1883.692095][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.762534][ T5880] usb 1-1: Product: syz [ 1883.775808][ T5880] usb 1-1: Manufacturer: syz [ 1883.823897][ T5880] usb 1-1: SerialNumber: syz [ 1883.842655][ T5880] usb 1-1: config 0 descriptor?? [ 1883.950318][T29289] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6077'. [ 1883.969853][ T5880] viperboard 1-1:0.61: version 0.00 found at bus 001 address 104 [ 1883.979014][ T50] Bluetooth: hci2: command tx timeout [ 1884.026305][ T5880] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1884.359015][ T5880] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1884.385015][ T5880] viperboard 1-1:0.0: version 0.00 found at bus 001 address 104 [ 1884.449507][T29137] hsr_slave_0: entered promiscuous mode [ 1884.462490][T29137] hsr_slave_1: entered promiscuous mode [ 1884.484244][T29137] debugfs: 'hsr0' already exists in 'hsr' [ 1884.490259][ T5880] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1884.500865][T29137] Cannot create hsr debugfs directory [ 1884.506290][ T5880] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1884.524383][ T5880] usb 1-1: USB disconnect, device number 104 [ 1884.597515][T29291] syzkaller0: entered promiscuous mode [ 1884.607764][T29291] syzkaller0: entered allmulticast mode [ 1886.048693][ T50] Bluetooth: hci2: command tx timeout [ 1886.963566][ T13] hsr_slave_0: left promiscuous mode [ 1886.969326][ T13] hsr_slave_1: left promiscuous mode [ 1886.975390][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.983038][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1886.990666][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.000522][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.009143][ T13] batman_adv: batadv0: Interface deactivated: vlan1 [ 1887.015826][ T13] batman_adv: batadv0: Removing interface: vlan1 [ 1887.035915][ T13] veth1_macvtap: left promiscuous mode [ 1887.041502][ T13] veth0_macvtap: left promiscuous mode [ 1887.047041][ T13] veth1_vlan: left promiscuous mode [ 1888.242211][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1888.265083][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1889.054794][T29318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.062545][T29318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.071961][T29318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1889.117376][T29313] ¾x9ÿ speed is unknown, defaulting to 1000 [ 1889.126232][T29336] syzkaller0: entered promiscuous mode [ 1889.149195][T29336] syzkaller0: entered allmulticast mode [ 1889.156253][ T1155] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.176784][ T1155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.196901][T29313] wg1 speed is unknown, defaulting to 1000 [ 1889.252405][ T1155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.344520][ T1155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.398243][T29361] input: syz0 as /devices/virtual/input/input52 [ 1889.860111][T29372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1889.973211][T29378] netlink: 'syz.5.6089': attribute type 4 has an invalid length. [ 1889.988423][T29378] netlink: 'syz.5.6089': attribute type 6 has an invalid length. [ 1890.102058][T29381] syzkaller0: entered promiscuous mode [ 1890.107551][T29381] syzkaller0: entered allmulticast mode [ 1890.178422][ T29] audit: type=1326 audit(1775614216.434:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.274809][ T29] audit: type=1326 audit(1775614216.454:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.306542][ T29] audit: type=1326 audit(1775614216.454:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.338849][ T29] audit: type=1326 audit(1775614216.454:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.419071][ T29] audit: type=1326 audit(1775614216.454:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.472319][ T29] audit: type=1326 audit(1775614216.454:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.501331][ T29] audit: type=1326 audit(1775614216.454:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.525408][ T29] audit: type=1326 audit(1775614216.454:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.588969][ T29] audit: type=1326 audit(1775614216.454:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1890.617557][ T29] audit: type=1326 audit(1775614216.454:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29375 comm="syz.2.6090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0eb459c819 code=0x7ffc0000 [ 1892.955622][T29404] syzkaller0: entered promiscuous mode [ 1892.964528][T29404] syzkaller0: entered allmulticast mode [ 1893.216214][T29413] syzkaller0: entered promiscuous mode [ 1893.222504][T29413] syzkaller0: entered allmulticast mode [ 