last executing test programs: 1m21.905175309s ago: executing program 2 (id=711): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x7, 0x80000001, 0x8, 0x200, 0xff, 0x6, 0x5, 0x100000000036, 0x8, 0xc], 0x0, 0x2a80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m21.684040587s ago: executing program 2 (id=713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) 1m21.683625133s ago: executing program 2 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1, 0x0, 0x34, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0xfffffffffffffffc, 0x44) r1 = inotify_init() openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x414000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4c, 0x1800007, 0x81, 0x4, 0xfff8, 0x0, 0x1000, 0x4000000000a, 0x4bfb, 0x4, 0x200000000002, 0xffff, 0x3, 0x5, 0x9, 0x100000090], 0x0, 0x28657}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r1, 0xffffffffffffffff, 0x0) 1m21.580687414s ago: executing program 2 (id=717): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000000180)) 1m21.483277874s ago: executing program 2 (id=720): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b66dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='0123:abcd:g', 0xb) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r4, 0x108000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x4e22, 0x4, @remote, 0xfff}, 0x1c) bind$inet6(r5, &(0x7f00000008c0)={0xa, 0x4e23, 0x80, @private0, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x200020, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cachetag={'cachetag', 0x3d, '\\-@(./'}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}}) 1m21.305138436s ago: executing program 2 (id=721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1m6.194753173s ago: executing program 32 (id=721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 23.864808483s ago: executing program 1 (id=1392): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 23.743134615s ago: executing program 1 (id=1398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x8, 0x0, r0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000004000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008e2359a9c21000036e65647137a427c748a3ef1b9dac001b3211fe45c75455481e32c971e4841150ec2c068ea89fe4162305d96ab0afde8473ad1d97d2dabf8882b0eed0e5821a7a0b2f0fa1321", @ANYRESOCT=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095", @ANYBLOB="e0fa17e2b324fd95c1286a25582a1856c16e96c0fb686860678e995d5bbe499fbba88e731a00910b22c2d329bd50d8a07ca359a5c61852a08b32641c91ebbe3470ec027748f666e383784712a306dc19f757d7b16ee2bb1132b802e366a932b6435a2fe85cce5788f168b5f526bbbe56054ce3d70f5605e5a45b08db3edfa7c8a2d82bc601ed1c0de3dd73d16db380cde64d79491edefef186a19d322f853b527ec4f914b33de3a9975d6ad1d853458754"], &(0x7f0000000300)='GPL\x00', 0x0, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 23.663717005s ago: executing program 1 (id=1401): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xcc4d, 0x8000, 0x2, 0x37e}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1c5, 0x9002, 0x1, 0x2c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a33, 0x8000, 0x3, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xadbc, 0x200, 0x1, 0x1d3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb4b, 0x8000, 0x1, 0x132}}], 0x4, &(0x7f0000003700)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x0, 0x394, 0x0, &(0x7f0000002700)=@buf_4k="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"}}, &(0x7f0000003780)) r1 = syz_ublk_setup_io_uring(0x237c, &(0x7f0000000200)={0x0, 0xc1dd, 0x4, 0x0, 0x6, 0x0, r0}, &(0x7f0000000280), &(0x7f00000005c0), &(0x7f0000000600)) r2 = io_uring_setup(0x39ff, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x3, 0x312, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbc3, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0xd, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 23.333819918s ago: executing program 1 (id=1407): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xed, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000003c0)={0x3, 0x30, 0xf2e2, 0xe, 0x83, 0x4, &(0x7f0000000300)="d5aeb994fd0d52d48c5a2a9b22084b8c875b01c13781315460d95ebd91e02f13e027dd84355f3d3105f5dc59f443ab3f0c51bbb342cd8223c90874dbbbd20c5bfcac72670cb4a8bbeb23b01501ffc5312df209edde3f354f874b85b3c2d6be6b0680694aaedc2fd5b97fd2bfc9d28e9e755b50e2a90b38fd85c0a62771e5104ab3f682"}) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000280)={0x0, 0x0, 0x73f0, 0x2}) 23.194489224s ago: executing program 1 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x44, 0x0, 0x0, 0x0, 0x0, 0x6, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') 22.193383753s ago: executing program 1 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x140070, &(0x7f0000000140)=ANY=[@ANYBLOB="75ff073c", @ANYRESDEC=r1, @ANYBLOB=',fscontext=sysadm_u,mask=MAY_EXEC,hash,permit_directio,\x00']) 22.040628021s ago: executing program 33 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x140070, &(0x7f0000000140)=ANY=[@ANYBLOB="75ff073c", @ANYRESDEC=r1, @ANYBLOB=',fscontext=sysadm_u,mask=MAY_EXEC,hash,permit_directio,\x00']) 7.291715411s ago: executing program 3 (id=1556): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 7.219307101s ago: executing program 3 (id=1559): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0xf, 0x7, 0x7, 0x8, 0x4}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x800, &(0x7f00000003c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000400)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r1, 0x0, 0x0, 0x8000000000}]) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x3, r3, 0x0, 0x0, 0x8}]) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x14d000) 5.105243246s ago: executing program 3 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:ksm_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3ff}, 0x46) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r4 = dup3(r1, r3, 0x80000) r5 = dup(r4) r6 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r6, 0x0, 0x5, 0x0, &(0x7f0000000140)) pwrite64(r1, &(0x7f0000000040)='F', 0x1, 0x4) read(r5, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r2, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000200)) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x122) 2.357156701s ago: executing program 4 (id=1608): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)) 2.249214269s ago: executing program 4 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1e0000610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b15, 0x0) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='f2fs\x00', 0x0, &(0x7f0000000140)='grpquota') 1.960241782s ago: executing program 5 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1af) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0000809000026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x4d, 0xd832}}) r5 = syz_open_dev$evdev(&(0x7f0000001900), 0x4000000000003, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000000)=0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) 1.792856031s ago: executing program 5 (id=1619): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1422010000000300240012171200000008000b00", @ANYRES32=0x0, @ANYBLOB="0500010006000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x60003, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r13 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x6, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x4, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6, 0x0, 0x6}, @loopback, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) write$tun(r10, &(0x7f0000000500)=ANY=[], 0x20) write(r9, &(0x7f0000000300)="97eb51", 0x3) 1.494248083s ago: executing program 3 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:ksm_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x3ff}, 0x46) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1) r4 = dup3(r1, r3, 0x80000) r5 = dup(r4) r6 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r6, 0x0, 0x5, 0x0, &(0x7f0000000140)) pwrite64(r1, &(0x7f0000000040)='F', 0x1, 0x4) read(r5, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r2, 0x0, &(0x7f0000000580)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000200)) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x122) 1.433251498s ago: executing program 5 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./bus\x00', 0x20000000) 1.344337371s ago: executing program 5 (id=1621): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r7, 0x448e, 0x96c9, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd61ac5c0600442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be000000000086dd88a888be"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000007bc0)=""/4087, 0xff7}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) 978.131641ms ago: executing program 5 (id=1622): sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4b53bc6d85bf1a06533f04089a401c6a2cfbd0371220ca9c1d843f7bb3df6d57bbac6e0eab61c3e2382af3f570774b7235b8a80f9a7c9671145360b8865fe649c259248bcb23be974347adf616340aa88fc94b20cc6f12cc777a63a16669abd4b88f467a73d05d6ed5a9d3ecb071a175d34ea96ea0c1fb702f18567c88b1a2aab5f8d1161772740a08e8ffa614931a7d8636ed35d781e6a48d416ab3b1e9e35a1b6edfff3046dfd504740cfc1c7a719800a77fe9bbb78e1114d1a78833cf36466fdf4028988ec608fe774794204fc1130115bb1bd204cc56adb3017a949a39"], 0x10}}], 0x1, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={r4, 0x10, "7be1949f895c4b102a89170ea215c836"}, &(0x7f0000000480)=0x18) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="7ab5d8f6158fa2c15b8a22527cc13cedf924b41f5fcac07919b33237dc0d47e44d8b243b9a447b555b995c49a922a0f88a00072e4fac647262256fc4042ee52d389ab090e45749992f50c3ecf4e2e94691d281e7a3febb71e2efc456abce3f9742aa9b7791f020", 0x67}, {&(0x7f0000000200)="8877e60fd948cb3cc4aa1416cee9a78af785259fbc85218687e86396f91cbc8cf6159d65e2a4d4ca520c800dc085dff8313bd887ba7adbb38c502ad5e34d718523db06b8e4386c8804db34c6b8edca414c682a6c0acac0afb10284715bf87719bc29e9a472fde8496c3b0206c0ba04541190b9b02f9be93b949185fc8b", 0x7d}], 0x2}, 0x4000000) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x30) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r7, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr, @dev}, &(0x7f0000000700)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe8, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xe8}}, 0x81) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 866.408612ms ago: executing program 0 (id=1623): r0 = epoll_create(0x40) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x19}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)={r1, 0x6de, 0x3, "0e5da8b0751ec167f04b78bb8eebc8beccd981837b4fa4ef07bc1b6c509c8f493fb955ccceddc7301f6810a1569b9ee69d6c4a1e58657e30101d1a62923b74987eebcfeb8353a02fd05f8fd8312b32a00211c26719826b692a8760b6e40a9850e51d164803c466921345772b3f1e57120d109e960e4134b0c10f919399f39273257242bbbefda96b83df0158263d0eac67362bbf626629eff9ddf0574b07c2eb0002169c3fbac4aa7836ced7f4c97eea3dde7155dd66eea1d567c1a1367851439f47cf4f34c7c4961f95fc889ecc7509b6bd21dc47"}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000001c0)) fdatasync(r0) r4 = accept(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) ppoll(&(0x7f00000002c0)=[{r2, 0x1000}, {r4, 0x10}, {r0, 0xc0}, {r3, 0x6}, {r3, 0xc806}], 0x5, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x3]}, 0x8) r5 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000003c0)={0xc021}) r6 = open(&(0x7f0000000400)='./file0\x00', 0x20100, 0x100) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x274, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff3}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xaa8ebd3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x697e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x26f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd243adb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8080}, 0x8080) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0)={0x1, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=r8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000840)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000008c0)={r10, 0x0, r5, 0xfffffff7}) fadvise64(r3, 0x5, 0x4, 0x3) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r6) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xbc, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x49}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2a}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) recvmsg(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@tipc=@name, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=""/25, 0x19}, 0x80) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000c00)=""/54, &(0x7f0000000c40)=0x36) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000c80)={0xbc, 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000d00)={r10, 0x5, r4, 0x4, 0x80000}) poll(&(0x7f0000000d80)=[{r9, 0x48}, {0xffffffffffffffff, 0x600}], 0x2, 0x8) 714.259087ms ago: executing program 0 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c000b8008500100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008014) write(r1, &(0x7f0000000100)='bRequestType=\'', 0xe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x9c4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x750, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "af7574f84e6ec52fbbcde31a04fe39ad6732d6466dbd5d6bcb5758b63a403d9f36d80d945a091de8abb2d058431646c9f773e5b8d2e4bb212d0fe030dfd54ca88e2f3fb89eec5aa6e949b07d6e70133e8192d6f11eb5af264385dca8d9152adfaac081dced15b55972431e8952f8b496f1355ad78c7bb331893f11ab4f9e9a61e5"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "287c6ad295422c285638575b851fd8bd0825ffdeac2332f32324ef8592e22bfebffeb5987beb33afeef3ae9f90708089c298107c3057509bcf7d0ed257d79a7a05a07fa7ca576a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x69bacdf8bb6d5e12}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x360, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xf42}]}}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x2ec, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2dc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x2d0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "e8df09dadc764895d13b835f30bd8ee4b535de43e6ed97cd9a855efa2820aeecfdbb0b348ea3757d1f2a495701a29544693e780eaec5368fd94669b93bbbb8f77e0e2e764206968101447e5e610aa32abb6b173b9b3894578b5a75584a724935917983c9ef45ddf3ddff6f1c402e58cc2c6c8e05d238b8b9f7a46dcf61c2cfaa10f09cabdb216b527f9af90b5e63a29dcfcebdf420d155e6eac8774cc6bb14cdae501db26a04f7dff31aa8f6b88e5b2af2e5e2b8f08b60607aed0ed85ad8"}, @NFTA_DATA_VALUE={0xdc, 0x1, "04d384e1880f53a743e7d4c5ef56304206f5b8a2850a879404c41b52d166460ee65a8cf641f6cbac8b58ace3327f83ebd70bb4b61fdf1d5d2dd1721bdb25c3b7170c87d7d303352e942748bac51acf7a36266b8fb82d5bc184f03280bd804c03fd7be2ace159cb14f66f482b56cf504d61b7faadd47bb06830beabbb4448ea9c41a1e95a7e5ed84be5397bb6ad168a19aaf2f48a30a0d5efdeeacc3b3a389b6f8b360712655db14df2c578e9b53843db33f3282c0274a824c17eba37723b8f136080862446f02385fc44dae57a69008c847b6749512731d9"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "b53748f9ff85da308820c63a605f2deef2fa59e7109e805bb2d2b12fa020b11b2aee325e22cf4952b41a6cfe21bd7ff67ecebeae7de065a03b3671b3ba7c3c04406bd88975be30b0eb4b404c9548b5d1904355b8d727d21b6b771fe9d414571a99b33528faa0416198334a6763ed300b9a3f657a2566bdf4f5ec208283f76496b7f06790f388c5c5b4ff06ac6dce8271197b825c2303a297c358da6da1b176a4c06dd27ea97048574ccca9c757c32475eb493dd8970f5f6aafaa5f41b43b58f4a9e043921bfd688dcf8592e3fa4f41f61ccf9036cf6121da17cd7942d932a4596c0e586200936389f3d5444f6c11aa9511247bbf"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x17c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "ce4118433b38804f0467e81a1c189f29b044cd69c8e618037895b746d79d858a40ddb0bf207ff6601cd97fc955ce51577102fd3ac12a238047ca3dbd7e6631278dfb8340f3217584f6deee8c02bd1c78fd3fcfe4fc63d84e49b6cd0746f50ecf89795644c307b4fd687212076c60888bdf"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x214, 0x3, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "a84a6fc6ebbbd383e3a4dbdfee862e19702f62fd1c0ba55f51f8435616606d0fbcfc4e4c24ee27b4e5c35c63df5fb28dc99d4ee7b3c2d1a89eb24cba3d16398883613d8bc79846f36820e27429e068485e56bc44cada809b3545971327fa9a16cbbb324fa60a3e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "30e58f387d389ef71d3234bbdc915872f45ebb309a77815c0dfcb58f676bac8f662a0359b0d9bd6fc3191e8edad16877fb57dba5e68526846b1479e9db37d3576ef6df1ff9ebf3033705ae804110a62bac48514ea068d187744f00fe418c578e5f49c1d93464bf6e12274eaddedc6226b0882ef8785db619f9404200978b97a24452008e9a7af8bb42bf0d9863a34c88dc14824adc8f808784d3ca1c3118a428d91215e92c1f54f815269489503402"}]}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "f42f1e2580b7a67ece654f6d83dbb88abe7bce7f4ba7bc"}, @NFTA_DATA_VALUE={0x88, 