last executing test programs: 5.576615416s ago: executing program 3 (id=426): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 5.36600526s ago: executing program 3 (id=429): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x32, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fc7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be8200000000", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8000) 5.266687766s ago: executing program 3 (id=431): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) readv(r2, &(0x7f0000002dc0)=[{&(0x7f0000001940)=""/22, 0x16}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000000000101040000000100000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000000010104000000000000000002000400000000000000018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup2(r6, r7) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa59cdd, &(0x7f0000000100)={0xa, 0x4e1e, 0x2, @loopback, 0x4}, 0x1c) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYRES32=r10], 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r11], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x2}, 0x94) (rerun: 64) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r12, r14, 0x25, 0x4}, 0x14) (async) syz_emit_ethernet(0xd81, &(0x7f0000001100)=ANY=[], 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="ec857a489112552de084679464145b0cf5ad79b3fdb03cef29dd19bf0d887e57a16ce60cda1f3eb6437a08697ecc630c4441203a69836fff44bc6756af9edf32365d5b0857a0539be8b81e33b99e30437eb3f0659153ca78884dfeabd27df14e466f31e9deb8bdf428b356e85598a807ee38bf888a4528052506bfe23282ca4b0e4787cd536634f4f6fedb7ad0d0046574cccd23ffe00c62a787269d221a1f27b998f76fbd0e0d12520996181a0175c80342f0fcac4fffd7881e0ec4bdfa34479bd102e20796d921a4fdab245dbb5f4f2bb7156dbe8d0444d28e", @ANYBLOB="010229bd7000f8073325240000001800018014000200626f6e645f736c6176655f3000000000"], 0x2c}}, 0x0) 5.17459102s ago: executing program 3 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000300)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x8, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x9, 0x2, 0x4ba, 0x92, 0x8, 0x80]}) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010076fe3b0c62ce23c5330000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000100000006fd3c3eab0efd03769aae64f1874e21699db682f52e75b31360ca84766df651a3815751f7f3dbd4"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.054418733s ago: executing program 3 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x20, r1, 0x4, 0xffffffff, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5521}]}, 0x20}}, 0x20000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000001680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x11e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24020000a11b8e8b7bd15e76b61a7b0b19000100"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000740)={&(0x7f0000000480), 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, r10, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x48}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc2c}, @NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "6254cd30e1d92f6b9545c62072dc69ab94ec79246ab81aa6711e1d5f2457aea20699cadc6fbce3e577bd893008badeb8704e1d65ae5c2ed66d00e89f03443c04219ecc220f81686fe386367b0c65d5d82e9d96a24d6ad82b6df2542e6d64404a269edd77e836f5527f10ace40eed147ed6360695f48ba18cc2a3658c97d3c0ff4a35840596c1176ef028a3003207aea4eb06a614fd6207b82a608978debd3c401c4c5d41901894547d70a79f5d10aa35797dc849ff4a0e33862f1c82ada104a4"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "7d1d175b9cad07a828d0b45d75"}, @NL80211_ATTR_FRAME_MATCH={0xae, 0x5b, "b8259b5c9ce652bec3e118d6d58bf066d285b33af7277b968a2b9dbcfd73e7f337b9b306824dfa1ee119e417301ff132d29e74c57772f29908b9f54ef061b8682258fb65af32d0a0e3412c447a37a256519736c9b9848689e45a0438623965b9241a8064307bd1b6750fafc37a56762c23fc9fb2a1e8dc6337e4a8f0afeda209727955ee14a56f4d431a9976a76fedc43035e5c2dea8197d55e4bb7394ff4a6536fe0859c15f7532bf11"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$inet6(0xa, 0x5, 0xf) ioprio_set$pid(0x2, 0x0, 0x6000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r12, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x90656}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x0) openat(r12, &(0x7f0000000400)='./file0\x00', 0x7ac1dfc88ec6e3c4, 0x126) 3.817949674s ago: executing program 3 (id=470): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003500)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$msr(r3, &(0x7f000001b000)=""/102391, 0x18ff7) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002100200027bd7002fddbdf25010000002c25945ad95b0f1edbcd58b846604788c6f7645b6e4281a393e0271b66fabddc9deba72eb80a29231c80c3fec1f73f6a5962389e1a050aa5a03f1be7f1c30b504f910a4cfacdc5ef44149d776e594022056981a08d99574a64ae36274d1f9051c0a171b34701410273dfbddd15bd503f3c00deba6bdbd41ae17508fd4dd7295fa2d2832597f22238bcd8dc825d75f8c80a60ee0455b71a9caa7412c0554d2b9835fbed03dd850948e6e3b3f3c7f69564344a7d47f24ec4"], 0x14}}, 0x0) 3.791470212s ago: executing program 32 (id=470): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003500)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$msr(r3, &(0x7f000001b000)=""/102391, 0x18ff7) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002100200027bd7002fddbdf25010000002c25945ad95b0f1edbcd58b846604788c6f7645b6e4281a393e0271b66fabddc9deba72eb80a29231c80c3fec1f73f6a5962389e1a050aa5a03f1be7f1c30b504f910a4cfacdc5ef44149d776e594022056981a08d99574a64ae36274d1f9051c0a171b34701410273dfbddd15bd503f3c00deba6bdbd41ae17508fd4dd7295fa2d2832597f22238bcd8dc825d75f8c80a60ee0455b71a9caa7412c0554d2b9835fbed03dd850948e6e3b3f3c7f69564344a7d47f24ec4"], 0x14}}, 0x0) 2.347194911s ago: executing program 4 (id=498): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x4, 0x0, [0x0], [0x0, 0x8], [0x2, 0x0, 0x0, 0x4], [0x0, 0x0, 0xfffffffffffffbaf, 0x1000000000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x0, "55e05cb6680cc32a4bfdca1886c5aded253bc9c89ed279cb8757af722fec30f7", 0x5, 0x100, 0x2, 0x7, 0x8, 0x0, 0x75, 0x5}) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 2.346705014s ago: executing program 4 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) 2.266308907s ago: executing program 4 (id=500): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f00008c7000/0x3000)=nil, &(0x7f0000c66000/0x1000)=nil, &(0x7f0000fb8000/0x1000)=nil, &(0x7f0000000100)="1f35117a549ec6fd22c1cb06ef7e1636be80deac0ca2e8eff7514c8d52fa17c2993186f255d9b54abc9c4f937d6b6358068e142927cc5fbef48fa5693ec23cc34328995c38d9bb7ac794dbb1c6cdbdbe769ac51a76ca8ec699540d", 0x5b, r2}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffd48, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x228, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x1bc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x774c1500}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7e44}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbdd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcebe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}]}]}], {0x14}}, 0x29c}}, 0x0) 2.263853382s ago: executing program 4 (id=503): r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}, {&(0x7f0000000180)={0x13c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="f5f8c11f0f52ecadcec2b89bc4e0ff6bddebef982b2cf57d71965fb5000101eecd473347a32a7b1984d89b814d5433e1a5bead53b1396294bc9c00a3b0cfb06a91a219a6874a662a1028ac796922831f38c9f11a3e827f7b55c5fe900d26292516d3242c12c3e57a2717e4af6540b7b576b84c5d5606478ed5afcccb6ed91120283c7765274657be4586eef41b831d3a84f4670ccc1b997c1806663f299d31062768cf36af02d735de443a143f08d32af8deb664e3ebc8efacc27d9ef5eee46ba9f9d6d28ea4", @typed={0x8, 0xa3, 0x0, 0x0, @pid=r0}, @nested={0x5a, 0x31, 0x0, 0x1, [@nested={0x4, 0x128}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x5}, @generic="bfdfa4608c7ad9bef55297a8fa28cbeeac8b085fcbf5393a7dd28fad4744e785f47bc9db2944dc26647c3e0f8bc180c0890bcdd68235e9299cfd9d61d832d71a46e91da5c0ff", @nested={0x4, 0x9a}]}]}, 0x13c}, {&(0x7f00000002c0)={0x94, 0x2f, 0x400, 0x70bd2b, 0x25dfdbff, "", [@nested={0x81, 0xff, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x69}, @generic="b3", @typed={0x66, 0x34, 0x0, 0x0, @binary="727b4e24bca357951845fa9558040cfa407b1dad2be981c7bb9c47ea1bfbe43e5918084a2a4a11c818261ef28f80554da694e7a9ca6c7617cf09fba69be8b769f4cccc14fcb49b1752741a9f25118dbc3426a7e3e7d4cfec557ec74f7eb60724b58b"}, @typed={0x7, 0xea, 0x0, 0x0, @str='%-\x00'}, @nested={0x4, 0xa}]}]}, 0x94}, {&(0x7f0000000380)={0x338, 0x21, 0x780, 0x70bd2d, 0x25dfdbfb, "", [@generic="acd9a7f6172bb74ad06f9759923747a680454922bf6d35b67586ca5ebb576a9d8f42f6db190c08d3bfce8977e3d41511aed86a1018bee68f1a052d6a0000bd40c2dd33364b992fa194a9e9a95697d6970dfca34a88fe79ff83e2b42ccc7dfd82ab453f3ffb26d7116d0bf925652b351f564f41da3ead6742e3b42b99813b9cf3cfd155a880505856eed5ebbefe5a666ecfd15e0ff2b2cdd5158fea9ab66bd4a479c03321c9cf34936a7a80df4eafbec35b8f761997d6a72133c20163bebfda4fad6a8a22bc4120abc894a8858fd46268affa8bd12d446402c8f66ad4f6db8aabe6", @generic="402751c4e577aba9682508212eb7e4cd1f5480fe7153bbc1b42c6d2ad274d992508aee401fae607f40a84af36d26b365ec69c25f45f83a85061e3fa672757e839f92fde2feb96d5052362046c6d41f1c3f954b175f804f4900eea1eb93e3c194ad155c47674ddd48b0ea1d6300c238e1409bf6cdd4a87fea113622231f0facbf9392a53d1146d92b97fe2f5489ed321f5251730f3b2eedcc39870bc6561fc3d545b34394d4cb67d623e059bb79b26bb4758d28653ff47bb4e32ad5c0f872d21221c72588ddc8f2461419de4f", @generic="d7785fe77a8d00d285eb48ef3ae008ba609b5f9143681edefc48fc18f258f894d433845946c9ba2329dadd7af75059c5f74844146dfe6f92528b5fd05677fad9fd68577ac6de859dbd3624592ec9119fb89d0baafec5c1d172c8d9e2f9fd904d2fea0ca6c06b064845fd3eae4ba96dc553fecb5f6d402ed237087650d4", @generic="b85aff598edb9b4a6e3635902fb6edbe33e45d93bf6dfd1cc457629a9ccbb98e3e6e57f725efa0cea6ee44cbca3da8b84f0cf7e6c73c6b02122259dda26968316c2cc8491bc3dba59483019bbf9780c94b2b5a2533ddc4a6d0a04f98b99ec02fdc932b425d9a023667d7e0201b98ace9b74da52ebc0e299dd24bbac1e2bd9cbd5b119ac7a96a92f5bfc3119b899532de79fd4f715485872538b02168458921e3f80e02a274f894b75f38e4f0e8c4ada015258cdb481cb5792183414b49c8af68b7aa151a29fde90a48bd5f044a17ab1ca3cc9deae4405f64eb6df5e7b4bd402a378f442cdec1c6248f31a328906387b209710ab76e54148bd8195fa7"]}, 0x338}, {&(0x7f0000000740)={0x2cc, 0x34, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0xc, 0xdd, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x8d}]}, @typed={0x35, 0x6e, 0x0, 0x0, @binary="62ff4f18e8ecd0ff29ab47d5302bf7cba3476293b69d09e1777284b32d0ea6be423b2c9c6054dcf1ef73aaab784ae752f4"}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r0}, @typed={0x14, 0x125, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @generic="bfbbe7bf654df628ab519776405f6bdb3f919f699a2f6216a24df11b3c98695c4c590244bc9bc1897ecf9df7f2f02f1e629caff6e995839402b31778e513e44f345c30c7bd78a0c696208895fc9fc36c8c49968188f85ce68dcb518129783d", @typed={0x8, 0x139, 0x0, 0x0, @pid=r0}, @nested={0x1f2, 0x144, 0x0, 0x1, [@generic="c4a3447bd6ed6d20cf865458e8326321c6e49b88a9d3be8afd5dd537ec6f1d031d1c951d4dfc83e1a6b6430d70193d975a92aff97f8137174814a047d058b887e31f9f622d5bd3fd4f51ea81667537e082cff1650958de06e52b9fc333e815624b791e382b1dbf81ca96219b20390caf6d66a03608e610474922d6881837d29bb494d9418e59b2fca540137d8bf0a43d712943f4af5875867f94298a54eeaf327877c7", @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x8}, @generic="bfe079f6d2244579088ae7aff22ffd254528c70e80e474089d000b4b95709da2b9e8a170aec938958029b4fffb517c315a2e290e817269136d37a2", @typed={0x8, 0xe5, 0x0, 0x0, @pid=r0}, @generic="baee2c2e01454e2f29ca7f3fb202288fb171bea22b61fabee39d141125e8eb74cc2bd2632112af674642a4de7117a9f5af7df55ac916e5a9da703e41a041", @generic="8ca0b8e8770d5181f29497bf0e27d232a0851aba990a2e73e6c27a4a0a41a0e22a96c5efac320b6820cbffe9b26c886d716356af71d83bdb6b7764cc275f6fd1990836283036f3d5b2c47fa7cce08ca4e5d5bc45b34249f4f4fd74586a7fd00236ea8512e7d4701b7ac8995aaac35f193600818a09a4ae3af42ed36e8e59897423f5ee2d293ccae489fd1e684d48746ee595229c0d7af7d9f143208b11536b0b51585c0707dfca1c0061afd6e0948f3e8cf0e6cc8a903fb0cf64844f06a0ffe61aab"]}]}, 0x2cc}], 0x5}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r6, 0x0, 0x24, 0x1000, &(0x7f00000000c0)="c5e777c30ea18560a301c0540325aa0dc4ab580116c153ec196f96f511932508ea540fab", &(0x7f0000000ac0)=""/4096, 0x5, 0x0, 0x0, 0xea, &(0x7f0000001ac0), &(0x7f0000001b00)="83a6753aea74d43ae5db64385b6353a3a9200ea5ea41ed6316a64ae4402fa6c949b5e920c24c8169f7d83ece1d064789d669f545fc66b4e6abf4a80fbe5fd658ee53d01f7e3dd07dc32e6a4b62c76b42ba00b8d30b979dc4b0692cdef7285be5d95b15f16a3d8698a4048f2ae5d3c9fc8a37f6814b212a40cf7300dd41d42e90915a343d385000c4e31c5b98d3fd268902c79792c8dd20f882c9968191b555481a64c6dfdc9b30691e0bb093284ea8d64c9e3928fc517140fa82d964c82a715516f4566b2614b13bcd851f43d3b06ed6f09d7ce34bdea448c7a6e580f72f117de860b15b6e0114b08a8d", 0x4, 0x0, 0x2}, 