1893.239619][T29137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1893.261293][T29137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1893.276869][T29137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1893.381857][T29137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1893.599655][T29444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6099'. [ 1893.632159][T29137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.704724][T29137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.751446][T26398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.758569][T26398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.804134][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.811262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.926226][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6102'. [ 1894.405743][T29137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.499140][T29137] veth0_vlan: entered promiscuous mode [ 1894.508859][T29137] veth1_vlan: entered promiscuous mode [ 1894.606981][T29137] veth0_macvtap: entered promiscuous mode [ 1894.635033][T29137] veth1_macvtap: entered promiscuous mode [ 1894.743127][T29137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1894.972836][T29137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1895.102878][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.112074][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.142728][T29481] syzkaller0: entered promiscuous mode [ 1895.154867][T29481] syzkaller0: entered allmulticast mode [ 1895.567523][ T9723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.622607][T29494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6109'. [ 1895.631520][ T9723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.650307][T29483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.708818][T29483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.733213][T29483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1895.764024][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.787471][T29484] syzkaller0: entered promiscuous mode [ 1895.793242][T29484] syzkaller0: entered allmulticast mode [ 1895.889570][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.066036][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.085222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.115545][T29515] syzkaller0: entered promiscuous mode [ 1896.126662][T29515] syzkaller0: entered allmulticast mode [ 1896.183212][T29515] tipc: Started in network mode [ 1896.198099][T29515] tipc: Node identity 4ae013ff5777, cluster identity 4711 [ 1896.207837][T29515] tipc: Enabled bearer , priority 0 [ 1896.239932][T29514] tipc: Resetting bearer [ 1896.345400][T29514] tipc: Disabling bearer [ 1896.415620][T29525] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6114'. [ 1896.426590][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6115'. [ 1896.933966][T29529] syzkaller0: entered promiscuous mode [ 1896.958051][T29529] syzkaller0: entered allmulticast mode [ 1897.535310][T25510] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1897.691111][T25510] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1897.699573][T25510] usb 1-1: config 0 has no interface number 0 [ 1897.720787][T25510] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1897.730216][T25510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.738596][T25510] usb 1-1: Product: syz [ 1897.743001][T25510] usb 1-1: Manufacturer: syz [ 1897.747678][T25510] usb 1-1: SerialNumber: syz [ 1897.768465][T25510] usb 1-1: config 0 descriptor?? [ 1897.999155][T29568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.008741][T29568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.051508][T25510] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1898.058962][T25510] uvcvideo 1-1:0.64: No valid video chain found. [ 1898.068280][T25510] usb 1-1: USB disconnect, device number 105 [ 1899.382242][T29549] syzkaller0: entered promiscuous mode [ 1899.387752][T29549] syzkaller0: entered allmulticast mode [ 1899.421215][T29594] syzkaller0: entered promiscuous mode [ 1899.427799][T29594] syzkaller0: entered allmulticast mode [ 1899.435063][T29601] tipc: Started in network mode [ 1899.444612][T29601] tipc: Node identity 1283aec5d08d, cluster identity 4711 [ 1899.482525][T29601] tipc: Enabled bearer , priority 0 [ 1899.528418][T29591] tipc: Resetting bearer [ 1899.613876][T29591] tipc: Disabling bearer [ 1899.680400][T29615] fuse: Unknown parameter 'user_i00000000000000000000' [ 1899.883752][T29628] syzkaller0: entered promiscuous mode [ 1899.889530][T29628] syzkaller0: entered allmulticast mode [ 1900.044521][T25323] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1900.204756][T25323] usb 1-1: Using ep0 maxpacket: 8 [ 1900.216707][T25323] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1900.251265][T25323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.301552][T25323] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1900.315324][T25323] pvrusb2: ********** [ 