0x1, "c5220ecc207c923360fdd5f0daca08d8ae834698dfa8916704271638f5c4f70d7880b3cfa02cff5182f59685bbde1e554f25b07ed739153bf51117f12d703a30673d456341a8de0ba5f7b7df2f5164f4fece6019fd5bc46a673fcabfdb65c74b44aa12de47ab7669b01a949fae17ac540a327c3c7c5d1623c8d9494f55671d78f3d88a6c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 713.806524ms ago: executing program 0 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x10d0, 0x2f, 0x9, 0x70bd2a, 0xfffffffe, {0x4}, [@typed={0xc, 0x59, 0x0, 0x0, @u64=0x1}, @nested={0x10af, 0x20, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @fd=r0}, @generic="71da39c48dd30f02632d12ff1c405a9574ba091757fce45aac1a2b9d5816096c0201d092807c79ea59c1432bbf68e40bb61ecba544676e4573609f7ef31f19918ebb17ad522dc0af93d7f3159b6e8289153b847c5051e2990f5bc68f5709f72118e26e6b72b60c8d25d683994a83e6e2ad0c250ece5fd4ae230d72ca21cb9be5852be43225e7eea52b8186727310f23780d0b4454afbcf321c171b0905d9eb", @generic="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", @nested={0x4, 0xf2}]}]}, 0x10d0}}, 0x84) 574.609465ms ago: executing program 0 (id=1626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000070900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000020c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 572.08777ms ago: executing program 3 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = userfaultfd(0x80801) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f000094c000/0x3000)=nil, 0x800000}) (async) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0300907800000000450000000065000000890000ac141400ac1414aa01860dc045d45768dc37efa0fc58440c00037f00000100000000890f0000000000ffffffffffffffff444c0001000000000000000000000000000000000000000000000000ac1414aa000000047f000001000000000000000000000000e000000200000003fdffffff00000000ffffffff000000004408000000000000000000"], 0x0) 494.214636ms ago: executing program 0 (id=1628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x9, 0x6, 0xfff}) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x2b4b) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x88840}, 0x20000011) recvfrom(r3, &(0x7f0000000040)=""/64, 0x40, 0x10120, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @loopback, 0x1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "dd939b0fb100", "d7d279d21ecf6318f31fb4a5b55bd3fe", "fce11522", "1168dfc922687e02"}, 0x28) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 493.924146ms ago: executing program 3 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x15}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 262.238058ms ago: executing program 0 (id=1630): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000000)='./file0/file0\x00', 0x2, 0x8) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00008f3000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x80006, 0x1, 0x80}, {0x4000000a, 0x5, 0x1, 0x9, 0xfffffc01, 0x5, 0x2a22}]}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004140)="d45b83db154f28fe5d16e258caad670c6eacb7e3567a69e13266313835bfaccc0d8a87c04dea4c9014bf3dc1ac622d37ac21344f1095bd4c8125ce96617fc2746471e9451641e50abc7a2d28728b119c1d7422467f5e52a311c7996185718cce6fd28ba0f8c1ae6a18366d906e4c1b4a240cce627b341ed8c54a97ef618b588ba1c87628e1986722d53a9e5fb43e98e6d1f867e3437e7cd0ffbc222eb9e24198df655e05f9138c9fe3b55f09216f0aa503f88df030f6ff421af5629e1c88ee934c72a0f32671b1183874b19e122201c868db43d6c92b1adc0c8b0f215cb0cc863bcaa077acf520de0fbedc285254693a43cfb3fe313a8db286a0eb1589128dbfcb0f9b50495c84606c8d915ca95f7318aadb59f54c2a8417a31778bd895ee5c9f69bf5726702733666c59b6e733ecf0386b5bc08239ffc308cb5bc24a282548e832a3659633f4f9a0e5353e5ea44bd4cde4b6aa14db416860a0267e047a4c92243998565b7641e549304b25d44de5ae373501ab4450b7fca7ec680d60b86a81ccab5fa2e82d0a4da0c1e9132364cab0e8ce9da9022dda9a5bb136c316685b6025e89f03e64d4622104328144decd42c3481d9e964704906374f7e1c2077fbd5b01cf48443b80c5d4f8af5de4adfd272a54984acc83a1530f54ddaaf0c87459d4938e466ef48764be6175b7ea91326f5f3295fbccea16c9fe65c4e688c2db1667c6faf4a8512035ce987e52cc71239593c340a20fb37f4cb3b2ee444559f33ce82d9b4d67ba57aed19055a37b895fe52267eda2cecd81f838dc7765f553828ff1a78a67ff7f861bcdc8553e462417ac82469ca569d27bcce98e62e3f7ce5ef492a761277ff076b2749ced5b318eaeb038cffa7cdce0214550bac53ce71cf0aa686dfa10679f929b938abc872c3839bd543dfe040bc4401c25ffdbb5f2b1f8c01080752ff0d208e76520e93bdebd7722d47681cf709db77874e89d9307b66b9bb296d3be9658f66fa99ae1874f0e23cae267cf32c37859588a1e8f9ebe6f0588c9f3cbc02b64eac3284af33c5f2e615a2bccfa7189ed7158637b84a370ccd3cb4ec4909af4e077b5adb3c5ce08f8cd80196054eb259e50624fc3fb1c6f5460b7e2056434c98065988428638d57675bbca5c471711692d533ba5ca076ff2c56e620ec08644fc3ee6007f6b9a0b849bdbcd2c05b89993a0c38a26eb36bc758b1d77891e2edefc657db397620be8d5642769f6e015774aa758e568b15aae5907377a7d3c56de4de5358ac165634b026ecf3311d2a0233069bc2284946e12aaf8dc7407f7457684a13da2b7952c19f366e459e5bea177da5e88ff26887c98382879a666efce687d4bb0b0c789bfbd7e6114f0e02b08804a1d7c1ee701bb893d6b73f949861feb4931d3365a8b0c2d50a1b1415b3cd5ce3090d907f3cb625a3e5e563b9b4bd39d65e4f925c95fdc9823d0f97136c6227e2f971da2aa49587d587b52882e8a89826a664245aff21dfc96c7c8b0c7b5031b86ad474ec61d25456cbc12f4f330be0669ef7939530138a08319bb518b6e8d44f658decc5cbdc416393602583cdb503dab96fdad120c080dcebee449bb934f1a06f120b8e27bb651880932aa43bbb6812cb58461eab2e9133447596df9476933a66d78b34237b4b8833b5dd9bbb852a82ba22698a7e878c05415b0f0edd24dd2ae317fc698e5d498ffe2b00ec00826a08f3585c2bdfc4b9583133bf6a60ebd8c7a91a0cc6d1b58217c89179bd08131827963d6b4babf747f1cc930c7d939d6dc2f5b04333405ea374cdcb2b948be2be2eebf073b1697795e21b08bada3a842dd68dd7c47bfa29047feed8c12ee72af97fd8681a750c2be596f8529890511a6b1180feee43ea9ddf4fcff5467ed83c7b96a22efdbee09e3283b726edfc4aa594cdd8f65a0f1ad38357dcfce979a951dcb4c61b3aa08a9ae43930147985d7b8dba22a1cbf9ecd3c2fd53da3d14a00edfd7206079633f1b512cd743d38ef16add1fbe7ff13a2bf222dbd892b9683e7f9c55729c6de81eec4339545f0879df6441f648ef3c5d73ee94fe5b619d3a1f0ca14a481bf5073894deaa0d175cb6eee57f6147d81aee7418aa949cba9da932fced0b71a01c6221c0665a904bcc297e70b471fc25866b4918c22f67e94d48bf2eb05b7d5cfdbbc8501fdd9e2126a877ea25f63177ae3dc3833fb176ab56e28d7210b029299e33d16f501eb903de7c4df702e9b5799578b90c4bebb4d38e630f14fcfff2eb46397f4ad72ea6ae30bf94c341f85a333ae3975054117681bdfa1b9837cf31d6a53f00ce356c166731055dcd033d526a146de35116f6cef5996622d70de81064f77bebfad069c51c8af4c9a31a568467bf4f706450bde8ea48d6cfaf6136ff37b9543b6492b5f583f434c6bbb482be4158baa5e2f27c7f56a735453f91ed8d369c5e598bec63ad4fbb48dd5e26b83b68d4e782eee656b33fc19062a576ac26dc3a05a16d2beeebe61886f09c308368ea536ea9e678e995ee1577d1d118e01412ce3e43b1d9164528da2b1b0d015e9cfd139691acf90fc05e3ff6a0ae8ab53bb74a6c2a1f18b2c4b2920cf14afe8b41d9e5fb5f2980dc97c0afaf0d7f797c5d9c2e40283d8b68b4f5ab57ace5f12c5af71e7a4f5972140b6967797db0b630a7617e417b10ae75c1f23f61a26e75a09cae1e54d191163449a27a1f880d64f0c3d4016520a1ba768be88e9e87c99815f80f593625c9ffcd5929747878816c74897433ad49538c8c3057ba0d8128fc3ec664d8aaf1739a1075c42b9ec9d47700f471eb51644426958dc6ef04b0d2e9c49f592089222c89403dea545b47ad354718a4cc03f2d41bcdaa86ceb2fb3fb5251c281665f7d448f481954e57068ce1a31fc6c2724afd2fdd389e67f4dc23c761df5060321ce8b03487d262e937bc47497a91f45c2b604706271d052edc200fd28d56a5be74c4b3b57d625bc509de46702b6e4c17bbb584211853ea1e1fc1f165a1d3f76768ea5cf342024e5a865d317e7958b2e6da5f3710453201df63a3b6f7a8459f41d4bac2252128e4ccd3b31eaeca3ae1efb431afcf48181ec8069af71a7a594cca717c9d6f5a0a5b9db384c98b013e48c880fce8a67b99d9194bca89b6b7c467dafd9d74f31dfe51d5a5c8e83e156b93e97936dfb077a6d9895bdd01c96b08dfdeb27b4af58b172d01dbbebafa2996c51c73f2964e6cc8df1e0e6203c9bec7f44c68439204a7e35d9e625c76b45cc57c51ca9a8a3e8875da1502cb0faff4788178554d699f23efc3ad247e1154a87baec9be094c6d74332b30475e7472a24f79774b11c6fa35e8ad77c442cc36aeb75c572b90a3afab95f95c613a61af5a8eccf5fe349f1a0f3ddbcbff38a2158860024b294200921c2c2d596787abde6b9cef5493d36ef76e7538b28dee58e2aee2a1b960fd6d96e7b335d607d23e6078a0264109450e479fe7b71c47800744a698a974f7fcd54264f5620873a4a114822fb88821f300f40fd31346c9f1fb21283615e2ebac1346f54d5ff4341b6984ec23c0757a8f6b1952f1c65186b0ddd5ad7c7e00706cf1c6ee19a5b4db73d4b30972dcead673cfff67e13157af6ae69d4df2653dafe4dfd26c61e0deb75e9b3d2935706dc564bb0ff2a404a3e979dc0411efd9e5cc8bd2e75612f484801e32a0add8f4d0e637498a47c89e72ed8c958d277e436c5b56df717104aba8b78977e85ec52d542b64952534f9ecffd952ed81762cf107e32e01d7a86732b7ffb6aa7165f8a22f33d97688648f055515aec126605fe90ab4dad9961473a404e28dc0d63954a1268e14a2daf933883fb44e4269cec4c7e2069d66269b7a05d6ee38e5b928ae00125f44e01754a35fe855b5132a7d351682e76903463611b276ea80e9a376b787ea9dbdd1347fda0a23a752ca23bfce0384a72a5eb33171c9dcec8ddb482efa46ef8d0ddc4bc149a75949a4fee5e1424b5dd7cf1a3b8940fa8d2229219e51a5cd62db24e7edc0be4796a79f9ca0a8cd1ee9a4a51522a6cc2d6070fb33370cf1be8c6107716dfe8314c0434b186c4772e578d38c85a65316e69cd4f15654551bcabbbfed6b7754de931e052e4dd4bddb16e7feb5a31dab1f0eefbae8f2d1fa079556554cbd25c77c146736011b42ed14b260288036eabb9fbf5ca38a117365e9d7241c8bc51f8eb1eb6857bec46f9d95abccb721c44e60f28fe96a15fd9ce88bbac61695b775647745f51f804e6e293ae929545fe6fc33720cb76001838eb75c89aa56565071cb6ed43065336398861870e8d7fb44b8f7a5b01205e5b342d3d61f1cd9b561eeaae89e015cf3d271d0d86f3edc5250414133421afdeac9811599ca6d40e8b32a1eac87c47f1d5a49d46798b91eee6bdd3b20b27bb2011478d4793299691fbe78247d2db4214ec0e0b38b022ef952de6f77a437f04427fe11ef145dbbeca37bed97847e9607bb8e9446ca597a908fbfc7e945bd5a7c906b671a2e48dc4ca9b595b1afb2f85986ed14b1d3ed61d228341338bbf0947578b1b91be1f5a897720a8eb34a02ace9491748e1b956228afbfd46143a6a92f1dfa72334bae9d7315c5709384de2693c579763b9e9939de4287d6fec972f35bbba01a466cb6a1d02cae85b8b48d712562127f3eea0574e753fec74e56f73b6ce2619aced373eff0d7ac64dfc7fd56450484f82079bb815ba4fdc0d68a0cf7c3a42bd0b1fe0eace83cc79a4e4a11b97c0111536b62c2cb1d6543ef93bd113724568b0c0f15c422666f022dbb7455459de7c24c446d7fde9b3b7c2efe9ee5a1a31fc86ffdafa6a8f3cd5aeafa91efd7195330ddf542a72357b06def53e820190cf2959e04a143d349f887d808620dc54ea094114242907ed7161dc6c61df0023e39ccdfa1670605e69539622965d8c43df8dd4f92bf15ac9252d285d9599e6d79e3fad7c64ac75061ff6735214b7486fc13fb454fe4b92e88cd469f218472dad523f39916b5f4fe8da914e44dbf10e6546c6fceec9192b929d49b5a3eb3aa58aac77948dddb5c473da4a4f7b26c0d7db759295a7329903f620c1c937308c694f8a5dd5381db251debb61b54074aea5defc78b0d646091a3f2e6ab8bd26f1588b99439fcc834fd6730836c5fa58001188b5b8f146e972352a21bbb91a8177575a4f91bef8aa55f4c7af15a66dd877ffb70e146e67d83a3946d19d16efd2fb39fb6c6ec413792e97c31e3e20fd91b64680be19732e47d2dd4c230b55a8b138ac8e55fe72158d56c270fd3fda00e98f933172b47d8185189f59a147c30dc6de5dc06bcdafb41d89bd477c911abfe2142fee931cd3f436ce271595cfbe5c97d201b5002c96ce733727ef82427a1ba1db3f77243f43eb6558c122110eb48700dc9583ddf88018c0bec1c304a7c868fdede78ed3c3c0864723e85f6fc78053a58163c9ab1cb5ca522c60354287cb017522f5a5a721b19f21b15045f738c191d7a3e451890e2d1791a0261d0a06c643f60e03beacb1377e6cea8e5bb2f4abbb69cbc6efbecf65ee7e286142a4e7f9a59a66ebb7a28f13c694626baf078b130f1e97e429f9bb1f8e48b2f8cd035b420b80fe82fa1c71957a4f95e06e175d275cdeb5389be97eda747a9a09344c45e71cee05927afa8ac2b8fd8b407638c02fb3ff3399d52df9a4488bff97dc2f4fe77c2cc45ff30369acf3ee9fcf384e4b964931f3a4ef07ed0d1e1863f2b69e1350448d7436ebbe5140baf78b14a9416ebedbfab20f1303f2395a6bc5a73a85a7314ae49d107501a2f1ac1a2b87e6e03d056e02d4c575ce71302532bc39f845d329a51aedf124f95f71b415f514fd19ac79e348a2c047d4d0b32cfe61aa3ae7457dad92e6092b2885ecf630cd32b366cfaaa17eab88b036414f1534316e5895f26fc27c31a74c725466a877821e92047e2f3a31f3a6660577c73188f6411710cccb87bdc476e0a2ba91658752f21727cc0878fce97a2c4dbc4e28ba2618e894ed478f6ce04dee54eab5c3e6bfc42aeff5606884456fe20cb9837d0ef252ef8bdf2e083beeeaa7e99c617c82b5367979463fba6756bfcc51d78d16227652ed666f4937ff888453087b1b44f0e5b015c1f3bc018d29f29cea3076ce11b9fc11e91b6f986b9de371d78173be72fb2f587248b50829326d7c32b1670f35c762f487faecf77232b35892926566e359c1dfc8043fb1871ca2f151902df4eb3dd4974f83c82bbe7829f47728cc2885cf93bb499bdc8e8a2869d723a8aebdb4f290476b3f38989f562a6c73f6d796391c80de2026561553dffb5259381eb8d4e7b76119df7f945d27994d87c716e8e2d93c384fd25ea33ba2260feedfd23305ad700c2dfe000e77009826ed853abb034871cbed3098a15b23dffcadbac933ec47f26912e9aafacf7ffd0261207017ef7a915a6a9eee4ca02008e463092aba3f7b7249c4bb41c0a8fa50dc4df741dcac02e47a3a9dcc27ed28247dc1e2ef85eefa2a0c6ba900aa172f94fd17bce96459622034d208df5edc0563016b7bc9ffae1ad75e9859b4d1cc792570e5efa5459ef4ffa1401e342efb2721cb459fb07ddad6105fe31848bd35be085142924b15700fe71605fe5fc2ddbd9b3df6b08327fe3cfa19628ae6b11b9a9d6b8a1554b8d93ce98074709d3b7d54dbf8eda41c0a427304d6b149db60f35504f4a1daec34bde9e4c11d93c2c8371d6f7e2e4af4155a8d14138dcd8fe18934dd4e95dbc603004860e6cbc89f8eaa0fb0de782c9a6efc71a117be5d0314d2f2605241045340b60ad9f6d73213dcfe75d5f28a3852091e2081a22736269c111710abaf046ea21d2192aa15dd244eaa23169e888c100bf2b4fb8967721d29083b16795887a6d635a31519f1cc0194ef7701a1b6ab39f856ac41bc0400010b3dc6ad5caddcf84cb4e4944094d8141c288c35874872f5c7cbf1d26610994633b77f8a2a4650e4a1639afbd2439f29d5d7384af291b9606ccf7c11c0216596bb50b12f62bf6a7ef6232d856c5217830fe38916d02cf1148a704c31718b61681f7e20bd7e8b431aff641442ccdae10b528d96465684dfcfd76282812444e5bf81405111e696ea7389d4ee485dbf5a4c0a19e31bf0f734997b05908fdc15f4612ee4d46c34c54fc2d38b7d4fc13e046266f4de44c98a6fcd28287d6bf3d656c660f497c36dc9a11134d24a58d18475d9523e47170f7b7137745f8d3db09825db9b4f4249f423b34723547470d8b9f013685ce827b42421cb931e281c27f39cc6d104dc8972c236c31962f806bc5ae24ca12b46ab1055c88737c8373e58fbe698cd068958737e9a5fa1dab06c0cf3ecb1336bdbfd5c1d35e6c39b8d97677b544941057c2562bf7b2db9ceffa0e3c900c462c0b3c29aee796a2d10fa7c2dc616e95f7918fa0ccfc246b38f6ffd819fcf8053469ffc030e4bc0f5d5747435e5239e311095f798e8dfe53fd759988722a4a89d4edb8f08971a0261b6df07aad8960b67a4b75ea6064bed72a7ef11044cb33fde83b0cd49d8d15a15568043f11b197555bbf9d2f69476947b020d3e8987991f0d8e6405e1b8bdc67bc1e66de69f046752970b85aceb417437ccc073f98937a475ab0010b220be123394f58c3f35cd14f65abd3a78b88772719df82ee35a1779c556eadf03ab143fd139f4aa2de2718e6dc83bf24a14c47a94696ad14426202542e02d17e10f8ea65266c639c38f0115c96e724545e3c40c1c76b09799238cf928c8171dec0de973845610bbb4e3da0c02397e107077e6c62f11a54b1105da3311dbae90428fb59a02a561c61e1ae5f337d2c0ca3253f2ed3480d156c7d51ef975695b988952494cb4bbe919c9fcb960094e7e4e4e730610259f4c4b59c26b95fee0bb877b972ad65dbee9609c65b4c2ae0f413f589cf3d0be29995d2ed2266c02fc024067c6544e070d8331836f372a5f6ea04aaccc2c47ab6a1a442d30eb1e8135b2fc8cd174bc89c84cac89fdfa66995a0734d5f1e3919db0d4c6ca43983409d4af86c4e885afaaff09ec053a20887e5d1a58a8b4cc59122b92c63ea3cbd3bca4ef4b7dcb4c48da21972b796a01cb74852a214b9446a1fac6e7aef3c3a26962a196366977af572a4482d89b35fa6e0e054189d012c0f2e68c5cdd0697308b3748d48e7648ff1e9e564ffe47079e97499b34220edcdf6764b3117ec9fadc196f03c01ce7783ab688b22838d22c1e500ee19ece580480031bb45ccce2dab12c20cd11093cb7ed2321200b7a0170abbb0f07eac8473dddde55cdac6af05bf618094e0b443d946de9b6329ddf424270677ca8f3ab3937bb941550a61a543817c4693afda8d1c6de9dfe7a61c51cb33c42b338845902c8cee76478e950f94d3dc8fa4a27510db74bf8e82e04d5e1d3b8fdf003a7962b3b8d00b1b83d8373ae593e06d2630c01667b482af8997955430b1e7ac83a8c26bf3f8405aa9590a4a11e876674a5dc41f9b68a36e05316d4b0e8a8c42fec0efee0ea20e512737632a2afbfb4e8e45534f452923cdb367acf88159e43734b2ea33ab38377f9379424672cd17766b325319d7321ce3afcd4fdcb009587e14915f0ab74573d3959c16c5f154718160f8acc317804592c6001a0bcd6b3559edd9181138e0c34c66b2c7feba3cd96bda82d480cd7e083b793ba85d65f3deada184da82081927a978965a4514bf5d0d8317d0d8284704ffe7a70071da81112d7793c2be7d6f42d4ab5cb8788493b337ecfffe02d9f1ca64dd985b6ae0fdbd83b797ffe01980a22818b23a8084fcbfa02441f6c7f89940e44e9b0f2aac8a8acb71d1fc82dae16a2354cb6aa30519c442dc4b76d9b6bc95c52472f8e9f17a7d16da97bde359b543b1bb71d5a6cf4f27d63a6a0f77490851fef0e88b0632b1e1cdf418d0a014d64cdcf91651e8b6bd24322beb8f9ff839db50f14a10e36229166a187feb9883f6df8b5d9e0a8903463471e17b29daff29eabc001e4f766cd134c59afdf9d9d345e90b60976a8d1480e0c3a2d43da70321c5284c4a2241e72ed58daefb70a27744ca395265db551efce31baf6ffb5e2e70a5492c05b81b2a14ae77fa699818d859024accb5d4ab839c8ee33e0b5f4091b082438b4c73c233358431e37173dcdfbf4da52b8c9e1bcb61929d38fb7145beb5e3cc050cd76286fcc64edad7d5718139ef4a46f3df90a7f21d39a6feed696bbac8113fa6969e68314c4d886c7802c82d03235a3306ccc6801f208ceb7332a2e73824fe198f1136ae4f62509c1ec7485523d4d727227099131e08fdb42e37559685d5738f6b829a9d6aa7dbed568397389384aafc9521cbd89060c8dd9f87002765e4bccaea181390893232d16a377c0d7b12f364497a716720c20bed4c3e03f6139c730d8fece7f8b815768d08e9e03aa058a18f91950fffa541bf011447d494277907a2418b5f777bf8ad0f79b3a4a2433ae643