0x50) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r9, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r9, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) openat$rtc(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) write$dsp(r7, &(0x7f0000002140)="00c1", 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00') 1.3670592s ago: executing program 4 (id=520): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) syz_usb_connect$midi(0x0, 0x98, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x1, 0x4, 0x60, 0xab, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xc, 0x7}], [{{0x9, 0x5, 0x3, 0xc, 0x400, 0x4, 0x9, 0x5, {0x9, 0x25, 0x1, 0x5, "778761d91c"}}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0xf, 0x2, {0xf, 0x25, 0x1, 0xb, "71714fa91404974263ad00"}}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xc, 0x7, 0x6, {0x13, 0x25, 0x1, 0xf, "599ba706201b5f9d7fa454ed8068ee"}}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0x10, 0x8, {0x8, 0x25, 0x1, 0x4, "bf85f8a1"}}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x9, 0x0, {0xe, 0x25, 0x1, 0xa, "7faed835c1723ab62232"}}}]}}}}}]}}, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x101}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "cf466632e273fc1f5edd2fd0dbe5f45c4d51ab4e0b26f35e746a8149062e53cc01e5ce975df6f0621b0319ab16e6467de325c57e79396480"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}, {0xb9, &(0x7f0000000480)=@string={0xb9, 0x3, "4427d504579c079ddcf26036f5eec260faee7cbcded0ba551a6dc55ce9b2414790a6d70ef347b39dfafb7d37c2e40221982ad2a286e811a221cbb6dd78685409b36336d1414bd49d3c7824b56be4a813840d78c2ad3efa2f7b471af49f5ff6f0d00b73f3e54fe7432f9a1726414b658a9b0d8cd26bcef0a29848c964b445ae31edf50cce659c71055764b1170d4d7a3e318f20f8973556aa3eecf76dcbe684e0b8bbce65cbfb78c569e8b3d590924a15170515b2e707ef"}}]}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2, 0x6200, 0x3e, &(0x7f0000000140)="2fb8518f5311286e7a0acb2489417295223d37c13ccd8e219098b69e78c8d3fcb16e64490411d7d29305c558a6ed42fb4db8656c3bdb74e696dba421ab33"}], 0x1}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xb, 0x5, 0xb9}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0xff, 0x7, 0x0, 0xa}, 0x4e, &(0x7f0000000180)={0x5, 0xf, 0x4e, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x5, 0xcc, 0x1ff}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x6, 0xfff9}, @generic={0x1a, 0x10, 0x4, "940e6891868958d8c792ab498533dc3caa38eaf838e33f"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "aa7bfa77420772088bdf24dfaf6e9049"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}]}) 886.68151ms ago: executing program 1 (id=525): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x32, 0x0, &(0x7f0000000040)) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = fcntl$dupfd(r2, 0x406, r2) (async) r5 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x20044880) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) (async) recvmmsg(r10, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) (async) recvfrom$inet6(r10, 0x0, 0x300, 0x87b0cc373e1cda89, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0xfffffe1d, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) (async) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0xb, 0x8001, 0xb6eb985a, 0x5}, {0xc, 0x7, 0x80000003, 0x20400000}, {0x400000, 0x8}}) 886.405444ms ago: executing program 1 (id=526): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r2, 0x8fe, 0x3ff}, &(0x7f0000000080)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0b6124ca972eb508e3fe0000", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000000000000008002600431700000800270001000000"], 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 814.874547ms ago: executing program 1 (id=527): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=@migrate={0x144, 0x21, 0x8, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x4, 0xa, 0x70, 0x30, 0x6, r1, r3}, 0x6e6bb4, 0x1}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@multicast2, @in=@local, @in=@multicast2, 0x32, 0x1, 0x0, 0x3500, 0xa, 0xa}, {@in=@empty, @in=@rand_addr=0x64010101, @in=@local, @in=@private=0xa010100, 0x6c, 0x1, 0x0, 0x3503, 0x2, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x6}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in=@loopback}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x80814}, 0xc0000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0x0, 0xfff1}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 653.13587ms ago: executing program 1 (id=530): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x0, 0x42474752, 0x783, 0x438, 0x3, @stepwise={{0x2, 0x7ffd}, {0x6, 0xfff}, {0x5, 0xd}}}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4c22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x20000005}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000400)={0x7, 0x80000000}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000010a00000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00100000"], 0x50) socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000ca00000003000000000000007d1fd9743078ebb062aed30dc5ac142f52e642bd78f424cb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x3df, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x800007, 0x41}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000085000000d00000009c00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 576.102709ms ago: executing program 1 (id=533): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4004044) 575.720875ms ago: executing program 0 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f01a, 0x2}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000040)={0x6, 0x7, 0x0, 0x8, 0x8, 0x0, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) 569.666673ms ago: executing program 1 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) mq_open(&(0x7f00000000c0)='\x00', 0xc9f7cc37ae41b8e6, 0x44, &(0x7f0000000100)={0x7ff, 0x2, 0xfffffffffffffff7, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000040), 0x47, 0x20048001) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000510000104001f00000300000000000000", @ANYRES32=0x0, @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f00000000c0)=0x8000, 0x4) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f00000001c0)={0x6, 0x4}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000280)={0x5, 0xf900, "5a787e96dcbee49fbfaecc2d110d027a54265f8e64e254ec", {0x1, 0x9}, 0x4}) 507.311513ms ago: executing program 2 (id=537): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x21}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000002907800000000ffffffff110090780000000118338341a93d4f9aa29f5ccaf7bc5c2b1fad1cc9476fa817c9bc7c58098012e9650ea03db5e42d"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, r2, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, r3, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x383, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "673e15", 0x34d, 0x6, 0x0, @empty, @private1, {[@srh={0x11, 0x2, 0x4, 0x1, 0x1, 0x60, 0x1, [@local]}, @fragment={0x2c, 0x0, 0x9, 0x0, 0x0, 0x4, 0x67}, @routing={0x11, 0x14, 0x40bf4f3f8d36b30b, 0x2, 0x0, [@private1, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00', @local]}, @fragment={0xc, 0x0, 0x0, 0x1, 0x0, 0xc, 0x65}, @hopopts={0x5c, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0xfc, 0x594, [0xd9180000]}}]}, @hopopts={0x5c, 0x15, '\x00', [@generic={0x8f, 0x60, "9e4b211e951cb301ef2e9fa0d7538db5b35d12ddda3d5253fc50df84c26d41a9d0ce916816527f2db838c642c7978957cbe5377e863599f06ba46986fd40100b4ababef661e16cf1e8e936a162580940c4fcb6092c963c5c5419cdba03b1cf3c"}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x8, [0x10000]}}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x200, [0xfffffffffffffffa, 0x6]}}, @hao={0xc9, 0x10, @private1}]}, @hopopts={0x2d, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x58, 0x40, [0x8, 0x2, 0xb3b]}}]}, @routing={0x2, 0x6, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @empty, @mcast1]}, @dstopts={0x2b, 0xa, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0xfd}, @calipso={0x7, 0x40, {0x1, 0xe, 0xff, 0xb, [0x2, 0x4, 0x3, 0x2, 0x8, 0x1, 0x400000000]}}, @ra={0x5, 0x2, 0x7}, @pad1]}, @hopopts={0x2b, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7fff}, @enc_lim={0x4, 0x1, 0xeb}, @calipso={0x7, 0x40, {0x2, 0xe, 0x1, 0x6, [0xf, 0x2, 0x5, 0x7, 0x80, 0x9, 0x9]}}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x3}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}], {{0x4e21, 0x4e21, r2, r3, 0x1, 0x0, 0x6, 0x40, 0xe1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}, {"f535faba177448721ffe31da6e794f6c8fa4c89aea0288fac11892381d5921df627bcf00610ef5d74eb3f9e8e5482820e185bd4630a5c32a8367f83163fd60fc8bb839e6681e169f8091cb66982059efbc357d1a64c976dd6b920e51f7"}}}}}}}, 0x0) 456.674771ms ago: executing program 0 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x81}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 453.593775ms ago: executing program 2 (id=539): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @win={{0x7fffffff, 0xff, 0x3, 0x2ff}, 0x8, 0xfffffffb, 0x0, 0x9a, &(0x7f0000000680), 0x1}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 377.541103ms ago: executing program 2 (id=540): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/vmcoreinfo', 0x400, 0xe4) read$FUSE(r0, &(0x7f0000007040)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x9) ioctl$I2C_RETRIES(r2, 0x701, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117400000000001800000000000000000000000000000095ff000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117400000000001800000000000000000000000000000095ff000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 377.247527ms ago: executing program 0 (id=541): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}}, 0x14}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x208021, 0x0) read$FUSE(r5, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18, 0x0, r6, {0x7}}, 0x18) 377.01031ms ago: executing program 0 (id=542): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5c0000007a006bcd9e3fe3dc6e08000007aa0004000000007ea60864162cf36504005425198bc3488bc3a0e69e94003651f668c366682fb6e27bbfa83b5cae0300c9fcd1938037e786a62ce84f2ecfa528f15d9fa966f796c172b4f6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 315.572915ms ago: executing program 2 (id=543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x60) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000004", @ANYRES16=r2, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32, @ANYBLOB="0800c30074e800000800c4"], 0x2c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x3, 0x2, 0x5, 0x3}, &(0x7f00000003c0)=0x98) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r10, 0x624, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x569262ed56bd324b) 312.538394ms ago: executing program 0 (id=544): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 256.451212ms ago: executing program 2 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="cb4390b041ec86116c8e9b5a486f8c6d38f510ce2387c6a52f9ebb5ab7cadb99176fc12276782eab71db2a9a974a0160d33802c1fd004be28f28d25e3c219e31090a9af0fe9dd3ff8ff926f8c171117e21e523844c650a40ff657348296645f1958a189fd8be4e0f995db757b696981bc284e5371cb658b6188b333b7e132e257016a54d3b768956f152fe1289737e8ef17745e24e1e0ab6fd2e4c50e3a5561a"], 0x3c}}, 0x884) 254.276211ms ago: executing program 2 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989c5b553372f70c8dd2dd349c76e64b750967547e5364c33edf970803ef8613af19589bba9bd"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz0\x00', {0x3, 0x8001, 0x97}, 0x35, [0x1dc, 0xd409, 0xffff, 0x4, 0x7, 0x0, 0xffffffff, 0x127, 0x800, 0x3, 0x48a8, 0x5, 0x8001, 0x1c00, 0x0, 0x7ff, 0x2400, 0xfffffffa, 0x9b, 0x9, 0x1000, 0x20001, 0x4, 0x6, 0xa, 0xfff, 0x8, 0x9, 0x3, 0x2, 0x9, 0x73f2, 0x4, 0x9, 0x3, 0x9a, 0x1, 0x200, 0xc8dc, 0x8c, 0x9, 0x80000000, 0x5, 0x40, 0x4a2, 0xcc, 0x3a6, 0x51b, 0x9, 0x6, 0x4, 0x6, 0x483, 0x2e2d, 0xa86, 0x10000, 0x1, 0x3, 0x80, 0x8001, 0x5, 0x3ff, 0x3ff, 0x5], [0x7, 0x0, 0xfffffff7, 0x7, 0xc, 0x1, 0x9, 0xbd, 0xe24d4cc6, 0x7fff, 0x5, 0x7, 0x100, 0x4, 0x8, 0x4, 0x40, 0x1000, 0x9, 0x6, 0x3, 0x7, 0x3, 0x9, 0x336, 0x4, 0x6, 0x9, 0x4, 0xffff6fa7, 0x7, 0x6, 0x7, 0x0, 0x3, 0x4, 0x0, 0xd, 0xfb0, 0x1ff, 0x4cb, 0x9, 0x3cd9, 0x12, 0x3, 0x6, 0x0, 0x8, 0x0, 0x15, 0x8000, 0x8, 0xe, 0x5, 0x10000, 0xffffffff, 0x5, 0x7, 0x6, 0x8, 0xd, 0x7ff, 0x8, 0x40], [0x8009, 0x1, 0x4, 0x30a, 0x9, 0x8, 0x20000002, 0x2, 0xffffffff, 0x2, 0x7f, 0x2, 0x6, 0x810, 0xfffffff7, 0x1, 0x1, 0xff, 0x2, 0x80000000, 0x4, 0x84, 0xfffffffe, 0x3ff, 0x8, 0x441, 0x0, 0x40000, 0x0, 0x5, 0x6, 0x2, 0x4, 0xfc9, 0x7, 0x80000001, 0x0, 0x3, 0xdb3, 0xd, 0x4, 0x40, 0x4, 0x8, 0x8, 0x2, 0x2c2, 0x6, 0x80000001, 0x9, 0x2, 0x1d1, 0xf8b, 0x7800, 0x4, 0x7, 0x3, 0x5, 0x8, 0x8, 0x5, 0x3, 0x95f6], [0xa, 0x7d0, 0x4, 0x7fff, 0x5, 0xaa, 0x6, 0xffffffff, 