1900.331891][T25323] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1900.363980][T25323] pvrusb2: Important functionality might not be entirely working. [ 1900.387816][T25323] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1900.402359][T25323] pvrusb2: ********** [ 1900.525213][ T2338] pvrusb2: Invalid write control endpoint [ 1900.623403][ T2338] pvrusb2: Invalid write control endpoint [ 1900.640083][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1900.659364][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1900.668017][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1900.725590][ T2338] pvrusb2: Device being rendered inoperable [ 1900.736190][ T5866] usb 1-1: USB disconnect, device number 106 [ 1900.746109][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1900.785583][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1900.796483][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1900.802247][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1900.818142][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1901.245462][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6146'. [ 1903.384184][T29692] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6151'. [ 1903.529174][T29695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6152'. [ 1903.893535][T29672] tipc: Enabling of bearer rejected, failed to enable media [ 1903.910379][T29697] erspan0: left allmulticast mode [ 1903.915511][T29697] erspan0: left promiscuous mode [ 1903.921444][T29697] bridge7: port 1(erspan0) entered disabled state [ 1904.322848][T29712] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.6159'. [ 1904.360139][T29709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.367710][T29709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.515433][T29709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1904.536319][T29709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1904.828422][ T5866] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1904.886943][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1904.886961][ T29] audit: type=1326 audit(1775614231.134:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29723 comm="syz.6.6162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51c319c819 code=0x0 [ 1904.925347][T29710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.935791][T29710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.951314][T29710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1904.969772][T26387] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.981626][T26387] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.990828][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 1905.006586][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1905.028503][T26387] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.040176][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.058565][T26400] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.082356][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1905.096166][ T5866] pvrusb2: ********** [ 1905.101858][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1905.121279][T29726] tipc: Resetting bearer [ 1905.126585][ T5866] pvrusb2: Important functionality might not be entirely working. [ 1905.135983][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1905.162543][ T5866] pvrusb2: ********** [ 1905.298258][ T2338] pvrusb2: Invalid write control endpoint [ 1905.444733][ T2338] pvrusb2: Invalid write control endpoint [ 1905.473408][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1905.655615][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1905.694852][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1905.849834][T29748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6165'. [ 1905.873545][ T2338] pvrusb2: Device being rendered inoperable [ 1905.898794][T29714] pvrusb2: Attempted to execute control transfer when device not ok [ 1905.910645][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1905.919175][T14429] usb 6-1: USB disconnect, device number 44 [ 1905.943785][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1905.969785][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1905.996554][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1906.035148][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1906.205820][T29726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1906.219436][T29726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1906.349715][T29726] batman_adv: batadv0: Interface deactivated: macsec1 [ 1906.392368][T26400] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.408581][T26400] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.448942][T29752] syzkaller0: entered promiscuous mode [ 1906.471299][T29752] syzkaller0: entered allmulticast mode [ 1906.504376][T26400] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.535435][T26400] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.595691][T29752] tipc: Enabled bearer , priority 0 [ 1906.604141][T29756] syzkaller0: entered promiscuous mode [ 1906.613638][T29756] syzkaller0: entered allmulticast mode [ 1906.636134][T29751] tipc: Resetting bearer [ 1906.721507][T29751] tipc: Disabling bearer [ 1906.734966][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6173'. [ 1906.779943][T29772] binder: 29771:29772 ioctl 4018620d 0 returned -22 [ 1906.804379][T29772] binder: 29771:29772 ioctl c0306201 200000000180 returned -14 [ 1907.080205][T29787] siw: device registration error -23 [ 1907.213745][ T29] audit: type=1400 audit(1775614233.464:2593): avc: denied { bind } for pid=29784 comm="syz.5.6181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1907.238791][T21881] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1907.334930][T29783] syzkaller0: entered promiscuous mode [ 1907.364543][T29783] syzkaller0: entered allmulticast mode [ 1907.394025][ T29] audit: type=1400 audit(1775614233.524:2594): avc: denied { read } for pid=29784 comm="syz.5.6181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1907.469316][T21881] usb 3-1: Using ep0 maxpacket: 8 [ 1907.547337][T21881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1907.668258][T21881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.721455][T21881] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1907.772617][T21881] pvrusb2: ********** [ 1907.778213][T21881] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1907.811232][T21881] pvrusb2: Important functionality might not be entirely working. [ 1907.840118][T21881] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1907.889427][T21881] pvrusb2: ********** [ 1907.922896][ T2338] pvrusb2: Invalid write control endpoint [ 1908.028188][ T2338] pvrusb2: Invalid write control endpoint [ 1908.053684][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1908.076505][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1908.085722][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1908.109321][ T2338] pvrusb2: Device being rendered inoperable [ 1908.131157][T29781] pvrusb2: Attempted to execute control transfer when device not ok [ 1908.145208][ T5914] usb 3-1: USB disconnect, device number 100 [ 1908.158203][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1908.176355][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1908.197518][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1908.207160][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1908.221794][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1908.447341][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6187'. [ 1908.823982][T29811] fuse: Bad value for 'fd' [ 1909.093462][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1910.377726][T29837] syzkaller0: entered promiscuous mode [ 1910.394566][T29837] syzkaller0: entered allmulticast mode [ 1910.477613][T29844] binder: 29843:29844 ioctl 4018620d 0 returned -22 [ 1910.487229][T29844] binder: 29843:29844 ioctl c0306201 200000000180 returned -14 [ 1910.657298][T29851] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1910.734054][T29852] siw: device registration error -23 [ 1911.719821][T29853] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1911.756553][T29857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6198'. [ 1911.775973][T29855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6199'. [ 1911.832294][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6198'. [ 1911.940141][T29863] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1911.946696][T29863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1912.020349][T29863] vhci_hcd vhci_hcd.0: Device attached [ 1912.134432][T29871] syzkaller0: entered promiscuous mode [ 1912.140147][T29871] syzkaller0: entered allmulticast mode [ 1912.268169][T21881] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1912.268345][T25323] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1912.437453][T21881] usb 3-1: no configurations [ 1912.442257][T21881] usb 3-1: can't read configurations, error -22 [ 1912.582617][T21881] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1912.766104][T21881] usb 3-1: no configurations [ 1912.772306][T21881] usb 3-1: can't read configurations, error -22 [ 1912.782455][T21881] usb usb3-port1: attempt power cycle [ 1912.868641][T29893] binder: 29892:29893 ioctl 4018620d 0 returned -22 [ 1912.876049][T29893] binder: 29892:29893 ioctl c0306201 200000000180 returned -14 [ 1913.134843][T29898] siw: device registration error -23 [ 1913.278962][T21881] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1913.320172][T21881] usb 3-1: no configurations [ 1913.325469][T21881] usb 3-1: can't read configurations, error -22 [ 1913.472924][T21881] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1913.511791][T21881] usb 3-1: no configurations [ 1913.517473][T21881] usb 3-1: can't read configurations, error -22 [ 1913.528575][T21881] usb usb3-port1: unable to enumerate USB device [ 1915.106591][T29865] vhci_hcd: connection reset by peer [ 1915.114992][T26402] vhci_hcd vhci_hcd.2: stop threads [ 1915.123862][T26402] vhci_hcd vhci_hcd.2: release socket [ 1915.133597][T26402] vhci_hcd vhci_hcd.2: disconnect device [ 1915.612599][T29897] team0: No ports can be present during mode change [ 1915.662765][T29917] syzkaller0: entered promiscuous mode [ 1915.668463][T29917] syzkaller0: entered allmulticast mode [ 1915.823219][T29925] binder: 29923:29925 ioctl 4018620d 0 returned -22 [ 1915.833129][T29925] binder: 29923:29925 ioctl c0306201 200000000180 returned -14 [ 1916.000769][T29932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1916.007304][T29932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1916.016906][T29932] vhci_hcd vhci_hcd.0: Device attached [ 1916.101345][T29937] siw: device registration error -23 [ 1917.128022][ T5866] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1917.135777][T16039] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1917.288599][T16039] usb 2-1: no configurations [ 1917.293233][T16039] usb 2-1: can't read configurations, error -22 [ 1917.398697][T25323] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1917.442786][T16039] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1918.555721][T16039] usb 2-1: no configurations [ 1918.560580][T16039] usb 2-1: can't read configurations, error -22 [ 1918.566993][T16039] usb usb2-port1: attempt power cycle [ 1918.908056][T16039] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1918.946462][T16039] usb 2-1: no configurations [ 1918.956686][T16039] usb 2-1: can't read configurations, error -22 [ 1918.987643][T29933] vhci_hcd: connection reset by peer [ 1918.998787][ T1155] vhci_hcd vhci_hcd.1: stop threads [ 1919.004022][ T1155] vhci_hcd vhci_hcd.1: release socket [ 1919.012001][ T1155] vhci_hcd vhci_hcd.1: disconnect device [ 1919.331260][ C0] ------------[ cut here ]------------ [ 1919.337097][ C0] ODEBUG: free active (active state 0) object: ffff888041835490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1919.350000][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.6218/29916 [ 1919.360192][ C0] Modules linked in: [ 1919.364427][ C0] CPU: 0 UID: 0 PID: 29916 Comm: syz.0.6218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.375402][ C0] Tainted: [L]=SOFTLOCKUP [ 1919.379753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1919.389828][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1919.395651][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec c4 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1919.415278][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 1919.421373][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1919.429361][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44b50 [ 1919.437419][ C0] RBP: 0000000000000001 R08: ffff888041835490 R09: ffffffff8bb2bba0 [ 1919.445410][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1919.453407][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cff80 R15: ffffc90000007b38 [ 1919.461403][ C0] FS: 0000555560464500(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 1919.470448][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1919.477031][ C0] CR2: 000000110c3ec32f CR3: 000000008162e000 CR4: 00000000003526f0 [ 1919.485041][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1919.493043][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1919.501057][ C0] Call Trace: [ 1919.504331][ C0] [ 1919.507167][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1919.512916][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1919.518782][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1919.524357][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1919.530488][ C0] ? mark_held_locks+0x40/0x70 [ 1919.535243][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1919.540642][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1919.545847][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1919.550985][ C0] kfree+0x38f/0x6b0 [ 1919.554882][ C0] rose_timer_expiry+0x53f/0x630 [ 1919.559843][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1919.565308][ C0] call_timer_fn+0x19a/0x670 [ 1919.569913][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1919.575027][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1919.580496][ C0] ? mark_held_locks+0x40/0x70 [ 1919.585269][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1919.590741][ C0] __run_timers+0x757/0xb30 [ 1919.595254][ C0] ? __pfx___run_timers+0x10/0x10 [ 1919.600314][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1919.605353][ C0] run_timer_base+0x114/0x190 [ 1919.610055][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1919.615256][ C0] run_timer_softirq+0x1a/0x50 [ 1919.620040][ C0] handle_softirqs+0x1eb/0x9e0 [ 