last executing test programs: 7.812721047s ago: executing program 2 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x140f, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4091}, 0x4008800) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x88, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x69, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2mb:\x8e_\xaa\x9b\xc7\x80\xc3\x91\xe7\xfe\xf3S\xa6\xffg\xbe\x1d\xc1!q\x8a\xbb\xa1\xc6\xb3r#W\x98\xe7:\xf2\x92!\xc8\xfdi\xd2}\xf2\x88\x87\x11M\x1e\b\xf2\xa6\x14\xcf\x9d\xbeX\x9a&?\x98\xe4o\xec\xb2\x1fA.CX\x8f-\x88\xcf\x05\x14\xa1n\x9e\xc3F\xf1\x9ft\f\xe4]'}]}, 0x88}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/186, &(0x7f0000000100)=0xba) 7.748779388s ago: executing program 2 (id=967): pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) fsmount(r0, 0x0, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) listen(r2, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 7.689448293s ago: executing program 2 (id=968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x64}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r9, {0xe}, {0x1}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r4, 0x1, 0x0, 0x25dfdbfb, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 7.477321806s ago: executing program 2 (id=969): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r4 = eventfd2(0x8, 0x1) fremovexattr(r2, &(0x7f0000000240)=@random={'system.', '}*:@\x00'}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2910000000000010180012800b00010067656e65766500000800028004000e00"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40080) close_range(r0, 0xffffffffffffffff, 0x0) 7.419950974s ago: executing program 2 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d617371"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000002140)=0x20) (async) ppoll(&(0x7f00000003c0)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r2, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x2e0, 0x0, 0x440, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffc, 0x5}}}, {{@ipv6={@mcast2, @private2, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xff, 0x0, 0xffffff00], 'macvtap0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x88, 0x6, 0x6, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e23], [0x4e23, 0x4e20], 0x2}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x84, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) (async) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4000, 0x800, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, r4, &(0x7f0000000500)={0x27, 0x7fffffff, 0x1, 0x2}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44085) 6.996548809s ago: executing program 2 (id=973): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$getregset(0x4205, r3, 0x202, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000884) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) (async) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="1c2d90", 0x3}, {0x0}], 0x2, 0x2dc, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a40)={&(0x7f00000018c0)={0x1178, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1154, 0x3, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "ddc81dfa8dbba96fe1a8533f971cee3445ca9d9d5fbfcc0a647152bfebd577c3a36bea7b754fce1eca656bc47a38eb823059429d9bd13c4f8725ccda9199bf16a06591791d73fcc994d4664970f55c3bfea4934186047db353f855c106acc4644f64decaba09dd295395ac43636b44cebdb388d80f88d93c696bf05f83f6aa7683902d74a2d5ec3f3eff58ea612b881dfff4c7140757536b679fc7859fbbf71c310dd2dd44c455b2c588e13138b4c3b58a360969dbe7bb9194"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "b299c54d81dd3bcafe6d546c26a879802d8902c1ffe8e2aed601bcf881f29f2c4d3d864c8b4e63f0085a768815eaaa5261e247fb368a590a339960a7b1305ebcc2ad552b2c764fb9a73167f48df009f02b6774a6cc57db7aace35b1602a4dfc95647fb29eecb25ad70e4dcb5c703d0fe01d616ee2d77c17b781e81f82317d54ac79699cf9bfe8aeb091deba3b0adeb871d872be214bf8be9805af0f821cbe99c28c4b8b6b2e686535112f813c2c05d6d"}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0xf, 0x1, "256509280e8ecc77ed5c7f"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "2717785f591dcd3071c7c3fe03f4d0b31df84fb8edd64e0e7b83a38b2aa92abe3b8d6d6290de28d31fd859f1b9849f33bccfcfce4c40e67c6ba11e496657478dbbe97e15dac97d1494bdb70cb9d248560074edf88a8578936c5ddd7a1116da1271afebac2ea79bbb3efcf15c4368325d3a69f2bde2bea24c5f227316b4421ec69daa6e0c7b85a93b12cc8e20655020aa0c82787ffe42078b1be0a3f3400da3f8e33d23f4a4f76e2e4b76d96d9aa5b5e10ddde60c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "782dae272526ff9512baf2a1ee46098e75772f0285e7428770c11461c48c9b04b795c2ffe4c30dad1dd26a5f331d1e8fd4fb077f7e4a042fcd52c2f9fa07f2d7dac988981b1ca569684a4934a417931ad97da0b40e34fbf497b62c9609a4726fb1d71a0e9bf05570338fdffee90e06d1b235fcbdb4b5f3e7a397087c153a3d1cd3516164785f9a2c0161e7053f76d27797a252a247f895b8e226ae3c4c2210c3016467ec0a8471ab0a9b5caf9af7caf4ca1de1649137"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x550, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x71}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xf}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_DATA={0x3e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "24ad97b8da15a192afb600c927e74e69a1d0c88510109daae62336db2bce11e4bd696c448cf8d97e9e11cbcf193e892a2d491acf08a4586ccd05a9da7f9e4476d0dcebfe31e443a814f11648b19199f2fdd7761a3c727e24d8566a99479b8d3b7a8b8abc8435bbbf68719ec79b2122251448d81fd3a4decb77b72b7651d01cb9f941c2afadec562a18130b80a8e40fad1f047d5cf1ad19d2e915e3f0daaae936ec354c9f1586d420a5215a273f92023670601e4f520d1c65a5968b483abbc63dce335e5f12873abf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x60, 0x1, "2c7fca0547152c806d68e18814d356c31f780fbeadb2cc864a54b4b65eb6db407f5879e9110366a3d3460a96aabf3e57a58520c0efa161d5bc7933c9289a1c02855027796b8586617da0c5ea6d922b96deec940de78ed65b494cea7f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "a409c500b2454fcf43882b07eafb5a5c4abb11f6a4cea568f149ae334e38fc8f6f1a8d688859c861ebf651540b3a47d5c5a96fc84ba443d97f5c34c081ae3e5c8c7d291f375dcdf21148226134412ae1ad091be6cd9aa2eaf222b60e82e94370d1bf226b0a308cd334b0c846295a0189a8756041801bbc922b999d9108aa2647042f286dfcc74b88b657dc401df7a561c90c6c174512846c360d1538b876af30979911c240ca94136886f5e5d348091d245478441333821e35dcbaef4b66e2450b74a81969974b7092c776c0817cac4971c5210d15a9731acb255aad94ceeebe1fb84f5a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xce, 0x1, "9b758a593b9037096515483421781820e821afbf76f9740c82f55429784e46d9b98c1bc26e751a4fdfff4d9c678adb81d0fdf88c6aa9993ca69a062d6f48b0278be9a43183d42b52416085d7af1c00d2b2774cc7f75df8cc86099069963eb3a31dab9bdb462d8ff32aadd4dd774beb9f8354a235ff1bfef3ac2f2e3e9593ea1675e474820f51cfdc7dbd749f5287abe11022f42ee03dde38c8511154666d97404b91d94fabd2e65e18e4025807c70694bf9f1d4cf2b4331954df02eab1a9064a150c325fccf99ea5aff4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "0a255861bf8726beac6198d05d62e8900d3849feecda2d84609e596182d0f508b718be11680b0561c4ae6ec9e34a0aac1fb34c293faf3e9850adb5d50da40136cb604a1fba62bd1f487c3aa42be323830d0fe4fc61c31f364867a1f4d87f77385cb9e8635b8918f6a0452e8accc92456e55efc54fb79ba3f9e730554f84acebe9ed833b84e603a4d6976f8410c"}]}, {0x4bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "88dc32cec102c05b7d6c547a7dccdb9c0ad3e060c24f6a1b1a97449be36e1b95688ec992399817a562e25986f36440f1fbb7d3de2c7f2c2437d4354bef6fb491c4ba37ca62ce7a84123904abd6252c9562cb1aa479808b0de990b4fa5a4f8ae0e1a3488edfade7800ce1734c00ba9bcbcc9770ea52a0d373e631af"}, @NFTA_DATA_VALUE={0x9b, 0x1, "3f8c5e89b464fc517b5064e93c807af96923eee08a2a3c02c602ab911571d4db712b0962feb466a067861085675f4fb43140632f38bfec99b11a30cc9345cf992ab90123434be1f50ba32984ce9a0f5b359b86df71cebe357f2b5c545000ef4d3e88fca3e7cc848f2588b017f7448eb2f54e71666b97e833a57105af554cc00e5bed74c8fc1f790d4c51907b863479038b380d016ea994"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "49ab819a5a6e4e04c20f297c08a47e3ffd0987851e1ee9edac94eb0c32b8d5ee2204d0e1e12414ae590464d13811089c42483ad089f53e8b6e0bce0c2d7d6e2872481b759d1c95bb366e0015dc995158b0e6decb5866f3417dd76a41113eb0be6ddc593c5aead1a5f6d080b7fb0bfca66752d4f89d9400b137ad029dfa9eb5e1b6769203aca7cf6498f73f26b5b493190c7c957498e63708341a8e2dd9468f95d310c9eef99b5a04b55097a4e7a919052be9f0c23d560b31ef7658ad31dc610e93ebcbf725a85b9a825ffd437418b7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "640d8bbb4136ff213fe008ef9a32d547cfdb3d831bccbcd5606591ca91bbe01f9eb7f1170d724a6baf10ab686ac0911fa51d50f575cf7a9f1ac75641982d47c3a2b6d2132c0e8bfd028c48dc3ede595d5f883bcc5815b0ef84b568aae18b72e72c5dcc8ba90ee46fdaede8a27c099c0ce96706e8ac9530d6cc1deb3551132c579a563157b4265157d12ef5f2da85bc0e9754e55bba621401623710db8a47d499e69c7b4558d943fd7b8d30e082c6155b4bfd3d706f4924cceefb44b241793990d8792107f7d7efa1aadccd1af14ccf181561"}, @NFTA_DATA_VALUE={0x65, 0x1, "c67de382a3d7e212be685a849941a223480e826ab7aa204f69e1b914c0f7c2d367fdfc364593ab6b39fa25a4d517344cc6e201d110329d866a9d2e8be30701c87f1856d73845b370a13d2a41462af539de04e4d1c89a43663dbca1dfc4a25d569e"}]}]}, {0x29c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe914}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x19}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "f9cefb7b1df702c616c5cb1d06c05bc86a3d4093500d0980782580189ea60f5863d867d339acde7d15e8d1d81a919ca3e724f42e57e38e6129ee526fe3d7a85117bfba3e234af4b1a23bb717ca2ae706dd4831cdd3847a726871d7c21dc5b3938f0455e7584226bfe1c9b498154add2a69fbce2e8453f66e309cd2863edcaedc18c63dbebd62"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x40, 0x1, "ae6f20c48144bd17866ef49285b0ccf870c1e2ef83ecadaad1141fba3bf7eb660385651d5570bf941536629e1c8b088dec9209f4ba81b340d3fc1844"}, @NFTA_DATA_VALUE={0x9c, 0x1, "b778fbff686047e53728c5513469961292bb19970ba7fa7ea6b2cb25d953369482591d79326f95a224cdc8aa39ff38c4bf9c762b5de7977c3be708f532ab5e7f54eb28352b800867a17809f5b7c9af7b591c30af2819b2bee36789dbc74283f21a5e2c7b9b4c22b501ae7747f60b7c5fa4a126f01fc1acb65aee0aa6fe597c925ee2425ebf6499cf4fa0796b5ccf04d75696aee79fcd665d"}]}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "01cbc77819616aebb01a231977c400a6c49de6babe2e2d9c6f1b1ccba3cd6bd4a1c3a6a29255f4bb2f40b0d1abf893ecb37d896f58ffa7856bfed2d4f048b1839a5fb9c89c1ee337d09cbf54ac68a7c6e3d3544238ed18745c84e68c262e352c3cc8031ef87d1c67ae7f1956cc305a8bdff8fb9fa5da91a361bf76d93fae46df82fb99dcb82d1b2c1d695364363e954ad835d00aa8da56956f06d57b4663baf87a7a0f2eb032bfa125c596116f00ddaa8a901bc50b77f8147ad227b71829afa5f55c7e1b9d9325fbb421d025c4bbcfb389ad760b9ba8aecfa9f264ed0e42766a6c44f6e01c7421982e9df60b62fd0b83635bfd6674f23228074da5"}]}]}]}, 0x1178}}, 0x40815) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = epoll_create(0x3dca) (async, rerun: 32) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x40000001}) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'wg2\x00'}}, 0x1e) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x48}}, 0x4004840) (async, rerun: 32) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) 6.916420491s ago: executing program 32 (id=973): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$getregset(0x4205, r3, 0x202, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000884) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) (async) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="1c2d90", 0x3}, {0x0}], 0x2, 0x2dc, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a40)={&(0x7f00000018c0)={0x1178, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1154, 0x3, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "ddc81dfa8dbba96fe1a8533f971cee3445ca9d9d5fbfcc0a647152bfebd577c3a36bea7b754fce1eca656bc47a38eb823059429d9bd13c4f8725ccda9199bf16a06591791d73fcc994d4664970f55c3bfea4934186047db353f855c106acc4644f64decaba09dd295395ac43636b44cebdb388d80f88d93c696bf05f83f6aa7683902d74a2d5ec3f3eff58ea612b881dfff4c7140757536b679fc7859fbbf71c310dd2dd44c455b2c588e13138b4c3b58a360969dbe7bb9194"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "b299c54d81dd3bcafe6d546c26a879802d8902c1ffe8e2aed601bcf881f29f2c4d3d864c8b4e63f0085a768815eaaa5261e247fb368a590a339960a7b1305ebcc2ad552b2c764fb9a73167f48df009f02b6774a6cc57db7aace35b1602a4dfc95647fb29eecb25ad70e4dcb5c703d0fe01d616ee2d77c17b781e81f82317d54ac79699cf9bfe8aeb091deba3b0adeb871d872be214bf8be9805af0f821cbe99c28c4b8b6b2e686535112f813c2c05d6d"}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0xf, 0x1, "256509280e8ecc77ed5c7f"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x190, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "2717785f591dcd3071c7c3fe03f4d0b31df84fb8edd64e0e7b83a38b2aa92abe3b8d6d6290de28d31fd859f1b9849f33bccfcfce4c40e67c6ba11e496657478dbbe97e15dac97d1494bdb70cb9d248560074edf88a8578936c5ddd7a1116da1271afebac2ea79bbb3efcf15c4368325d3a69f2bde2bea24c5f227316b4421ec69daa6e0c7b85a93b12cc8e20655020aa0c82787ffe42078b1be0a3f3400da3f8e33d23f4a4f76e2e4b76d96d9aa5b5e10ddde60c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "782dae272526ff9512baf2a1ee46098e75772f0285e7428770c11461c48c9b04b795c2ffe4c30dad1dd26a5f331d1e8fd4fb077f7e4a042fcd52c2f9fa07f2d7dac988981b1ca569684a4934a417931ad97da0b40e34fbf497b62c9609a4726fb1d71a0e9bf05570338fdffee90e06d1b235fcbdb4b5f3e7a397087c153a3d1cd3516164785f9a2c0161e7053f76d27797a252a247f895b8e226ae3c4c2210c3016467ec0a8471ab0a9b5caf9af7caf4ca1de1649137"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x550, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x71}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xf}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_DATA={0x3e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "24ad97b8da15a192afb600c927e74e69a1d0c88510109daae62336db2bce11e4bd696c448cf8d97e9e11cbcf193e892a2d491acf08a4586ccd05a9da7f9e4476d0dcebfe31e443a814f11648b19199f2fdd7761a3c727e24d8566a99479b8d3b7a8b8abc8435bbbf68719ec79b2122251448d81fd3a4decb77b72b7651d01cb9f941c2afadec562a18130b80a8e40fad1f047d5cf1ad19d2e915e3f0daaae936ec354c9f1586d420a5215a273f92023670601e4f520d1c65a5968b483abbc63dce335e5f12873abf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x60, 0x1, "2c7fca0547152c806d68e18814d356c31f780fbeadb2cc864a54b4b65eb6db407f5879e9110366a3d3460a96aabf3e57a58520c0efa161d5bc7933c9289a1c02855027796b8586617da0c5ea6d922b96deec940de78ed65b494cea7f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "a409c500b2454fcf43882b07eafb5a5c4abb11f6a4cea568f149ae334e38fc8f6f1a8d688859c861ebf651540b3a47d5c5a96fc84ba443d97f5c34c081ae3e5c8c7d291f375dcdf21148226134412ae1ad091be6cd9aa2eaf222b60e82e94370d1bf226b0a308cd334b0c846295a0189a8756041801bbc922b999d9108aa2647042f286dfcc74b88b657dc401df7a561c90c6c174512846c360d1538b876af30979911c240ca94136886f5e5d348091d245478441333821e35dcbaef4b66e2450b74a81969974b7092c776c0817cac4971c5210d15a9731acb255aad94ceeebe1fb84f5a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xce, 0x1, "9b758a593b9037096515483421781820e821afbf76f9740c82f55429784e46d9b98c1bc26e751a4fdfff4d9c678adb81d0fdf88c6aa9993ca69a062d6f48b0278be9a43183d42b52416085d7af1c00d2b2774cc7f75df8cc86099069963eb3a31dab9bdb462d8ff32aadd4dd774beb9f8354a235ff1bfef3ac2f2e3e9593ea1675e474820f51cfdc7dbd749f5287abe11022f42ee03dde38c8511154666d97404b91d94fabd2e65e18e4025807c70694bf9f1d4cf2b4331954df02eab1a9064a150c325fccf99ea5aff4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "0a255861bf8726beac6198d05d62e8900d3849feecda2d84609e596182d0f508b718be11680b0561c4ae6ec9e34a0aac1fb34c293faf3e9850adb5d50da40136cb604a1fba62bd1f487c3aa42be323830d0fe4fc61c31f364867a1f4d87f77385cb9e8635b8918f6a0452e8accc92456e55efc54fb79ba3f9e730554f84acebe9ed833b84e603a4d6976f8410c"}]}, {0x4bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "88dc32cec102c05b7d6c547a7dccdb9c0ad3e060c24f6a1b1a97449be36e1b95688ec992399817a562e25986f36440f1fbb7d3de2c7f2c2437d4354bef6fb491c4ba37ca62ce7a84123904abd6252c9562cb1aa479808b0de990b4fa5a4f8ae0e1a3488edfade7800ce1734c00ba9bcbcc9770ea52a0d373e631af"}, @NFTA_DATA_VALUE={0x9b, 0x1, "3f8c5e89b464fc517b5064e93c807af96923eee08a2a3c02c602ab911571d4db712b0962feb466a067861085675f4fb43140632f38bfec99b11a30cc9345cf992ab90123434be1f50ba32984ce9a0f5b359b86df71cebe357f2b5c545000ef4d3e88fca3e7cc848f2588b017f7448eb2f54e71666b97e833a57105af554cc00e5bed74c8fc1f790d4c51907b863479038b380d016ea994"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "49ab819a5a6e4e04c20f297c08a47e3ffd0987851e1ee9edac94eb0c32b8d5ee2204d0e1e12414ae590464d13811089c42483ad089f53e8b6e0bce0c2d7d6e2872481b759d1c95bb366e0015dc995158b0e6decb5866f3417dd76a41113eb0be6ddc593c5aead1a5f6d080b7fb0bfca66752d4f89d9400b137ad029dfa9eb5e1b6769203aca7cf6498f73f26b5b493190c7c957498e63708341a8e2dd9468f95d310c9eef99b5a04b55097a4e7a919052be9f0c23d560b31ef7658ad31dc610e93ebcbf725a85b9a825ffd437418b7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "640d8bbb4136ff213fe008ef9a32d547cfdb3d831bccbcd5606591ca91bbe01f9eb7f1170d724a6baf10ab686ac0911fa51d50f575cf7a9f1ac75641982d47c3a2b6d2132c0e8bfd028c48dc3ede595d5f883bcc5815b0ef84b568aae18b72e72c5dcc8ba90ee46fdaede8a27c099c0ce96706e8ac9530d6cc1deb3551132c579a563157b4265157d12ef5f2da85bc0e9754e55bba621401623710db8a47d499e69c7b4558d943fd7b8d30e082c6155b4bfd3d706f4924cceefb44b241793990d8792107f7d7efa1aadccd1af14ccf181561"}, @NFTA_DATA_VALUE={0x65, 0x1, "c67de382a3d7e212be685a849941a223480e826ab7aa204f69e1b914c0f7c2d367fdfc364593ab6b39fa25a4d517344cc6e201d110329d866a9d2e8be30701c87f1856d73845b370a13d2a41462af539de04e4d1c89a43663dbca1dfc4a25d569e"}]}]}, {0x29c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe914}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x19}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "f9cefb7b1df702c616c5cb1d06c05bc86a3d4093500d0980782580189ea60f5863d867d339acde7d15e8d1d81a919ca3e724f42e57e38e6129ee526fe3d7a85117bfba3e234af4b1a23bb717ca2ae706dd4831cdd3847a726871d7c21dc5b3938f0455e7584226bfe1c9b498154add2a69fbce2e8453f66e309cd2863edcaedc18c63dbebd62"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x40, 0x1, "ae6f20c48144bd17866ef49285b0ccf870c1e2ef83ecadaad1141fba3bf7eb660385651d5570bf941536629e1c8b088dec9209f4ba81b340d3fc1844"}, @NFTA_DATA_VALUE={0x9c, 0x1, "b778fbff686047e53728c5513469961292bb19970ba7fa7ea6b2cb25d953369482591d79326f95a224cdc8aa39ff38c4bf9c762b5de7977c3be708f532ab5e7f54eb28352b800867a17809f5b7c9af7b591c30af2819b2bee36789dbc74283f21a5e2c7b9b4c22b501ae7747f60b7c5fa4a126f01fc1acb65aee0aa6fe597c925ee2425ebf6499cf4fa0796b5ccf04d75696aee79fcd665d"}]}, @NFTA_SET_ELEM_USERDATA={0xff, 0x6, 0x1, 0x0, "01cbc77819616aebb01a231977c400a6c49de6babe2e2d9c6f1b1ccba3cd6bd4a1c3a6a29255f4bb2f40b0d1abf893ecb37d896f58ffa7856bfed2d4f048b1839a5fb9c89c1ee337d09cbf54ac68a7c6e3d3544238ed18745c84e68c262e352c3cc8031ef87d1c67ae7f1956cc305a8bdff8fb9fa5da91a361bf76d93fae46df82fb99dcb82d1b2c1d695364363e954ad835d00aa8da56956f06d57b4663baf87a7a0f2eb032bfa125c596116f00ddaa8a901bc50b77f8147ad227b71829afa5f55c7e1b9d9325fbb421d025c4bbcfb389ad760b9ba8aecfa9f264ed0e42766a6c44f6e01c7421982e9df60b62fd0b83635bfd6674f23228074da5"}]}]}]}, 0x1178}}, 0x40815) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = epoll_create(0x3dca) (async, rerun: 32) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x40000001}) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'wg2\x00'}}, 0x1e) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x48}}, 0x4004840) (async, rerun: 32) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), 0x0) 3.067769206s ago: executing program 3 (id=1034): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000058c0)={'wlan0\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r5) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x1, 0x2, 0x1}) keyctl$search(0xa, r5, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000005980)={0x0, 0x0, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, r3, 0xf6d537320aee2d63, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 2.973117939s ago: executing program 3 (id=1035): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) 2.64997626s ago: executing program 3 (id=1042): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x3) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000860}, 0x24000014) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100), 0x64, 0x2, 0x0, 0x0, r4}) fcntl$setpipe(r1, 0x407, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000180)=""/218, &(0x7f0000000280)=0xda) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.531365317s ago: executing program 3 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b25, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(r3, 0x8b25, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2.368015976s ago: executing program 4 (id=1047): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004880, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00?