0x4, 0x1, 0x2, 0x1, 0x5, 0xa, 0x8, 0x8, 0x0, 0x401, 0x8, 0x4, 0x200, 0x10001, 0x83, 0x2, 0x6, 0x4, 0xc6, 0x0, 0x3, 0x1, 0x1, 0x4, 0x10001, 0x1000, 0x5, 0x4, 0x5, 0x9, 0x10, 0x1000007, 0xfad2, 0xffffffff, 0x8000, 0x5, 0xfff, 0x1ff, 0x9, 0x2, 0x5, 0xffffffff, 0x0, 0x5, 0xa102, 0x2, 0x10000, 0xfd43, 0x0, 0x400, 0x3f6cea4a, 0x1, 0x4, 0x4, 0x8, 0xa]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x200000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x100073, 0x100000}, 0x35) getsockopt(r2, 0x8, 0x5, &(0x7f0000000300)=""/248, &(0x7f0000000400)=0xf8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x450, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x424, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x414, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x8, 0x9c19, [{0x5b5, 0x0, 0xa, 0x10001}, {0x1, 0x7fffffff, 0xa6b7, 0x9}, {0xf16, 0x1ff, 0x5, 0x40}, {0x59c, 0x4, 0x7, 0x9}, {0x7ff, 0x2, 0x0, 0x10000}, {0x2, 0x2, 0xffff, 0x7}, {0x5, 0x6, 0x9, 0x23903cef}, {0x2, 0x9, 0x7, 0x6}, {0xfffffff7, 0x8, 0x80000000, 0x2}, {0x40, 0x80000001, 0x2, 0x2}, {0xa, 0x5, 0x545, 0xd}, {0x9, 0x3, 0xa52, 0x8}, {0x1, 0x3, 0x4, 0x5a8}, {0x7, 0x8b5, 0xff, 0x3}, {0x7ff, 0x0, 0x6, 0x1}, {0x4, 0x8, 0xffff, 0x4}, {0xffffffff, 0x2, 0x1, 0xe}, {0x126c, 0x2ba70bc3, 0x7, 0x7}, {0xc, 0x8, 0x3, 0xb}, {0x8, 0x7, 0x7, 0x7}, {0x4, 0x1, 0x1, 0x56}, {0x0, 0x4, 0x0, 0x1}, {0xfffffffd, 0x8001, 0x200, 0x7}, {0x0, 0xa, 0x800, 0xd849}, {0x5, 0x9, 0x3, 0x2db}, {0x13318b36, 0xffff, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x7}, {0x80000001, 0x9b5d, 0x4c6e, 0x1}, {0x6, 0x5, 0x4d2, 0x292b}, {0x4, 0x1ff, 0x5, 0x4}, {0x80, 0x5, 0xff, 0x1}, {0x4, 0x9b0, 0x2, 0x3}, {0x2000, 0x3, 0x2c, 0x8}, {0x793dd766, 0x3f, 0x7, 0x1ff}, {0x6, 0x2, 0x48b, 0x4}, {0xd, 0xfffffffc, 0x8, 0x57}, {0x687, 0x1, 0x4, 0x1}, {0x4, 0x1bc, 0x1000, 0x9}, {0x6, 0xfffffff9, 0xfffffff9, 0x5}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x9, 0x1, 0x3}, {0x1, 0x416a, 0xe0000000, 0x40}, {0x2, 0x1, 0x7fff, 0x1}, {0x7, 0x7fff, 0x800, 0x8000}, {0x3, 0x9, 0xfff, 0x7}, {0xbd7, 0xd0c, 0xf, 0x8}, {0x7, 0x2, 0x5, 0x3}, {0x80, 0xe, 0xc09c}, {0xd, 0x9, 0x0, 0x9}, {0x4, 0x4, 0x0, 0x3}, {0x1, 0x8, 0x8, 0x7}, {0x3, 0x2, 0x9, 0x6}, {0x1, 0xd6a1, 0xe9a3, 0xb07}, {0x3, 0xfff, 0x0, 0x1}, {0x48000000, 0x9, 0x4, 0x3fd}, {0x8, 0xfb, 0x800, 0x1}, {0x62, 0x3, 0x5, 0x5}, {0xd5a, 0xffffe007, 0xfffffffb, 0x1000}, {0x81, 0x7, 0x66, 0x1ff}, {0x5, 0xffff8001, 0x1, 0x401}, {0xf, 0x4, 0xffffff09, 0x3bfd}, {0x5, 0x3, 0x5, 0x5}, {0x9c8c, 0x6, 0x9, 0x8}, {0x990, 0x40, 0x2, 0xb}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x7}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="58bfbe0f4438ac61f4b4f1cdd42e3bed2121fd5f708867e7e1845c3d9a781e", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf250400000008000400050000002000018008000300ac1414bb14000400fe8000000000000000000000000000aa08000400e0b6ffff3800018008000700", @ANYRES32=0x0, @ANYBLOB="08000600000000000800060002000000060005004e22000014000400ff020000000000000000000000000001080003000800000005000500070000004800068014000400fc01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="080006000c000000060001000200000008000700", @ANYRES32=r7, @ANYBLOB="060001000200000008000700", @ANYRES32=r10, @ANYBLOB="0500050006000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4044}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, 0x0, 0x25, 0x4, @void}, 0x10) 5.128605ms ago: executing program 0 (id=547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r4, 0x101}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 4 (id=548): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) kernel console output (not intermixed with test programs): [ 52.928508][ T40] audit: type=1400 audit(1775115332.921:61): avc: denied { siginh } for pid=5910 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:14396' (ED25519) to the list of known hosts. [ 55.297197][ T40] audit: type=1400 audit(1775115335.311:62): avc: denied { name_bind } for pid=5917 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.329553][ T40] audit: type=1400 audit(1775115335.341:63): avc: denied { execute } for pid=5918 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.339250][ T40] audit: type=1400 audit(1775115335.341:64): avc: denied { execute_no_trans } for pid=5918 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.564585][ T40] audit: type=1400 audit(1775115337.581:65): avc: denied { mounton } for pid=5918 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.575234][ T40] audit: type=1400 audit(1775115337.591:66): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.578629][ T5918] cgroup: Unknown subsys name 'net' [ 57.742911][ T5918] cgroup: Unknown subsys name 'cpuset' [ 57.750058][ T5918] cgroup: Unknown subsys name 'rlimit' [ 57.925811][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 57.925826][ T40] audit: type=1400 audit(1775115337.941:68): avc: denied { setattr } for pid=5918 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.936336][ T40] audit: type=1400 audit(1775115337.941:69): avc: denied { create } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.943455][ T40] audit: type=1400 audit(1775115337.941:70): avc: denied { write } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.950812][ T40] audit: type=1400 audit(1775115337.941:71): avc: denied { read } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.957605][ T40] audit: type=1400 audit(1775115337.951:72): avc: denied { mounton } for pid=5918 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.966911][ T40] audit: type=1400 audit(1775115337.951:73): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.974919][ T40] audit: type=1400 audit(1775115337.961:74): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.984575][ T40] audit: type=1400 audit(1775115337.971:75): avc: denied { read } for pid=5639 comm="dhcpcd" name="n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.992249][ T40] audit: type=1400 audit(1775115337.971:76): avc: denied { open } for pid=5639 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.001886][ T40] audit: type=1400 audit(1775115337.971:77): avc: denied { getattr } for pid=5639 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.012648][ T5922] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.928150][ T5918] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.149003][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 63.149015][ T40] audit: type=1400 audit(1775115343.161:82): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.343792][ T40] audit: type=1400 audit(1775115343.351:83): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.350088][ T40] audit: type=1400 audit(1775115343.351:84): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.362764][ T40] audit: type=1400 audit(1775115343.351:85): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.371104][ T40] audit: type=1400 audit(1775115343.371:86): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[4799]" dev="sockfs" ino=4799 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.381519][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.386808][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.390722][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.393070][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.393403][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.399680][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.400098][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.404389][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.407019][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.408415][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.412882][ T5288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.413391][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.416714][ T5288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.421993][ T40] audit: type=1400 audit(1775115343.431:87): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.422044][ T40] audit: type=1400 audit(1775115343.431:88): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.424489][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.425198][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.430272][ T5288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.433966][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.439966][ T40] audit: type=1400 audit(1775115343.431:89): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.446724][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.463898][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.467100][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.709205][ T40] audit: type=1400 audit(1775115343.721:90): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.797841][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 63.849837][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 63.861263][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 63.942230][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.945650][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.948626][ T5940] bridge_slave_0: entered allmulticast mode [ 63.952581][ T5940] bridge_slave_0: entered promiscuous mode [ 63.958844][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 63.965736][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.968656][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.971940][ T5940] bridge_slave_1: entered allmulticast mode [ 63.976755][ T5940] bridge_slave_1: entered promiscuous mode [ 64.066831][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.071737][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.146226][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.148825][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.151129][ T5931] bridge_slave_0: entered allmulticast mode [ 64.154584][ T5931] bridge_slave_0: entered promiscuous mode [ 64.159147][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.163368][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.166810][ T5931] bridge_slave_1: entered allmulticast mode [ 64.170575][ T5931] bridge_slave_1: entered promiscuous mode [ 64.176228][ T5940] team0: Port device team_slave_0 added [ 64.222851][ T5940] team0: Port device team_slave_1 added [ 64.234422][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.237717][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.240811][ T5933] bridge_slave_0: entered allmulticast mode [ 64.244974][ T5933] bridge_slave_0: entered promiscuous mode [ 64.249201][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.251790][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.254480][ T5944] bridge_slave_0: entered allmulticast mode [ 64.258616][ T5944] bridge_slave_0: entered promiscuous mode [ 64.270031][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.273017][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.276528][ T5944] bridge_slave_1: entered allmulticast mode [ 64.280299][ T5944] bridge_slave_1: entered promiscuous mode [ 64.301314][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.304644][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.307856][ T5933] bridge_slave_1: entered allmulticast mode [ 64.312472][ T5933] bridge_slave_1: entered promiscuous mode [ 64.330835][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.345073][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.347415][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.357780][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.373553][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.377015][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.388721][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.395374][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.402486][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.410652][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.416959][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.428133][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.504450][ T5944] team0: Port device team_slave_0 added [ 64.507271][ T5931] team0: Port device team_slave_0 added [ 64.511621][ T5933] team0: Port device team_slave_0 added [ 64.529288][ T5940] hsr_slave_0: entered promiscuous mode [ 64.532223][ T5940] hsr_slave_1: entered promiscuous mode [ 64.537011][ T5931] team0: Port device team_slave_1 added [ 64.539971][ T5944] team0: Port device team_slave_1 added [ 64.542820][ T5933] team0: Port device team_slave_1 added [ 