cba96f9b950e6fa62caf981eecc94be6c0a117b8f67bbc561c972055fde8f5534a2dfe0da15eb4b8f2405ae8fbc7e1d4e9040eaa0e3321127e795fe55e5c625f51eb22e4094a65aab0fdb88639d6f14664b912b91f95cd68bd6bd9ad8e746df71e1b311b68394c866f51f49391e0bbb69ee7ca8304d7b88bcb8cb2451050d7399a130ef54e74a346641660883a7270e652cffb24de90d9f9360918c0badaa0de33719b5fe047f252c70d3f2cfeb8f7a3e6869c49ef6bf885c0f83c44d821569271b9673b67c39d4148b440ce0c6cfa7e6a7c2c533414dbdb8e61154fd30cb2c4f545aa0b2be300052c0022bb8b92a3b272f4bf256abdc1ab9a983eb31f8518112c45d293e85c74d6e978dc8e5e445936b9377ba461300b698000f581294c60b674d422f87b994ffafd20b8e57d4a331894315cd49a505a245a698524214e2cbd2a0800f1c5bda31d71adea052f8a621a7b7b00d05b04b3fdc38856bbd0058bc5f2e856a09d5da02da84e1b5bf01ac0e1ba5151b54d4cabc0624f114239bd6c59d169485c213cd329d189429611155cae9b210fd443284c78b8e6504fd280664f77fac1185e848fc663a2c3e1d1f980377c9ba2e8ac68b36a55903a425058ecfd6fac07bb697c566bb763e07469d73ae5a4a768b79eb760bb09900964a2e3931def048f4b5b31c90a12e3f89a25479c1e4790e315b207d15788c439b640358e38d33ecd5086329a61329bbfa498db50022a40d55bc61b2ede0e668658a051a8a3b02b9f9c676c1e58a883f7091e9c59efa35ccdda0df22658e3de5b593e1fd9c5ada431011659526e6c2efdad9d28f06e488a7f7bea73cc1cd0154f2d4015ce2ec4eb1795decaabe0ad5ba642841cec4c670aa14c1c5ab3bdc4c9a31944e66d0a0fb95ef31401049d00bd370c091a92565ddf145790424f51a3316fa0f37475ad99be05191fa9d3fc75706c8a25c4c6cb088ab4e1ae2bed4c313d5051563ff19e53aeb70a21f8ef23bc4a23cc220c0f8be439300b93210721f86aa8f0c44010d4f8b29db62b41fec5d2691944d612cae6ecea286edb342b00132ba4b275c525d08fe2efc35ca55a9865c7f1386f37d874bf7088bcbb7eb75a5a6edf98c5ee6ec1bc927b3d1f635c76934e3493c49bd0131fdd7ed4b04247acbabdd2ca16d1614f354d67f9be0ef753590699e6ebe1d14cb96cc99bbed804ec06abe21c32b53a1cb31a1d68d85f49b695aca3ad729a4c87663f9079c5ea342be1a3ddd08fe5d2612089021de66c54b1dd7daf216378fe023c6b8ef9436e265e0786e1595b35d7bc5f5ed1da14335fc0fe8d369e2b568ff129998e601dd3a69684cc2b3d8fb18ab9b35f2a513f4e58969b4d99416c1620abf0a4630557ccb85172ce8c5c8a8f65e1f42d955147664bd9aa3a01ba0621eeacf50787e0df77bab6ab23b9ecc43d6242e0ad0386f36afb8fa2d60d75acf5fda26c31cb9b2b1010af299f0942915c354821c62cf13811e96fbe3ae3486f00d31269244919f57f1f66079db3d67758b8bf17af28da067a4c5a90b258f712b2efa9df18621a0190667f1893bdda1c7a19a58b86bc4fcd59393787c6507bf883b8655d8976e483063d571c1c0544ff1b3dfdb205dbf7e5e442dcaed8acfb6de9d475bdee64100f0dc4388f39d6ed403c3daca66d6ca45296dc928d05337e824ba32046dedabc4de14f30d54dbb77b4f98453dd402f6c2bc8b354f22b0fb0597cfdf1c354ac46abf20c1d5f3e66dd27da2130644f9877065b6ab90ea9da95771ce5c3c10984259497b7ee0a19dbf42e7cce886afa20a689b273302617addfb08b086bcc958fb1b2e0b72ccdf32863b59d945050233ced941a33cdf94c6c2b4ea0e71a8151d1bf134032e2d9662ba8887fd4cbc507da745bf345f1d021e18ae9413fa4a93f1d040e327a5f863464cdbd38827e8ccedcbec05b29cb460acb2c12f5eed915134377ce85b493a6675e1569664474f7d8c69548e07dd1a650afcadfcf2e5cda30d98c392d90fc9a81a3c2cccf390ac325e8231f06601d3f2920c2ce1289f71870092b7c5783e33e70216634bc68573b6447b21b9697e5dc79fb2e110080ea936db9f55660f395f8d0", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0xfffffffffffffffd, 0xfc4, 0x124, 0x4749, 0x6, 0x9, 0x9, 0x8000, 0x800, r4, r5, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000006c0)={0x50, 0x0, r3, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) fcntl$getflags(r10, 0xb) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 104.373009ms ago: executing program 5 (id=1631): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r3, 0x5392, &(0x7f0000000000)={@lba=0x9, 0x1, 0x0, 0x0}) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) shutdown(r2, 0x1) ppoll(&(0x7f0000000100)=[{r2, 0x408}], 0x1, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x82102500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000080}]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000180)={0x4, 0x0, 0x4, 0x0, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000003000)='\x00'/4096, 0x1000, 0x1}, {0x4}}, 0x1) madvise(&(0x7f0000338000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x30000000) 103.827953ms ago: executing program 4 (id=1632): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffc22cffaaaaaaaaaa3686dd648b1500004000fffc000000000000000000000000000000fe8000000009000000000000000000bb2f07000000000000c910fc010000000000000000000000000001c9810000000000000000000000000000001005020004f90700000003000f0500c20400000909"], 0x0) 100.340059ms ago: executing program 4 (id=1633): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', r0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdce}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', r0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdce}, 0x94) (async) 439.413µs ago: executing program 4 (id=1634): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 'sed\x00', 0x8, 0x1, 0x4f}, {@private=0xa010102, 0x4e24, 0x0, 0x1ff, 0x789, 0xffff7fff}}, 0x44) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000100)={0x964, 0x0, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x4}, 0x3, 0xad, 0x3, 0x3, 0x3, 'syz0\x00', "dff61e78776ccd634b49e027f718f8378c13763939abc9beea778464f65ec02f", "8f298928238ed1994c306fb85c5ada5bbd0cc3f48ed35f8d9b4ed85d8d46735e", [{0xbd34, 0x2, {0x1, 0x2}}, {0x300, 0x3, {0x0, 0x8}}, {0x7, 0x100, {0x1, 0x3}}, {0x5, 0x2, {0x0, 0x5}}, {0x8, 0x5, {0x3, 0x8}}, {0x3, 0xd, {0xeac7671e66461a21, 0x7}}, {0x8, 0x3, {0x2, 0x9}}, {0x6, 0x9, {0x0, 0x3}}, {0x1, 0x6, {0x0, 0x2}}, {0xb, 0x1, {0x3, 0xfffffff5}}, {0xff, 0x4, {0x0, 0x80000000}}, {0x2, 0x0, {0x3, 0x8}}, {0x655, 0x9, {0x0, 0x8}}, {0x1, 0xff5, {0x3, 0xffff}}, {0x6, 0xe1, {0x2, 0x7}}, {0x8, 0x9, {0x1, 0x4}}, {0x7775, 0x3, {0x0, 0x8f}}, {0x100, 0x1, {0x2, 0x4}}, {0x9, 0x4, {0x0, 0x8000}}, {0xc, 0x4, {0x1, 0x49}}, {0xfff, 0xd77, {0x3, 0xfffffffb}}, {0x0, 0x7f, {0x0, 0xf}}, {0x5, 0xe, {0x3, 0x5}}, {0x101, 0x401, {0x3, 0xee65}}, {0x8, 0xfffd, {0x1, 0xfffffff8}}, {0x1, 0xff, {0x0, 0x8}}, {0x2b, 0x101, {0x0, 0x89}}, {0x6, 0xd, {0x3, 0xb8}}, {0x6, 0x3ff, {0x2, 0x1}}, {0x1, 0x10, {0x1, 0x1}}, {0x4a4f, 0x400, {0x1, 0x8}}, {0xfffc, 0x1ff, {0x1, 0x34}}, {0x8, 0xfff9, {0x0, 0x400}}, {0x10d9, 0xa64, {0x3, 0x8}}, {0x0, 0x4, {0x1, 0x8}}, {0x1, 0x0, {0x2, 0x100}}, {0xc978, 0x1, {0x3, 0x3ff}}, {0xd, 0xfff8, {0x1, 0x7}}, {0xada2, 0x3, {0x3, 0x6}}, {0x0, 0x30, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x7, 0x1, 0x2, 0x7, 0xb, 'syz0\x00', "e8a553501788c086c2d888fda4a0523dba472f87b14e82285e6ab80b544b86e0", "0c9ac8a725f95e86dd23a7cc84af56cf256f1d36f65ca80259028ddb634de77a", [{0x3, 0x8, {0x2, 0x9}}, {0x2, 0xfffe, {0x2, 0xb2}}, {0x0, 0x0, {0x2}}, {0x1, 0x400, {0x0, 0x1}}, {0x7, 0x4, {0x1, 0xffffff52}}, {0x8001, 0x0, {0x1, 0x6}}, {0x763, 0x54c3, {0x2, 0xa23}}, {0x39, 0x3, {0x1, 0x2}}, {0x65, 0xa, {0x2, 0x2}}, {0x6, 0x96, {0x1, 0x101}}, {0x0, 0x4, {0x3, 0x7ff}}, {0x8, 0x5, {0x0, 0x5}}, {0xdc8f, 0x8d1, {0x1, 0x6}}, {0x3, 0x401, {0x1, 0xf91}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0x0, {0x3, 0xfffffe01}}, {0x8, 0xfc, {0x2, 0x8}}, {0xecf, 0x40, {0x0, 0x8}}, {0x2, 0x8, {0x0, 0x81}}, {0xf800, 0x81, {0x4}}, {0x1, 0xfffe, {0x3, 0xbd}}, {0x4, 0x3, {0x0, 0x80000000}}, {0x4, 0x7fff, {0x3, 0x3193}}, {0x3ff, 0xc2a0, {0x3, 0x9}}, {0x3ff, 0x8001}, {0x0, 0xdf2f, {0x2, 0x1}}, {0xd, 0xd, {0x2, 0x3}}, {0x9, 0x40, {0x3, 0x101}}, {0x2840, 0x2, {0x0, 0x2}}, {0xae36, 0x5, {0x1, 0x3535}}, {0x0, 0x5, {0x2, 0x3}}, {0x1000, 0xe, {0x0, 0xfffffff7}}, {0x10, 0x1ff, {0x2, 0x2}}, {0x1000, 0xfffb, {0x0, 0x1}}, {0x5, 0x2, {0x0, 0xcfc}}, {0x3ff, 0x800, {0x3, 0x80}}, {0x1, 0x1, {0x2, 0x4}}, {0xfffa, 0xeb, {0x3, 0x3}}, {0x6, 0xfde3, {0x1, 0x1000}}, {0x7, 0x7fff, {0x1, 0x240}}]}}}, {{0x254, 0x1, {{}, 0xf, 0x3, 0x10a, 0x100, 0xf, 'syz0\x00', "ab71ba2515b856fcb5f4177e7712a9d0dfc715b87cb0c0d23749a059259eaa93", "5883373daf8db182be4e2eb94956695b63e43f397e61b8cee4c4848ee5b3eb13", [{0xb, 0x8, {0x3, 0x7ff}}, {0xb, 0x4, {0x0, 0x5}}, {0x9, 0x9, {0x3, 0x3}}, {0x9, 0xfff7, {0x0, 0x3}}, {0x7, 0x88d, {0x2, 0x6}}, {0x7, 0x400, {0x1, 0x8}}, {0x6, 0x4, {0x0, 0x9}}, {0x6, 0xfb2, {0x2, 0x5}}, {0xfa4d, 0x5, {0x2}}, {0xb00, 0x7, {0x2, 0xc}}, {0x2, 0x3, {0x0, 0x8562}}, {0x9, 0x5, {0x1, 0x1}}, {0x80, 0x3, {0x2, 0x6}}, {0x2, 0x7f, {0x2, 0x9211}}, {0x9, 0x6, {0x1, 0x4}}, {0x4000, 0xcd7, {0x2, 0x3}}, {0x400, 0x4, {0x3, 0x8}}, {0xffff, 0xe, {0x1, 0x80000001}}, {0x5, 0xd, {0x0, 0x8}}, {0x7, 0x243a, {0x2, 0x5}}, {0xffff, 0x8}, {0xcf16, 0xa3, {0x0, 0xed}}, {0xa02, 0x1, {0x1, 0x4}}, {0x9, 0x1, {0x1, 0x5}}, {0x0, 0x3ff, {0x1, 0x10000}}, {0x1, 0x7, {0x0, 0x3}}, {0xffff, 0x6}, {0x9, 0x0, {0x1, 0x2}}, {0x5, 0x1, {0x2, 0x5}}, {0x5, 0x5, {0x2, 0x4}}, {0x80, 0x8, {0x3, 0x8}}, {0x9, 0x5, {0x2, 0x6}}, {0x3ff, 0x6, {0x0, 0x7fff}}, {0x401, 0x5, {0x2, 0x6}}, {0x2, 0x9, {0x2}}, {0x100, 0xcb, {0x2, 0x7}}, {0x9a, 0x7, {0x2, 0x7f}}, {0x6, 0x4000, {0x3, 0x7}}, {0xef, 0xd0a6, {0x2, 0x6218}}, {0x8, 0xa2d, {0x3, 0xfff}}]}}}, {{0x254, 0x1, {{}, 0x8, 0x0, 0x8, 0x0, 0x19, 'syz1\x00', "660c7dcbf7eefed2608facd616b413b4d55b43be5949bdfaf6074c71b980ee27", "84ca4618aec0d76d30c03d2681285000e75c05805abbbb20b9943ae9046fea58", [{0x0, 0x4, {0x2, 0x1}}, {0x89ac, 0x6, {0x2, 0x6}}, {0xd, 0xeec0, {0x0, 0x9}}, {0x7, 0x4, {0x2, 0x8000}}, {0x3, 0x6, {0x1, 0x6}}, {0xc1, 0x101, {0x3, 0xc}}, {0x7, 0x5, {0x0, 0x8000}}, {0x6, 0xe, {0x3}}, {0x3, 0x7f}, {0x4, 0x9, {0x2, 0x7}}, {0xe3b, 0x7, {0x1, 0x100}}, {0x2, 0x7d4, {0x1, 0x400}}, {0x401, 0x2c, {0x2, 0x6}}, {0x6bb, 0x1, {0x2, 0x38}}, {0x4, 0x4, {0x3, 0x7fffffff}}, {0xfffd, 0x1000}, {0x1, 0x9, {0x1, 0xa}}, {0x6, 0xc, {0x3}}, {0x8, 0x10, {0x0, 0x8}}, {0xe, 0x5, {0x0, 0x9}}, {0x6, 0x2, {0x0, 0x1}}, {0x4, 0x4, {0x3, 0xffffffff}}, {0xea0, 0xb0, {0x3, 0x800}}, {0x8, 0x3, {0x0, 0x8}}, {0x1, 0x2, {0x2, 0x71}}, {0x3, 0x0, {0x1, 0x193}}, {0xffff, 0x3, {0x2, 0x8}}, {0xe, 0x2, {0x3, 0xf43}}, {0xe, 0x0, {0x2, 0x4821}}, {0xe, 0x6, {0x0, 0x3}}, {0x1, 0x8, {0x3, 0x8}}, {0x7, 0x2, {0x0, 0xe608}}, {0x81, 0x1, {0x1, 0x3}}, {0x6, 0x1d, {0x1, 0x9}}, {0x1, 0x200, {0x0, 0xa74}}, {0x69, 0x3ff, {0x1, 0xfffff001}}, {0x9, 0x627, {0x1, 0x8}}, {0x1, 0x0, {0x2, 0x1}}, {0x1, 0x1, {0x3, 0x1}}, {0x9, 0x2, {0x3, 0x6}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write(r1, &(0x7f0000000b00)="4bc69a03bd6f2fe7e2b5dafe7056b93eb9ead2", 0x13) (async) write(r1, &(0x7f0000000b00)="4bc69a03bd6f2fe7e2b5dafe7056b93eb9ead2", 0x13) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0x0, 0x57, 0x3a, &(0x7f0000000b80)="1c11cefcec8ccab0b61366afa7b657249f207ea4f880353c65b17a85e5bd5d89726e5a6d46f4c7656083d91d5503c3c7ffd53fd813e26e294d0e51ed22b7eead1ea2a2349ee1c913a52ceb6e49d665590e401e6a7b18dd", &(0x7f0000000c00)=""/58, 0x0, 0x0, 0xf1, 0x7e, &(0x7f0000000c40)="9b4fe182ae9c49b48ed3c6ddd54e3bab76b975ff59ab3521449efa6520921948fc8d57930b596a30285b3a6edf7d99d37369c3dfe53c5423a4354efd3260abf40ecb4ff9641e0fbe2725f65b659913a2a43eb28dde367d3534a2a97a2009abf085af1a6b45c8652686ea2beddeb0187fd856ed8e144af770fffc7c7d6fad294c4147a9361a9101db23c26c06edd1e872368e54363c7e5dcfe35b49557ec38d0cf048e5577f889fa1a7d72ded5ae2370da36898e0c936c9cf2570ce95df1712cd67cdb31a54623dd5da1cf7f42e52763d2bf98927c7c4f959ca20881db483dbe13ee2b02dfdf116678a99e80cd7f78597ac", &(0x7f0000000d40)="ace6547a12716fd44ec418df8b0add7b61034208aa12d5d775feae15a334d3069f7b9929e43a2bcece537153eb9a824237dce971e0d9000b8b353d854c3b2a6cae74020d60ee6d3d425751fdae6451f75fa433474378992f3638c3915b9b97c8dd98c345236ccd0506d12aa3dd37963cc39d70184e28059e6ad0c041e054", 0x4, 0x0, 0x4d8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0x0, 0x57, 0x3a, &(0x7f0000000b80)="1c11cefcec8ccab0b61366afa7b657249f207ea4f880353c65b17a85e5bd5d89726e5a6d46f4c7656083d91d5503c3c7ffd53fd813e26e294d0e51ed22b7eead1ea2a2349ee1c913a52ceb6e49d665590e401e6a7b18dd", &(0x7f0000000c00)=""/58, 0x0, 0x0, 0xf1, 0x7e, &(0x7f0000000c40)="9b4fe182ae9c49b48ed3c6ddd54e3bab76b975ff59ab3521449efa6520921948fc8d57930b596a30285b3a6edf7d99d37369c3dfe53c5423a4354efd3260abf40ecb4ff9641e0fbe2725f65b659913a2a43eb28dde367d3534a2a97a2009abf085af1a6b45c8652686ea2beddeb0187fd856ed8e144af770fffc7c7d6fad294c4147a9361a9101db23c26c06edd1e872368e54363c7e5dcfe35b49557ec38d0cf048e5577f889fa1a7d72ded5ae2370da36898e0c936c9cf2570ce95df1712cd67cdb31a54623dd5da1cf7f42e52763d2bf98927c7c4f959ca20881db483dbe13ee2b02dfdf116678a99e80cd7f78597ac", &(0x7f0000000d40)="ace6547a12716fd44ec418df8b0add7b61034208aa12d5d775feae15a334d3069f7b9929e43a2bcece537153eb9a824237dce971e0d9000b8b353d854c3b2a6cae74020d60ee6d3d425751fdae6451f75fa433474378992f3638c3915b9b97c8dd98c345236ccd0506d12aa3dd37963cc39d70184e28059e6ad0c041e054", 0x4, 0x0, 0x4d8}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001040)={0x3, 0x1, &(0x7f0000000e40), &(0x7f0000000e80)=""/164, &(0x7f0000000f40)=""/252}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001080), &(0x7f00000010c0)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001080), &(0x7f00000010c0)=0x14) r3 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000001100)=""/207) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)={@map=r1, r1, 0x2e, 0x4, r2, @void, @value=r1}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)={@map=r1, r1, 0x2e, 0x4, r2, @void, @value=r1}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001240)={'veth1_macvtap\x00', 0x2}) r4 = getpgrp(0x0) fcntl$setown(r1, 0x8, r4) write(r0, &(0x7f0000001280)="93c3ad65b1612af8c2cefbb7f93953df2881da0c36c11a2ef8cf3844a39c66921c18e069d494fd6e8fca9b130231295fe03c1d4565274c5118ea4aa254417ca05d5237f0e8f9bf", 0x47) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r2, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0], 0x0, 0x9e, &(0x7f00000013c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x96, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r2, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0], 0x0, 0x9e, &(0x7f00000013c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x96, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) semget(0x2, 0x3, 0x290) (async) r5 = semget(0x2, 0x3, 0x290) semtimedop(r5, &(0x7f0000001600)=[{0x3, 0x4}, {0x0, 0x3, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0xf27, 0x800}, {0x1, 0x80, 0x1000}, {0x4, 0x7, 0x1800}], 0x6, &(0x7f0000001640)) (async) semtimedop(r5, &(0x7f0000001600)=[{0x3, 0x4}, {0x0, 0x3, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0xf27, 0x800}, {0x1, 0x80, 0x1000}, {0x4, 0x7, 0x1800}], 0x6, &(0x7f0000001640)) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000001680)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r1, 0x58, &(0x7f00000016c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r1, 0x58, &(0x7f00000016c0)}, 0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000001780), &(0x7f00000017c0)=0x4) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001880)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x9, 0x4, 0x5, 0x0, 0xfffffffffffffff8], 0x3, &(0x7f0000001800)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000001940), 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a00)={0x140, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xf2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x9dd2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x39df}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000000}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001bc0)=""/93) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000001c80)={&(0x7f0000001c40)=[{0x1, 0x0, 0x8000000000000000, 0xf8, 0x4, 0x3, 0xffffffffffffffff, 0x9}], 0x1, 0x38, 0x1, 0x3}) connect(r0, &(0x7f0000001cc0)=@rc, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf9, 0xfc}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x40}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}]}}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x8, 0x17, [0x5a]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xf9, 0xfc}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x40}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}]}}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x8, 0x17, [0x5a]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 0s ago: executing program 4 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) read(0xffffffffffffffff, &(0x7f0000000200)=""/150, 0x96) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6, 0x4a, 0x0, 0x0, 0x1dfad39d, 0xe, 0x7f, 0x3, 0x3, 0x1, 0x6, 0x9, 0x0, 0x80, 0x0, 0x5, 0xf9, 0xf4, 0xef, '\x00', 0x3, 0x5d2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xb, 0xb}, {0x0, 0xfff3}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041010}, 0x10000090) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@local, 0x4a, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ermissive=1 [ 