\x007y'], 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$P9_RLOCK(r6, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup(r8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) sendmsg$inet6(r9, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) write$binfmt_misc(r0, 0x0, 0x0) r10 = syz_open_dev$ndb(&(0x7f0000000680), 0x0, 0x2000) ioctl$BLKRRPART(r10, 0x125f, 0x0) 2.367651857s ago: executing program 3 (id=1048): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0xd}}}}, 0x7) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltfilter={0x4c, 0x2d, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0, 0x3}, {0x3, 0xfff3}, {0x9, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x10}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xd2d9}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x3}}]}, 0x4c}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24041091}, 0x800) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) io_setup(0x7, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40200) semget(0x1, 0x4, 0x39c) 1.469088908s ago: executing program 3 (id=1049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201afef000000ff050b5418400001020301090224000101061003090400f801030102490921ff07020122f25a778c0d090581030002"], &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x7, 0x8, 0x3, 0x8, 0x7}, 0x30, &(0x7f0000000340)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0xa, 0x5, 0x1, 0xf, 0x5, [0xff3f90, 0xff3f00, 0x7cf06cfc9b6a2157, 0xc000, 0xa000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0x7, 0xf, 0x9}]}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@host, 0x7}, {@hyper}, 0x400, "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"}, 0x418, 0x518393c}) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xfffffdd2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0xfc00, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000082004000006000008001b00000000004c59267ecae46c33dc118446cf5561d886e4dc43762bf9d109a7fd6772b09d5375ad1fcdb19068ee9fcbc23caf44493bf5ef5383c135b882762de29c493da314603c1e"], 0x30}}, 0x0) ftruncate(r6, 0x2000009) sendfile(r3, r6, 0x0, 0x7ffff004) setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r9 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}]}) 1.406710438s ago: executing program 1 (id=1051): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000100)=0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r11, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_LINK={0x8, 0x1, r11}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r12}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r12}, 0x38) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) 1.268636385s ago: executing program 1 (id=1052): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x105400, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRESOCT=r0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) 1.268243211s ago: executing program 1 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000580)="ffffffffff", 0x5, 0x1) r2 = socket(0xa, 0x1, 0x0) getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r3 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) 1.208473285s ago: executing program 1 (id=1054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)="31303030f5", 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x87, 0xfd3, 0x2, 0xfe9, 0x501, 0xa41f]}, 0x10) 1.207147175s ago: executing program 1 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.137714733s ago: executing program 1 (id=1056): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x21dfcbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x96}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0xff, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES16=r8, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES16=r6, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 956.70454ms ago: executing program 4 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#1:syz1.'], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write(r0, &(0x7f0000000280)="ff80", 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0xc4, &(0x7f0000002300)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @val={@val={0x88a8, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\t', 0x86, 0x6, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x4, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0x8}, @nop, @md5sig={0x13, 0x12, "39ba202d3167f837d40acb9156c22e3e"}, @timestamp={0x8, 0xa, 0xe86, 0xfffffffd}, @generic={0x1, 0x12, "479f0a90a33874bfd01af95211877d5c"}, @generic={0x2, 0x9, "af84f43f3715f9"}]}}, {"3d01c5a7cf9b128014d43ef6bc8918c0d4acfb9862b19a325930b901f3cdddc3cd279ad9210427ee5337"}}}}}}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r2, &(0x7f0000000600)='dir .', 0x5) write(r2, &(0x7f0000000700)='bind', 0x4) 754.62429ms ago: executing program 4 (id=1058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x0, r1}, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001180)={'gretap0\x00', &(0x7f0000001000)={'gre0\x00', 0x0, 0x7800, 0x7800, 0xa, 0x800, {{0x23, 0x4, 0x1, 0x30, 0x8c, 0x65, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x7, 0x20, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4c, 0x61, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xed43}, {@remote, 0x1ff}, {@broadcast, 0x2}, {@rand_addr=0x64010101, 0x94}, {@broadcast, 0x7d}, {@remote, 0xfffffffd}, {@broadcast, 0x8}]}, @end, @ssrr={0x89, 0xb, 0xc7, [@broadcast, @private=0xa010101]}, @end, @rr={0x7, 0x17, 0x1b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @remote]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x19fc}, [@map_idx, @generic={0x2, 0xf, 0x7, 0x2, 0x80}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x51, &(0x7f0000000f80)=""/81, 0x40f00, 0x26, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001200)=[r0, r0], &(0x7f0000001240)=[{0x2, 0x1, 0x7, 0x6}, {0x5, 0x5, 0xf}, {0x4, 0x2, 0xd, 0x8}, {0x4, 0x1, 0x5, 0x6}, {0x5, 0x1, 0xc, 0x6}, {0x1, 0x3, 0x2, 0x9}, {0x4, 0x2, 0x2, 0x2}], 0x10, 0x12c}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r5], 0x2c}}, 0x20008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001380)={0x0, 0x57, "841e5fa11717c48cb70923ed4b06d8a4f75e55ed8a35e9fe32772209fca70f8b45459e761e17495b824665c94ac835ddf68b4e1eedb3ad03fa485b29e28cb6b91ff77c6217a8ccabf96a87fe45171d4516e17fee87ad98"}, &(0x7f0000001400)=0x5f) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001440)={r7, 0x200, 0xe, 0x1ff}, &(0x7f0000001480)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0bf0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 754.235294ms ago: executing program 4 (id=1059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001480), &(0x7f0000000000)=0x1) 686.908213ms ago: executing program 4 (id=1060): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r4, 0x8000000) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r5 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f0000000080)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) 675.010276ms ago: executing program 4 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) dup(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0xc000) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x6, 0x4, 0xf}) 234.916718ms ago: executing program 0 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 234.261617ms ago: executing program 0 (id=1065): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88c0, 0x179) ioprio_set$uid(0x3, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000040)={{0x3, @name="223f4124b6795653f8107c981ea8aa5c596e8fc9c625af00a20f950a1f310ae5"}, "5e6c3559d36839dc2a39b1f32531795fbb747353ddd9d07e14571236b1329ee6", 0x1}) getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) 165.661874ms ago: executing program 0 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) (async) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) (async) sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIGETBSZ(r4, 0x5421, &(0x7f0000000040)) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 165.402343ms ago: executing program 0 (id=1067): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000f8ffffff00000000000000000085100000fdffffff06000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async, rerun: 32) r3 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async, rerun: 32) mprotect(&(0x7f0000f6d000/0x3000)=nil, 0x3000, 0x3) (rerun: 32) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={[&(0x7f0000000040)='(@\x00']}, &(0x7f0000000180)={[&(0x7f00000000c0)=',\x00', &(0x7f0000000100)='\\!-&@*%+^)(\x00', &(0x7f0000000140)='{&\x00']}) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000200)) 2.654858ms ago: executing program 0 (id=1068): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) ppoll(&(0x7f000000b640)=[{r0, 0x580}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f00000013c0)={{&(0x7f0000455000/0x2000)=nil, 0x2000}, 0x1, 0x2}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8080, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)=0x0) move_pages(r9, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=[0x7, 0x4, 0xc, 0xfb9d, 0x1], &(0x7f0000000380)=[0x0, 0x0], 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x16eca370, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r5}, 0x94) ioctl$KVM_CREATE_VM(r8, 0xae03, 0x76) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="3f000000010040", 0x7) preadv(r5, &(0x7f0000004100)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1, 0xe2, 0x19) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000880)=0xe8) preadv(r11, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x7, 0x2) read$FUSE(r10, &(0x7f0000003980)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) 0s ago: executing program 0 (id=1069): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x193500, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005040), 0x44600, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='fd', 0x0, r3) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000240)="c400af68618e07698ffadb3e4fb4abbb4a2c243837660d55733456e8843eb41090aa60316160a71c4a607cd7383e552c3da230be37000d2f5282a5be9bc34fb8b75ce5d021211e4bda63ad01ff9fb55147109fa3421ec8654a8cda8f433c0656145e7dfc2bf720a8d2851a7e79d903763fc36e5182480be86f13f4ff6f6e36d8791baff4ffdd62b4eec94570d40de46175e86eb33e49cbc933466bbdf4eecff478414de1c8c43893dafed2ee8ea37b3fca80e0058216a5024f9f30334f2c84f638c91320be1dabfbedcae5fc0e6778eaa8f97fe289", 0xd5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000440)={&(0x7f00000003c0)=[r7, r8, r9], 0x3, 0x800}) kernel console output (not intermixed with test programs): 7 but max is 0 [ 213.989725][ T5844] usb 8-1: config 14 has no interface number 0 [ 213.993483][ T5844] usb 8-1: config 14 interface 57 has no altsetting 0 [ 214.007327][ T5844] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.016635][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.020211][ T5844] usb 8-1: Product: syz [ 214.022067][ T5844] usb 8-1: Manufacturer: syz [ 214.024127][ T5844] usb 8-1: SerialNumber: syz [ 214.039168][ T7167] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 214.042658][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.045938][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.050529][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.051198][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 214.053092][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.059505][ T7167] team_slave_1: entered promiscuous mode [ 214.059524][ T7167] team_slave_1: entered allmulticast mode [ 214.068636][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.071355][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.074240][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.074998][ T7167] team0: Port device team_slave_1 removed [ 214.077508][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.082619][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.085280][ T7167] bridge0: port 3(team_slave_1) entered blocking state [ 214.085579][ T1037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 214.093719][ T7167] bridge0: port 3(team_slave_1) entered disabled state [ 214.108825][ T1037] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [] on [ 214.171091][ T7171] fido_id[7171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.173957][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.332'. [ 214.322529][ T7130] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 214.354131][ T5844] legousbtower 8-1:14.57: interrupt endpoints not found [ 214.375476][ T5844] usb 8-1: USB disconnect, device number 3 [ 214.476089][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 214.610614][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.613362][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.630965][ T7198] binder: 7196:7198 ioctl 40085874 200000000200 returned -22 [ 214.634096][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 214.648288][ T7182] batman_adv: batadv0: Interface deactivated: dummy0 [ 214.715620][ T7200] kvm: user requested TSC rate below hardware speed [ 214.752199][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.764704][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.021166][ T5829] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.031644][ T5829] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.041222][ T5829] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.047314][ T5829] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.067142][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.071993][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.077069][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.080196][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.203356][ T7219] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 215.239624][ T7214] kvm: kvm [7213]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 215.251189][ T7214] kvm: kvm [7213]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 215.366274][ T7226] usb usb9: check_ctrlrecip: process 7226 (syz.2.347) requesting ep 01 but needs 81 [ 215.372538][ T7226] usb usb9: usbfs: process 7226 (syz.2.347) did not claim interface 0 before use [ 215.393996][ T7226] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 215.401650][ T7226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.347'. [ 215.528934][ T7227] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 215.535980][ T7227] SELinux: failed to load policy [ 215.868196][ T7235] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.999844][ T7252] Mount JFS Failure: -5 [ 216.003036][ T7251] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 216.006508][ T7252] jfs_mount failed w/return code = -5 [ 216.062317][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 216.062340][ T42] audit: type=1400 audit(1786182586.928:622): avc: denied { watch } for pid=7257 comm="syz.0.356" path="/111/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 216.119854][ T42] audit: type=1400 audit(1786182586.988:623): avc: denied { watch_mount } for pid=7262 comm="syz.0.358" path="/112/file0" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.198257][ T7267] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.199553][ T7263] gadgetfs: bound to dummy_udc driver [ 216.447170][ T42] audit: type=1400 audit(1786182587.318:624): avc: denied { ioctl } for pid=7280 comm="syz.3.363" path="socket:[16200]" dev="sockfs" ino=16200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.615877][ T7284] tipc: Invalid UDP bearer configuration [ 216.615923][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 216.685657][ T7287] netlink: 'syz.3.366': attribute type 8 has an invalid length. [ 216.744943][ T7294] befs: (loop0): No write support. Marking filesystem read-only [ 216.759879][ T7294] befs: (loop0): unable to read superblock [ 216.766294][ T42] audit: type=1400 audit(1786182587.628:625): avc: denied { create } for pid=7285 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 216.897706][ T42] audit: type=1400 audit(1786182587.758:626): avc: denied { ioctl } for pid=7309 comm="syz.1.372" path="socket:[15117]" dev="sockfs" ino=15117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.973298][ T7320] i2c i2c-0: delete_device: Can't parse I2C address [ 217.096790][ T42] audit: type=1400 audit(1786182587.958:627): avc: denied { connect } for pid=7321 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.104988][ T42] audit: type=1400 audit(1786182587.968:628): avc: denied { write } for pid=7321 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.124087][ T42] audit: type=1400 audit(1786182587.988:629): avc: denied { map } for pid=7321 comm="syz.0.374" path="socket:[15215]" dev="sockfs" ino=15215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.134793][ T42] audit: type=1400 audit(1786182587.988:630): avc: denied { accept } for pid=7321 comm="syz.0.374" path="socket:[15215]" dev="sockfs" ino=15215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.661193][ T42] audit: type=1400 audit(1786182588.528:631): avc: denied { mounton } for pid=7335 comm="syz.0.378" path="/119/sys/devices/platform/PNP0103:00/driver_override" dev="sysfs" ino=3657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 217.661317][ T7336] afs: Unknown parameter 'audit' [ 217.907236][ T7339] CUSE: info not properly terminated [ 217.912476][ T7339] binder: 7338:7339 ioctl 40046205 0 returned -22 [ 218.145233][ T7351] xfs: Unknown parameter 'norecoveryp' [ 218.217899][ T5766] Bluetooth: hci4: command 0xfc11 tx timeout [ 218.219060][ T5082] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 218.372289][ T7354] kvm: kvm [7353]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 218.378084][ T7354] kvm: kvm [7353]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 218.687466][ T7370] __nla_validate_parse: 3 callbacks suppressed [ 218.687496][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 218.868841][ T7377] selinux_netlink_send: 23 callbacks suppressed [ 218.868859][ T7377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7377 comm=syz.1.392 [ 218.915421][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 218.983930][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 218.989577][ T7383] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.056090][ T7385] geneve2: entered promiscuous mode [ 219.059337][ T7385] geneve2: entered allmulticast mode [ 219.077028][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 