64.600319][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.603468][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.613772][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.626190][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.628524][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.637622][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.642070][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.645253][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.657331][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.663026][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.666022][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.677903][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.694869][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.697128][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.706095][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.710156][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.712470][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.721144][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.787530][ T5944] hsr_slave_0: entered promiscuous mode [ 64.790225][ T5944] hsr_slave_1: entered promiscuous mode [ 64.792421][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 64.795104][ T5944] Cannot create hsr debugfs directory [ 64.807726][ T5931] hsr_slave_0: entered promiscuous mode [ 64.810121][ T5931] hsr_slave_1: entered promiscuous mode [ 64.812224][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 64.814265][ T5931] Cannot create hsr debugfs directory [ 64.886323][ T5933] hsr_slave_0: entered promiscuous mode [ 64.889705][ T5933] hsr_slave_1: entered promiscuous mode [ 64.893090][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 64.896489][ T5933] Cannot create hsr debugfs directory [ 65.208023][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.214885][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.232720][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.250286][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.297436][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.307526][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.313273][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.321311][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.387225][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.392270][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.397860][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.406279][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.464912][ T5937] Bluetooth: hci1: command tx timeout [ 65.465908][ T63] Bluetooth: hci0: command tx timeout [ 65.468520][ T5937] Bluetooth: hci2: command tx timeout [ 65.480669][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.527710][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.533258][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.543818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.546528][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.550736][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.553816][ T5937] Bluetooth: hci3: command tx timeout [ 65.557215][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.562574][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.585431][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.588498][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.617463][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.637608][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.669299][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.685315][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.687776][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.692677][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.704978][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.707334][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.716481][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.719653][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.721461][ T40] audit: type=1400 audit(1775115345.731:91): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.729813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.733095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.780635][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.802987][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.825660][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.830228][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.833223][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.841937][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.845018][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.911625][ T5940] veth0_vlan: entered promiscuous mode [ 65.923227][ T5940] veth1_vlan: entered promiscuous mode [ 65.939428][ T5940] veth0_macvtap: entered promiscuous mode [ 65.944325][ T5940] veth1_macvtap: entered promiscuous mode [ 65.959600][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.967222][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.982776][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.989503][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.008353][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011549][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018330][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.033569][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.058870][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.100068][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.102876][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.122875][ T5944] veth0_vlan: entered promiscuous mode [ 66.127856][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.130741][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.134703][ T5944] veth1_vlan: entered promiscuous mode [ 66.148102][ T5931] veth0_vlan: entered promiscuous mode [ 66.159106][ T5931] veth1_vlan: entered promiscuous mode [ 66.165491][ T5933] veth0_vlan: entered promiscuous mode [ 66.176081][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.180397][ T5933] veth1_vlan: entered promiscuous mode [ 66.202413][ T5944] veth0_macvtap: entered promiscuous mode [ 66.208157][ T5931] veth0_macvtap: entered promiscuous mode [ 66.217079][ T5944] veth1_macvtap: entered promiscuous mode [ 66.224380][ T5931] veth1_macvtap: entered promiscuous mode [ 66.261389][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.266227][ T5933] veth0_macvtap: entered promiscuous mode [ 66.270598][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.278561][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.283337][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.291081][ T5933] veth1_macvtap: entered promiscuous mode [ 66.318535][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.325905][ T80] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.335660][ T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.340184][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.355723][ T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.359584][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.374824][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.378599][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.394483][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.397796][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.415487][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.430695][ T5937] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 66.433264][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.437508][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.447384][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.467377][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.469842][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.486769][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.489176][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.494753][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.498031][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.506859][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.509399][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.527464][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.530139][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.550163][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.552985][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.739456][ T6032] Zero length message leads to an empty skb [ 66.740787][ T6036] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 66.878546][ T6045] ======================================================= [ 66.878546][ T6045] WARNING: The mand mount option has been deprecated and [ 66.878546][ T6045] and is ignored by this kernel. Remove the mand [ 66.878546][ T6045] option from the mount to silence this warning. [ 66.878546][ T6045] ======================================================= [ 66.890614][ T6045] new mount options do not match the existing superblock, will be ignored [ 66.898500][ T6045] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 66.915667][ T6045] netlink: 30624 bytes leftover after parsing attributes in process `syz.3.8'. [ 66.951126][ T6050] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 66.954389][ T6050] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 66.957442][ T6050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11'. [ 66.960811][ T6050] NCSI netlink: No device for ifindex 33022 [ 66.998765][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 67.095954][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 67.098901][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 67.137872][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 67.155839][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 67.170357][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 67.170406][ T155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.177897][ T155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.184061][ T155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.187052][ T155] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.191590][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 67.194557][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 67.261559][ T6074] netlink: 'syz.0.19': attribute type 9 has an invalid length. [ 67.266486][ T6074] netlink: 'syz.0.19': attribute type 11 has an invalid length. [ 67.271339][ T6074] netlink: 'syz.0.19': attribute type 12 has an invalid length. [ 67.545141][ T5937] Bluetooth: hci2: command tx timeout [ 67.553747][ T5288] Bluetooth: hci1: command tx timeout [ 67.556195][ T5937] Bluetooth: hci0: command tx timeout [ 67.619826][ T6096] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 67.633954][ T5937] Bluetooth: hci3: command tx timeout [ 68.143875][ T6116] Failed to get privilege flags for destination (handle=0x2:0x0) [ 68.169092][ T6116] IPVS: persistence engine module ip_vs_pe_s not found [ 68.173790][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 68.173800][ T40] audit: type=1400 audit(1775115348.191:183): avc: denied { unmount } for pid=6118 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.175278][ T6116] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.193396][ T40] audit: type=1400 audit(1775115348.201:184): avc: denied { create } for pid=6115 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.203172][ T40] audit: type=1400 audit(1775115348.211:185): avc: denied { read write } for pid=6115 comm="syz.3.31" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.213734][ T40] audit: type=1400 audit(1775115348.211:186): avc: denied { open } for pid=6115 comm="syz.3.31" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.245051][ T40] audit: type=1400 audit(1775115348.251:187): avc: denied { write } for pid=6122 comm="syz.3.34" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.256428][ T40] audit: type=1400 audit(1775115348.271:188): avc: denied { override_creds } for pid=6120 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.265581][ T40] audit: type=1400 audit(1775115348.271:189): avc: denied { append } for pid=6122 comm="syz.3.34" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 68.273263][ T40] audit: type=1400 audit(1775115348.271:190): avc: denied { create } for pid=6122 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.290561][ T40] audit: type=1400 audit(1775115348.301:191): avc: denied { bind } for pid=6122 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.291757][ T6123] Bluetooth: MGMT ver 1.23 [ 68.297195][ T40] audit: type=1400 audit(1775115348.301:192): avc: denied { write } for pid=6122 comm="syz.3.34" path="socket:[11338]" dev="sockfs" ino=11338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.526022][ T6143] bridge_slave_0: left allmulticast mode [ 68.527980][ T6143] bridge_slave_0: left promiscuous mode [ 68.530940][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.538951][ T6143] bridge_slave_1: left allmulticast mode [ 68.541790][ T6143] bridge_slave_1: left promiscuous mode [ 68.547356][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.555922][ T6143] bond0: (slave bond_slave_0): Releasing backup interface [ 68.562576][ T6143] bond0: (slave bond_slave_1): Releasing backup interface [ 68.573392][ T6143] team0: Port device team_slave_0 removed [ 68.580013][ T6143] team0: Port device team_slave_1 removed [ 68.582326][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.585158][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.589064][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.591628][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.596353][ T6143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.608478][ T6148] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 68.701187][ T6155] xt_ecn: cannot match TCP bits for non-tcp packets [ 68.704308][ T6155] 9p: Unknown Cache mode or invalid value f [ 68.706944][ T6155] TCP: TCP_TX_DELAY enabled [ 68.824087][ T6175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6175 comm=syz.2.46 [ 68.989932][ T6196] overlayfs: failed to resolve './file1/file0': -2 [ 69.148657][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 69.192064][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.493789][ T5981] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.626164][ T5288] Bluetooth: hci1: command tx timeout [ 69.626212][ T63] Bluetooth: hci2: command tx timeout [ 69.628558][ T5937] Bluetooth: hci0: command tx timeout [ 69.673737][ T5981] usb 7-1: device descriptor read/64, error -71 [ 69.709711][ T6251] bridge0: entered promiscuous mode [ 69.711623][ T6251] macvlan2: entered promiscuous mode [ 69.713803][ T5937] Bluetooth: hci3: command tx timeout [ 69.913768][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.933744][ T5981] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.073716][ T5981] usb 7-1: device descriptor read/64, error -71 [ 70.093722][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 70.099098][ T55] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.102775][ T55] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.107087][ T55] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.112506][ T55] usb 6-1: config 1 interface 0 has no altsetting 0 [ 70.118335][ T55] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 70.121270][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.124520][ T55] usb 6-1: Product: syz [ 70.126216][ T55] usb 6-1: Manufacturer: syz [ 70.128122][ T55] usb 6-1: SerialNumber: syz [ 70.195052][ T5981] usb usb7-port1: attempt power cycle [ 70.306554][ T6281] bridge0: port 3(syz_tun) entered blocking state [ 70.308976][ T6281] bridge0: port 3(syz_tun) entered disabled state [ 70.311571][ T6281] syz_tun: entered allmulticast mode [ 70.316251][ T6281] syz_tun: entered promiscuous mode [ 70.319318][ T6281] bridge0: port 3(syz_tun) entered blocking state [ 70.323237][ T6281] bridge0: port 3(syz_tun) entered forwarding state [ 70.340346][ T55] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 70.369723][ T6284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.374910][ T6284] netlink: 'syz.0.86': attribute type 12 has an invalid length. [ 70.377388][ T6284] netlink: 'syz.0.86': attribute type 29 has an invalid length. [ 70.379888][ T6284] netlink: 'syz.0.86': attribute type 2 has an invalid length. [ 70.533809][ T5981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.535236][ T6293] overlay: Unknown parameter 'dont_measure' [ 70.542913][ T831] usb 6-1: USB disconnect, device number 2 [ 70.564864][ T5981] usb 7-1: device descriptor read/8, error -71 [ 70.805177][ T5981] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.825034][ T5981] usb 7-1: device descriptor read/8, error -71 [ 70.907103][ T6317] netlink: 'syz.0.97': attribute type 3 has an invalid length. [ 70.934031][ T5981] usb usb7-port1: unable to enumerate USB device [ 71.244054][ T1467] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.426053][ T1467] usb 8-1: unable to get BOS descriptor or descriptor too short [ 71.431716][ T1467] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 71.435545][ T1467] usb 8-1: can't read configurations, error -71 [ 71.704257][ T5937] Bluetooth: hci2: command tx timeout [ 71.715041][ T5937] Bluetooth: hci0: command tx timeout [ 71.715052][ T63] Bluetooth: hci1: command tx timeout [ 71.866299][ T6391] overlayfs: failed to clone upperpath [ 71.882093][ T6391] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 72.144507][ T6407] __nla_validate_parse: 15 callbacks suppressed [ 72.144522][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 72.150168][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 72.158756][ T6407] IPVS: set_ctl: invalid protocol: 114 172.30.1.1:20002 [ 72.257475][ T6418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.266306][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 72.269701][ T6418] tipc: Started in network mode [ 72.271805][ T6418] tipc: Node identity , cluster identity 4711 [ 72.275955][ T6418] tipc: Failed to obtain node identity [ 72.278618][ T6418] tipc: Enabling of bearer rejected, failed to enable media [ 72.335224][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 72.364684][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 72.371682][ T6430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.374441][ T6430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.377025][ T6430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.379469][ T6430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.381604][ T6430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.383771][ T6430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.386211][ T6430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.388686][ T6430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.390933][ T6430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.511521][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 72.515657][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 72.519314][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 72.522165][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 72.598073][ T6440] warning: `syz.3.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.622595][ T6445] xt_hashlimit: size too large, truncated to 1048576 [ 72.671160][ T6309] usblp0: removed [ 72.740225][ T6463] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 72.767574][ T6466] mmap: syz.3.142 (6466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.856066][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 72.865781][ T6473] tmpfs: Bad value for 'nr_inodes' [ 74.840647][ T6504] trusted_key: encrypted_key: keyword 'nTw' not recognized [ 74.905082][ T6514] net_ratelimit: 15 callbacks suppressed [ 74.905094][ T6514] TC_ACT_REPEAT abuse ? [ 74.912850][ T40] kauditd_printk_skb: 181 callbacks suppressed [ 74.912869][ T40] audit: type=1400 audit(1775115354.911:374): avc: denied { create } for pid=6513 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.927539][ T40] audit: type=1400 audit(1775115354.921:375): avc: denied { write } for pid=6513 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.990945][ T40] audit: type=1400 audit(1775115355.001:376): avc: denied { setopt } for pid=6519 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.992024][ T6523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.090418][ T40] audit: type=1400 audit(1775115355.101:377): avc: denied { setopt } for pid=6530 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.100966][ T40] audit: type=1400 audit(1775115355.101:378): avc: denied { getopt } for pid=6530 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.107263][ T40] audit: type=1400 audit(1775115355.101:379): avc: denied { write } for pid=6530 comm="syz.3.161" path="socket:[11790]" dev="sockfs" ino=11790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.161973][ T6536] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 75.165192][ T6536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.170788][ T6536] vhci_hcd vhci_hcd.0: Device attached [ 75.227065][ T40] audit: type=1400 audit(1775115355.241:380): avc: denied { read } for pid=6535 comm="syz.3.162" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.237255][ T40] audit: type=1400 audit(1775115355.241:381): avc: denied { open } for pid=6535 comm="syz.3.162" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.247563][ T40] audit: type=1400 audit(1775115355.241:382): avc: denied { ioctl } for pid=6535 comm="syz.3.162" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.256214][ T40] audit: type=1400 audit(1775115355.241:383): avc: denied { bind } for pid=6535 comm="syz.3.162" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.455980][ T55] usb 44-1: SetAddress Request (2) to port 0 [ 75.458286][ T55] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.519966][ T6550] syz.1.166 uses obsolete (PF_INET,SOCK_PACKET) [ 75.779903][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.783118][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.790753][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.795221][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.798580][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.800952][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.804079][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.807467][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.811534][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.820081][ T71] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.831278][ T71] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 75.882833][ T6563] fido_id[6563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.884939][ T6559] bond2: (slave bond_slave_1): Device is not our slave [ 75.890809][ T6559] bond2: option active_slave: invalid value (bond_slave_1) [ 75.896378][ T6559] bond2 (unregistering): Released all slaves [ 75.916852][ T6553] kvm: MONITOR instruction emulated as NOP! [ 75.925413][ T6553] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 75.927774][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.979191][ T6537] vhci_hcd: connection reset by peer [ 75.985419][ T105] vhci_hcd vhci_hcd.3: stop threads [ 75.988574][ T105] vhci_hcd vhci_hcd.3: release socket [ 76.000941][ T105] vhci_hcd vhci_hcd.3: disconnect device [ 76.368741][ T6591] sctp: [Deprecated]: syz.1.176 (pid 6591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.368741][ T6591] Use struct sctp_sack_info instead [ 76.476844][ T6594] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 76.478971][ T6594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.482247][ T6594] vhci_hcd vhci_hcd.0: Device attached [ 76.668392][ T6600] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 76.668533][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.675278][ T6600] veth0_macvtap: left promiscuous mode [ 76.710414][ T6595] vhci_hcd: connection closed [ 76.714387][ T155] vhci_hcd vhci_hcd.1: stop threads [ 76.718633][ T155] vhci_hcd vhci_hcd.1: release socket [ 76.723708][ T155] vhci_hcd vhci_hcd.1: disconnect device [ 76.737090][ T6605] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 76.743963][ T5988] usb 40-1: enqueue for inactive port 0 [ 76.879798][ T6613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.883300][ T6613] block device autoloading is deprecated and will be removed. [ 77.254241][ T5988] usb usb40-port1: attempt power cycle [ 77.713887][ T71] IPVS: starting estimator thread 0... [ 77.801467][ T6635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6635 comm=syz.3.190 [ 77.805705][ T6637] IPVS: using max 44 ests per chain, 105600 per kthread [ 77.808514][ T6635] IPVS: sh: FWM 3 0x00000003 - no destination available [ 77.811601][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 77.814409][ T5988] usb usb40-port1: unable to enumerate USB device [ 78.208967][ T6663] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.214684][ T6666] __nla_validate_parse: 1 callbacks suppressed [ 78.214696][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 78.223292][ T6666] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 78.232587][ T6666] tipc: Can't bind to reserved service type 0 [ 78.264338][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 78.267447][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 78.301333][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 78.308045][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 78.312252][ T6671] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'. [ 78.362825][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 78.390068][ T6680] /dev/sg0: Can't lookup blockdev [ 78.595677][ T6702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 78.606158][ T6705] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 78.707930][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 78.997761][ T6731] 9pnet_virtio: no channels available for device ./file0 [ 79.149774][ T6736] bond2: (slave vlan0): Enslaving as a backup interface with an up link [ 79.195858][ T24] cfg80211: failed to load regulatory.db [ 79.235489][ T6741] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 79.240213][ T6741] overlayfs: conflicting options: userxattr,redirect_dir=on [ 79.433118][ T6748] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 79.530701][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 79.642347][ T6757] tipc: Started in network mode [ 79.644856][ T6757] tipc: Node identity , cluster identity 4 [ 79.647455][ T6757] tipc: Failed to set node id, please configure manually [ 79.651195][ T6757] tipc: Enabling of bearer rejected, failed to enable media [ 79.720997][ T6759] capability: warning: `syz.0.226' uses deprecated v2 capabilities in a way that may be insecure [ 79.973811][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 79.973828][ T40] audit: type=1400 audit(1775115359.981:444): avc: denied { write } for pid=6767 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.071927][ T6776] trusted_key: syz.0.234 sent an empty control message without MSG_MORE. [ 80.140554][ T40] audit: type=1400 audit(1775115360.151:445): avc: denied { mount } for pid=6787 comm="syz.2.237" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.141632][ T6788] loop9: detected capacity change from 0 to 7 [ 80.154523][ T40] audit: type=1400 audit(1775115360.151:446): avc: denied { remount } for pid=6787 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.165271][ T6788] Dev loop9: unable to read RDB block 7 [ 80.168005][ T6788] loop9: unable to read partition table [ 80.170554][ T6788] loop9: partition table beyond EOD, truncated [ 80.191354][ T6788] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 80.253694][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.360597][ T40] audit: type=1400 audit(1775115360.371:447): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.393361][ T40] audit: type=1400 audit(1775115360.401:448): avc: denied { accept } for pid=6795 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 80.434288][ T29] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 80.438054][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.441031][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.445634][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.448904][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.451717][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.455562][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.459059][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.462277][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.468413][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.472555][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.477181][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.481695][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.485941][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.489465][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.493251][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.496485][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.498651][ T40] audit: type=1400 audit(1775115360.511:449): avc: denied { ioctl } for pid=6800 comm="syz.2.240" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.499427][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.508669][ T55] usb 44-1: device descriptor read/8, error -110 [ 80.515599][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.518761][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.522340][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.526335][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.529278][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.532060][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.536180][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.542119][ T29] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.545201][ T29] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.548007][ T29] usb 8-1: Product: syz [ 80.549359][ T29] usb 8-1: Manufacturer: syz [ 80.550862][ T29] usb 8-1: SerialNumber: syz [ 80.555962][ T29] usb 8-1: config 0 descriptor?? [ 80.566634][ T29] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 80.575929][ T6801] afs: Bad value for 'flock' [ 80.641208][ T40] audit: type=1400 audit(1775115360.651:450): avc: denied { create } for pid=6804 comm="syz.2.242" name="cpuacct.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.763449][ T34] usb 8-1: USB disconnect, device number 4 [ 80.767266][ T34] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 80.907066][ T55] usb usb44-port1: attempt power cycle [ 80.960155][ T6819] new mount options do not match the existing superblock, will be ignored [ 80.975881][ T6770] netlink: 76 bytes leftover after parsing attributes in process `syz.3.231'. [ 81.024304][ T6822] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 81.035135][ T40] audit: type=1400 audit(1775115361.051:451): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.116753][ T6827] binder: 6824:6827 ioctl 4008586f 200000000080 returned -22 [ 81.123238][ T6827] binder: 6824:6827 ioctl c018620c 200000000200 returned -1 [ 81.293831][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.445251][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.449084][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.452830][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.457388][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.460243][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.476973][ T24] usb 7-1: config 0 descriptor?? [ 81.477536][ T55] usb usb44-port1: unable to enumerate USB device [ 81.587955][ T29] libceph: connect (1)[c::]:6789 error -101 [ 81.590264][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 81.640808][ T29] libceph: connect (1)[c::]:6789 error -101 [ 81.643287][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 81.845489][ T29] libceph: connect (1)[c::]:6789 error -101 [ 81.848281][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 81.899422][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.904896][ T29] libceph: connect (1)[c::]:6789 error -101 [ 81.907720][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 82.202766][ T6853] ip6tnl1: entered promiscuous mode [ 82.364245][ T29] libceph: connect (1)[c::]:6789 error -101 [ 82.366779][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 82.394567][ T40] audit: type=1400 audit(1775115362.411:452): avc: denied { accept } for pid=6854 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.410923][ T6838] ceph: No mds server is up or the cluster is laggy [ 82.410971][ T6842] ceph: No mds server is up or the cluster is laggy [ 82.424759][ T29] libceph: connect (1)[c::]:6789 error -101 [ 82.426967][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 82.587072][ T6866] dummy0: entered allmulticast mode [ 82.593095][ T40] audit: type=1400 audit(1775115362.601:453): avc: denied { create } for pid=6865 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.671261][ T6870] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 82.676222][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 82.679447][ T6872] netlink: 'syz.0.260': attribute type 30 has an invalid length. [ 82.682393][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 82.730113][ T6870] nfs: Unknown parameter './file0' [ 83.308711][ T6899] __nla_validate_parse: 1 callbacks suppressed [ 83.308729][ T6899] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.268'. [ 83.390670][ T6904] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 83.477987][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 83.481901][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 83.484968][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 83.485066][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.272'. [ 83.487618][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 83.492408][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.272'. [ 83.495808][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 83.501112][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 83.694399][ T6925] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 83.703269][ T6925] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.277'. [ 83.768610][ T6929] capability: warning: `syz.2.279' uses 32-bit capabilities (legacy support in use) [ 83.965215][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 83.972712][ T6943] ip6gretap0: entered promiscuous mode [ 83.976508][ T6943] macsec1: entered promiscuous mode [ 83.978646][ T6943] macsec1: entered allmulticast mode [ 83.980364][ T6943] ip6gretap0: entered allmulticast mode [ 83.984944][ T6943] ip6gretap0: left allmulticast mode [ 83.986765][ T6943] ip6gretap0: left promiscuous mode [ 84.008753][ T6282] usb 7-1: USB disconnect, device number 6 [ 84.459207][ T6964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.530965][ T6970] sctp: [Deprecated]: syz.2.292 (pid 6970) Use of int in max_burst socket option. [ 84.530965][ T6970] Use struct sctp_assoc_value instead [ 84.546194][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 84.568177][ T6966] macvlan2: entered promiscuous mode [ 84.658093][ T6977] : renamed from lo (while UP) [ 84.728158][ T6986] 9pnet_virtio: no channels available for device syz [ 84.803677][ T6992] fuse: Bad value for 'group_id' [ 84.806298][ T6992] fuse: Bad value for 'group_id' [ 84.923847][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.009682][ T7007] xt_hashlimit: overflow, rate too high: 0 [ 85.042125][ T7010] exFAT-fs (nbd2): unable to read boot sector [ 85.044390][ T7010] exFAT-fs (nbd2): failed to read boot sector [ 85.047519][ T7010] exFAT-fs (nbd2): failed to recognize exfat type [ 85.072786][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 85.072801][ T40] audit: type=1400 audit(1775115365.081:469): avc: denied { create } for pid=7011 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.094505][ T6989] nbd0: detected capacity change from 0 to 63 [ 85.103175][ T5937] block nbd0: Receive control failed (result -32) [ 85.103247][ T63] block nbd0: Receive control failed (result -32) [ 85.103276][ T5946] block nbd0: Send control failed (result -32) [ 85.107160][ T5288] block nbd0: Receive control failed (result -32) [ 85.124087][ T5946] block nbd0: Request send failed, requeueing [ 85.130769][ T2119] block nbd0: Dead connection, failed to find a fallback [ 85.134804][ T2119] block nbd0: shutting down sockets [ 85.137868][ T2119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.142796][ T2119] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.146536][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.148273][ T7016] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 85.150720][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.157274][ T5946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.160501][ T5946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.160693][ T40] audit: type=1400 audit(1775115365.171:470): avc: denied { map } for pid=7017 comm="syz.3.309" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.163580][ T5946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.178250][ T5946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.180364][ T40] audit: type=1400 audit(1775115365.191:471): avc: denied { ioctl } for pid=7019 comm="syz.0.308" path="socket:[15555]" dev="sockfs" ino=15555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.182251][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.193413][ T40] audit: type=1400 audit(1775115365.211:472): avc: denied { bind } for pid=7019 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.197517][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.207339][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.210499][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.213010][ T5946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.215989][ T5946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.218455][ T5946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.221523][ T5946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.224484][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.228022][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.230578][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.242409][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.246304][ T5946] ldm_validate_partition_table(): Disk read failed. [ 85.248805][ T5946] Dev nbd0: unable to read RDB block 0 [ 85.251437][ T5946] nbd0: unable to read partition table [ 85.260383][ T5946] ldm_validate_partition_table(): Disk read failed. [ 85.263227][ T5946] Dev nbd0: unable to read RDB block 0 [ 85.267140][ T5946] nbd0: unable to read partition table [ 85.270520][ T40] audit: type=1400 