144.660518][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.715360][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.740586][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.743398][ T42] audit: type=1400 audit(1786462528.621:835): avc: denied { ioctl } for pid=8393 comm="syz.1.868" path="socket:[24297]" dev="sockfs" ino=24297 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.747728][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.755244][ T8394] 8021q: VLANs not supported on wg1 [ 144.777861][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.884828][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 144.903099][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 144.908829][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 144.913526][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 145.176776][ T8403] bond7: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 145.457015][ T8420] cramfs: checking physical address 0x000000002ade0000 for linear cramfs image [ 145.468784][ T8420] cramfs: wrong magic [ 145.484271][ T8420] cramfs: wrong magic [ 145.508874][ T42] audit: type=1400 audit(1786462529.381:836): avc: denied { ioctl } for pid=8416 comm="syz.1.873" path="socket:[24306]" dev="sockfs" ino=24306 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.530229][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.631313][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.875'. [ 145.663471][ T42] audit: type=1400 audit(1786462529.541:837): avc: denied { ioctl } for pid=8423 comm="syz.3.875" path="socket:[24318]" dev="sockfs" ino=24318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.732496][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.920879][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.923658][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.927238][ T8389] bridge_slave_0: entered allmulticast mode [ 145.934268][ T8389] bridge_slave_0: entered promiscuous mode [ 145.946765][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.952872][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.956298][ T8389] bridge_slave_1: entered allmulticast mode [ 145.962337][ T8389] bridge_slave_1: entered promiscuous mode [ 145.973031][ T42] audit: type=1400 audit(1786462529.851:838): avc: denied { kexec_image_load } for pid=8433 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 146.003893][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.059978][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.077391][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.161402][ T8389] team0: Port device team_slave_0 added [ 146.189902][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.213373][ T8389] team0: Port device team_slave_1 added [ 146.260361][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.263156][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.288759][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.298894][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.302267][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.312139][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.366065][ T8389] hsr_slave_0: entered promiscuous mode [ 146.369238][ T8389] hsr_slave_1: entered promiscuous mode [ 146.372196][ T8389] debugfs: 'hsr0' already exists in 'hsr' [ 146.374361][ T8389] Cannot create hsr debugfs directory [ 146.607223][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 146.833747][ T5812] bridge_slave_1: left allmulticast mode [ 146.839117][ T5812] bridge_slave_1: left promiscuous mode [ 146.846419][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.860142][ T8449] CIFS: Attempting to mount //127.0.0.1/test [ 146.868826][ T5745] Bluetooth: hci4: command tx timeout [ 146.880755][ T8449] CIFS: VFS: Error connecting to socket. Aborting operation. [ 146.885601][ T8449] CIFS: VFS: cifs_mount failed w/return code = -4 [ 146.945050][ T8454] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 146.966914][ T8457] netlink: 216 bytes leftover after parsing attributes in process `syz.3.884'. [ 147.158998][ T5846] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 147.310335][ T5846] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.314491][ T5812] gretap0 (unregistering): left promiscuous mode [ 147.317793][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.326334][ T5846] usb 6-1: Product: syz [ 147.328784][ T5846] usb 6-1: Manufacturer: syz [ 147.330574][ T5846] usb 6-1: SerialNumber: syz [ 147.436673][ T41] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.974350][ T5812] bond0 (unregistering): left promiscuous mode [ 147.977918][ T5812] bond_slave_0: left promiscuous mode [ 147.997995][ T5812] bond_slave_1: left promiscuous mode [ 148.004825][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.018749][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.024426][ T5812] bond0 (unregistering): Released all slaves [ 148.035244][ T5812] bond1 (unregistering): Released all slaves [ 148.183357][ T5846] usb 6-1: USB disconnect, device number 11 [ 148.251701][ T5812] tipc: Disabling bearer [ 148.257921][ T5812] tipc: Left network mode [ 148.266585][ T8389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.335500][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.356586][ T8389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.392539][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.535720][ T8389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.553193][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.561189][ T8389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.562749][ T8486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.576826][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.584107][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.708777][ T41] usb 6-1: Service connection timeout for: 256 [ 148.716990][ T41] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 148.728346][ T41] ath9k_htc: Failed to initialize the device [ 148.750392][ T5846] usb 6-1: ath9k_htc: USB layer deinitialized [ 148.792463][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 148.792483][ T42] audit: type=1400 audit(1786462532.671:857): avc: denied { write } for pid=8494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.827102][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.838539][ T42] audit: type=1400 audit(1786462532.711:858): avc: denied { bpf } for pid=8497 comm="syz.1.890" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.849701][ T42] audit: type=1400 audit(1786462532.721:859): avc: denied { perfmon } for pid=8497 comm="syz.1.890" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.872843][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.925355][ T5812] team0: left promiscuous mode [ 148.946640][ T5812] team_slave_0: left promiscuous mode [ 148.949751][ T5745] Bluetooth: hci4: command tx timeout [ 148.953612][ T5812] team_slave_1: left promiscuous mode [ 148.996522][ T42] audit: type=1400 audit(1786462532.871:860): avc: denied { write } for pid=8499 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.022147][ T5812] hsr_slave_0: left promiscuous mode [ 149.042517][ T5812] hsr_slave_1: left promiscuous mode [ 149.045335][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.058757][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.063508][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.066685][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.123697][ T5812] veth1_macvtap: left promiscuous mode [ 149.128530][ T5812] veth0_macvtap: left promiscuous mode [ 149.132228][ T5812] veth1_vlan: left promiscuous mode [ 149.135107][ T5812] veth0_vlan: left promiscuous mode [ 149.313815][ T8518] validate_nla: 27 callbacks suppressed [ 149.313837][ T8518] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 149.341617][ T8518] netlink: 756 bytes leftover after parsing attributes in process `syz.0.894'. [ 149.746832][ T8537] SELinux: Context system_u:object_r:hugetlbfs_t:s0 is not valid (left unmapped). [ 149.752717][ T42] audit: type=1400 audit(1786462533.631:861): avc: denied { relabelto } for pid=8536 comm="syz.0.899" name="230" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 149.763658][ T42] audit: type=1400 audit(1786462533.631:862): avc: denied { associate } for pid=8536 comm="syz.0.899" name="230" dev="tmpfs" ino=1236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hugetlbfs_t:s0" [ 149.764049][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 149.791716][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 149.833553][ T8539] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 149.964158][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 150.003922][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.007550][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.027214][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.027557][ T8542] comedi comedi0: Minor 3 could not be opened [ 150.030300][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.037549][ T42] audit: type=1400 audit(1786462533.911:863): avc: denied { write } for pid=5737 comm="syz-executor" name="230" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 150.075066][ T42] audit: type=1400 audit(1786462533.931:864): avc: denied { remove_name } for pid=5737 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 150.089543][ T42] audit: type=1400 audit(1786462533.931:865): avc: denied { write } for pid=5737 comm="syz-executor" name="230" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 150.105597][ T42] audit: type=1400 audit(1786462533.931:866): avc: denied { write } for pid=5737 comm="syz-executor" name="230" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hugetlbfs_t:s0" [ 150.388862][ T5852] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 150.485829][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 150.567252][ T5852] usb 6-1: unable to get BOS descriptor or descriptor too short [ 150.572425][ T5852] usb 6-1: not running at top speed; connect to a high speed hub [ 150.578789][ T5852] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 150.586556][ T5852] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 150.594810][ T5852] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 150.605962][ T5852] usb 6-1: config 14 has no interface number 0 [ 150.618785][ T5852] usb 6-1: config 14 has no interface number 1 [ 150.627455][ T5852] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 150.659482][ T5852] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 150.674300][ T5852] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 150.698549][ T5852] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 150.704431][ T5852] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 150.709023][ T5852] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.712725][ T5852] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.718488][ T5852] usb 6-1: config 14 interface 57 has no altsetting 0 [ 150.723491][ T5852] usb 6-1: config 14 interface 228 has no altsetting 0 [ 150.754664][ T8587] x_tables: duplicate underflow at hook 1 [ 150.776076][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.781540][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.788794][ T5852] usb 6-1: Product: syz [ 150.790472][ T5852] usb 6-1: Manufacturer: syz [ 150.792406][ T5852] usb 6-1: SerialNumber: syz [ 150.934037][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 151.028927][ T5745] Bluetooth: hci4: command tx timeout [ 151.036739][ T8607] ehci-pci 0000:00:1d.7: remove, state 1 [ 151.064973][ T8607] usb usb2: USB disconnect, device number 1 [ 151.074288][ T8607] usb 2-1: USB disconnect, device number 2 [ 151.115361][ T8389] veth0_vlan: entered promiscuous mode [ 151.142666][ T8389] veth1_vlan: entered promiscuous mode [ 151.204034][ T8389] veth0_macvtap: entered promiscuous mode [ 151.223483][ T8389] veth1_macvtap: entered promiscuous mode [ 151.250271][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.259951][ T5852] legousbtower 6-1:14.57: interrupt endpoints not found [ 151.272462][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.309483][ T8607] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 151.380719][ T8466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.385386][ T8466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.428864][ T8466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.436003][ T8466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.460116][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.464305][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.514660][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.534638][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.589060][ T56] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 151.653553][ T5852] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 151.664276][ T5852] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 151.681834][ T8625] netlink: 'syz.4.866': attribute type 8 has an invalid length. [ 151.686260][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 151.702494][ T8625] bond0: entered promiscuous mode [ 151.721047][ T8625] bond_slave_0: entered promiscuous mode [ 151.724077][ T8625] bond_slave_1: entered promiscuous mode [ 151.752275][ T8625] gretap0: entered promiscuous mode [ 151.753327][ T56] usb 1-1: not running at top speed; connect to a high speed hub [ 151.759742][ T56] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 151.762146][ T8625] team0: entered promiscuous mode [ 151.773109][ T8625] team_slave_0: entered promiscuous mode [ 151.775501][ T8625] team_slave_1: entered promiscuous mode [ 151.779863][ T8625] debugfs: 'hsr1' already exists in 'hsr' [ 151.782713][ T8625] Cannot create hsr debugfs directory [ 151.788517][ T56] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 151.793890][ T56] usb 1-1: Product: QEMU USB Tablet [ 151.796283][ T56] usb 1-1: Manufacturer: QEMU [ 151.798366][ T56] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 151.843091][ T56] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input12 [ 151.914039][ T8641] kvm: kvm [8639]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 151.938408][ T56] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 152.029445][ T41] usb 6-1: USB disconnect, device number 12 [ 152.060826][ T41] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 152.198816][ T5822] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.210830][ T8658] Bluetooth: MGMT ver 1.23 [ 152.376202][ T5822] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 152.387093][ T5822] usb 5-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 152.393806][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.423913][ T5822] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 152.427464][ T8660] kvm: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 152.431075][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 152.431136][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 152.434764][ T8660] kvm: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 152.440113][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 152.448178][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 152.458849][ T8660] kvm: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 152.470419][ T5822] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 152.480863][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 152.487441][ T8660] kvm: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 152.500909][ T5822] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 152.504075][ T8660] kvm: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 152.513920][ T5822] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 152.524580][ T8660] kvm_intel: kvm [8659]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 152.754843][ T5852] usb 5-1: USB disconnect, device number 6 [ 152.786114][ T5852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 152.818096][ T5852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 152.832020][ T5852] keyspan 5-1:1.0: device disconnected [ 152.866040][ T8668] xt_l2tp: wrong L2TP version: 4 [ 152.903161][ T8668] netlink: 200 bytes leftover after parsing attributes in process `syz.3.928'. [ 152.989192][ T8674] netlink: 'syz.3.929': attribute type 8 has an invalid length. [ 152.992478][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 153.111242][ T5745] Bluetooth: hci4: command tx timeout [ 153.133901][ T8682] netlink: 48 bytes leftover after parsing attributes in process `syz.4.931'. [ 153.238805][ T8689] netlink: 11396 bytes leftover after parsing attributes in process `syz.1.932'. [ 153.354235][ T8701] syzkaller1: entered promiscuous mode [ 153.356550][ T8701] syzkaller1: entered allmulticast mode [ 153.396576][ T8701] netlink: zone id is out of range [ 153.462730][ T8709] netlink: 'syz.4.942': attribute type 8 has an invalid length. [ 153.466456][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 153.608167][ T5745] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 153.886825][ T8732] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.907079][ T8738] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 153.912896][ T8732] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 153.955467][ T8738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.980019][ T8738] syz_tun: left promiscuous mode [ 153.982626][ T8738] syz_tun: left allmulticast mode [ 153.995391][ T8744] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 153.998313][ T8738] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 154.008220][ T8738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8738 comm=syz.0.951 [ 154.112178][ T8746] netlink: 'syz.4.954': attribute type 8 has an invalid length. [ 154.115926][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 154.521021][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 154.580996][ T8769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 154.585429][ T8769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.957'. [ 154.590893][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 154.590924][ T42] audit: type=1400 audit(1786462538.471:890): avc: denied { write } for pid=8753 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 154.841452][ T42] audit: type=1400 audit(1786462538.721:891): avc: denied { set_context_mgr } for pid=8778 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.915725][ T42] audit: type=1400 audit(1786462538.791:892): avc: denied { create } for pid=8785 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 154.948868][ T42] audit: type=1400 audit(1786462538.801:893): avc: denied { sys_admin } for pid=8785 comm="syz.4.965" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 155.075136][ T8796] ip6erspan0: entered allmulticast mode [ 155.134350][ T8801] netlink: 'syz.3.968': attribute type 21 has an invalid length. [ 155.138279][ T8801] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.143133][ T8801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.148398][ T8801] IPv6: NLM_F_CREATE should be set when creating new route [ 155.151795][ T8801] IPv6: NLM_F_CREATE should be set when creating new route [ 155.155335][ T8801] IPv6: NLM_F_CREATE should be set when creating new route [ 155.196277][ T8807] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 155.343440][ T8812] overlay: filesystem on ./file0 not supported as upperdir [ 155.480158][ T8824] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.481775][ T8825] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.640455][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 155.646237][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 155.653313][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 155.658294][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 155.663771][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 155.669976][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8831 comm=syz.0.978 [ 156.031533][ T8860] Cannot find add_set index 0 as target [ 156.156855][ T42] audit: type=1400 audit(1786462540.031:894): avc: denied { create } for pid=8870 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.294164][ T42] audit: type=1400 audit(1786462540.171:895): avc: denied { mount } for pid=8874 comm="syz.0.992" name="/" dev="hugetlbfs" ino=28929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 156.319701][ T42] audit: type=1400 audit(1786462540.191:896): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 156.674364][ T42] audit: type=1400 audit(1786462540.551:897): avc: denied { ioctl } for pid=8886 comm="syz.0.995" path="socket:[26231]" dev="sockfs" ino=26231 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.833705][ T42] audit: type=1400 audit(1786462540.711:898): avc: denied { map } for pid=8890 comm="syz.4.996" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.877767][ T42] audit: type=1400 audit(1786462540.751:899): avc: denied { mounton } for pid=8896 comm="syz.0.999" path="/261/bus" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 156.983482][ T8898] overlay: ./bus is not a directory [ 157.039262][ T8864] comedi comedi1: reset error (fatal) [ 157.060642][ T8911] openvswitch: netlink: IP tunnel dst address not specified [ 157.173194][ T8918] netlink: 'syz.1.1003': attribute type 8 has an invalid length. [ 157.176679][ T8918] __nla_validate_parse: 4 callbacks suppressed [ 157.176698][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 157.253103][ T8924] vivid-001: disconnect [ 157.263233][ T8923] vivid-001: reconnect [ 157.390834][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.397665][ T8934] bridge_slave_0 (unregistering): left allmulticast mode [ 157.401948][ T8934] bridge_slave_0 (unregistering): left promiscuous mode [ 157.406607][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.458830][ T2321] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 157.532848][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1014'. [ 157.572918][ T8944] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 157.627505][ T8956] input: syz1 as /devices/virtual/input/input13 [ 157.648524][ T2321] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 157.653044][ T2321] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 157.663995][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.675174][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.683228][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.687591][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.691384][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.696376][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.700549][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.705047][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.709870][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.713573][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.716922][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.720719][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.724792][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.728401][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.733144][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.737127][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.741114][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.746117][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.751551][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.754628][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.758530][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.762843][ T2321] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.767219][ T2321] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.772055][ T2321] usb 9-1: config 0 interface 0 has no altsetting 0 [ 157.776752][ T2321] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 157.781493][ T2321] usb 9-1: Product: syz [ 157.783783][ T2321] usb 9-1: Manufacturer: syz [ 157.785578][ T2321] usb 9-1: SerialNumber: syz [ 157.807152][ T2321] usb 9-1: config 0 descriptor?? [ 157.808373][ T8962] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 157.828138][ T2321] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 158.079039][ T5822] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 158.271885][ T5822] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 158.283626][ T5822] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.295047][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 158.299720][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.324450][ T5822] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 158.345930][ T5822] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 158.493132][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 158.689670][ T8962] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 158.695546][ T8962] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 158.703854][ T8962] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 158.811405][ T8962] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 158.821239][ T29] usb 6-1: USB disconnect, device number 13 [ 158.883222][ T29] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 158.887373][ T29] spcp8x5 6-1:1.0: device disconnected [ 159.445351][ T9001] CIFS: Attempting to mount //::1/share [ 159.609726][ T9004] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 159.637738][ T9004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.643877][ T9004] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 159.649936][ T9004] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 159.656415][ T9004] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1030'. [ 159.685066][ T9004] bond0 (unregistering): left promiscuous mode [ 159.688097][ T9004] bond_slave_0: left promiscuous mode [ 159.690914][ T9004] bond_slave_1: left promiscuous mode [ 159.693467][ T9004] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 159.704733][ T9004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.713479][ T9004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.724766][ T9004] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 159.731689][ T9004] bond0 (unregistering): Released all slaves [ 160.041906][ T9011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1032'. [ 160.051404][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'. [ 160.142282][ T29] usb 9-1: USB disconnect, device number 2 [ 160.166391][ T29] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 160.225579][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 160.225629][ T42] audit: type=1400 audit(1786462544.101:1019): avc: denied { block_suspend } for pid=9019 comm="syz.3.1034" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.247064][ T9021] netlink: 'syz.3.1034': attribute type 28 has an invalid length. [ 160.251570][ T9021] netlink: 'syz.3.1034': attribute type 3 has an invalid length. [ 160.259106][ T9021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1034'. [ 160.267435][ T9001] CIFS: VFS: Error connecting to socket. Aborting operation. [ 160.273936][ T9001] CIFS: VFS: cifs_mount failed w/return code = -4 [ 160.381080][ T42] audit: type=1400 audit(1786462544.261:1020): avc: denied { read append } for pid=9022 comm="syz.0.1035" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.406718][ T42] audit: type=1400 audit(1786462544.261:1021): avc: denied { open } for pid=9022 comm="syz.0.1035" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.419526][ T42] audit: type=1400 audit(1786462544.261:1022): avc: denied { ioctl } for pid=9022 comm="syz.0.1035" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.431963][ T42] audit: type=1400 audit(1786462544.271:1023): avc: denied { getopt } for pid=9025 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 160.448931][ T9029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1037'. [ 160.461133][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.472824][ T9029] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1037'. [ 160.480733][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.484326][ T9029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.490716][ T9029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1037'. [ 160.506676][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.712312][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.738535][ T42] audit: type=1400 audit(1786462544.611:1024): avc: denied { listen } for pid=9038 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.739223][ T9039] program syz.1.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.753296][ T9039] sg_write: data in/out 1701604413/251 bytes for SCSI command 0x0-- guessing data in; [ 160.753296][ T9039] program syz.1.1040 not setting count and/or reply_len properly [ 160.779296][ T9037] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.782522][ T9039] IPv6: sit3: Disabled Multicast RS [ 160.791407][ T42] audit: type=1400 audit(1786462544.671:1025): avc: denied { connect } for pid=9038 comm="syz.1.1040" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.804784][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.853360][ T42] audit: type=1400 audit(1786462544.731:1026): avc: denied { write } for pid=9045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.945763][ T42] audit: type=1400 audit(1786462544.821:1027): avc: denied { write } for pid=9051 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.066831][ T9055] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.068254][ T42] audit: type=1400 audit(1786462544.941:1028): avc: denied { write } for pid=9054 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.257820][ T9069] netlink: 'syz.3.1050': attribute type 8 has an invalid length. [ 161.326231][ T9071] ufs: You didn't specify the type of your ufs filesystem [ 161.326231][ T9071] [ 161.326231][ T9071] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 161.326231][ T9071] [ 161.326231][ T9071] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 161.348445][ T9071] ufs: failed to set blocksize [ 161.352350][ T9076] 9p: Bad value for 'wfdno' [ 161.468836][ T29] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 161.506217][ T9080] CIFS: Attempting to mount //127.0.0.1/test [ 161.600082][ T29] usb 5-1: device descriptor read/64, error -71 [ 161.762492][ T9095] kvm: kvm [9077]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 161.769131][ T9095] kvm: kvm [9077]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 161.784834][ T9097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.794344][ T9097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.804275][ T9095] kvm: kvm [9077]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 161.835511][ T9095] kvm: kvm [9077]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 161.840200][ T9095] kvm: kvm [9077]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 161.848844][ T29] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 161.884284][ T9097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.890761][ T9097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.978909][ T29] usb 5-1: device descriptor read/64, error -71 [ 162.002973][ T9097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.007466][ T9097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.099212][ T29] usb usb5-port1: attempt power cycle [ 162.290887][ T9080] CIFS: VFS: Error connecting to socket. Aborting operation. [ 162.294323][ T9080] CIFS: VFS: cifs_mount failed w/return code = -4 [ 162.308847][ T8466] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.312596][ T8466] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.335512][ T8466] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.348950][ T8466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.357591][ T8466] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.363154][ T8466] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.368003][ T8466] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.371612][ T8466] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.446452][ T9107] __nla_validate_parse: 5 callbacks suppressed [ 162.446468][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1059'. [ 162.447085][ T9108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1059'. [ 162.448797][ T29] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 162.480147][ T29] usb 5-1: device descriptor read/8, error -71 [ 162.548247][ T9112] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1060'. [ 162.641886][ T9117] netlink: 'syz.3.1062': attribute type 8 has an invalid length. [ 162.645412][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 162.728786][ T29] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 162.759597][ T29] usb 5-1: device descriptor read/8, error -71 [ 162.869522][ T29] usb usb5-port1: unable to enumerate USB device [ 163.051920][ T9125] gtp0: entered allmulticast mode [ 163.226497][ T9148] netlink: 'syz.3.1072': attribute type 8 has an invalid length. [ 163.229843][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 163.324423][ T9152] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.455153][ T9165] input: syz0 as /devices/virtual/input/input14 [ 163.680302][ T9184] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1078'. [ 163.788336][ T9192] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 163.808426][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 163.819614][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 163.823800][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1079'. [ 164.180793][ T9220] 9p: Bad value for 'rfdno' [ 164.395984][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1082'. [ 164.964892][ T9272] ±ÿ: renamed from lo (while UP) [ 165.016992][ T9275] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 165.048899][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.438820][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 165.601406][ T9291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.641231][ T9291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.714506][ T9300] program syz.3.