219.077154][ T7385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7385 comm=syz.0.394 [ 219.082131][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 219.102427][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 219.126700][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 219.166880][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 219.182390][ T7394] xt_nfacct: accounting object `syz0' does not exist [ 219.198768][ T5082] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 219.237772][ T7400] CUSE: unknown device info "" [ 219.239809][ T7400] CUSE: unknown device info "" [ 219.246958][ T7400] CUSE: unknown device info "" [ 219.248629][ T7400] CUSE: unknown device info "" [ 219.251815][ T7400] CUSE: DEVNAME unspecified [ 219.424591][ T7421] bridge0: port 3(team_slave_1) entered disabled state [ 219.429782][ T7421] bridge_slave_1: left allmulticast mode [ 219.431791][ T7421] bridge_slave_1: left promiscuous mode [ 219.433762][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.437907][ T7421] bridge_slave_0: left allmulticast mode [ 219.439727][ T7421] bridge_slave_0: left promiscuous mode [ 219.441644][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.589556][ T7426] sctp: [Deprecated]: syz.0.408 (pid 7426) Use of int in maxseg socket option. [ 219.589556][ T7426] Use struct sctp_assoc_value instead [ 219.598389][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 219.601284][ T7426] netlink: 'syz.0.408': attribute type 15 has an invalid length. [ 219.604068][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 219.614782][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 219.617602][ T7426] netlink: 'syz.0.408': attribute type 15 has an invalid length. [ 219.620026][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 219.636742][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 219.640209][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 219.643380][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 219.646913][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 219.782137][ T7440] tipc: Started in network mode [ 219.784376][ T7440] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 219.789178][ T7440] tipc: Enabled bearer , priority 19 [ 219.850582][ T7439] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 219.929777][ T7447] netlink: 52 bytes leftover after parsing attributes in process `syz.2.415'. [ 219.934854][ T7447] tipc: Cannot configure node identity twice [ 220.278821][ T848] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 220.292664][ T7468] netlink: 17 bytes leftover after parsing attributes in process `syz.1.421'. [ 220.428475][ T848] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 220.435271][ T848] usb 7-1: config 0 has no interface number 0 [ 220.440388][ T848] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.461036][ T848] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 220.466967][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.472933][ T848] usb 7-1: Product: syz [ 220.474692][ T848] usb 7-1: Manufacturer: syz [ 220.480313][ T848] usb 7-1: SerialNumber: syz [ 220.491749][ T848] usb 7-1: config 0 descriptor?? [ 220.520692][ T848] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 220.578085][ T7500] openvswitch: netlink: Flow actions attr not present in new flow. [ 220.663616][ T7505] ubi0: attaching mtd0 [ 220.671582][ T7505] ubi0: scanning is finished [ 220.673634][ T7505] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 220.861241][ T7505] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 220.909956][ T41] tipc: Node number set to 9480874 [ 221.084458][ T7514] nbd: must specify at least one socket [ 221.172460][ T7520] kvm: user requested TSC rate below hardware speed [ 221.182921][ T7520] afs: Bad value for 'source' [ 221.283429][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 221.283456][ T42] audit: type=1400 audit(1786182592.148:652): avc: denied { write } for pid=7522 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.337392][ T42] audit: type=1400 audit(1786182592.208:653): avc: denied { write } for pid=7531 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 221.416022][ T42] audit: type=1400 audit(1786182592.278:654): avc: denied { write } for pid=7534 comm="syz.1.435" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 221.440282][ T42] audit: type=1400 audit(1786182592.308:655): avc: denied { ioctl } for pid=7534 comm="syz.1.435" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 221.449148][ T7535] pim6reg: entered allmulticast mode [ 221.594677][ T42] audit: type=1400 audit(1786182592.458:656): avc: denied { kexec_image_load } for pid=7553 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 221.698369][ T42] audit: type=1400 audit(1786182592.568:657): avc: denied { read } for pid=7557 comm="syz.0.442" path="socket:[18460]" dev="sockfs" ino=18460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.835832][ T42] audit: type=1400 audit(1786182592.698:658): avc: denied { watch } for pid=7575 comm="syz.3.448" path="/108/bus" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.855362][ T42] audit: type=1400 audit(1786182592.698:659): avc: denied { watch_sb } for pid=7575 comm="syz.3.448" path="/108/bus" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.857992][ T7578] netlink: 'syz.3.448': attribute type 3 has an invalid length. [ 221.891880][ T42] audit: type=1400 audit(1786182592.758:660): avc: denied { ioctl } for pid=7575 comm="syz.3.448" path="socket:[18171]" dev="sockfs" ino=18171 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.970938][ T7581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 221.976505][ T7581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 221.992458][ T7590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35035 sclass=netlink_route_socket pid=7590 comm=syz.3.452 [ 221.994559][ T7587] xt_hashlimit: size too large, truncated to 1048576 [ 222.000067][ T7587] xt_hashlimit: invalid rate [ 222.004643][ T42] audit: type=1401 audit(1786182592.868:661): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 222.008080][ T7586] ip6erspan0: entered allmulticast mode [ 222.118587][ T7581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.127483][ T7581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 222.153702][ T7596] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.212543][ T7581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.216842][ T7581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 222.242527][ T7598] team0: Port device vlan2 added [ 222.255879][ T7598] pim6reg: entered allmulticast mode [ 222.263925][ T7598] cgroup: fork rejected by pids controller in /syz3 [ 222.276276][ T7596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.309684][ T7581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.314099][ T7581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 222.466702][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.469659][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 222.486756][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.491557][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 222.491767][ T7594] mount: server 127.0.0.1 not responding, timed out [ 222.495035][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.505390][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 222.509208][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 222.512738][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 222.519304][ T7593] pim6reg: left allmulticast mode [ 222.785762][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 222.825126][ T10] usb 7-1: USB disconnect, device number 4 [ 222.855650][ T10] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 222.857798][ T7622] fuse: Bad value for 'fd' [ 223.124050][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.209500][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.342621][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.349893][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.358253][ T5766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.368877][ T5766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.373695][ T5766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.410253][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.434358][ T7639] netlink: 'syz.2.466': attribute type 63 has an invalid length. [ 223.446960][ T7639] gretap0: entered allmulticast mode [ 223.450403][ T7639] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.570109][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.691286][ T7652] netlink: 'syz.2.467': attribute type 13 has an invalid length. [ 223.995282][ T7663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 224.003218][ T7663] nilfs2: Unknown parameter 'barrierv1ދd6Nc7+w1QXYS t" 㺢$hOdš% : [ 224.003218][ T7663] ;qߢDMf^{l(' [ 224.194204][ T7668] __nla_validate_parse: 5 callbacks suppressed [ 224.194217][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 224.225895][ T12] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 224.245643][ T5082] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 224.265288][ T12] bond0 (unregistering): Released all slaves [ 224.274948][ T12] bond1 (unregistering): Released all slaves [ 224.295480][ T12] bond2 (unregistering): Released all slaves [ 224.306676][ T12] bond3 (unregistering): Released all slaves [ 224.358941][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 224.390349][ T7671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.739655][ T5434] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.937638][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.940118][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.942842][ T7636] bridge_slave_0: entered allmulticast mode [ 224.945568][ T7636] bridge_slave_0: entered promiscuous mode [ 224.952624][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.955092][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.958210][ T7636] bridge_slave_1: entered allmulticast mode [ 224.961506][ T7636] bridge_slave_1: entered promiscuous mode [ 225.041878][ T12] hsr_slave_0: left promiscuous mode [ 225.049700][ T12] hsr_slave_1: left promiscuous mode [ 225.064907][ T12] veth1_macvtap: left promiscuous mode [ 225.071014][ T12] veth0_macvtap: left promiscuous mode [ 225.075389][ T12] veth1_vlan: left promiscuous mode [ 225.083354][ T12] veth0_vlan: left promiscuous mode [ 225.195376][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803d75c800: rx timeout, send abort [ 225.239637][ T12] team0 (unregistering): Port device vlan2 removed [ 225.406869][ T5082] Bluetooth: hci1: command tx timeout [ 225.417088][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 225.517843][ T7636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.529996][ T7636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.555151][ T5434] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.567418][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 225.572755][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 225.577774][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.582532][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.583341][ T7636] team0: Port device team_slave_0 added [ 225.587199][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 225.594861][ T7636] team0: Port device team_slave_1 added [ 225.595145][ T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 225.610712][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.619360][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.621353][ T24] usb 7-1: config 0 descriptor?? [ 225.625512][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.636259][ T7636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.649809][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.652651][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.662390][ T7636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.695793][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803d75d000: rx timeout, send abort [ 225.701910][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803d75c800: abort rx timeout. Force session deactivation [ 225.712311][ T7636] hsr_slave_0: entered promiscuous mode [ 225.715441][ T7636] hsr_slave_1: entered promiscuous mode [ 225.915264][ T5434] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.075701][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0004/input/input11 [ 226.116883][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.186282][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0004/input/input12 [ 226.198727][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803d75d000: abort rx timeout. Force session deactivation [ 226.253196][ T24] kye 0003:0458:5013.0004: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 226.255799][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.267905][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.277451][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 226.283264][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.287028][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.297864][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.301533][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.306142][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.310872][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.337322][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 226.337344][ T42] audit: type=1400 audit(1786182597.208:692): avc: denied { write } for pid=7768 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.353353][ T6663] usb 7-1: USB disconnect, device number 5 [ 226.449738][ T42] audit: type=1400 audit(1786182597.308:693): avc: denied { write } for pid=7774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.487715][ T7760] XFS (nbd1): SB validate failed with error -5. [ 226.516145][ T42] audit: type=1400 audit(1786182597.378:694): avc: denied { write } for pid=7783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.532559][ T42] audit: type=1400 audit(1786182597.398:695): avc: denied { view } for pid=7758 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.556893][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 226.558664][ T34] usbtmc 5-1:16.0: can't read capabilities [ 226.563967][ T7785] evm: overlay not supported [ 226.568009][ T7775] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.490'. [ 226.571008][ T7775] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.490'. [ 226.609172][ T42] audit: type=1400 audit(1786182597.478:696): avc: denied { listen } for pid=7788 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 226.620790][ T42] audit: type=1400 audit(1786182597.488:697): avc: denied { rename } for pid=7773 comm="syz.2.490" name="file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.670101][ T7636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.678302][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.681216][ T7636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.689522][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.694864][ T7636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.702380][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.710669][ T7636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.730729][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.779750][ T10] usb 5-1: USB disconnect, device number 2 [ 226.844533][ T7802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.897849][ T42] audit: type=1400 audit(1786182597.758:698): avc: denied { relabelfrom } for pid=7815 comm="syz.1.495" name="NETLINK" dev="sockfs" ino=21501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 226.911154][ T7816] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 226.913123][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.915151][ T42] audit: type=1400 audit(1786182597.778:699): avc: denied { relabelto } for pid=7815 comm="syz.1.495" name="NETLINK" dev="sockfs" ino=21501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:src_t:s0" [ 226.923483][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 226.926176][ T7636] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.954226][ T7802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.973452][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7816 comm=syz.1.495 [ 226.976807][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.980272][ T42] audit: type=1400 audit(1786182597.848:700): avc: denied { name_bind } for pid=7815 comm="syz.1.495" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 226.982217][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.998125][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.001152][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.028688][ T7802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.091445][ T7819] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 227.123979][ T7802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.148669][ T7819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.153737][ T7819] bond1: (slave bond2): making interface the new active one [ 227.158301][ T7819] bond1: (slave bond2): Enslaving as an active interface with an up link [ 227.175997][ T7824] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 227.184999][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'. [ 227.190861][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.220895][ T5829] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.256746][ T5829] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.267019][ T5829] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.271090][ T5829] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.336958][ T7832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.496'. [ 227.345227][ T7833] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 227.352706][ T7833] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 227.367617][ T42] audit: type=1400 audit(1786182598.228:701): avc: denied { create } for pid=7836 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.393410][ T7840] CIFS: Attempting to mount //127.0.0.1/share [ 227.403830][ T7840] CIFS: VFS: Error connecting to socket. Aborting operation. [ 227.409113][ T7840] CIFS: VFS: cifs_mount failed w/return code = -111 [ 227.420215][ T7843] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 227.437156][ T7636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.475077][ T7847] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 227.483691][ T7636] veth0_vlan: entered promiscuous mode [ 227.488893][ T5082] Bluetooth: hci1: command tx timeout [ 227.490188][ T7847] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 227.495535][ T7847] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 227.496472][ T7636] veth1_vlan: entered promiscuous mode [ 227.504769][ T7847] jffs2: notice: (7847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 227.528849][ T7636] veth0_macvtap: entered promiscuous mode [ 227.539245][ T7636] veth1_macvtap: entered promiscuous mode [ 227.553497][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.569185][ T7852] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 227.569565][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.582026][ T7852] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 