audit(1775115365.281:473): avc: denied { connect } for pid=7024 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.270956][ T7025] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 85.278484][ T7027] futex_wake_op: syz.2.312 tries to shift op by -1; fix this program [ 85.302791][ T40] audit: type=1800 audit(1775115365.311:474): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.313" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 85.303760][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.312631][ T40] audit: type=1400 audit(1775115365.321:475): avc: denied { getopt } for pid=7029 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.315222][ T7030] No control pipe specified [ 85.350111][ T40] audit: type=1400 audit(1775115365.361:476): avc: denied { write } for pid=7036 comm="syz.2.315" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 85.423434][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 85.427772][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 85.432214][ T7057] wireguard0: entered allmulticast mode [ 85.501986][ T7069] netlink: 208 bytes leftover after parsing attributes in process `syz.0.325'. [ 85.520760][ T40] audit: type=1400 audit(1775115365.531:477): avc: denied { name_bind } for pid=7073 comm="syz.2.327" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.597024][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 85.729318][ T40] audit: type=1400 audit(1775115365.741:478): avc: denied { write } for pid=7091 comm="syz.2.333" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.794344][ T7102] netlink: 'syz.0.335': attribute type 39 has an invalid length. [ 85.941984][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.959993][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.146970][ T7105] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 86.155144][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.362999][ T7141] 9p: Bad value for 'rfdno' [ 86.367748][ T7141] xt_hashlimit: size too large, truncated to 1048576 [ 86.533331][ T7147] affs: No valid root block on device nullb0 [ 86.555944][ T7147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.749844][ T7132] syz.1.344 (7132): drop_caches: 2 [ 86.881860][ T7165] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.886545][ T7165] program syz.1.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.035423][ T7187] netlink: 'syz.0.362': attribute type 21 has an invalid length. [ 87.044086][ T7187] ipvlan2: entered allmulticast mode [ 87.046359][ T7187] vlan1: entered allmulticast mode [ 87.048557][ T7187] veth0_vlan: entered allmulticast mode [ 87.102571][ T7190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.108344][ T7190] netlink: 'syz.0.363': attribute type 4 has an invalid length. [ 87.114818][ T7190] .`: renamed from bond0 (while UP) [ 87.374657][ T1125] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 87.378952][ T1125] sr 2:0:0:0: [sr0] tag#14 Sense Key : Illegal Request [current] [ 87.382143][ T1125] sr 2:0:0:0: [sr0] tag#14 Add. Sense: Invalid command operation code [ 87.386291][ T1125] sr 2:0:0:0: [sr0] tag#14 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 87.935085][ T7233] virtio-fs: tag not found [ 87.937962][ T7233] netlink: 'syz.2.378': attribute type 39 has an invalid length. [ 88.183852][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 88.187310][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.252230][ T7247] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 88.255251][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.258881][ T7247] openvswitch: netlink: Multiple metadata blocks provided [ 88.263229][ T7249] batadv_slave_0: entered promiscuous mode [ 88.266217][ T7249] batadv_slave_0: entered allmulticast mode [ 88.275748][ T7249] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 88.315340][ T7252] __nla_validate_parse: 9 callbacks suppressed [ 88.315353][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 88.322578][ T7253] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 88.327230][ T7252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.385'. [ 88.332193][ T7252] 9pnet_virtio: no channels available for device /dev/nbd2 [ 88.366576][ T7255] nbd: must specify a device to reconfigure [ 88.370135][ T7255] nft_compat: unsupported protocol 0 [ 88.371395][ T7256] nft_compat: unsupported protocol 0 [ 88.448844][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 88.473110][ T7269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7269 comm=syz.0.392 [ 88.579671][ T7288] autofs: Unknown parameter '/dev/kvm' [ 88.612215][ T7288] program syz.3.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.093737][ T6282] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.257266][ T6282] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 89.260162][ T6282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.263705][ T6282] usb 8-1: Product: syz [ 89.265715][ T6282] usb 8-1: Manufacturer: syz [ 89.267505][ T6282] usb 8-1: SerialNumber: syz [ 89.272313][ T6282] usb 8-1: config 0 descriptor?? [ 89.310571][ T7296] set match dimension is over the limit! [ 89.312984][ T7296] netlink: 80 bytes leftover after parsing attributes in process `syz.0.401'. [ 89.351018][ T7299] overlayfs: failed to clone upperpath [ 89.481401][ T7294] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 89.486619][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.400'. [ 89.498062][ T7294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=253 sclass=netlink_route_socket pid=7294 comm=syz.3.400 [ 89.505592][ T55] usb 8-1: USB disconnect, device number 5 [ 90.005824][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 90.010820][ T7317] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 90.051024][ T7321] IPVS: set_ctl: invalid protocol: 47 10.1.1.3:20002 [ 90.053334][ T7320] IPVS: set_ctl: invalid protocol: 47 10.1.1.3:20002 [ 90.132793][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 90.132811][ T40] audit: type=1400 audit(1775115370.141:499): avc: denied { setopt } for pid=7332 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.238400][ T40] audit: type=1400 audit(1775115370.251:500): avc: denied { ioctl } for pid=7342 comm="syz.2.415" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.303285][ T40] audit: type=1400 audit(1775115370.311:501): avc: denied { bind } for pid=7342 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.384251][ T40] audit: type=1400 audit(1775115370.401:502): avc: denied { read } for pid=7352 comm="syz.2.418" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.394436][ T40] audit: type=1400 audit(1775115370.401:503): avc: denied { open } for pid=7352 comm="syz.2.418" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.438122][ T40] audit: type=1400 audit(1775115370.451:504): avc: denied { execute } for pid=7352 comm="syz.2.418" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.576275][ T40] audit: type=1400 audit(1775115370.591:505): avc: denied { create } for pid=7355 comm="syz.2.419" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.585166][ T40] audit: type=1400 audit(1775115370.591:506): avc: denied { mounton } for pid=7355 comm="syz.2.419" path="/105/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.776958][ T40] audit: type=1400 audit(1775115370.791:507): avc: denied { write } for pid=7359 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.783562][ T7360] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 90.826009][ T7362] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.919521][ T40] audit: type=1400 audit(1775115370.931:508): avc: denied { setopt } for pid=7363 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.983223][ T7367] infiniband sy1: set active [ 90.985759][ T7367] infiniband sy1: added bond0 [ 91.012851][ T7367] RDS/IB: sy1: added [ 91.017213][ T7367] smc: adding ib device sy1 with port count 1 [ 91.017917][ T7381] netlink: 14 bytes leftover after parsing attributes in process `syz.2.423'. [ 91.019714][ T7367] smc: ib device sy1 port 1 has no pnetid [ 91.126001][ T7377] mac80211_hwsim hwsim7 4: renamed from wlan1 (while UP) [ 91.145993][ T7381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.152628][ T7381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.157857][ T7381] bond0 (unregistering): Released all slaves [ 91.163442][ T105] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.169118][ T105] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.171968][ T105] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.177497][ T105] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.215539][ T7388] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 91.218161][ T7388] netlink: 192 bytes leftover after parsing attributes in process `syz.3.429'. [ 91.302338][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.431'. [ 91.316157][ T7409] openvswitch: netlink: Invalid VLAN frame [ 91.370347][ T7413] batman_adv: batadv0: Adding interface: dummy0 [ 91.372536][ T7413] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.382872][ T7413] batman_adv: batadv0: Interface activated: dummy0 [ 91.521560][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 91.524853][ T7433] netlink: 'syz.0.444': attribute type 7 has an invalid length. [ 91.888452][ T155] smc: removing ib device sy1 [ 91.920993][ T7468] kAFS: No cell specified [ 91.921015][ T5972] IPVS: starting estimator thread 0... [ 91.955870][ T7474] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 92.013805][ T7471] IPVS: using max 44 ests per chain, 105600 per kthread [ 92.205194][ T7492] delete_channel: no stack [ 92.237986][ T7495] bond0: (slave nr0): Error: Device can not be enslaved while up [ 92.315644][ T7502] netlink: 'syz.0.461': attribute type 5 has an invalid length. [ 92.325350][ T7504] netlink: 'syz.1.460': attribute type 13 has an invalid length. [ 92.335946][ T7502] ip6erspan0: entered promiscuous mode [ 92.393566][ T7504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=7504 comm=syz.1.460 [ 92.425266][ T7510] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 92.496469][ T7516] tmpfs: Bad value for 'mpol' [ 92.792070][ T7537] xt_hashlimit: overflow, rate too high: 0 [ 92.821948][ T7539] overlay: ./file1 is not a directory [ 92.848985][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.854724][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.859621][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.864743][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.871245][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.017555][ T7556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.028323][ T7543] chnl_net:caif_netlink_parms(): no params data found [ 93.104524][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.107207][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.110147][ T7543] bridge_slave_0: entered allmulticast mode [ 93.113991][ T7543] bridge_slave_0: entered promiscuous mode [ 93.117580][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.120124][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.123570][ T7543] bridge_slave_1: entered allmulticast mode [ 93.127849][ T7543] bridge_slave_1: entered promiscuous mode [ 93.156095][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.164060][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.186207][ T7543] team0: Port device team_slave_0 added [ 93.189461][ T7543] team0: Port device team_slave_1 added [ 93.206158][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.208788][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.219730][ T7543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.225258][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.228335][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.238489][ T7543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.274282][ T7543] hsr_slave_0: entered promiscuous mode [ 93.276700][ T7543] hsr_slave_1: entered promiscuous mode [ 93.279382][ T7543] debugfs: 'hsr0' already exists in 'hsr' [ 93.281702][ T7543] Cannot create hsr debugfs directory [ 93.385260][ T7543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.389929][ T7543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.395471][ T7543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.399693][ T7543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.426979][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566af400: rx timeout, send abort [ 93.445997][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.458656][ T7543] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.464672][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.468179][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.477417][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.480095][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.518239][ T7543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.617340][ T7543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.741374][ T7596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.748257][ T7600] overlayfs: failed to clone upperpath [ 93.762815][ T7543] veth0_vlan: entered promiscuous mode [ 93.771730][ T7543] veth1_vlan: entered promiscuous mode [ 93.795605][ T7543] veth0_macvtap: entered promiscuous mode [ 93.800490][ T7543] veth1_macvtap: entered promiscuous mode [ 93.811123][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.819495][ T7543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.825311][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829362][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837166][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840406][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897313][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.900005][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.922176][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.925656][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.931530][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566af400: abort rx timeout. Force session deactivation [ 94.050129][ T7636] __nla_validate_parse: 8 callbacks suppressed [ 94.050144][ T7636] netlink: 868 bytes leftover after parsing attributes in process `syz.0.493'. [ 94.095181][ T7640] syzkaller1: entered promiscuous mode [ 94.097862][ T7640] syzkaller1: entered allmulticast mode [ 94.117664][ T7640] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 94.225244][ T7647] netlink: 108 bytes leftover after parsing attributes in process `syz.4.499'. [ 94.264442][ T7653] netlink: 44 bytes leftover after parsing attributes in process `syz.2.501'. [ 94.310571][ T7657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7657 comm=syz.4.503 [ 94.640222][ T7678] netlink: 'syz.1.508': attribute type 21 has an invalid length. [ 94.643471][ T7678] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.652778][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'. [ 94.788511][ T7684] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 94.797289][ T7684] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 94.801485][ T7684] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 94.806897][ T7684] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 94.814931][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 94.818373][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 94.831610][ T7684] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 94.915411][ T5937] Bluetooth: hci1: command tx timeout [ 94.947709][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 94.951339][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 95.230905][ T7717] netlink: 'syz.0.521': attribute type 11 has an invalid length. [ 95.237016][ T7717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.521'. [ 95.249023][ T7717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=253 sclass=netlink_route_socket pid=7717 comm=syz.0.521 [ 95.443719][ T6282] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.447941][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 95.447952][ T40] audit: type=1400 audit(1775115375.461:542): avc: denied { map } for pid=7718 comm="syz.1.522" path="socket:[19673]" dev="sockfs" ino=19673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 95.593826][ T6282] usb 9-1: Using ep0 maxpacket: 8 [ 95.597206][ T6282] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.601009][ T6282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.612546][ T6282] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.615421][ T6282] pvrusb2: ********** [ 95.616744][ T6282] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.620716][ T6282] pvrusb2: Important functionality might not be entirely working. [ 95.624604][ T6282] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.628939][ T6282] pvrusb2: ********** [ 95.811534][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.813731][ T2490] pvrusb2: Invalid write control endpoint [ 95.823138][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.843209][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.850949][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.854334][ T2490] pvrusb2: Invalid write control endpoint [ 95.858219][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 95.863407][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 95.867656][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 95.871435][ T2490] pvrusb2: Device being rendered inoperable [ 95.877700][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 95.880377][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 95.886264][ T2490] pvrusb2: Attached sub-driver cx25840 [ 95.888402][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 95.891840][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 95.974069][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 96.015117][ T10] usb 9-1: USB disconnect, device number 2 [ 96.034865][ T7762] dlm: Unknown command passed to DLM device : 33 [ 96.034865][ T7762] [ 96.158835][ T7773] openvswitch: netlink: EtherType 50a is less than min 600 [ 96.159298][ T7774] openvswitch: netlink: EtherType 50a is less than min 600 [ 96.594478][ C2] ------------[ cut here ]------------ [ 96.597334][ C2] sk->sk_forward_alloc [ 96.597347][ C2] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x653/0x800, CPU#2: swapper/2/0 [ 96.603088][ C2] Modules linked in: [ 96.605774][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.610626][ C2] Tainted: [L]=SOFTLOCKUP [ 96.612512][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.616787][ C2] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 96.619242][ C2] Code: e3 4e ff e9 06 fd ff ff e8 7a 49 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 6c 49 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 5e 49 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 50 49 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 96.628036][ C2] RSP: 0018:ffffc90000648d98 EFLAGS: 00010246 [ 96.630625][ C2] RAX: 0000000000000000 RBX: ffff88803ed87700 RCX: ffffffff8a09b2c7 [ 96.633331][ C2] RDX: ffff88801eaf4980 RSI: ffffffff8a09b3c2 RDI: ffff88801eaf4980 [ 96.635898][ C2] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 96.638971][ C2] R10: 0000000000000090 R11: 000000000000aa14 R12: ffff88803ed87700 [ 96.642258][ C2] R13: ffff88803ed87790 R14: ffffffff81eebc9d R15: 0000000000000001 [ 96.645498][ C2] FS: 0000000000000000(0000) GS:ffff8880d653c000(0000) knlGS:0000000000000000 [ 96.648916][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.651447][ C2] CR2: 00007fea831e9f00 CR3: 000000002d993000 CR4: 0000000000352ef0 [ 96.654154][ C2] Call Trace: [ 96.655268][ C2] [ 96.656241][ C2] ? __pfx_udp_destruct_sock+0x10/0x10 [ 96.658015][ C2] ? rcu_core+0x59d/0x10d0 [ 96.659540][ C2] __sk_destruct+0x85/0xbb0 [ 96.661397][ C2] ? rcu_core+0x59d/0x10d0 [ 96.663544][ C2] rcu_core+0x5a2/0x10d0 [ 96.665692][ C2] ? __pfx_rcu_core+0x10/0x10 [ 96.667514][ C2] ? ktime_get+0x1a7/0x300 [ 96.669414][ C2] handle_softirqs+0x1eb/0x9e0 [ 96.671063][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 96.673007][ C2] __irq_exit_rcu+0xef/0x150 [ 96.674564][ C2] irq_exit_rcu+0x9/0x30 [ 96.675902][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.677689][ C2] [ 96.678619][ C2] [ 96.679598][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.681527][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 96.683653][ C2] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 96.690020][ C2] RSP: 0018:ffffc90000187df0 EFLAGS: 00000202 [ 96.692000][ C2] RAX: 0000000000096f51 RBX: ffff88801eaf4980 RCX: ffffffff8b90fc75 [ 96.694492][ C2] RDX: 0000000000000000 RSI: ffffffff8de79dfe RDI: ffffffff8c1b1a20 [ 96.697059][ C2] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4c679d [ 96.699481][ C2] R10: ffff88806a633ceb R11: 0000000000000000 R12: 0000000000000002 [ 96.701937][ C2] R13: ffffed1003d5e930 R14: 0000000000000002 R15: ffffffff90d9c710 [ 96.704428][ C2] ? ct_kernel_exit+0x125/0x180 [ 96.705962][ C2] default_idle+0x9/0x10 [ 96.707637][ C2] default_idle_call+0x6c/0xb0 [ 96.710064][ C2] do_idle+0x464/0x590 [ 96.711860][ C2] ? __pfx_do_idle+0x10/0x10 [ 96.713394][ C2] ? rcu_is_watching+0x12/0xc0 [ 96.715117][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.717047][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 96.718665][ C2] cpu_startup_entry+0x4f/0x60 [ 96.720204][ C2] start_secondary+0x21d/0x2d0 [ 96.721724][ C2] ? __pfx_start_secondary+0x10/0x10 [ 96.723450][ C2] common_startup_64+0x13e/0x148 [ 96.725293][ C2] [ 96.726345][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.728750][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.732920][ C2] Tainted: [L]=SOFTLOCKUP [ 96.734725][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.738327][ C2] Call Trace: [ 96.739393][ C2] [ 96.740323][ C2] dump_stack_lvl+0x100/0x190 [ 96.741857][ C2] vpanic+0x552/0x970 [ 96.743184][ C2] ? __pfx_vpanic+0x10/0x10 [ 96.744813][ C2] panic+0xd1/0xe0 [ 96.746144][ C2] ? __pfx_panic+0x10/0x10 [ 96.747849][ C2] ? check_panic_on_warn+0x1f/0x90 [ 96.749694][ C2] check_panic_on_warn.cold+0x19/0x34 [ 96.751493][ C2] ? inet_sock_destruct+0x653/0x800 [ 96.753192][ C2] __warn.cold+0x191/0x348 [ 96.754629][ C2] __report_bug+0x296/0x3d0 [ 96.756084][ C2] ? inet_sock_destruct+0x653/0x800 [ 96.757807][ C2] ? __pfx___report_bug+0x10/0x10 [ 96.759526][ C2] ? start_secondary+0x21d/0x2d0 [ 96.761303][ C2] ? common_startup_64+0x13e/0x148 [ 96.763097][ C2] ? inet_sock_destruct+0x653/0x800 [ 96.764798][ C2] report_bug+0xb2/0x220 [ 96.766152][ C2] ? inet_sock_destruct+0x653/0x800 [ 96.767799][ C2] handle_bug+0x16a/0x2a0 [ 96.769216][ C2] exc_invalid_op+0x17/0x50 [ 96.770671][ C2] asm_exc_invalid_op+0x1a/0x20 [ 96.772347][ C2] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 96.774505][ C2] Code: e3 4e ff e9 06 fd ff ff e8 7a 49 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 6c 49 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 5e 49 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 50 49 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 96.780801][ C2] RSP: 0018:ffffc90000648d98 EFLAGS: 00010246 [ 96.782702][ C2] RAX: 0000000000000000 RBX: ffff88803ed87700 RCX: ffffffff8a09b2c7 [ 96.785809][ C2] RDX: ffff88801eaf4980 RSI: ffffffff8a09b3c2 RDI: ffff88801eaf4980 [ 96.788749][ C2] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 96.791339][ C2] R10: 0000000000000090 R11: 000000000000aa14 R12: ffff88803ed87700 [ 96.793866][ C2] R13: ffff88803ed87790 R14: ffffffff81eebc9d R15: 0000000000000001 [ 96.796408][ C2] ? rcu_core+0x59d/0x10d0 [ 96.797953][ C2] ? inet_sock_destruct+0x557/0x800 [ 96.799718][ C2] ? inet_sock_destruct+0x652/0x800 [ 96.801685][ C2] ? inet_sock_destruct+0x652/0x800 [ 96.803678][ C2] ? __pfx_udp_destruct_sock+0x10/0x10 [ 96.805652][ C2] ? rcu_core+0x59d/0x10d0 [ 96.807090][ C2] __sk_destruct+0x85/0xbb0 [ 96.808541][ C2] ? rcu_core+0x59d/0x10d0 [ 96.809996][ C2] rcu_core+0x5a2/0x10d0 [ 96.811477][ C2] ? __pfx_rcu_core+0x10/0x10 [ 96.813183][ C2] ? ktime_get+0x1a7/0x300 [ 96.814819][ C2] handle_softirqs+0x1eb/0x9e0 [ 96.816564][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 96.818397][ C2] __irq_exit_rcu+0xef/0x150 [ 96.819936][ C2] irq_exit_rcu+0x9/0x30 [ 96.821309][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.823099][ C2] [ 96.824058][ C2] [ 96.825062][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.827093][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 96.829323][ C2] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 96.835699][ C2] RSP: 0018:ffffc90000187df0 EFLAGS: 00000202 [ 96.837755][ C2] RAX: 0000000000096f51 RBX: ffff88801eaf4980 RCX: ffffffff8b90fc75 [ 96.840369][ C2] RDX: 0000000000000000 RSI: ffffffff8de79dfe RDI: ffffffff8c1b1a20 [ 96.842897][ C2] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d4c679d [ 96.845482][ C2] R10: ffff88806a633ceb R11: 0000000000000000 R12: 0000000000000002 [ 96.848761][ C2] R13: ffffed1003d5e930 R14: 0000000000000002 R15: ffffffff90d9c710 [ 96.852022][ C2] ? ct_kernel_exit+0x125/0x180 [ 96.853627][ C2] default_idle+0x9/0x10 [ 96.855053][ C2] default_idle_call+0x6c/0xb0 [ 96.856584][ C2] do_idle+0x464/0x590 [ 96.857949][ C2] ? __pfx_do_idle+0x10/0x10 [ 96.859439][ C2] ? rcu_is_watching+0x12/0xc0 [ 96.861091][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.863078][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 96.865123][ C2] cpu_startup_entry+0x4f/0x60 [ 96.866947][ C2] start_secondary+0x21d/0x2d0 [ 96.868716][ C2] ? __pfx_start_secondary+0x10/0x10 [ 96.870433][ C2] common_startup_64+0x13e/0x148 [ 96.872032][ C2] [ 96.873657][ C2] Kernel Offset: disabled [ 96.875149][ C2] Rebooting in 86400 seconds..