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.890659][ T9311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9311 comm=syz.4.1099 [ 165.977241][ T9320] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 166.011669][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 166.011684][ T42] audit: type=1400 audit(1786462549.891:1046): avc: denied { create } for pid=9321 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.027572][ T42] audit: type=1400 audit(1786462549.891:1047): avc: denied { setopt } for pid=9321 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.027620][ T42] audit: type=1400 audit(1786462549.891:1048): avc: denied { bind } for pid=9321 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.027655][ T42] audit: type=1400 audit(1786462549.891:1049): avc: denied { getopt } for pid=9321 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.342399][ T42] audit: type=1400 audit(1786462550.221:1050): avc: denied { getopt } for pid=9342 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.569332][ T9361] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 166.572865][ T9361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.583475][ T9361] vhci_hcd vhci_hcd.0: Device attached [ 166.596560][ T9361] tipc: Invalid UDP bearer configuration [ 166.596611][ T9361] tipc: Enabling of bearer rejected, failed to enable media [ 166.615612][ T9361] syz.1.1114 (9361): /proc/9360/oom_adj is deprecated, please use /proc/9360/oom_score_adj instead. [ 166.771427][ T9378] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 166.818822][ T55] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 166.924910][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.930816][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.166585][ T9385] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 167.174238][ T9362] vhci_hcd: connection reset by peer [ 167.186829][ T8466] vhci_hcd vhci_hcd.1: stop threads [ 167.194457][ T8466] vhci_hcd vhci_hcd.1: release socket [ 167.202112][ T8466] vhci_hcd vhci_hcd.1: disconnect device [ 167.521822][ T42] audit: type=1400 audit(1786462551.401:1051): avc: denied { call } for pid=9401 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.530514][ T42] audit: type=1400 audit(1786462551.401:1052): avc: denied { transfer } for pid=9401 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 168.106205][ T9411] __nla_validate_parse: 7 callbacks suppressed [ 168.106230][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 168.116721][ T9411] bridge_slave_1: left allmulticast mode [ 168.120046][ T9411] bridge_slave_1: left promiscuous mode [ 168.122469][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.240187][ T9414] netlink: 'syz.3.1129': attribute type 15 has an invalid length. [ 168.272358][ T42] audit: type=1400 audit(1786462552.151:1053): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.332734][ T42] audit: type=1400 audit(1786462552.211:1054): avc: denied { lock } for pid=9415 comm="syz.0.1130" path="socket:[30950]" dev="sockfs" ino=30950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.348600][ T42] audit: type=1400 audit(1786462552.221:1055): avc: denied { wake_alarm } for pid=9415 comm="syz.0.1130" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.371519][ T9416] netlink: 'syz.0.1130': attribute type 4 has an invalid length. [ 168.378051][ T9416] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1130'. [ 168.387881][ T9416] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1130'. [ 168.447881][ T9422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1133'. [ 168.481760][ T9425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1134'. [ 168.717935][ T9431] program syz.1.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.721891][ T9431] ata1.00: invalid service action 3 [ 168.762370][ T9431] can0: slcan on ttyS3. [ 168.850071][ T9430] can0 (unregistered): slcan off ttyS3. [ 169.170642][ T9471] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 169.188877][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 169.246804][ T9467] kAFS: No cell specified [ 169.401953][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1151'. [ 169.484670][ T65] block nbd2: Receive control failed (result -107) [ 169.665075][ T9504] "syz.0.1156" (9504) uses obsolete ecb(arc4) skcipher [ 169.665907][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1157'. [ 169.763575][ T9517] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 169.766895][ T9517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1160'. [ 169.824678][ T9523] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1162'. [ 169.930692][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 169.949275][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.984640][ T9528] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 169.990005][ T9527] syzkaller0: entered promiscuous mode [ 169.992926][ T9527] syzkaller0: entered allmulticast mode [ 170.394369][ T9541] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 170.401408][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.644625][ T9550] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 170.684676][ T9550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.704300][ T9550] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 170.744197][ T9550] bond5: (slave dummy0): Enslaving as a backup interface with a down link [ 170.800517][ T5812] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.888757][ T5852] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 170.929027][ T5812] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.947716][ T9564] tmpfs: Unknown parameter 'ooswap' [ 170.954854][ T9564] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 171.054776][ T9566] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 171.059642][ T5852] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 171.060778][ T5852] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.068596][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 171.070155][ T42] audit: type=1400 audit(1786462555.944:1063): avc: denied { lock } for pid=9565 comm="syz.1.1177" path="/dev/nvme-fabrics" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.087785][ T5852] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.096402][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.099943][ T5852] usb 9-1: Product: syz [ 171.101911][ T5852] usb 9-1: Manufacturer: syz [ 171.104301][ T5852] usb 9-1: SerialNumber: syz [ 171.114292][ T5852] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 171.122611][ T5852] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 171.130187][ T5852] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 171.204476][ T9575] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 171.251737][ T9579] ip_tables: iptables: counters copy to user failed while replacing table [ 171.798214][ T9594] xfrm1: entered allmulticast mode [ 171.861729][ T9596] echo interval is out of bounds [ 171.861729][ T9596] [ 171.865196][ T9596] CIFS: VFS: echo interval is out of bounds [ 171.978863][ T55] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 172.123414][ T9605] netlink: 'syz.1.1190': attribute type 61 has an invalid length. [ 172.141384][ T9607] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 172.147984][ T9607] xt_hashlimit: size too large, truncated to 1048576 [ 172.154918][ T42] audit: type=1400 audit(1786462557.034:1064): avc: denied { append } for pid=9604 comm="syz.1.1190" name="blocks" dev="configfs" ino=33387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 172.170104][ T42] audit: type=1800 audit(1786462557.034:1065): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1190" name="blocks" dev="configfs" ino=33387 res=0 errno=0 [ 172.207851][ T9608] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 172.229745][ T9608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.247475][ T9608] bond6: (slave geneve2): making interface the new active one [ 172.255283][ T9608] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 172.653227][ T42] audit: type=1400 audit(1786462557.534:1066): avc: denied { write } for pid=9628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.735977][ T9633] netlink: 'syz.1.1198': attribute type 19 has an invalid length. [ 172.747958][ T42] audit: type=1400 audit(1786462557.624:1067): avc: denied { write } for pid=9631 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.796207][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 172.884366][ T42] audit: type=1400 audit(1786462557.764:1068): avc: denied { write } for pid=9640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.966128][ T42] audit: type=1400 audit(1786462557.844:1069): avc: denied { write } for pid=9654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.037966][ T42] audit: type=1400 audit(1786462557.914:1070): avc: denied { mounton } for pid=9655 comm="syz.0.1205" path="/320/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 173.067183][ T9664] FAT-fs (nbd3): unable to read boot sector [ 173.130868][ T9672] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 173.437881][ T9687] __nla_validate_parse: 7 callbacks suppressed [ 173.437899][ T9687] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1213'. [ 173.467398][ T5822] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x103) [ 173.569363][ T9692] syzkaller1: entered promiscuous mode [ 173.571602][ T9692] syzkaller1: entered allmulticast mode [ 173.607617][ T9694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9694 comm=syz.1.1214 [ 173.628806][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 173.641406][ T9694] ip6erspan0: entered promiscuous mode [ 173.835918][ T42] audit: type=1400 audit(1786462558.714:1071): avc: denied { setopt } for pid=9702 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.948770][ T5822] usb 9-1: USB disconnect, device number 3 [ 173.967793][ T5822] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 173.983218][ T5822] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 173.999514][ T5822] ti_usb_3410_5052 9-1:2.0: device disconnected [ 174.081830][ T42] audit: type=1326 audit(1786462558.964:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.4.1218" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45d959e0d9 code=0x0 [ 174.142011][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 174.401917][ T9713] program syz.0.1219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.405992][ T9713] ata1.00: non-matching transfer count (-1459617688/0) [ 174.480181][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 174.510802][ T9715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16417 sclass=netlink_route_socket pid=9715 comm=syz.0.1220 [ 174.798970][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.811933][ T5739] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 174.853959][ T1036] bridge0: entered promiscuous mode [ 174.892577][ T9731] tipc: Enabling of bearer rejected, failed to enable media [ 174.897563][ T9734] netlink: 'syz.1.1228': attribute type 2 has an invalid length. [ 174.924822][ T9734] : entered promiscuous mode [ 175.106962][ T9753] capability: warning: `syz.0.1235' uses 32-bit capabilities (legacy support in use) [ 175.558936][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 175.734468][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.740539][ T34] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=42.26 [ 175.749620][ T34] usb 6-1: config 0 has no interfaces? [ 175.758813][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.762394][ T34] usb 6-1: Product: syz [ 175.764640][ T34] usb 6-1: Manufacturer: syz [ 175.767129][ T34] usb 6-1: SerialNumber: syz [ 175.776389][ T34] usb 6-1: config 0 descriptor?? [ 176.021378][ T55] usb 6-1: USB disconnect, device number 14 [ 176.066340][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1241'. [ 176.086203][ T9780] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 176.089334][ T9780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1242'. [ 176.183762][ T9790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1247'. [ 176.206030][ T9785] netlink: 'syz.1.1245': attribute type 2 has an invalid length. [ 176.352598][ T9806] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1250'. [ 176.371147][ T9806] EXT4-fs (nbd4): unable to read superblock [ 176.385786][ T9810] jffs2: notice: (9810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 176.393074][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 176.395956][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 176.490263][ T9820] netlink: 'syz.0.1254': attribute type 10 has an invalid length. [ 176.496081][ T9820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1254'. [ 176.570239][ T9822] netlink: 'syz.3.1256': attribute type 9 has an invalid length. [ 176.609089][ T55] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 176.613141][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 176.613159][ T42] audit: type=1400 audit(1786462561.494:1078): avc: denied { mounton } for pid=9825 comm="syz.0.1257" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 176.631547][ T42] audit: type=1400 audit(1786462561.494:1079): avc: denied { create } for pid=9828 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 176.646604][ T9826] overlayfs: upper fs does not support tmpfile. [ 176.684184][ T9831] program syz.4.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.730339][ T41] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 176.738924][ T55] usb 6-1: device descriptor read/64, error -71 [ 176.753529][ T41] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 176.767965][ T42] audit: type=1400 audit(1786462561.644:1080): avc: denied { create } for pid=9840 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.939550][ T42] audit: type=1400 audit(1786462561.824:1081): avc: denied { unmount } for pid=9828 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.948235][ T42] audit: type=1400 audit(1786462561.824:1082): avc: denied { ioctl } for pid=9828 comm="syz.3.1258" path="socket:[32419]" dev="sockfs" ino=32419 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 176.961045][ T42] audit: type=1400 audit(1786462561.834:1083): avc: denied { write } for pid=9828 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.008873][ T55] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 177.032029][ T41] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 177.148813][ T55] usb 6-1: device descriptor read/64, error -71 [ 177.269375][ T55] usb usb6-port1: attempt power cycle [ 177.553939][ T41] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 177.608974][ T55] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 177.629494][ T55] usb 6-1: device descriptor read/8, error -71 [ 177.798540][ T9850] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 177.803503][ T42] audit: type=1400 audit(1786462562.684:1084): avc: denied { execute } for pid=9849 comm="syz.3.1263" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 177.829576][ T9831] ceph: No mds server is up or the cluster is laggy [ 177.888717][ T55] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 177.909525][ T55] usb 6-1: device descriptor read/8, error -71 [ 177.999385][ T42] audit: type=1400 audit(1786462562.884:1085): avc: denied { write } for pid=9853 comm="syz.3.1264" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.033488][ T55] usb usb6-port1: unable to enumerate USB device [ 178.086092][ T9861] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 178.517184][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.522716][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.523008][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.527013][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.550231][ T42] audit: type=1400 audit(1786462563.424:1086): avc: denied { write } for pid=9887 comm="syz.4.