227.647310][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.657362][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.739067][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.742822][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.792977][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.796280][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.830627][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.839805][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.856777][ T7860] overlayfs: conflicting options: userxattr,metacopy=on [ 228.027692][ T7865] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 228.666252][ T7890] xt_NFQUEUE: number of total queues is 0 [ 228.832996][ T7913] key id 000004d2 not found [ 228.973488][ T7928] usb3503 pcspkr: unknown mode is requested [ 228.977063][ T7928] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 228.983295][ T7928] tc_dump_action: action bad kind [ 229.084626][ T7932] syzkaller0: entered promiscuous mode [ 229.087700][ T7932] syzkaller0: entered allmulticast mode [ 229.111474][ T7932] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.116014][ T7932] sock: sock_set_timeout: `syz.3.524' (pid 7932) tries to set negative timeout [ 229.316699][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.478314][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.482825][ T5830] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 229.486257][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.498282][ T5830] as10x_usb: device has been detected [ 229.501509][ T5830] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 229.521794][ T5830] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 229.549845][ T5830] as10x_usb: error during firmware upload part1 [ 229.553184][ T5830] Registered device Abilis Systems DVB-Titan [ 229.566829][ T5082] Bluetooth: hci1: command tx timeout [ 229.714985][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.718216][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.755382][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.763982][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.788569][ T7936] tipc: Resetting bearer [ 229.815840][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.820192][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.833475][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.836884][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.053017][ T7951] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 230.056998][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 230.061057][ T7956] binder: BINDER_SET_CONTEXT_MGR already set [ 230.064727][ T7956] binder: 7954:7956 ioctl 4018620d 200000004a80 returned -16 [ 230.514719][ T7980] syzkaller0: entered promiscuous mode [ 230.516962][ T7980] syzkaller0: entered allmulticast mode [ 230.710175][ T7984] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.757718][ T7986] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.806312][ T7989] tmpfs: Cannot change global quota limit on remount [ 231.386313][ T5830] usb 5-1: USB disconnect, device number 3 [ 231.408020][ T5830] Unregistered device Abilis Systems DVB-Titan [ 231.408933][ T5830] as10x_usb: device has been disconnected [ 231.710260][ T5082] Bluetooth: hci1: command tx timeout [ 231.766193][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 231.766235][ T42] audit: type=1400 audit(2000524292.086:735): avc: denied { ioctl } for pid=7991 comm="syz.3.542" path="socket:[23017]" dev="sockfs" ino=23017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.994694][ T8003] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 232.004341][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 232.126486][ T8013] usb usb9: usbfs: process 8013 (syz.1.548) did not claim interface 0 before use [ 232.154403][ T8016] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 232.169022][ T8013] bond3: entered promiscuous mode [ 232.236974][ T42] audit: type=1400 audit(2000524292.543:736): avc: denied { create } for pid=8019 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 232.240016][ T8020] smc: net device lo applied user defined pnetid SYZ0 [ 232.248910][ T8020] smc: smcd device lo applied user defined pnetid SYZ0 [ 232.252750][ T42] audit: type=1400 audit(2000524292.543:737): avc: denied { getopt } for pid=8019 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 232.262338][ T42] audit: type=1400 audit(2000524292.553:738): avc: denied { bind } for pid=8019 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.280175][ T42] audit: type=1400 audit(2000524292.553:739): avc: denied { listen } for pid=8019 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.296769][ T42] audit: type=1400 audit(2000524292.553:740): avc: denied { accept } for pid=8019 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.986575][ T42] audit: type=1326 audit(2000524293.273:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.0.553" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2dcd9e0d9 code=0x0 [ 233.027737][ T42] audit: type=1400 audit(2000524293.312:742): avc: denied { map } for pid=8026 comm="syz.3.554" path="/proc/45/task/46/make-it-fail" dev="proc" ino=24076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 233.036384][ T42] audit: type=1400 audit(2000524293.312:743): avc: denied { execute } for pid=8026 comm="syz.3.554" path="/proc/45/task/46/make-it-fail" dev="proc" ino=24076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 233.655196][ T8053] program syz.1.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.659569][ T8053] capability: warning: `syz.1.560' uses 32-bit capabilities (legacy support in use) [ 233.752875][ T8057] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 233.756500][ T8057] overlayfs: missing 'lowerdir' [ 233.759792][ T8057] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20002 [ 233.768585][ T8057] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 233.772182][ T8057] overlayfs: missing 'lowerdir' [ 234.122661][ T42] audit: type=1400 audit(2000524294.374:744): avc: denied { setopt } for pid=8070 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.277602][ T8079] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 234.292546][ T8079] input: syz0 as /devices/virtual/input/input13 [ 234.326222][ T8079] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 234.330573][ T8083] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 234.380429][ T8079] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffe4c3 undefined [ 234.390034][ T5844] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 234.548786][ T8100] bond5: option downdelay: invalid value (18446744073709551615) [ 234.552264][ T8100] bond5: option downdelay: allowed values 0 - 2147483647 [ 234.556199][ T5844] usb 8-1: Using ep0 maxpacket: 32 [ 234.561706][ T5844] usb 8-1: unable to get BOS descriptor or descriptor too short [ 234.564425][ T8100] bond5 (unregistering): Released all slaves [ 234.569948][ T5844] usb 8-1: string descriptor 0 read error: -22 [ 234.572615][ T5844] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 234.583113][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 234.611542][ T5844] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 234.624106][ T5844] dw2102: su3000_power_ctrl: 1, initialized 0 [ 234.628659][ T5844] dvb-usb: bulk message failed: -22 (2/0) [ 234.663194][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.668922][ T8110] dvmrp0: entered allmulticast mode [ 234.669640][ T5844] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 234.684167][ T5844] usb 8-1: media controller created [ 234.717844][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.730495][ T5844] dw2102: i2c transfer failed. [ 234.736515][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.741022][ T5844] dw2102: i2c transfer failed. [ 234.747133][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.749966][ T5844] dw2102: i2c transfer failed. [ 234.752065][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.754583][ T5844] dw2102: i2c transfer failed. [ 234.756703][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.763238][ T5844] dw2102: i2c transfer failed. [ 234.765356][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 234.767945][ T5844] dw2102: i2c transfer failed. [ 234.770656][ T5844] dvb-usb: MAC address: 02:02:02:02:02:02 [ 234.797289][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.816349][ T8072] dvb-usb: bulk message failed: -22 (5/0) [ 234.819047][ T8072] dw2102: i2c transfer failed. [ 234.824729][ T8132] dvb-usb: bulk message failed: -22 (5/0) [ 234.837972][ T8132] dw2102: i2c transfer failed. [ 234.845280][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 234.851406][ T5844] dw2102: command 0x0e transfer failed. [ 234.857840][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 234.860408][ T5844] dw2102: command 0x0e transfer failed. [ 235.163065][ T8163] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 235.165702][ T8163] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.171741][ T8163] vhci_hcd vhci_hcd.0: Device attached [ 235.177545][ T8164] vhci_hcd: cannot find a urb of seqnum 10 max seqnum 0 [ 235.178577][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 235.184698][ T8166] netlink: 'syz.2.583': attribute type 61 has an invalid length. [ 235.189642][ T12] vhci_hcd vhci_hcd.0: stop threads [ 235.190566][ T5844] dw2102: command 0x0e transfer failed. [ 235.191900][ T12] vhci_hcd vhci_hcd.0: release socket [ 235.195504][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 235.196123][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 235.198125][ T5844] dw2102: command 0x0e transfer failed. [ 235.204040][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 235.206317][ T5844] dw2102: command 0x51 transfer failed. [ 235.231552][ T5844] DVB: Unable to find symbol ds3000_attach() [ 235.234038][ T5844] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 235.300855][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.303818][ T5844] rc_core: IR keymap rc-su3000 not found [ 235.306067][ T5844] Registered IR keymap rc-empty [ 235.316296][ T5844] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 235.322863][ T5844] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input15 [ 235.335875][ T5844] dvb-usb: schedule remote query interval to 150 msecs. [ 235.338748][ T5844] dw2102: su3000_power_ctrl: 0, initialized 1 [ 235.343791][ T5844] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 235.350468][ T5844] usb 8-1: USB disconnect, device number 4 [ 235.401432][ T5844] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 235.457263][ T5831] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 235.460686][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.463289][ T5831] usb 6-1: Product: syz [ 235.464739][ T5831] usb 6-1: Manufacturer: syz [ 235.466351][ T5831] usb 6-1: SerialNumber: syz [ 235.709538][ T5831] rtl8150 6-1:1.0: couldn't reset the device [ 235.711756][ T5831] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 235.723698][ T5831] usb 6-1: USB disconnect, device number 2 [ 235.871488][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 235.875002][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 235.878171][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 235.881014][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 235.995516][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'. [ 235.999585][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 236.003136][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'. [ 236.466235][ T5082] Bluetooth: hci0: command 0x040f tx timeout [ 236.466321][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 236.467793][ T8227] loop0: detected capacity change from 0 to 24359 [ 236.475576][ T5830] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 236.476589][ T848] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 236.630990][ T848] usb 6-1: not running at top speed; connect to a high speed hub [ 236.634934][ T848] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 2304, setting to 64 [ 236.639433][ T848] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 236.642712][ T848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 236.645312][ T848] usb 6-1: Product: syz [ 236.646690][ T848] usb 6-1: Manufacturer: syz [ 236.652372][ T8221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.657213][ T848] usb 6-1: USB2VGA dongle found at address 3 [ 236.661734][ T848] usb 6-1: Allocated 8 output buffers [ 236.663452][ T848] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 236.869256][ T8221] usb 6-1: Device not attached to USB 2.0 hub [ 236.873867][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 236.902019][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 236.902031][ T42] audit: type=1400 audit(2000524297.092:757): avc: denied { unmount } for pid=5755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 236.935397][ T42] audit: type=1400 audit(2000524297.122:758): avc: denied { mounton } for pid=8220 comm="syz.1.596" path="/128/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 236.955489][ T848] usb 6-1: USB disconnect, device number 3 [ 237.065884][ T42] audit: type=1400 audit(2000524297.259:759): avc: denied { getopt } for pid=8242 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.077159][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 237.088342][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 237.148521][ T42] audit: type=1400 audit(2000524297.337:760): avc: denied { name_bind } for pid=8254 comm="syz.1.608" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 237.159655][ T8251] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 237.163840][ T42] audit: type=1400 audit(2000524297.357:761): avc: denied { connect } for pid=8250 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.266694][ T42] audit: type=1400 audit(2000524297.455:762): avc: denied { mount } for pid=8258 comm="syz.3.609" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 237.318153][ T42] audit: type=1400 audit(2000524297.504:763): avc: denied { unmount } for pid=7636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 237.380553][ T8269] netlink: 'syz.2.612': attribute type 20 has an invalid length. [ 237.384523][ T8269] netlink: 'syz.2.612': attribute type 20 has an invalid length. [ 237.547901][ T42] audit: type=1400 audit(2000524297.729:764): avc: denied { mounton } for pid=8279 comm="syz.3.616" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 237.711673][ T5863] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.803308][ T5831] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 237.874941][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 237.878845][ T5863] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 237.882267][ T5863] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 237.887125][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.891942][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.896849][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.901066][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.905675][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 237.911166][ T5863] usb 7-1: config 168 interface 0 has no altsetting 0 [ 237.915350][ T5863] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 237.918606][ T5863] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 237.923432][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.928377][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.933359][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.938389][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.943172][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 237.950032][ T5863] usb 7-1: config 168 interface 0 has no altsetting 0 [ 237.954041][ T5863] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 237.957376][ T5863] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 237.962135][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 237.966777][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.968571][ T5831] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 237.971374][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.971399][ T5863] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.971421][ T5863] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 237.974875][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.979129][ T5863] usb 7-1: config 168 interface 0 has no altsetting 0 [ 237.981853][ T5863] usb 7-1: string descriptor 0 read error: -22 [ 237.984029][ T5831] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.988651][ T5863] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.993120][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.995167][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.997833][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.002373][ T5831] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 238.013946][ T5863] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 238.018122][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.027447][ T5831] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.032466][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.037016][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.042749][ T5831] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 238.045946][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 238.050869][ T5831] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.080948][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 238.086361][ T5831] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 238.093713][ T42] audit: type=1400 audit(2000524298.269:765): avc: denied { create } for pid=8284 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 238.094102][ T5831] usb 8-1: string descriptor 0 read error: -22 [ 238.101830][ T5831] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 238.104553][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.121493][ T5831] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 238.148252][ T42] audit: type=1400 audit(2000524298.318:766): avc: denied { execute } for pid=8284 comm="syz.0.618" path="/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs" dev="sysfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 238.272254][ T5863] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 238.277321][ T10] usb 7-1: USB disconnect, device number 6 [ 238.326003][ T5831] usb 8-1: USB disconnect, device number 5 [ 238.427517][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 238.431967][ T5863] usb 6-1: config 4 has an invalid interface number: 13 but max is 0 [ 238.435488][ T5863] usb 6-1: config 4 has no interface number 0 [ 238.438037][ T5863] usb 6-1: config 4 interface 13 has no altsetting 0 [ 238.442989][ T5863] usb 6-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 238.446820][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.450130][ T5863] usb 6-1: Product: syz [ 238.451822][ T5863] usb 6-1: Manufacturer: syz [ 238.453759][ T5863] usb 6-1: SerialNumber: syz [ 238.667031][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.670907][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.683298][ T5863] ums-realtek 6-1:4.13: USB Mass Storage device detected [ 238.759318][ T5863] usb 6-1: USB disconnect, device number 4 [ 238.914640][ T5082] Bluetooth: hci2: command 0x040f tx timeout [ 238.916897][ T5830] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 238.919884][ T5830] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 239.173669][ T8308] tipc: Started in network mode [ 239.175783][ T8308] tipc: Node identity 4004, cluster identity 4711 [ 239.179329][ T8308] tipc: Node number set to 16388 [ 239.218843][ T8313] program syz.0.