1919.624815][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1919.630122][ C0] __irq_exit_rcu+0xef/0x150 [ 1919.634711][ C0] irq_exit_rcu+0x9/0x30 [ 1919.638990][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1919.644631][ C0] [ 1919.647551][ C0] [ 1919.650490][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1919.656469][ C0] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 1919.662659][ C0] Code: e8 da dd ff ff 48 83 2d 1a a2 49 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 ea a9 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 1919.682291][ C0] RSP: 0018:ffffc90008fbfa60 EFLAGS: 00000246 [ 1919.688371][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1919.696427][ C0] RDX: 0000000000000000 RSI: ffffffff8df6c700 RDI: ffffffff8c1b1ea0 [ 1919.704410][ C0] RBP: 0000000000000246 R08: 0000000000072428 R09: ffffffff963ca470 [ 1919.712394][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff97955c88 [ 1919.720392][ C0] R13: ffff888084afc000 R14: ffff888084afc4d0 R15: 0000000000000100 [ 1919.728433][ C0] __qdisc_destroy+0x172/0x560 [ 1919.733198][ C0] qdisc_put+0xb0/0xf0 [ 1919.737250][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 1919.742730][ C0] dev_shutdown+0xb3/0x440 [ 1919.747160][ C0] unregister_netdevice_many_notify+0xd56/0x2580 [ 1919.753516][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1919.759352][ C0] ? ref_tracker_alloc+0x307/0x590 [ 1919.764461][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1919.771247][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1919.776723][ C0] ? linkwatch_fire_event+0x211/0x270 [ 1919.782122][ C0] ? netif_carrier_off+0xa8/0xc0 [ 1919.787133][ C0] unregister_netdevice_queue+0x30b/0x3c0 [ 1919.792902][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1919.799174][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 1919.804795][ C0] ? linkwatch_fire_event+0x74/0x270 [ 1919.810103][ C0] __tun_detach+0x1173/0x1480 [ 1919.814802][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1919.819958][ C0] tun_chr_close+0xc2/0x220 [ 1919.824468][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1919.829602][ C0] __fput+0x3ff/0xb40 [ 1919.833600][ C0] task_work_run+0x150/0x240 [ 1919.838217][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1919.843348][ C0] exit_to_user_mode_loop+0x100/0x4a0 [ 1919.848849][ C0] do_syscall_64+0x67c/0xf80 [ 1919.853434][ C0] ? clear_bhb_loop+0x40/0x90 [ 1919.858136][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.864031][ C0] RIP: 0033:0x7f1de299c819 [ 1919.868467][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.888103][ C0] RSP: 002b:00007ffff07b3898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1919.896521][ C0] RAX: 0000000000000000 RBX: 00007ffff07b3980 RCX: 00007f1de299c819 [ 1919.904532][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1919.912538][ C0] RBP: 00000000001d3a6e R08: 0000000000000001 R09: 0000000000000000 [ 1919.920543][ C0] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffff07b39c0 [ 1919.928539][ C0] R13: 00007f1de2c15fac R14: 00000000001d3b2c R15: 00007f1de2c15fa0 [ 1919.936512][ C0] [ 1919.939575][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1919.946866][ C0] CPU: 0 UID: 0 PID: 29916 Comm: syz.0.6218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.957784][ C0] Tainted: [L]=SOFTLOCKUP [ 1919.962096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1919.972145][ C0] Call Trace: [ 1919.975405][ C0] [ 1919.978226][ C0] dump_stack_lvl+0x100/0x190 [ 1919.982890][ C0] vpanic+0x552/0x970 [ 1919.986858][ C0] ? __pfx_vpanic+0x10/0x10 [ 1919.991365][ C0] panic+0xd1/0xe0 [ 1919.995096][ C0] ? __pfx_panic+0x10/0x10 [ 1919.999510][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1920.004628][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1920.010014][ C0] ? debug_print_object+0x18e/0x2a0 [ 1920.015207][ C0] __warn.cold+0x191/0x348 [ 1920.019617][ C0] __report_bug+0x296/0x3d0 [ 1920.024103][ C0] ? debug_print_object+0x18e/0x2a0 [ 1920.029281][ C0] ? __pfx___report_bug+0x10/0x10 [ 1920.034288][ C0] ? lock_acquire+0x1cf/0x380 [ 1920.038963][ C0] ? mark_held_locks+0x40/0x70 [ 1920.043704][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1920.049491][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1920.054673][ C0] report_bug_entry+0xe1/0x290 [ 1920.059423][ C0] ? debug_print_object+0x19b/0x2a0 [ 1920.064621][ C0] handle_bug+0x1cd/0x2a0 [ 1920.068939][ C0] exc_invalid_op+0x17/0x50 [ 1920.073419][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1920.078252][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1920.084049][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 42 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec c4 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1920.103634][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 1920.109679][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1920.117643][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44b50 [ 1920.125612][ C0] RBP: 0000000000000001 R08: ffff888041835490 R09: ffffffff8bb2bba0 [ 1920.133570][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1920.141530][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cff80 R15: ffffc90000007b38 [ 1920.149505][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1920.155138][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1920.160765][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1920.166555][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1920.172096][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1920.178158][ C0] ? mark_held_locks+0x40/0x70 [ 1920.182917][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1920.188282][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1920.193483][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1920.198594][ C0] kfree+0x38f/0x6b0 [ 1920.202497][ C0] rose_timer_expiry+0x53f/0x630 [ 1920.207439][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1920.212889][ C0] call_timer_fn+0x19a/0x670 [ 1920.217475][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1920.222572][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1920.228019][ C0] ? mark_held_locks+0x40/0x70 [ 1920.232764][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1920.238213][ C0] __run_timers+0x757/0xb30 [ 1920.242712][ C0] ? __pfx___run_timers+0x10/0x10 [ 1920.247730][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1920.252740][ C0] run_timer_base+0x114/0x190 [ 1920.257410][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1920.262591][ C0] run_timer_softirq+0x1a/0x50 [ 1920.267335][ C0] handle_softirqs+0x1eb/0x9e0 [ 1920.272079][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1920.277343][ C0] __irq_exit_rcu+0xef/0x150 [ 1920.281910][ C0] irq_exit_rcu+0x9/0x30 [ 1920.286128][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1920.291744][ C0] [ 1920.294649][ C0] [ 1920.297563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1920.303521][ C0] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 1920.309666][ C0] Code: e8 da dd ff ff 48 83 2d 1a a2 49 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 ea a9 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 1920.329257][ C0] RSP: 0018:ffffc90008fbfa60 EFLAGS: 00000246 [ 1920.335299][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1920.343245][ C0] RDX: 0000000000000000 RSI: ffffffff8df6c700 RDI: ffffffff8c1b1ea0 [ 1920.351195][ C0] RBP: 0000000000000246 R08: 0000000000072428 R09: ffffffff963ca470 [ 1920.359160][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff97955c88 [ 1920.367125][ C0] R13: ffff888084afc000 R14: ffff888084afc4d0 R15: 0000000000000100 [ 1920.375094][ C0] __qdisc_destroy+0x172/0x560 [ 1920.379845][ C0] qdisc_put+0xb0/0xf0 [ 1920.383903][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 1920.389354][ C0] dev_shutdown+0xb3/0x440 [ 1920.393765][ C0] unregister_netdevice_many_notify+0xd56/0x2580 [ 1920.400085][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1920.405880][ C0] ? ref_tracker_alloc+0x307/0x590 [ 1920.410974][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1920.417719][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1920.423158][ C0] ? linkwatch_fire_event+0x211/0x270 [ 1920.428507][ C0] ? netif_carrier_off+0xa8/0xc0 [ 1920.433454][ C0] unregister_netdevice_queue+0x30b/0x3c0 [ 1920.439182][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1920.445419][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 1920.451057][ C0] ? linkwatch_fire_event+0x74/0x270 [ 1920.456338][ C0] __tun_detach+0x1173/0x1480 [ 1920.461098][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1920.466199][ C0] tun_chr_close+0xc2/0x220 [ 1920.470689][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1920.475782][ C0] __fput+0x3ff/0xb40 [ 1920.479747][ C0] task_work_run+0x150/0x240 [ 1920.484314][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1920.489405][ C0] exit_to_user_mode_loop+0x100/0x4a0 [ 1920.494754][ C0] do_syscall_64+0x67c/0xf80 [ 1920.499317][ C0] ? clear_bhb_loop+0x40/0x90 [ 1920.503971][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.509839][ C0] RIP: 0033:0x7f1de299c819 [ 1920.514230][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.533824][ C0] RSP: 002b:00007ffff07b3898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1920.542214][ C0] RAX: 0000000000000000 RBX: 00007ffff07b3980 RCX: 00007f1de299c819 [ 1920.550166][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1920.558117][ C0] RBP: 00000000001d3a6e R08: 0000000000000001 R09: 0000000000000000 [ 1920.566071][ C0] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffff07b39c0 [ 1920.574029][ C0] R13: 00007f1de2c15fac R14: 00000000001d3b2c R15: 00007f1de2c15fa0 [ 1920.582003][ C0] [ 1920.585304][ C0] Kernel Offset: disabled [ 1920.589607][ C0] Rebooting in 86400 seconds..