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.670566][ T9891] __nla_validate_parse: 1 callbacks suppressed [ 178.670589][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 178.677041][ T9891] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 178.740917][ T9891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 178.871356][ T9894] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 179.827471][ T42] audit: type=1400 audit(1786462564.704:1087): avc: denied { setopt } for pid=9914 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.908848][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 179.989149][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.114139][ T9926] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 180.117916][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1284'. [ 180.202586][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 180.206664][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 180.325206][ T9936] echo interval is out of bounds [ 180.325206][ T9936] [ 180.328566][ T9936] CIFS: VFS: echo interval is out of bounds [ 180.374501][ T9938] 8021q: VLANs not supported on ip6_vti0 [ 180.667538][ T9915] orangefs_mount: mount request failed with -4 [ 181.118598][ T9960] infiniband syz2: set active [ 181.122309][ T9960] infiniband syz2: added veth0 [ 181.151317][ T9960] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 181.160949][ T9960] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 181.169849][ T9960] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 181.214631][ T9960] RDS/IB: syz2: added [ 181.217379][ T9960] smc: adding ib device syz2 with port count 1 [ 181.220848][ T9960] smc: ib device syz2 port 1 has no pnetid [ 181.403076][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.658261][ T9985] random: crng reseeded on system resumption [ 181.842758][ T9996] tipc: Cannot configure node identity twice [ 181.927925][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 181.933511][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 182.226421][ T55] bridge0: entered promiscuous mode [ 182.429233][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1314'. [ 182.539408][T10030] xt_ipcomp: unknown flags 1D [ 182.542588][T10031] xt_ipcomp: unknown flags 1D [ 182.576018][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1315'. [ 182.587045][T10032] overlayfs: failed to resolve './bus': -2 [ 182.700785][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 182.700821][ T42] audit: type=1400 audit(1786462567.584:1096): avc: denied { getattr } for pid=10045 comm="syz.1.1320" path="pid:[4026532862]" dev="nsfs" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.754975][T10048] tmpfs: Bad value for 'mpol' [ 182.765984][T10048] veth0_to_bond: entered allmulticast mode [ 182.954364][T10060] jffs2: notice: (10060) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 183.148788][ T2321] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 183.224334][ T42] audit: type=1400 audit(1786462568.094:1097): avc: denied { read append } for pid=10078 comm="syz.0.1332" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 183.235131][ T42] audit: type=1400 audit(1786462568.104:1098): avc: denied { open } for pid=10078 comm="syz.0.1332" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 183.285212][T10081] configfs-gadget.g1 gadget.0: HOST MAC 32:76:0b:c5:29:76 [ 183.292201][T10081] configfs-gadget.g1 gadget.0: MAC a2:25:93:9e:71:3f [ 183.328897][ T2321] usb 9-1: Using ep0 maxpacket: 16 [ 183.337770][ T2321] usb 9-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 183.344667][ T2321] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.351111][ T2321] usb 9-1: config 1 interface 0 has no altsetting 0 [ 183.356802][ T2321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.361639][ T2321] usb 9-1: Product: â°Š [ 183.363851][ T2321] usb 9-1: Manufacturer: ⿀풌⩺팡記附堷寰拃鰘ϼጹ빹닭秮꺿녯軥歬é’㿟ㅿ髲ጦ˲㣨઀晛醙ۊ㞡殲拻ꪧ붢瘷ԅྼ铕㕌㤷Ꚋ [ 183.384232][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.387911][ T2321] usb 9-1: SerialNumber: syz [ 183.395251][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.437481][ T42] audit: type=1400 audit(1786462568.314:1099): avc: denied { write } for pid=10086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.476156][ T42] audit: type=1800 audit(1786462568.354:1100): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1330" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 183.509951][ T42] audit: type=1400 audit(1786462568.394:1101): avc: denied { write } for pid=10091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.534127][T10093] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 183.537840][T10093] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1334'. [ 183.538917][ T1036] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.648608][ T2321] usbhid 9-1:1.0: can't add hid device: -71 [ 183.658860][ T2321] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 183.671477][ T2321] usb 9-1: USB disconnect, device number 4 [ 183.686516][T10100] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.691070][ T1036] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 183.696521][ T1036] usb 5-1: Dual-Role OTG device on HNP port [ 183.700231][ T1036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.718275][ T42] audit: type=1400 audit(1786462568.594:1102): avc: denied { write } for pid=10099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.734850][ T1036] usb 5-1: No union descriptors [ 183.742547][ T1036] gspca_main: spca501-2.14.0 probing 0000:0000 [ 183.746089][ T1036] gspca_spca501: reg write: error -32 [ 183.749601][ T1036] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 183.754846][ T1036] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 183.793032][ T42] audit: type=1400 audit(1786462568.674:1103): avc: denied { write } for pid=10103 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.817558][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 183.824310][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 184.111377][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.132463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.193168][T10129] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 184.197190][T10116] nvme nvme0: failed to connect socket: -111 [ 184.332779][T10129] ipvlan0: entered allmulticast mode [ 184.339481][T10129] veth0_vlan: entered allmulticast mode [ 184.358862][T10129] team0: Device ipvlan0 failed to register rx_handler [ 184.496227][ T42] audit: type=1400 audit(1786462569.374:1104): avc: denied { create_files_as } for pid=10141 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 184.517226][T10146] netlink: 'syz.3.1350': attribute type 10 has an invalid length. [ 184.519456][T10142] netfs: Cache "CacheFiles" added (type cachefiles) [ 184.530138][T10142] CacheFiles: File cache on CacheFiles registered [ 184.535755][T10141] CacheFiles: File cache on CacheFiles unregistering [ 184.539550][T10141] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 184.590888][T10151] xt_bpf: check failed: parse error [ 184.687067][T10160] syzkaller0: entered promiscuous mode [ 184.692453][T10160] syzkaller0: entered allmulticast mode [ 184.697823][T10162] netlink: 520 bytes leftover after parsing attributes in process `syz.3.1354'. [ 184.704921][T10165] netlink: 520 bytes leftover after parsing attributes in process `syz.3.1354'. [ 184.753132][T10171] program syz.4.1356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.948851][ T42] audit: type=1400 audit(1786462569.824:1105): avc: denied { connect } for pid=10181 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.123580][T10189] comedi comedi2: dt2817: I/O base address or length out of range [ 185.410370][T10202] sctp: [Deprecated]: syz.1.1369 (pid 10202) Use of int in maxseg socket option. [ 185.410370][T10202] Use struct sctp_assoc_value instead [ 185.476283][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.480389][T10205] netlink: 'syz.4.1368': attribute type 5 has an invalid length. [ 185.483879][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.501430][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.506061][T10205] netlink: 'syz.4.1368': attribute type 5 has an invalid length. [ 185.510117][ T8466] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.510167][ T8466] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.510200][ T8466] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.510235][ T8466] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.531882][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.538757][T10205] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.543456][T10205] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1368'. [ 185.597530][T10208] netlink: 'syz.4.1372': attribute type 10 has an invalid length. [ 185.761124][ T5745] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 185.959878][ T5852] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 186.132292][ T5852] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 186.139186][ T5852] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 186.143205][ T5852] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.150085][ T5852] usb 9-1: config 0 has no interfaces? [ 186.152891][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.160037][ T5852] usb 9-1: config 0 descriptor?? [ 186.244637][T10233] vlan2: entered allmulticast mode [ 186.257632][T10235] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 186.388028][ T5852] usb 9-1: USB disconnect, device number 5 [ 186.442553][T10250] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-1/1-0002' [ 186.455175][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.0.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.455211][T10250] Tainted: [L]=SOFTLOCKUP [ 186.455218][T10250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.455238][T10250] Call Trace: [ 186.455253][T10250] [ 186.455262][T10250] dump_stack_lvl+0x100/0x190 [ 186.455388][T10250] sysfs_warn_dup.cold+0x1c/0x28 [ 186.455439][T10250] sysfs_create_dir_ns+0x24b/0x2b0 [ 186.455492][T10250] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 186.455510][T10250] ? find_held_lock+0x2b/0x80 [ 186.455664][T10250] ? kobject_add_internal+0x25f/0x930 [ 186.455715][T10250] ? kobject_add_internal+0x25f/0x930 [ 186.455736][T10250] ? do_raw_spin_unlock+0x145/0x1e0 [ 186.455765][T10250] kobject_add_internal+0x2c8/0x930 [ 186.455793][T10250] kobject_add+0x16a/0x1e0 [ 186.455809][T10250] ? __pfx_kobject_add+0x10/0x10 [ 186.455826][T10250] ? __kasan_kmalloc+0xaa/0xb0 [ 186.455865][T10250] ? lockdep_init_map_type+0x5c/0x250 [ 186.455889][T10250] ? class_to_subsys+0x114/0x150 [ 186.455947][T10250] device_add+0x294/0x1970 [ 186.455975][T10250] ? lockdep_init_map_type+0x5c/0x250 [ 186.455999][T10250] ? __pfx_device_add+0x10/0x10 [ 186.456023][T10250] ? lockdep_init_map_type+0x5c/0x250 [ 186.456048][T10250] ? __init_waitqueue_head+0xca/0x150 [ 186.456081][T10250] i2c_new_client_device+0x660/0xd30 [ 186.456128][T10250] new_device_store+0x20f/0x420 [ 186.456156][T10250] ? __lock_acquire+0x49f/0x1a40 [ 186.456181][T10250] ? __pfx_new_device_store+0x10/0x10 [ 186.456217][T10250] ? find_held_lock+0x2b/0x80 [ 186.456234][T10250] ? sysfs_file_kobj+0xe4/0x290 [ 186.456261][T10250] ? sysfs_file_kobj+0xe4/0x290 [ 186.456291][T10250] ? __pfx_new_device_store+0x10/0x10 [ 186.456315][T10250] dev_attr_store+0x58/0x80 [ 186.456338][T10250] ? __pfx_dev_attr_store+0x10/0x10 [ 186.456360][T10250] sysfs_kf_write+0xf2/0x150 [ 186.456377][T10250] kernfs_fop_write_iter+0x3e0/0x5f0 [ 186.456398][T10250] ? __pfx_sysfs_kf_write+0x10/0x10 [ 186.456417][T10250] vfs_write+0x6ac/0x1050 [ 186.456442][T10250] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 186.456467][T10250] ? __pfx_vfs_write+0x10/0x10 [ 186.456498][T10250] ksys_write+0x12a/0x250 [ 186.456513][T10250] ? __pfx_ksys_write+0x10/0x10 [ 186.456552][T10250] do_syscall_64+0x115/0x870 [ 186.456573][T10250] ? clear_bhb_loop+0x70/0xc0 [ 186.456594][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.456612][T10250] RIP: 0033:0x7f0e1e19e0d9 [ 186.456631][T10250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.456647][T10250] RSP: 002b:00007f0e1f035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.456675][T10250] RAX: ffffffffffffffda RBX: 00007f0e1e425fa0 RCX: 00007f0e1e19e0d9 [ 186.456689][T10250] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000004 [ 186.456700][T10250] RBP: 00007f0e1e235024 R08: 0000000000000000 R09: 0000000000000000 [ 186.456711][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.456719][T10250] R13: 00007f0e1e426038 R14: 00007f0e1e425fa0 R15: 00007fff000acea8 [ 186.456742][T10250] [ 186.457965][T10250] kobject: kobject_add_internal failed for 1-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.601689][T10250] i2c i2c-1: Failed to register i2c client isp1301 at 0x02 (-17) [ 186.743132][T10262] netlink: 'syz.1.1391': attribute type 10 has an invalid length. [ 186.961655][T10279] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20001 [ 187.039205][T10287] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 187.218175][T10285] kvm: MONITOR instruction emulated as NOP! [ 187.359684][T10310] bond0: entered allmulticast mode [ 187.361974][T10310] geneve2: entered allmulticast mode [ 187.842500][T10324] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 187.859995][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 187.860024][ T42] audit: type=1400 audit(1786462572.744:1116): avc: denied { write } for pid=10323 comm="syz.3.1412" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 187.917188][T10325] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 188.778389][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.794737][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.800069][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.805885][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.809979][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.843193][T10346] tipc: Started in network mode [ 188.846947][T10346] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 188.858509][ T42] audit: type=1400 audit(1786462573.734:1117): avc: denied { watch } for pid=10345 comm="syz.3.1422" path="/syzcgroup/unified/syz3/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 188.964278][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.981391][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.576575][T10385] netlink: 'syz.3.1426': attribute type 2 has an invalid length. [ 189.591563][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.757497][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.761907][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.766865][T10341] bridge_slave_0: entered allmulticast mode [ 189.774571][T10341] bridge_slave_0: entered promiscuous mode [ 189.781902][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.785904][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.789793][T10341] bridge_slave_1: entered allmulticast mode [ 189.794440][T10341] bridge_slave_1: entered promiscuous mode [ 189.844838][T10341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.852035][T10341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.925050][T10341] team0: Port device team_slave_0 added [ 189.935912][T10341] team0: Port device team_slave_1 added [ 189.963099][T10398] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 189.966081][T10341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.968396][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.968780][T10398] netlink: 'syz.3.1430': attribute type 8 has an invalid length. [ 189.980418][T10341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.982546][T10341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.002363][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.005115][T10398] __nla_validate_parse: 8 callbacks suppressed [ 190.005136][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 190.015532][T10341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.094007][T10341] hsr_slave_0: entered promiscuous mode [ 190.097938][T10341] hsr_slave_1: entered promiscuous mode [ 190.098615][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.103215][T10341] debugfs: 'hsr0' already exists in 'hsr' [ 190.106406][T10341] Cannot create hsr debugfs directory [ 