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.247257][ T8321] syz.3.629 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.2qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 64889][ T8321] dlm: no locking on control device [ 239.320685][ T8332] netlink: Invalid conntrack timeout [ 239.327627][ T8332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.346855][ T8334] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 239.627807][ T8345] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 239.653611][ T8347] usb usb1: usbfs: process 8347 (syz.2.634) did not claim interface 10 before use [ 240.007014][ T8370] comedi comedi0: rti802: I/O base address or length out of range [ 240.062556][ T8373] macvtap0: entered allmulticast mode [ 240.064773][ T8373] veth0_macvtap: entered allmulticast mode [ 240.067618][ T8373] tipc: Resetting bearer [ 240.069590][ T8373] tipc: Resetting bearer [ 240.323435][ T8385] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 240.472175][ T8401] overlay: ./file0 is not a directory [ 240.707805][ T8413] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 240.754816][ T8418] xt_connbytes: Forcing CT accounting to be enabled [ 240.784393][ T8421] Bluetooth: hci4: Frame reassembly failed (-90) [ 240.792408][ T8423] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 241.029425][ T5082] Bluetooth: hci3: command 0x040f tx timeout [ 241.031631][ T5830] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 241.031673][ T5830] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 241.638771][ T5844] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 241.777809][ T8439] nvme nvme0: failed to connect socket: -512 [ 241.791102][ T5844] usb 7-1: device descriptor read/64, error -71 [ 242.044907][ T5844] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 242.095677][ T5863] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 242.189228][ T5844] usb 7-1: device descriptor read/64, error -71 [ 242.249581][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 242.254117][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.258685][ T5863] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 242.262213][ T5863] usb 5-1: config 14 has no interface number 0 [ 242.264817][ T5863] usb 5-1: config 14 interface 57 has no altsetting 0 [ 242.270052][ T5863] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 242.273812][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.277218][ T5863] usb 5-1: Product: syz [ 242.279158][ T5863] usb 5-1: Manufacturer: syz [ 242.281131][ T5863] usb 5-1: SerialNumber: syz [ 242.300642][ T5844] usb usb7-port1: attempt power cycle [ 242.495175][ T8454] __nla_validate_parse: 10 callbacks suppressed [ 242.495192][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 242.522589][ T5863] legousbtower 5-1:14.57: interrupt endpoints not found [ 242.527786][ T5863] usb 5-1: USB disconnect, device number 4 [ 242.645876][ T8487] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 242.664039][ T5844] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 242.682213][ T8493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.695830][ T5844] usb 7-1: device descriptor read/8, error -71 [ 242.750807][ T8490] kvm: kvm [8489]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe702111 [ 242.837127][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 242.837148][ T42] audit: type=1400 audit(2000524302.931:782): avc: denied { mount } for pid=8499 comm="syz.0.675" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 242.848407][ T42] audit: type=1400 audit(2000524302.931:783): avc: denied { write } for pid=8499 comm="syz.0.675" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 242.861464][ T42] audit: type=1400 audit(2000524302.931:784): avc: denied { open } for pid=8499 comm="syz.0.675" path="/213/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 242.872528][ T42] audit: type=1400 audit(2000524302.951:785): avc: denied { ioctl } for pid=8499 comm="syz.0.675" path="/213/tracing/events/enable" dev="tracefs" ino=19680823 ioctlcmd=0x5663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 242.912758][ T42] audit: type=1400 audit(2000524303.000:786): avc: denied { unmount } for pid=5755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 242.947897][ T5844] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 242.971127][ T5844] usb 7-1: device descriptor read/8, error -71 [ 243.017462][ T8505] lo: entered allmulticast mode [ 243.022198][ T8505] dvmrp0: left allmulticast mode [ 243.024356][ T8505] lo: left allmulticast mode [ 243.079919][ T5844] usb usb7-port1: unable to enumerate USB device [ 243.143991][ T5766] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.144122][ T5830] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 243.153606][ T5830] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 243.226504][ T6485] Bluetooth: hci4: Frame reassembly failed (-84) [ 243.230868][ T6485] Bluetooth: hci4: Frame reassembly failed (-84) [ 243.451370][ T8514] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 243.460956][ T42] audit: type=1400 audit(2000524303.543:787): avc: denied { read } for pid=8510 comm="syz.0.679" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.491021][ T8514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.495904][ T8514] bond1: (slave bond2): making interface the new active one [ 243.499624][ T8514] bond1: (slave bond2): Enslaving as an active interface with an up link [ 243.505874][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 243.513204][ T8514] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 243.518635][ T8515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.555434][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.561017][ T8525] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 243.562371][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.885372][ T8542] bond6: ARP target 9.0.0.0 is already present [ 243.887473][ T8542] bond6: option arp_ip_target: invalid value (9) [ 243.890404][ T8542] bond6 (unregistering): Released all slaves [ 244.110914][ T8547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8547 comm=syz.3.688 [ 244.149315][ T8550] netlink: 'syz.3.689': attribute type 11 has an invalid length. [ 244.206475][ T42] audit: type=1400 audit(2000524304.283:788): avc: denied { append } for pid=8551 comm="syz.3.690" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.213082][ T8552] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 244.218860][ T42] audit: type=1400 audit(2000524304.293:789): avc: denied { map } for pid=8551 comm="syz.3.690" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.226781][ T42] audit: type=1400 audit(2000524304.293:790): avc: denied { execute } for pid=8551 comm="syz.3.690" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.336617][ T42] audit: type=1400 audit(2000524304.411:791): avc: denied { map } for pid=8553 comm="syz.3.691" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.353106][ T8556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 244.493592][ T8566] overlayfs: missing 'lowerdir' [ 244.500737][ T8566] block2mtd: device name too long [ 244.567146][ T8577] kAFS: unable to lookup cell '(,cL' [ 244.831585][ T8588] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 244.944767][ T8593] input: syz0 as /devices/virtual/input/input17 [ 244.949877][ T8590] ima: policy update failed [ 245.008690][ T8595] program syz.3.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.055836][ T1128] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 245.059100][ T1128] ata1.00: irq_stat 0x40000000 [ 245.061376][ T1128] ata1.00: failed command: ZAC MANAGEMENT OUT [ 245.063456][ T1128] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 23 [ 245.063456][ T1128] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 245.069205][ T1128] ata1.00: status: { DRDY ERR } [ 245.070796][ T1128] ata1.00: error: { ABRT } [ 245.073013][ T1128] ata1.00: device reported invalid CHS sector 0 [ 245.295764][ T8610] fuse: Unknown parameter '' [ 245.332310][ T5766] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.564352][ T8633] 8021q: VLANs not supported on ip_vti0 [ 245.564746][ T8629] Format for deleting device is "id" (uint). [ 245.615476][ T8635] devpts: Unknown parameter '' [ 245.997951][ T8660] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 246.178512][ T8668] IPVS: Scheduler module ip_vs_sip not found [ 246.258679][ T8674] bridge0: port 3(syz_tun) entered blocking state [ 246.261009][ T8674] bridge0: port 3(syz_tun) entered disabled state [ 246.263708][ T8674] syz_tun: entered allmulticast mode [ 246.422333][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 246.424850][ T1128] ata1: failed to read log page 10h (errno=-5) [ 246.427296][ T1128] ata1.00: exception Emask 0x1 SAct 0x8000 SErr 0x0 action 0x0 [ 246.430231][ T1128] ata1.00: irq_stat 0x40000000 [ 246.437102][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 246.441607][ T1128] ata1.00: cmd 61/70:78:c6:af:0c/01:00:00:00:00/40 tag 15 ncq dma 188416 out [ 246.441607][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 246.447115][ T1128] ata1.00: status: { DRDY } [ 246.453807][ T8686] ksmbd: Unknown IPC event: 3, ignore. [ 246.455569][ T1128] ata1.00: configured for UDMA/100 [ 246.458217][ T1128] ata1: EH complete [ 246.549634][ T8688] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.595920][ T8694] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.922944][ T8715] Bluetooth: MGMT ver 1.23 [ 246.925657][ T8714] 9pnet: Found fid 0 not clunked [ 247.113136][ T8722] macsec0: entered allmulticast mode [ 247.208268][ T8737] [U]  [ 247.271599][ T8741] fuse: Bad value for 'fd' [ 247.352483][ T8735] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 247.552630][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 247.644335][ T4498] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.677007][ T8764] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 247.680425][ T8764] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 247.683743][ T8764] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 247.689731][ T8764] jffs2: notice: (8764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 247.758447][ T8697] ceph: No mds server is up or the cluster is laggy [ 247.809263][ T4498] usb 6-1: Using ep0 maxpacket: 8 [ 247.817941][ T4498] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 247.823474][ T4498] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.827747][ T4498] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.831542][ T4498] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.835746][ T4498] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.838804][ T4498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.052673][ T4498] usb 6-1: GET_CAPABILITIES returned 0 [ 248.054545][ T4498] usbtmc 6-1:16.0: can't read capabilities [ 248.258285][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 248.263172][ T4498] usb 6-1: USB disconnect, device number 5 [ 248.341511][ T8780] mmap: syz.2.752 (8780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 248.378355][ T8780] netlink: 596 bytes leftover after parsing attributes in process `syz.2.752'. [ 248.477320][ T8792] netlink: 56 bytes leftover after parsing attributes in process `syz.2.756'. [ 248.517564][ T8792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 248.538649][ T8792] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 248.542515][ T8792] SELinux: failed to load policy [ 248.753150][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 248.916886][ T4498] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.060401][ T8815] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 249.065666][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 249.065692][ T42] audit: type=1400 audit(2000524309.089:809): avc: denied { mounton } for pid=8813 comm="syz.0.764" path="/241/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 249.070336][ T8817] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 249.079522][ T4498] usb 7-1: Using ep0 maxpacket: 32 [ 249.083104][ T4498] usb 7-1: config index 0 descriptor too short (expected 42631, got 27) [ 249.085887][ T4498] usb 7-1: config 150 has too many interfaces: 239, using maximum allowed: 32 [ 249.088857][ T4498] usb 7-1: config 150 has an invalid descriptor of length 161, skipping remainder of the config [ 249.092119][ T4498] usb 7-1: config 150 has 0 interfaces, different from the descriptor's value: 239 [ 249.096933][ T4498] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 249.106250][ T4498] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.109014][ T4498] usb 7-1: Product: syz [ 249.110371][ T4498] usb 7-1: Manufacturer: ƹ䐥ᜍⷈ疴줔頀熌魉輼鏤촧Ħ䲇砊糚㊡賛ⴡ㬼╘儣䑨䊭ᩩ⢘羢໊刿쓖뀵鉌硆쳾寪멹ꂭ菧橫ಷ⺩賬긭䡥舤ꙉ佹웮㕿돕ꉆ઺颵ﾇⓏ匦㖺쐳⡲됈㲞绐气瓏Ͳ灳⎽ϑ苫㤁넆긍现叅㼞מּ觀ᭀ柁嚌쎃ఉ頹⒱䍐➞ᅗ妚堢룅笋 [ 249.111547][ T8821] trusted_key: encrypted_key: master key parameter is missing [ 249.119889][ T4498] usb 7-1: SerialNumber: syz [ 249.164547][ T42] audit: type=1400 audit(2000524309.188:810): avc: denied { bind } for pid=8822 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.165913][ T8816] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 249.327621][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 249.329010][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.759'. [ 249.330415][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 249.344845][ T4498] usb 7-1: USB disconnect, device number 11 [ 249.386728][ T848] libceph: connect (1)[c::]:6789 error -101 [ 249.389155][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 249.522549][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 249.607439][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 249.610183][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 249.654727][ T848] libceph: connect (1)[c::]:6789 error -101 [ 249.657623][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 249.675956][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.680297][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.684866][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 249.688053][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.694333][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 249.700028][ T24] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 249.703881][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.707296][ T24] usb 5-1: Product: syz [ 249.709048][ T24] usb 5-1: Manufacturer: syz [ 249.711055][ T24] usb 5-1: SerialNumber: syz [ 249.847120][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.850121][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 249.854920][ T34] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 249.858576][ T34] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 249.861195][ T34] usb 6-1: config 14 has no interface number 0 [ 249.863117][ T34] usb 6-1: config 14 has no interface number 1 [ 249.865122][ T34] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 249.868689][ T34] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 249.873164][ T34] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 249.877752][ T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 249.882035][ T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 6680, setting to 64 [ 249.886329][ T34] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.891508][ T34] usb 6-1: config 14 interface 57 has no altsetting 0 [ 249.894122][ T34] usb 6-1: config 14 interface 228 has no altsetting 0 [ 249.900295][ T34] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 249.903416][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.906009][ T34] usb 6-1: Product: syz [ 249.907344][ T34] usb 6-1: Manufacturer: syz [ 249.909032][ T34] usb 6-1: SerialNumber: syz [ 249.925530][ T24] usb 5-1: usb_control_msg returned -71 [ 249.928529][ T24] usbtmc 5-1:1.0: can't read capabilities [ 249.958338][ T24] usb 5-1: USB disconnect, device number 5 [ 250.129680][ T1478] libceph: connect (1)[c::]:6789 error -101 [ 250.131909][ T1478] libceph: mon0 (1)[c::]:6789 connect error [ 250.159303][ T8830] ceph: No mds server is up or the cluster is laggy [ 250.159349][ T8833] ceph: No mds server is up or the cluster is laggy [ 250.174040][ T848] libceph: connect (1)[c::]:6789 error -101 [ 250.178543][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 250.290372][ T42] audit: type=1400 audit(2000524310.308:811): avc: denied { watch } for pid=8847 comm="syz.3.774" path="/61" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 250.336460][ T34] legousbtower 6-1:14.57: interrupt endpoints not found [ 250.440813][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.492290][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 250.597999][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.612469][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.616228][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.619295][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.635753][ T24] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 250.642934][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.646055][ T24] usb 5-1: Product: syz [ 250.647408][ T24] usb 5-1: Manufacturer: syz [ 250.648963][ T24] usb 5-1: SerialNumber: syz [ 250.712577][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 250.735395][ T34] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 250.745573][ T34] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 250.753148][ T8868] netlink: 164 bytes leftover after parsing attributes in process `syz.2.781'. [ 250.770397][ T8869] netlink: 164 bytes leftover after parsing attributes in process `syz.2.781'. [ 250.867966][ T24] usb 5-1: usb_control_msg returned -32 [ 250.869991][ T24] usbtmc 5-1:1.0: can't read capabilities [ 250.871948][ T42] audit: type=1400 audit(2000524310.873:812): avc: denied { write } for pid=8873 comm="syz.2.782" name="usb_gadget" dev="configfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.880976][ T42] audit: type=1400 audit(2000524310.883:813): avc: denied { write } for pid=8873 comm="syz.2.782" name="functions" dev="configfs" ino=33980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.905347][ T42] audit: type=1400 audit(2000524310.903:814): avc: denied { write } for pid=8873 comm="syz.2.782" name="functions" dev="configfs" ino=33980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.500577][ T24] usb 6-1: USB disconnect, device number 6 [ 251.507531][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 251.577971][ T8886] netlink: 'syz.0.769': attribute type 3 has an invalid length. [ 251.580627][ T8886] netlink: 64 bytes leftover after parsing attributes in process `syz.0.769'. [ 251.615089][ T42] audit: type=1400 audit(2000524311.617:815): avc: denied { watch } for pid=8887 comm="syz.2.785" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 251.623099][ T42] audit: type=1400 audit(2000524311.617:816): avc: denied { watch_sb watch_reads } for pid=8887 comm="syz.2.785" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 252.122569][ T8899] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 252.126629][ T8899] syzkaller0: entered promiscuous mode [ 252.128598][ T8899] syzkaller0: entered allmulticast mode [ 252.259788][ T42] audit: type=1400 audit(2000524312.252:817): avc: denied { read write } for pid=8907 comm="syz.2.791" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 252.421060][ T8918] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 252.608268][ T8931] tmpfs: Unknown parameter 'mpdl' [ 252.635554][ T4498] usb 5-1: USB disconnect, device number 6 [ 252.717903][ T8938] Need at least one configuration in g1. [ 252.727518][ T8938] udc usbip-vudc.0: failed to start g1: -22 [ 252.731199][ T8943] syzkaller0: left promiscuous mode [ 252.731805][ T8938] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 252.733006][ T8943] syzkaller0: left allmulticast mode [ 252.760768][ T8938] UDC core: g1: couldn't find an available UDC or it's busy [ 252.795902][ T42] audit: type=1400 audit(2000524312.788:818): avc: denied { read } for pid=8947 comm="syz.1.804" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 252.841545][ T8951] netlink: 5 bytes leftover after parsing attributes in process `syz.0.805'. [ 252.845642][ T8951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.053326][ T4498] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 253.142097][ T1478] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 253.204399][ T4498] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.208024][ T4498] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.212190][ T4498] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.215167][ T4498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.303435][ T1478] usb 5-1: Using ep0 maxpacket: 8 [ 253.307359][ T1478] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.311576][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.315728][ T1478] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.319499][ T1478] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.323669][ T1478] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.326843][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.423202][ T4498] usb 6-1: GET_CAPABILITIES returned 0 [ 253.425197][ T4498] usbtmc 6-1:16.0: can't read capabilities [ 253.535642][ T1478] usb 5-1: usb_control_msg returned -32 [ 253.537722][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.538015][ T1478] usbtmc 5-1:16.0: can't read capabilities [ 253.542201][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.548206][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.552082][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.555897][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.560999][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.564034][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.566994][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.588550][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.592431][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.596058][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.599682][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.603460][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.609357][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.612487][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.615349][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 253.630838][ T24] usb 5-1: USB disconnect, device number 7 [ 253.729197][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 253.811890][ T8972] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 253.822745][ T8972] CIFS: Attempting to mount //127.0.0.1/share [ 254.557774][ T8972] CIFS: VFS: cifs_mount failed w/return code = -512 [ 254.648792][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 254.648810][ T42] audit: type=1400 audit(2000524314.625:820): avc: denied { watch watch_reads } for pid=8975 comm="syz.0.811" path="/proc/793" dev="proc" ino=33515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 255.256696][ T8986] ip_tables: iptables: counters copy to user failed while replacing table [ 255.289386][ T8986] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.346636][ T8996] binder: 8995:8996 ioctl c0306201 200000000580 returned -14 [ 255.364087][ T8996] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 255.367805][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.817'. [ 255.371434][ T8996] team_slave_1: entered promiscuous mode [ 255.373919][ T8996] team_slave_1: entered allmulticast mode [ 255.389691][ T9001] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 255.394270][ T8996] team0: Port device team_slave_1 removed [ 255.398207][ T8996] bridge0: port 3(team_slave_1) entered blocking state [ 255.401372][ T8996] bridge0: port 3(team_slave_1) entered disabled state [ 255.423479][ T42] audit: type=1400 audit(2000524315.390:821): avc: denied { setattr } for pid=9000 comm="syz.0.818" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 255.575127][ T9015] input: syz0 as /devices/virtual/input/input20 [ 255.597215][ T9015] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 255.605395][ T9015] fuse: Unknown parameter 'grOup_id' [ 255.606508][ T42] audit: type=1400 audit(2000524315.579:822): avc: denied { mounton } for pid=9014 comm="syz.3.820" path="/71/file0" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 255.766436][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 255.809002][ T9037] netlink: 80 bytes leftover after parsing attributes in process `syz.3.824'. [ 255.994915][ T42] audit: type=1400 audit(2000524315.966:823): avc: denied { setopt } for pid=9051 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.002600][ T42] audit: type=1400 audit(2000524315.966:824): avc: denied { accept } for pid=9051 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.009903][ T42] audit: type=1400 audit(2000524315.966:825): avc: denied { read } for pid=9051 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.020533][ T9054] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 256.020533][ T9054] The task syz.3.824 (9054) triggered the difference, watch for misbehavior. [ 256.142217][ T42] audit: type=1400 audit(2000524316.105:826): avc: denied { read } for pid=9068 comm="syz.0.831" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 256.151372][ T42] audit: type=1400 audit(2000524316.115:827): avc: denied { open } for pid=9068 comm="syz.0.831" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 256.160819][ T9069] fuse: Unknown parameter '18446744073709551615' [ 256.267555][ T4498] usb 6-1: USB disconnect, device number 7 [ 256.307294][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.335412][ T9075] kvm: kvm [9074]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 256.339170][ T9075] kvm: kvm [9074]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 256.376685][ T9086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 256.848333][ T42] audit: type=1400 audit(2000524316.801:828): avc: denied { map } for pid=9116 comm="syz.1.837" path="socket:[34243]" dev="sockfs" ino=34243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.869059][ T42] audit: type=1400 audit(2000524316.801:829): avc: denied { read } for pid=9116 comm="syz.1.837" path="socket:[34243]" dev="sockfs" ino=34243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.111177][ T9146] befs: (nbd0): unable to read superblock [ 257.187114][ T9158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.855'. [ 257.195567][ T9159] netlink: 'syz.3.856': attribute type 21 has an invalid length. [ 257.203690][ T9159] netlink: 'syz.3.856': attribute type 7 has an invalid length. [ 257.207224][ T9158] program syz.1.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.217296][ T9158] veth1_macvtap: Device is already in use. [ 257.298259][ T9159] syz.3.856 (9159) used greatest stack depth: 19120 bytes left [ 257.313548][ T9170] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.337559][ T9173] KVM: debugfs: duplicate directory 9173-6 [ 257.341161][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'. [ 257.356709][ T9173] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 257.384005][ T9181] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 257.401920][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'. [ 257.528416][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 257.544748][ T9202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9202 comm=syz.0.868 [ 257.593213][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 257.596077][ T9205] netlink: 'syz.2.869': attribute type 7 has an invalid length. [ 257.598474][ T9205] netlink: 'syz.2.869': attribute type 8 has an invalid length. [ 257.603127][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 257.692903][ T9202] veth5: entered allmulticast mode [ 257.743159][ T9202] bond6: (slave veth5): Enslaving as an active interface with an up link [ 257.794227][ T9206] bond6 (unregistering): (slave veth5): Releasing backup interface [ 257.798525][ T9206] bond6 (unregistering): Released all slaves [ 257.812027][ T9215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=9215 comm=syz.3.870 [ 257.895682][ T9222] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 258.108694][ T9239] kvm: MWAIT instruction emulated as NOP! [ 258.214143][ T9253] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 258.282820][ T9253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.291740][ T9253] bond2: (slave bond3): making interface the new active one [ 258.295120][ T9253] bond2: (slave bond3): Enslaving as an active interface with an up link [ 258.309403][ T9253] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 258.315757][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9253 comm=syz.2.883 [ 258.323338][ T9253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.514271][ T9286] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 258.557237][ T24] hid_parser_main: 6 callbacks suppressed [ 258.557252][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.564352][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.570054][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.573061][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.576133][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.578703][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.581464][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.584014][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.587750][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.592716][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: unknown main item tag 0x0 [ 258.604089][ T9297] openvswitch: netlink: Missing valid actions attribute. [ 258.606666][ T9295] block nbd1: not configured, cannot reconfigure [ 258.608019][ T9297] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.616692][ T24] hid-generic 99A1:E260D13B:624ADF33.0005: hidraw1: HID v306f9c.17 Device [] on 9OR) K8S2c93;mmf$[g~ [ 258.785910][ T9307] __nla_validate_parse: 5 callbacks suppressed [ 258.786042][ T9307] netlink: 172 bytes leftover after parsing attributes in process `syz.3.901'. [ 258.844591][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 258.861424][ T9313] futex_wake_op: syz.2.903 tries to shift op by -1; fix this program [ 258.954931][ T9318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.905'. [ 258.981100][ T9307] SELinux: failed to load policy [ 259.491145][ T9360] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.913'. [ 259.578675][ T9365] openvswitch: netlink: Missing key (keys=40, expected=100) [ 259.688221][ T9373] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 259.690879][ T9373] nbd: couldn't find device at index 131080 [ 259.692810][ T9372] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 259.696008][ T9372] nbd: couldn't find device at index 131080 [ 259.741646][ T9375] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 259.745542][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 259.749397][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 259.767746][ T5829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.775808][ T5829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.802082][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.812031][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.819011][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 259.819038][ T42] audit: type=1400 audit(2000524319.766:855): avc: denied { map } for pid=9380 comm="syz.3.922" path="/dev/radio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.832574][ T42] audit: type=1400 audit(2000524319.766:856): avc: denied { execute } for pid=9380 comm="syz.3.922" path="/dev/radio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.859081][ T9389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.925'. [ 259.876789][ T42] audit: type=1400 audit(2000524319.825:857): avc: denied { cmd } for pid=9384 comm="iou-wrk-9388" path="socket:[36217]" dev="sockfs" ino=36217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 259.891169][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.896639][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.899808][ T9393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.995292][ T9407] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 260.004963][ T9407] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 260.010218][ T9407] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 260.030990][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 260.072409][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 260.286062][ T9432] bond6: option arp_missed_max: invalid value (0) [ 260.288819][ T9432] bond6: option arp_missed_max: allowed values 1 - 255 [ 260.295519][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.938'. [ 260.296793][ T9432] bond6 (unregistering): Released all slaves [ 260.613521][ T9458] gtp0: entered promiscuous mode [ 260.615873][ T9458] gtp0: entered allmulticast mode [ 260.619616][ T9458] team0: Device gtp0 is of different type [ 260.764043][ T9465] ip6gretap1: entered promiscuous mode [ 260.766064][ T9465] ip6gretap1: entered allmulticast mode [ 260.806356][ T4498] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 260.822461][ T42] audit: type=1400 audit(2000524320.761:858): avc: denied { append } for pid=9472 comm="syz.0.949" name="uprobe_events" dev="tracefs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 260.936688][ T4498] usb 6-1: device descriptor read/64, error -71 [ 261.179425][ T4498] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.226803][ T42] audit: type=1400 audit(2000524321.169:859): avc: denied { create } for pid=9489 comm="syz.3.955" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.234918][ T42] audit: type=1400 audit(2000524321.179:860): avc: denied { rename } for pid=9489 comm="syz.3.955" name="file5" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.243105][ T42] audit: type=1400 audit(2000524321.179:861): avc: denied { unlink } for pid=9489 comm="syz.3.955" name="file5" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.309276][ T4498] usb 6-1: device descriptor read/64, error -71 [ 261.326197][ T42] audit: type=1400 audit(2000524321.269:862): avc: denied { getopt } for pid=9496 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.422411][ T4498] usb usb6-port1: attempt power cycle [ 261.478534][ T42] audit: type=1400 audit(2000524321.418:863): avc: denied { append } for pid=9501 comm="syz.3.959" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.487968][ T9502] program syz.3.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.536047][ T9504] bond0: invalid NS target ff00:0:475:20c0:: specified for addition [ 261.544173][ T9504] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 261.780252][ T4498] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 261.800840][ T4498] usb 6-1: device descriptor read/8, error -71 [ 261.853746][ T9513] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 262.051373][ T4498] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 262.072115][ T4498] usb 6-1: device descriptor read/8, error -71 [ 262.184947][ T4498] usb usb6-port1: unable to enumerate USB device [ 262.336899][ T9523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=9523 comm=syz.2.966 [ 262.384283][ T9525] validate_nla: 1 callbacks suppressed [ 262.384295][ T9525] netlink: 'syz.2.967': attribute type 20 has an invalid length. [ 262.388912][ T9525] netlink: 'syz.2.967': attribute type 20 has an invalid length. [ 262.572830][ T9535] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 262.575672][ T9535] syzkaller1: group set to 0 [ 263.362194][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.370486][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.373683][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.381796][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.385049][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.403925][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.406782][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.409422][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.412399][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.415349][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.596230][ T12] bridge_slave_1: left allmulticast mode [ 263.598914][ T12] bridge_slave_1: left promiscuous mode [ 263.600563][ T42] audit: type=1400 audit(2000524323.530:864): avc: denied { ioctl } for pid=9558 comm="syz.1.979" path="socket:[39140]" dev="sockfs" ino=39140 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 263.602749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.615618][ T12] bridge_slave_0: left allmulticast mode [ 263.617552][ T12] bridge_slave_0: left promiscuous mode [ 263.619431][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.694855][ T12] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 263.729268][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.736078][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.740714][ T12] bond0 (unregistering): Released all slaves [ 263.745834][ T12] bond1 (unregistering): Released all slaves [ 263.755098][ T12] bond2 (unregistering): (slave bond3): Releasing backup interface [ 263.758407][ T12] bond2 (unregistering): Released all slaves [ 263.766115][ T12] bond3 (unregistering): Released all slaves [ 263.847904][ T9574] block2mtd: illegal erase size [ 263.886928][ T12] tipc: Disabling bearer [ 263.899541][ T12] tipc: Left network mode [ 263.975510][ T9585] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.975833][ T5434] 8021q: adding VLAN 0 to HW filter on device eth2 [ 264.193246][ T12] hsr_slave_0: left promiscuous mode [ 264.196511][ T12] hsr_slave_1: left promiscuous mode [ 264.201880][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.206146][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.210937][ T12] veth0_macvtap: left allmulticast mode [ 264.358283][ T12] team0 (unregistering): Port device team_slave_1 removed [ 264.378753][ T12] team0 (unregistering): Port device team_slave_0 removed [ 264.381477][ T9607] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 264.384371][ T9606] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 264.431793][ T9610] __nla_validate_parse: 5 callbacks suppressed [ 264.431811][ T9610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.987'. [ 264.467915][ T5434] 8021q: adding VLAN 0 to HW filter on device eth3 [ 264.492607][ T9607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.506040][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.508457][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.513818][ T9547] bridge_slave_0: entered allmulticast mode [ 264.520492][ T9547] bridge_slave_0: entered promiscuous mode [ 264.534475][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.540200][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.542954][ T9547] bridge_slave_1: entered allmulticast mode [ 264.546230][ T9547] bridge_slave_1: entered promiscuous mode [ 264.591640][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.598352][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.628985][ T9547] team0: Port device team_slave_0 added [ 264.634777][ T9547] team0: Port device team_slave_1 added [ 264.655268][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.657775][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.668073][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.673750][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.676425][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.685967][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.722473][ T9547] hsr_slave_0: entered promiscuous mode [ 264.724989][ T9547] hsr_slave_1: entered promiscuous mode [ 264.728352][ T9547] debugfs: 'hsr0' already exists in 'hsr' [ 264.730650][ T9547] Cannot create hsr debugfs directory [ 264.768906][ T5434] 8021q: adding VLAN 0 to HW filter on device eth4 [ 264.851551][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 264.851564][ T42] audit: type=1400 audit(2000524324.775:873): avc: denied { write } for pid=9646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.865068][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.875312][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.885629][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.891505][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.902203][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.905181][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.912605][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.916694][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.919628][ T9651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.997'. [ 264.935548][ T42] audit: type=1400 audit(2000524324.865:874): avc: denied { write } for pid=9653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.938564][ T9547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.946283][ T42] audit: type=1400 audit(2000524324.875:875): avc: denied { create } for pid=9655 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.955411][ T42] audit: type=1400 audit(2000524324.875:876): avc: denied { setopt } for pid=9655 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.959341][ T9547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.973558][ T5434] 8021q: adding VLAN 0 to HW filter on device eth5 [ 264.975986][ T9547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.981483][ T9547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.986258][ T9547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.991883][ T9547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.996347][ T9547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.001442][ T9547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.106958][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.115563][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.132543][ T630] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.134875][ T630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.145959][ T630] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.148268][ T630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.257766][ T9678] "syz.0.1001" (9678) uses obsolete ecb(arc4) skcipher [ 265.363516][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.374871][ T42] audit: type=1400 audit(2000524325.304:877): avc: denied { bind } for pid=9677 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.375203][ T9678] Bluetooth: MGMT ver 1.23 [ 265.386029][ T42] audit: type=1400 audit(2000524325.304:878): avc: denied { write } for pid=9677 comm="syz.0.1001" path="socket:[38716]" dev="sockfs" ino=38716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.466223][ T5766] Bluetooth: hci0: command tx timeout [ 265.525592][ T9547] veth0_vlan: entered promiscuous mode [ 265.530827][ T9547] veth1_vlan: entered promiscuous mode [ 265.548523][ T9547] veth0_macvtap: entered promiscuous mode [ 265.552702][ T9547] veth1_macvtap: entered promiscuous mode [ 265.567790][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.575873][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.604317][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.607477][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.610383][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.628092][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.706731][ T7013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.709927][ T7013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.731332][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.733982][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.742778][ T42] audit: type=1400 audit(2000524325.662:879): avc: denied { mount } for pid=9547 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 265.821425][ T9708] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 265.892501][ T9714] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 265.919726][ T42] audit: type=1400 audit(2000524325.842:880): avc: denied { read } for pid=9715 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 266.075686][ T42] audit: type=1400 audit(2000524325.991:881): avc: denied { remount } for pid=9723 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 266.226342][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 266.233941][ T42] audit: type=1400 audit(2000524326.151:882): avc: denied { block_suspend } for pid=9730 comm="syz.0.1012" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.409125][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 266.412836][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.418529][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.422834][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.435662][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.440003][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.454355][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.458769][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.461596][ T24] usb 9-1: Manufacturer: syz [ 266.466539][ T24] usb 9-1: config 0 descriptor?? [ 266.486390][ T9759] 9pnet_fd: p9_fd_create_tcp (9759): problem creating socket [ 266.491273][ T9759] program syz.0.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.657703][ T9761] loop4: detected capacity change from 0 to 7 [ 266.681593][ T9761] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 266.683372][ T9761] loop4: partition table partially beyond EOD, truncated [ 266.690323][ T9761] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 266.738275][ T24] rc_core: IR keymap rc-hauppauge not found [ 266.740214][ T24] Registered IR keymap rc-empty [ 266.742144][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.758763][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.789052][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 266.795281][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input21 [ 266.808540][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.838679][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.868649][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.901137][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.920078][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.948801][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.970510][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 266.989393][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 267.009543][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 267.030491][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 267.051434][ T24] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 267.054853][ T24] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 267.055911][ T9803] vlan2: entered promiscuous mode [ 267.059780][ T9803] bridge0: entered promiscuous mode [ 267.061394][ T24] usb 9-1: USB disconnect, device number 2 [ 267.101398][ T9807] rdma_rxe: Failed to create IPv4 UDP tunnel [ 267.146929][ T9811] netlink: 'syz.3.1035': attribute type 13 has an invalid length. [ 267.475287][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 267.476989][ T5132] loop4: partition table partially beyond EOD, truncated [ 267.479316][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 267.550400][ T5766] Bluetooth: hci0: command tx timeout [ 267.588194][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 267.590353][ T5132] loop4: partition table partially beyond EOD, truncated [ 267.592620][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 267.677222][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 267.679667][ T5132] loop4: partition table partially beyond EOD, truncated [ 267.683150][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 267.702125][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 267.754128][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 267.755890][ T5132] loop4: partition table partially beyond EOD, truncated [ 267.758174][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 267.799530][ T9847] team0 (unregistering): Port device team_slave_0 removed [ 267.804336][ T9847] team0 (unregistering): Port device team_slave_1 removed [ 267.871292][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 267.875047][ T24] usb 6-1: config 8 has an invalid interface number: 143 but max is 1 [ 267.877739][ T24] usb 6-1: config 8 has an invalid interface number: 50 but max is 1 [ 267.880297][ T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 267.884120][ T24] usb 6-1: config 8 has no interface number 0 [ 267.886080][ T24] usb 6-1: config 8 has no interface number 1 [ 267.888041][ T24] usb 6-1: config 8 interface 143 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 267.891688][ T24] usb 6-1: config 8 interface 143 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 267.895078][ T24] usb 6-1: config 8 interface 50 altsetting 9 endpoint 0x6 has invalid wMaxPacketSize 0 [ 267.898046][ T24] usb 6-1: config 8 interface 50 altsetting 9 has an endpoint descriptor with address 0x5D, changing to 0xD [ 267.901829][ T24] usb 6-1: config 8 interface 50 altsetting 9 endpoint 0xD has an invalid bInterval 78, changing to 10 [ 267.905447][ T24] usb 6-1: config 8 interface 50 altsetting 9 endpoint 0xD has invalid maxpacket 8456, setting to 1024 [ 267.908885][ T24] usb 6-1: config 8 interface 50 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 267.913170][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 267.916494][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 267.919778][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 267.923534][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 267.926895][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 267.930175][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 267.934366][ T24] usb 6-1: config 8 interface 50 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 267.937431][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 267.940703][ T24] usb 6-1: config 8 interface 50 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 267.944310][ T24] usb 6-1: config 8 interface 50 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 267.947614][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 267.950886][ T24] usb 6-1: config 8 interface 50 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 267.954324][ T24] usb 6-1: config 8 interface 50 altsetting 9 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 267.958376][ T24] usb 6-1: config 8 interface 143 has no altsetting 0 [ 267.960505][ T24] usb 6-1: config 8 interface 50 has no altsetting 0 [ 267.963144][ T24] usb 6-1: string descriptor 0 read error: -22 [ 267.965155][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=819f, bcdDevice=1b.d1 [ 267.968102][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.974294][ T24] cp210x 6-1:8.143: cp210x converter detected [ 268.174538][ T24] cp210x 6-1:8.143: failed to get vendor val 0x370b size 1: -71 [ 268.177018][ T24] cp210x 6-1:8.143: querying part number failed [ 268.185094][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 268.196170][ T24] cp210x 6-1:8.50: cp210x converter detected [ 268.198480][ T24] cp210x 6-1:8.50: failed to get vendor val 0x370b size 1: -71 [ 268.200967][ T24] cp210x 6-1:8.50: querying part number failed [ 268.211068][ T24] usb 6-1: cp210x converter now attached to ttyUSB1 [ 268.220662][ T24] usb 6-1: USB disconnect, device number 12 [ 268.230761][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.234239][ T24] cp210x 6-1:8.143: device disconnected [ 268.242374][ T24] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 268.245241][ T24] cp210x 6-1:8.50: device disconnected [ 268.876664][ T9865] geneve1: entered allmulticast mode [ 268.904215][ T4498] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 269.044592][ T4498] usb 8-1: device descriptor read/64, error -71 [ 269.153889][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 269.155881][ T5132] loop4: partition table partially beyond EOD, truncated [ 269.158205][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 269.167585][ T9873] kAFS: unable to lookup cell '1' [ 269.215196][ T848] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 269.241661][ T9873] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 269.296705][ T9874] CacheFiles: Failed to register: -30 [ 269.305181][ T4498] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 269.345419][ T848] usb 6-1: device descriptor read/64, error -71 [ 269.352787][ T5132] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 269.354551][ T5132] loop4: partition table partially beyond EOD, truncated [ 269.357091][ T5132] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 269.436443][ T4498] usb 8-1: device descriptor read/64, error -71 [ 269.545941][ T4498] usb usb8-port1: attempt power cycle [ 269.606119][ T848] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 269.635896][ T5766] Bluetooth: hci0: command tx timeout [ 269.736807][ T848] usb 6-1: device descriptor read/64, error -71 [ 269.746187][ T1478] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 269.847025][ T848] usb usb6-port1: attempt power cycle [ 269.896642][ T1478] usb 9-1: Using ep0 maxpacket: 16 [ 269.896687][ T4498] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 269.901681][ T1478] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 269.904781][ T1478] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.908459][ T1478] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 269.912012][ T1478] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.915616][ T1478] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.917010][ T4498] usb 8-1: device descriptor read/8, error -71 [ 269.923176][ T1478] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 269.926113][ T1478] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.934506][ T1478] usb 9-1: config 0 descriptor?? [ 269.939103][ T9882] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 269.952134][ T1478] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input22 [ 270.146406][ T5830] usb 9-1: USB disconnect, device number 3 [ 270.177638][ T4498] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 270.187852][ T848] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 270.199557][ T9911] Console: switching to colour dummy device 80x25 [ 270.208880][ T4498] usb 8-1: device descriptor read/8, error -71 [ 270.218530][ T848] usb 6-1: device descriptor read/8, error -71 [ 270.321812][ T4498] usb usb8-port1: unable to enumerate USB device [ 270.418365][ T9911] ============================================================================= [ 270.421327][ T9911] [ 270.421333][ T9911] ====================================================== [ 270.421354][ T9911] WARNING: possible circular locking dependency detected [ 270.421361][ T9911] syzkaller #0 Tainted: G L [ 270.421368][ T9911] ------------------------------------------------------ [ 270.421373][ T9911] syz.0.1069/9911 is trying to acquire lock: [ 270.421389][ T9911] ffffffff8eaf4160 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 270.421517][ T9911] [ 270.421517][ T9911] but task is already holding lock: [ 270.421521][ T9911] ffff8880276fd498 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 270.421580][ T9911] [ 270.421580][ T9911] which lock already depends on the new lock. [ 270.421580][ T9911] [ 270.421585][ T9911] [ 270.421585][ T9911] the existing dependency chain (in reverse order) is: [ 270.421590][ T9911] [ 270.421590][ T9911] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 270.421621][ T9911] lock_acquire+0x1b9/0x370 [ 270.421653][ T9911] _raw_spin_lock_irqsave+0x3a/0x60 [ 270.421750][ T9911] __refill_objects_node+0x120/0xaa0 [ 270.421764][ T9911] refill_objects+0x58/0x410 [ 270.421776][ T9911] __pcs_replace_empty_main+0x376/0x680 [ 270.421791][ T9911] __kmalloc_noprof+0x66d/0x820 [ 270.421810][ T9911] tty_buffer_alloc+0x29f/0x320 [ 270.421879][ T9911] __tty_buffer_request_room+0x129/0x2c0 [ 270.421899][ T9911] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 270.421920][ T9911] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 270.421941][ T9911] pty_write+0xd2/0x100 [ 270.421966][ T9911] n_tty_write+0xa9e/0x1160 [ 270.421989][ T9911] file_tty_write.isra.0+0x4d2/0x890 [ 270.422008][ T9911] iter_file_splice_write+0x830/0x10b0 [ 270.422044][ T9911] direct_splice_actor+0x192/0x690 [ 270.422064][ T9911] splice_direct_to_actor+0x345/0xa30 [ 270.422082][ T9911] do_splice_direct+0x174/0x240 [ 270.422097][ T9911] do_sendfile+0xadc/0xe20 [ 270.422121][ T9911] __x64_sys_sendfile64+0x1d8/0x220 [ 270.422137][ T9911] do_syscall_64+0x115/0x870 [ 270.422152][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.422175][ T9911] [ 270.422175][ T9911] -> #2 (&port->lock#2){-...}-{3:3}: [ 270.422193][ T9911] lock_acquire+0x1b9/0x370 [ 270.422208][ T9911] _raw_spin_lock_irqsave+0x3a/0x60 [ 270.422220][ T9911] tty_port_tty_get+0x21/0x100 [ 270.422236][ T9911] tty_port_default_wakeup+0x15/0x60 [ 270.422251][ T9911] serial8250_tx_chars+0x68f/0x860 [ 270.422271][ T9911] __start_tx+0x3e4/0x490 [ 270.422283][ T9911] serial8250_start_tx+0x368/0x540 [ 270.422296][ T9911] __uart_start+0x295/0x510 [ 270.422305][ T9911] uart_write+0x211/0xb20 [ 270.422317][ T9911] n_tty_write+0x431/0x1160 [ 270.422331][ T9911] file_tty_write.isra.0+0x4d2/0x890 [ 270.422345][ T9911] redirected_tty_write+0xd4/0x120 [ 270.422359][ T9911] vfs_write+0x6ac/0x1050 [ 270.422369][ T9911] ksys_write+0x12a/0x250 [ 270.422379][ T9911] do_syscall_64+0x115/0x870 [ 270.422394][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.422405][ T9911] [ 270.422405][ T9911] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 270.422421][ T9911] lock_acquire+0x1b9/0x370 [ 270.422433][ T9911] _raw_spin_lock_irqsave+0x3a/0x60 [ 270.422444][ T9911] serial8250_console_write+0x177/0x1a50 [ 270.422459][ T9911] console_flush_one_record+0x790/0xe50 [ 270.422476][ T9911] console_unlock+0x103/0x260 [ 270.422490][ T9911] vprintk_emit+0x407/0x6b0 [ 270.422498][ T9911] _printk+0xcf/0x110 [ 270.422519][ T9911] register_console.cold+0xc0/0x248 [ 270.422529][ T9911] univ8250_console_init+0x6f/0x80 [ 270.422591][ T9911] console_init+0x3d5/0x5b0 [ 270.422619][ T9911] start_kernel+0x314/0x490 [ 270.422641][ T9911] x86_64_start_reservations+0x24/0x30 [ 270.422659][ T9911] x86_64_start_kernel+0x12b/0x130 [ 270.422676][ T9911] common_startup_64+0x13e/0x158 [ 270.422703][ T9911] [ 270.422703][ T9911] -> #0 (console_owner){..-.}-{0:0}: [ 270.422719][ T9911] check_prev_add+0xeb/0xe60 [ 270.422732][ T9911] __lock_acquire+0x136c/0x1a40 [ 270.422745][ T9911] lock_acquire+0x1b9/0x370 [ 270.422758][ T9911] console_lock_spinning_enable+0x72/0x80 [ 270.422801][ T9911] console_flush_one_record+0x739/0xe50 [ 270.422819][ T9911] console_unlock+0x103/0x260 [ 270.422836][ T9911] vprintk_emit+0x407/0x6b0 [ 270.422846][ T9911] _printk+0xcf/0x110 [ 270.422856][ T9911] __slab_bug+0x4f/0xb0 [ 270.422870][ T9911] slab_bug+0x5d/0x80 [ 270.422882][ T9911] __kmem_cache_shutdown.cold+0x39/0x177 [ 270.422896][ T9911] kmem_cache_destroy+0x73/0x190 [ 270.422912][ T9911] virtio_gpu_free_vbufs+0x38/0x80 [ 270.422953][ T9911] virtio_gpu_release+0x5c/0x1c0 [ 270.422967][ T9911] drm_dev_put.part.0+0xbd/0x140 [ 270.422989][ T9911] drm_dev_put+0x1f/0x30 [ 270.423002][ T9911] virtio_dev_remove+0xb8/0x170 [ 270.423021][ T9911] device_remove+0xcb/0x180 [ 270.423036][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.423052][ T9911] bus_remove_device+0x2bc/0x560 [ 270.423064][ T9911] device_del+0x376/0x9b0 [ 270.423078][ T9911] device_unregister+0x1d/0xe0 [ 270.423091][ T9911] unregister_virtio_device+0x39/0x60 [ 270.423106][ T9911] virtio_pci_remove+0x7c/0x110 [ 270.423116][ T9911] pci_device_remove+0xb2/0x1d0 [ 270.423158][ T9911] device_remove+0xcb/0x180 [ 270.423172][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.423187][ T9911] pci_stop_bus_device+0x120/0x160 [ 270.423208][ T9911] pci_stop_and_remove_bus_device+0x58/0xa0 [ 270.423223][ T9911] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 270.423236][ T9911] remove_store+0x123/0x140 [ 270.423249][ T9911] dev_attr_store+0x58/0x80 [ 270.423263][ T9911] sysfs_kf_write+0xf2/0x150 [ 270.423279][ T9911] kernfs_fop_write_iter+0x3e0/0x5f0 [ 270.423294][ T9911] vfs_write+0x6ac/0x1050 [ 270.423301][ T9911] ksys_write+0x12a/0x250 [ 270.423310][ T9911] do_syscall_64+0x115/0x870 [ 270.423323][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.423333][ T9911] [ 270.423333][ T9911] other info that might help us debug this: [ 270.423333][ T9911] [ 270.423336][ T9911] Chain exists of: [ 270.423336][ T9911] console_owner --> &port->lock#2 --> &n->list_lock [ 270.423336][ T9911] [ 270.423359][ T9911] Possible unsafe locking scenario: [ 270.423359][ T9911] [ 270.423371][ T9911] CPU0 CPU1 [ 270.423375][ T9911] ---- ---- [ 270.423377][ T9911] lock(&n->list_lock); [ 270.423384][ T9911] lock(&port->lock#2); [ 270.423393][ T9911] lock(&n->list_lock); [ 270.423402][ T9911] lock(console_owner); [ 270.423409][ T9911] [ 270.423409][ T9911] *** DEADLOCK *** [ 270.423409][ T9911] [ 270.423412][ T9911] 11 locks held by syz.0.1069/9911: [ 270.423419][ T9911] #0: ffff888038d355f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 270.423450][ T9911] #1: ffff8880244ea450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 270.423479][ T9911] #2: ffff888056b16880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 270.423511][ T9911] #3: ffffffff8f86bf20 (pci_rescan_remove_lock){+.+.}-{4:4}, at: pci_stop_and_remove_bus_device_locked+0x12/0x20 [ 270.423542][ T9911] #4: ffff888022f1c1f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 270.423570][ T9911] #5: ffff888025dee1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 270.423599][ T9911] #6: ffffffff8ea7a230 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 270.423622][ T9911] #7: ffffffff8ed88380 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 270.423651][ T9911] #8: ffff8880276fd498 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 270.423682][ T9911] #9: ffffffff8ebd45a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 270.423708][ T9911] #10: ffffffff8ebd4618 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 270.423743][ T9911] [ 270.423743][ T9911] stack backtrace: [ 270.423753][ T9911] CPU: 3 UID: 0 PID: 9911 Comm: syz.0.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.423768][ T9911] Tainted: [L]=SOFTLOCKUP [ 270.423772][ T9911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.423786][ T9911] Call Trace: [ 270.423804][ T9911] [ 270.423810][ T9911] dump_stack_lvl+0x100/0x190 [ 270.423837][ T9911] print_circular_bug.cold+0x178/0x1c7 [ 270.423857][ T9911] check_noncircular+0x146/0x160 [ 270.423873][ T9911] check_prev_add+0xeb/0xe60 [ 270.423890][ T9911] __lock_acquire+0x136c/0x1a40 [ 270.423908][ T9911] lock_acquire+0x1b9/0x370 [ 270.423924][ T9911] ? console_lock_spinning_enable+0x61/0x80 [ 270.423941][ T9911] ? console_lock_spinning_enable+0x4a/0x80 [ 270.423958][ T9911] console_lock_spinning_enable+0x72/0x80 [ 270.423974][ T9911] ? console_lock_spinning_enable+0x61/0x80 [ 270.423990][ T9911] console_flush_one_record+0x739/0xe50 [ 270.424007][ T9911] ? __pfx_console_flush_one_record+0x10/0x10 [ 270.424026][ T9911] ? is_printk_cpu_sync_owner+0x32/0x40 [ 270.424038][ T9911] console_unlock+0x103/0x260 [ 270.424054][ T9911] ? __pfx_console_unlock+0x10/0x10 [ 270.424071][ T9911] ? do_raw_spin_unlock+0x145/0x1e0 [ 270.424087][ T9911] ? _printk+0xcf/0x110 [ 270.424098][ T9911] vprintk_emit+0x407/0x6b0 [ 270.424107][ T9911] ? __pfx_vprintk_emit+0x10/0x10 [ 270.424119][ T9911] _printk+0xcf/0x110 [ 270.424130][ T9911] ? __pfx__printk+0x10/0x10 [ 270.424144][ T9911] __slab_bug+0x4f/0xb0 [ 270.424155][ T9911] slab_bug+0x5d/0x80 [ 270.424166][ T9911] __kmem_cache_shutdown.cold+0x39/0x177 [ 270.424181][ T9911] kmem_cache_destroy+0x73/0x190 [ 270.424191][ T9911] virtio_gpu_free_vbufs+0x38/0x80 [ 270.424208][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 270.424221][ T9911] virtio_gpu_release+0x5c/0x1c0 [ 270.424235][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 270.424248][ T9911] drm_dev_put.part.0+0xbd/0x140 [ 270.424262][ T9911] drm_dev_put+0x1f/0x30 [ 270.424274][ T9911] virtio_dev_remove+0xb8/0x170 [ 270.424287][ T9911] ? __pfx_virtio_dev_remove+0x10/0x10 [ 270.424300][ T9911] device_remove+0xcb/0x180 [ 270.424312][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.424329][ T9911] bus_remove_device+0x2bc/0x560 [ 270.424340][ T9911] ? __pfx_bus_remove_device+0x10/0x10 [ 270.424352][ T9911] ? __pfx_device_remove_attrs+0x10/0x10 [ 270.424365][ T9911] device_del+0x376/0x9b0 [ 270.424378][ T9911] ? __pfx_device_del+0x10/0x10 [ 270.424390][ T9911] ? __pfx___might_resched+0x10/0x10 [ 270.424411][ T9911] ? __pfx_pci_device_is_present+0x10/0x10 [ 270.424428][ T9911] device_unregister+0x1d/0xe0 [ 270.424441][ T9911] unregister_virtio_device+0x39/0x60 [ 270.424457][ T9911] virtio_pci_remove+0x7c/0x110 [ 270.424470][ T9911] pci_device_remove+0xb2/0x1d0 [ 270.424481][ T9911] ? __pfx_pci_device_remove+0x10/0x10 [ 270.424494][ T9911] device_remove+0xcb/0x180 [ 270.424507][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.424523][ T9911] pci_stop_bus_device+0x120/0x160 [ 270.424535][ T9911] pci_stop_and_remove_bus_device+0x58/0xa0 [ 270.424549][ T9911] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 270.424562][ T9911] remove_store+0x123/0x140 [ 270.424576][ T9911] ? __pfx_remove_store+0x10/0x10 [ 270.424589][ T9911] ? find_held_lock+0x2b/0x80 [ 270.424598][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 270.424614][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 270.424636][ T9911] ? __pfx_remove_store+0x10/0x10 [ 270.424649][ T9911] dev_attr_store+0x58/0x80 [ 270.424681][ T9911] ? __pfx_dev_attr_store+0x10/0x10 [ 270.424696][ T9911] sysfs_kf_write+0xf2/0x150 [ 270.424706][ T9911] kernfs_fop_write_iter+0x3e0/0x5f0 [ 270.424720][ T9911] ? __pfx_sysfs_kf_write+0x10/0x10 [ 270.424730][ T9911] vfs_write+0x6ac/0x1050 [ 270.424740][ T9911] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 270.424755][ T9911] ? __pfx_vfs_write+0x10/0x10 [ 270.424768][ T9911] ksys_write+0x12a/0x250 [ 270.424777][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 270.424788][ T9911] do_syscall_64+0x115/0x870 [ 270.424802][ T9911] ? clear_bhb_loop+0x70/0xc0 [ 270.424813][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.424824][ T9911] RIP: 0033:0x7fb2dcd9e0d9 [ 270.424834][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.424844][ T9911] RSP: 002b:00007fb2ddcd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.424862][ T9911] RAX: ffffffffffffffda RBX: 00007fb2dd025fa0 RCX: 00007fb2dcd9e0d9 [ 270.424869][ T9911] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 270.424875][ T9911] RBP: 00007fb2dce35024 R08: 0000000000000000 R09: 0000000000000000 [ 270.424882][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.424888][ T9911] R13: 00007fb2dd026038 R14: 00007fb2dd025fa0 R15: 00007fff12712b88 [ 270.424897][ T9911] [ 270.457909][ T848] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 270.458968][ T9911] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 270.458979][ T9911] ----------------------------------------------------------------------------- [ 270.458979][ T9911] [ 270.458988][ T9911] Object 0xffff8880241513b0 @offset=5040 [ 270.458995][ T9911] Object 0xffff8880241514c8 @offset=5320 [ 270.459000][ T9911] Object 0xffff8880241515e0 @offset=5600 [ 270.459005][ T9911] Object 0xffff8880241516f8 @offset=5880 [ 270.459011][ T9911] Object 0xffff888024151810 @offset=6160 [ 270.459016][ T9911] Object 0xffff888024151928 @offset=6440 [ 270.478586][ T848] usb 6-1: device descriptor read/8, error -71 [ 270.479150][ T9911] Slab 0xffffea0000905400 objects=29 used=6 fp=0xffff888024151ea0 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 270.588519][ T848] usb usb6-port1: unable to enumerate USB device [ 270.589508][ T9911] ------------[ cut here ]------------ [ 270.881078][ T9911] 1 [ 270.881088][ T9911] WARNING: mm/slub.c:1244 at __slab_err+0x15/0x20, CPU#3: syz.0.1069/9911 [ 270.884483][ T9911] Modules linked in: [ 270.885943][ T9911] CPU: 3 UID: 0 PID: 9911 Comm: syz.0.1069 Tainted: G B L syzkaller #0 PREEMPT(full) [ 270.889659][ T9911] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 270.891260][ T9911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.894860][ T9911] RIP: 0010:__slab_err+0x15/0x20 [ 270.896685][ T9911] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 270.903623][ T9911] RSP: 0018:ffffc9000165f738 EFLAGS: 00010046 [ 270.905852][ T9911] RAX: 0000000000080000 RBX: ffffc9000165f788 RCX: ffffc900070e1000 [ 270.908266][ T9911] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff8880246ea540 [ 270.911160][ T9911] RBP: ffff8880276fd498 R08: 0000000000000007 R09: 0000000000000000 [ 270.913981][ T9911] R10: 0000000000000000 R11: 306578302f642020 R12: 0000000000001ea0 [ 270.916818][ T9911] R13: ffff888024151fb8 R14: ffff8880276fd480 R15: ffffea0000905400 [ 270.919676][ T9911] FS: 00007fb2ddcd36c0(0000) GS:ffff8880d60ec000(0000) knlGS:0000000000000000 [ 270.922887][ T9911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.924960][ T9911] CR2: 00005647f74a3a18 CR3: 0000000033e1f000 CR4: 0000000000352ef0 [ 270.927728][ T9911] Call Trace: [ 270.928969][ T9911] [ 270.930098][ T9911] __kmem_cache_shutdown.cold+0x16e/0x177 [ 270.932196][ T9911] kmem_cache_destroy+0x73/0x190 [ 270.934017][ T9911] virtio_gpu_free_vbufs+0x38/0x80 [ 270.935724][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 270.937464][ T9911] virtio_gpu_release+0x5c/0x1c0 [ 270.939288][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 270.941329][ T9911] drm_dev_put.part.0+0xbd/0x140 [ 270.943148][ T9911] drm_dev_put+0x1f/0x30 [ 270.944726][ T9911] virtio_dev_remove+0xb8/0x170 [ 270.946507][ T9911] ? __pfx_virtio_dev_remove+0x10/0x10 [ 270.948537][ T9911] device_remove+0xcb/0x180 [ 270.950227][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.952427][ T9911] bus_remove_device+0x2bc/0x560 [ 270.954223][ T9911] ? __pfx_bus_remove_device+0x10/0x10 [ 270.956194][ T9911] ? __pfx_device_remove_attrs+0x10/0x10 [ 270.958240][ T9911] device_del+0x376/0x9b0 [ 270.959857][ T9911] ? __pfx_device_del+0x10/0x10 [ 270.961627][ T9911] ? __pfx___might_resched+0x10/0x10 [ 270.963570][ T9911] ? __pfx_pci_device_is_present+0x10/0x10 [ 270.965725][ T9911] device_unregister+0x1d/0xe0 [ 270.967497][ T9911] unregister_virtio_device+0x39/0x60 [ 270.969461][ T9911] virtio_pci_remove+0x7c/0x110 [ 270.971276][ T9911] pci_device_remove+0xb2/0x1d0 [ 270.973050][ T9911] ? __pfx_pci_device_remove+0x10/0x10 [ 270.975036][ T9911] device_remove+0xcb/0x180 [ 270.976696][ T9911] device_release_driver_internal+0x44e/0x620 [ 270.978911][ T9911] pci_stop_bus_device+0x120/0x160 [ 270.980798][ T9911] pci_stop_and_remove_bus_device+0x58/0xa0 [ 270.982943][ T9911] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 270.985302][ T9911] remove_store+0x123/0x140 [ 270.986967][ T9911] ? __pfx_remove_store+0x10/0x10 [ 270.988786][ T9911] ? find_held_lock+0x2b/0x80 [ 270.990509][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 270.992293][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 270.993985][ T9911] ? __pfx_remove_store+0x10/0x10 [ 270.995457][ T9911] dev_attr_store+0x58/0x80 [ 270.996953][ T9911] ? __pfx_dev_attr_store+0x10/0x10 [ 270.998845][ T9911] sysfs_kf_write+0xf2/0x150 [ 271.000541][ T9911] kernfs_fop_write_iter+0x3e0/0x5f0 [ 271.002458][ T9911] ? __pfx_sysfs_kf_write+0x10/0x10 [ 271.004339][ T9911] vfs_write+0x6ac/0x1050 [ 271.005835][ T9911] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 271.007517][ T9911] ? __pfx_vfs_write+0x10/0x10 [ 271.009175][ T9911] ksys_write+0x12a/0x250 [ 271.010862][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 271.012630][ T9911] do_syscall_64+0x115/0x870 [ 271.014320][ T9911] ? clear_bhb_loop+0x70/0xc0 [ 271.015821][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.017591][ T9911] RIP: 0033:0x7fb2dcd9e0d9 [ 271.019239][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.025763][ T9911] RSP: 002b:00007fb2ddcd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.028560][ T9911] RAX: ffffffffffffffda RBX: 00007fb2dd025fa0 RCX: 00007fb2dcd9e0d9 [ 271.031443][ T9911] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 271.034011][ T9911] RBP: 00007fb2dce35024 R08: 0000000000000000 R09: 0000000000000000 [ 271.036474][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.039313][ T9911] R13: 00007fb2dd026038 R14: 00007fb2dd025fa0 R15: 00007fff12712b88 [ 271.042175][ T9911] [ 271.043218][ T9911] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.045335][ T9911] CPU: 3 UID: 0 PID: 9911 Comm: syz.0.1069 Tainted: G B L syzkaller #0 PREEMPT(full) [ 271.049294][ T9911] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 271.051382][ T9911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.054622][ T9911] Call Trace: [ 271.055670][ T9911] [ 271.056768][ T9911] dump_stack_lvl+0x100/0x190 [ 271.058491][ T9911] vpanic+0x552/0x970 [ 271.059989][ T9911] ? __pfx_vpanic+0x10/0x10 [ 271.061407][ T9911] ? lock_release+0x24d/0x310 [ 271.062759][ T9911] panic+0xd1/0xe0 [ 271.064097][ T9911] ? __pfx_panic+0x10/0x10 [ 271.065759][ T9911] check_panic_on_warn.cold+0x19/0x34 [ 271.067736][ T9911] ? __slab_err+0x15/0x20 [ 271.069215][ T9911] __warn.cold+0x191/0x318 [ 271.070552][ T9911] __report_bug+0x30f/0x440 [ 271.072007][ T9911] ? __slab_err+0x15/0x20 [ 271.073606][ T9911] ? __pfx___report_bug+0x10/0x10 [ 271.075477][ T9911] ? irq_work_queue+0xce/0x100 [ 271.077251][ T9911] ? __wake_up_klogd+0xe2/0x140 [ 271.079052][ T9911] ? vprintk_emit+0x1c9/0x6b0 [ 271.080792][ T9911] ? __pfx_vprintk_emit+0x10/0x10 [ 271.082620][ T9911] ? __slab_err+0x15/0x20 [ 271.084204][ T9911] report_bug+0xb2/0x220 [ 271.085775][ T9911] ? __slab_err+0x15/0x20 [ 271.087355][ T9911] handle_bug+0x16a/0x2a0 [ 271.088957][ T9911] exc_invalid_op+0x17/0x50 [ 271.090648][ T9911] asm_exc_invalid_op+0x1a/0x20 [ 271.092429][ T9911] RIP: 0010:__slab_err+0x15/0x20 [ 271.094235][ T9911] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 dc ba a2 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 271.101191][ T9911] RSP: 0018:ffffc9000165f738 EFLAGS: 00010046 [ 271.103402][ T9911] RAX: 0000000000080000 RBX: ffffc9000165f788 RCX: ffffc900070e1000 [ 271.106267][ T9911] RDX: 0000000000080000 RSI: ffffffff81c709bd RDI: ffff8880246ea540 [ 271.109129][ T9911] RBP: ffff8880276fd498 R08: 0000000000000007 R09: 0000000000000000 [ 271.111999][ T9911] R10: 0000000000000000 R11: 306578302f642020 R12: 0000000000001ea0 [ 271.114856][ T9911] R13: ffff888024151fb8 R14: ffff8880276fd480 R15: ffffea0000905400 [ 271.117696][ T9911] ? add_taint+0x6d/0xb0 [ 271.119286][ T9911] ? __slab_err+0x14/0x20 [ 271.120897][ T9911] __kmem_cache_shutdown.cold+0x16e/0x177 [ 271.122993][ T9911] kmem_cache_destroy+0x73/0x190 [ 271.124829][ T9911] virtio_gpu_free_vbufs+0x38/0x80 [ 271.126689][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 271.128709][ T9911] virtio_gpu_release+0x5c/0x1c0 [ 271.130536][ T9911] ? __pfx_virtio_gpu_release+0x10/0x10 [ 271.132578][ T9911] drm_dev_put.part.0+0xbd/0x140 [ 271.134396][ T9911] drm_dev_put+0x1f/0x30 [ 271.135963][ T9911] virtio_dev_remove+0xb8/0x170 [ 271.137756][ T9911] ? __pfx_virtio_dev_remove+0x10/0x10 [ 271.139762][ T9911] device_remove+0xcb/0x180 [ 271.141431][ T9911] device_release_driver_internal+0x44e/0x620 [ 271.143681][ T9911] bus_remove_device+0x2bc/0x560 [ 271.145537][ T9911] ? __pfx_bus_remove_device+0x10/0x10 [ 271.147559][ T9911] ? __pfx_device_remove_attrs+0x10/0x10 [ 271.149388][ T9911] device_del+0x376/0x9b0 [ 271.150822][ T9911] ? __pfx_device_del+0x10/0x10 [ 271.152665][ T9911] ? __pfx___might_resched+0x10/0x10 [ 271.154596][ T9911] ? __pfx_pci_device_is_present+0x10/0x10 [ 271.156763][ T9911] device_unregister+0x1d/0xe0 [ 271.158531][ T9911] unregister_virtio_device+0x39/0x60 [ 271.160113][ T9911] virtio_pci_remove+0x7c/0x110 [ 271.161873][ T9911] pci_device_remove+0xb2/0x1d0 [ 271.163682][ T9911] ? __pfx_pci_device_remove+0x10/0x10 [ 271.165677][ T9911] device_remove+0xcb/0x180 [ 271.167364][ T9911] device_release_driver_internal+0x44e/0x620 [ 271.169555][ T9911] pci_stop_bus_device+0x120/0x160 [ 271.171535][ T9911] pci_stop_and_remove_bus_device+0x58/0xa0 [ 271.173499][ T9911] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 271.175602][ T9911] remove_store+0x123/0x140 [ 271.177046][ T9911] ? __pfx_remove_store+0x10/0x10 [ 271.178631][ T9911] ? find_held_lock+0x2b/0x80 [ 271.180163][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 271.181703][ T9911] ? sysfs_file_kobj+0xe4/0x290 [ 271.183339][ T9911] ? __pfx_remove_store+0x10/0x10 [ 271.184967][ T9911] dev_attr_store+0x58/0x80 [ 271.186692][ T9911] ? __pfx_dev_attr_store+0x10/0x10 [ 271.188357][ T9911] sysfs_kf_write+0xf2/0x150 [ 271.189847][ T9911] kernfs_fop_write_iter+0x3e0/0x5f0 [ 271.191549][ T9911] ? __pfx_sysfs_kf_write+0x10/0x10 [ 271.193214][ T9911] vfs_write+0x6ac/0x1050 [ 271.194575][ T9911] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 271.196442][ T9911] ? __pfx_vfs_write+0x10/0x10 [ 271.197945][ T9911] ksys_write+0x12a/0x250 [ 271.199309][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 271.200888][ T9911] do_syscall_64+0x115/0x870 [ 271.202405][ T9911] ? clear_bhb_loop+0x70/0xc0 [ 271.203903][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.205825][ T9911] RIP: 0033:0x7fb2dcd9e0d9 [ 271.207241][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.213265][ T9911] RSP: 002b:00007fb2ddcd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.216165][ T9911] RAX: ffffffffffffffda RBX: 00007fb2dd025fa0 RCX: 00007fb2dcd9e0d9 [ 271.218628][ T9911] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 271.221142][ T9911] RBP: 00007fb2dce35024 R08: 0000000000000000 R09: 0000000000000000 [ 271.223688][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.226261][ T9911] R13: 00007fb2dd026038 R14: 00007fb2dd025fa0 R15: 00007fff12712b88 [ 271.228756][ T9911] [ 271.230407][ T9911] Kernel Offset: disabled [ 271.231793][ T9911] Rebooting in 86400 seconds..