190.106653][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.345957][T10341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.353170][T10341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.357390][T10341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.367032][T10341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.374673][T10341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.395039][T10341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.399860][T10341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.408061][T10341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.498869][ T5822] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 190.511736][T10341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.537147][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.547512][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.551196][ T6994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.571942][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.575170][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.648829][ T5822] usb 9-1: Using ep0 maxpacket: 8 [ 190.661067][ T5822] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.671552][ T5822] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.680209][ T5822] usb 9-1: config 0 has no interface number 0 [ 190.685301][ T5822] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.697309][ T5822] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.702500][ T5822] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.705603][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 190.706949][ T5822] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.717826][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.732365][ T5822] usb 9-1: config 0 descriptor?? [ 190.748116][ T5822] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 190.858553][T10426] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 190.869040][ T5745] Bluetooth: hci0: command tx timeout [ 190.926365][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.932151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.951199][ T5822] usb 9-1: USB disconnect, device number 6 [ 190.971908][ T5822] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 191.030846][ T42] audit: type=1800 audit(1786462575.904:1118): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1428" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 191.048355][ T42] audit: type=1400 audit(1786462575.924:1119): avc: denied { listen } for pid=10429 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 191.064320][T10341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.434407][T10341] veth0_vlan: entered promiscuous mode [ 191.449894][T10341] veth1_vlan: entered promiscuous mode [ 191.483958][T10341] veth0_macvtap: entered promiscuous mode [ 191.493769][T10341] veth1_macvtap: entered promiscuous mode [ 191.519893][T10341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.532797][T10341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.721022][ T5784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.725095][ T5784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.779811][ T5811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.794974][ T5811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.889351][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.893728][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.919548][T10444] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 192.008832][ T6994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.013236][ T6994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.027524][ T42] audit: type=1400 audit(1786462576.904:1120): avc: denied { mounton } for pid=10341 comm="syz-executor" path="/syzkaller.C13bJQ/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 192.074923][ T6991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.079069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.197800][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 192.260357][T10456] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 192.278971][T10456] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1440'. [ 192.400276][ T42] audit: type=1400 audit(1786462577.284:1121): avc: denied { ioctl } for pid=10460 comm="syz.5.1442" path="socket:[37771]" dev="sockfs" ino=37771 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.447765][ T42] audit: type=1400 audit(1786462577.284:1122): avc: denied { bind } for pid=10460 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.530620][T10468] netlink: 'syz.3.1443': attribute type 8 has an invalid length. [ 192.534482][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 192.869032][ T55] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 192.950187][ T5745] Bluetooth: hci0: command tx timeout [ 193.030704][ T55] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 193.041436][ T55] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.056460][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.063380][ T55] usb 10-1: Product: syz [ 193.065338][ T55] usb 10-1: Manufacturer: syz [ 193.072521][ T55] usb 10-1: SerialNumber: syz [ 193.130519][T10500] netlink: 'syz.4.1454': attribute type 8 has an invalid length. [ 193.131819][T10501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1453'. [ 193.138503][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 193.471101][ T42] audit: type=1400 audit(1786462578.354:1123): avc: denied { name_bind } for pid=10514 comm="syz.4.1459" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 193.514182][T10513] xt_NFQUEUE: number of total queues is 0 [ 193.586067][ T55] usblp 10-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 193.611286][ T55] usb 10-1: USB disconnect, device number 2 [ 193.660972][ T55] usblp1: removed [ 194.249321][T10542] netlink: 'syz.3.1464': attribute type 8 has an invalid length. [ 194.265629][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 194.275880][ T42] audit: type=1400 audit(1786462579.154:1124): avc: denied { write } for pid=10535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.330820][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.335250][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.396630][ T42] audit: type=1400 audit(1786462579.274:1125): avc: denied { write } for pid=10548 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.606039][T10562] Bluetooth: MGMT ver 1.23 [ 194.723848][T10564] netlink: Failed to add helper -22 [ 194.731766][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.028970][ T5745] Bluetooth: hci0: command tx timeout [ 195.070532][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 195.186227][ T42] audit: type=1400 audit(1786462580.054:1126): avc: denied { bind } for pid=10591 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.227488][ T42] audit: type=1400 audit(1786462580.054:1127): avc: denied { connect } for pid=10591 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.278154][ T42] audit: type=1400 audit(1786462580.154:1128): avc: granted { setsecparam } for pid=10591 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 195.305445][ T42] audit: type=1400 audit(1786462580.184:1129): avc: denied { write } for pid=10594 comm="syz.0.1477" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 195.316721][T10595] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 195.325425][T10595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.333080][ T34] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.338874][ T34] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.344453][ T34] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.350415][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.355968][T10595] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1477'. [ 195.367541][T10576] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.389217][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.405684][ T42] audit: type=1400 audit(1786462580.284:1130): avc: denied { connect } for pid=10596 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 195.414785][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 195.581224][ T2321] usb 10-1: USB disconnect, device number 3 [ 195.695166][T10609] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 195.695621][ T42] audit: type=1400 audit(1786462580.574:1131): avc: denied { read write } for pid=10574 comm="syz.5.1470" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.695670][ T42] audit: type=1400 audit(1786462580.574:1132): avc: denied { open } for pid=10574 comm="syz.5.1470" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.957450][T10621] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 195.998335][T10621] bond2: entered promiscuous mode [ 196.000963][T10621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.027939][T10621] bond2: (slave bridge1): making interface the new active one [ 196.032121][T10621] bridge1: entered promiscuous mode [ 196.036421][T10621] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 196.140693][ T2321] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 196.329062][ T2321] usb 10-1: Using ep0 maxpacket: 8 [ 196.336060][ T2321] usb 10-1: unable to get BOS descriptor or descriptor too short [ 196.339762][ T2321] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 196.344379][ T2321] usb 10-1: no configurations [ 196.346543][ T2321] usb 10-1: can't read configurations, error -22 [ 196.599506][T10653] atomic_op ffff888027153198 conn xmit_atomic 0000000000000000 [ 196.858798][ T34] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 196.997872][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 196.998958][ T34] usb 9-1: device descriptor read/64, error -71 [ 197.120297][ T5745] Bluetooth: hci0: command tx timeout [ 197.258786][ T34] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 197.409572][ T34] usb 9-1: device descriptor read/64, error -71 [ 197.519130][ T34] usb usb9-port1: attempt power cycle [ 197.868767][ T34] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 197.889534][ T34] usb 9-1: device descriptor read/8, error -71 [ 198.130094][ T34] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 198.169674][ T34] usb 9-1: device descriptor read/8, error -71 [ 198.205606][T10701] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 198.214909][T10702] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 198.218389][T10701] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 198.222860][T10702] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1502'. [ 198.226630][T10701] netlink: 46 bytes leftover after parsing attributes in process `syz.0.1502'. [ 198.242156][T10710] netlink: 'syz.5.1504': attribute type 8 has an invalid length. [ 198.246126][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 198.256721][T10710] bond0: entered promiscuous mode [ 198.259088][T10710] bond_slave_0: entered promiscuous mode [ 198.261734][T10710] bond_slave_1: entered promiscuous mode [ 198.266637][T10710] gretap0: entered promiscuous mode [ 198.273875][T10710] team0: entered promiscuous mode [ 198.276362][T10710] team_slave_0: entered promiscuous mode [ 198.279316][T10710] team_slave_1: entered promiscuous mode [ 198.283470][T10710] debugfs: 'hsr1' already exists in 'hsr' [ 198.286026][T10710] Cannot create hsr debugfs directory [ 198.289290][T10710] hsr1: entered promiscuous mode [ 198.289292][ T34] usb usb9-port1: unable to enumerate USB device [ 198.359938][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'. [ 198.515412][ T42] kauditd_printk_skb: 206 callbacks suppressed [ 198.515433][ T42] audit: type=1400 audit(1786462583.394:1339): avc: denied { create } for pid=10718 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.531787][ T42] audit: type=1400 audit(1786462583.404:1340): avc: denied { allowed } for pid=10718 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.543834][ T42] audit: type=1400 audit(1786462583.414:1341): avc: denied { create } for pid=10718 comm="syz.5.1507" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.559079][ T42] audit: type=1400 audit(1786462583.414:1342): avc: denied { map } for pid=10718 comm="syz.5.1507" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.578771][ T42] audit: type=1400 audit(1786462583.414:1343): avc: denied { read write } for pid=10718 comm="syz.5.1507" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.598875][ T42] audit: type=1400 audit(1786462583.434:1344): avc: denied { ioctl } for pid=10718 comm="syz.5.1507" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39339 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.613806][ T42] audit: type=1400 audit(1786462583.444:1345): avc: denied { create } for pid=10720 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.626272][ T42] audit: type=1400 audit(1786462583.484:1346): avc: denied { ioctl } for pid=10655 comm="syz.3.1491" path="socket:[39153]" dev="sockfs" ino=39153 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.720021][ T42] audit: type=1400 audit(1786462583.604:1347): avc: denied { mounton } for pid=10728 comm="syz.5.1509" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 198.774075][ T42] audit: type=1400 audit(1786462583.654:1348): avc: denied { read } for pid=10728 comm="syz.5.1509" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 198.797692][ T6991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.801824][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.825075][T10729] hfs: can't find a HFS filesystem on dev sr0 [ 198.982680][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1513'. [ 199.028158][T10738] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1512'. [ 199.057780][T10743] netlink: 'syz.5.1514': attribute type 8 has an invalid length. [ 199.061324][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'. [ 199.189530][ T1036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.225771][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.233113][T10746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.239686][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.461878][T10754] af_packet: packet size is too long (1853191215 > 736) [ 199.677626][T10760] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 199.713014][T10764] netlink: 'syz.5.1524': attribute type 8 has an invalid length. [ 199.786391][T10773] sctp: [Deprecated]: syz.3.1526 (pid 10773) Use of int in max_burst socket option. [ 199.786391][T10773] Use struct sctp_assoc_value instead [ 199.825609][T10768] netlink: 'syz.4.1525': attribute type 4 has an invalid length. [ 199.857965][T10768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=10768 comm=syz.4.1525 [ 199.864106][T10768] netlink: 'syz.4.1525': attribute type 19 has an invalid length. [ 199.913638][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.916932][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.927083][T10781] netlink: 'syz.5.1527': attribute type 5 has an invalid length. [ 199.950103][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.952606][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 200.180190][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 200.184017][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 200.209237][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 200.214725][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 200.271289][ T8466] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.274487][ T8466] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.277600][ T8466] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.283813][ T8466] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 200.366712][T10797] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 200.378587][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10797 comm=syz.3.1532 [ 200.385076][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10797 comm=syz.3.1532 [ 200.473173][T10799] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 200.476194][T10799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.484350][T10799] vhci_hcd vhci_hcd.0: Device attached [ 200.487906][T10800] vhci_hcd: unknown pdu 2 [ 200.494063][ T8466] vhci_hcd vhci_hcd.3: stop threads [ 200.497032][ T8466] vhci_hcd vhci_hcd.3: release socket [ 200.501886][ T8466] vhci_hcd vhci_hcd.3: disconnect device [ 200.588326][T10768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.699326][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 200.709047][T10781] ceph: No mds server is up or the cluster is laggy [ 200.709317][T10777] ceph: No mds server is up or the cluster is laggy [ 200.711389][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 200.734816][T10799] infiniband syz0: set active [ 200.736570][T10804] __nla_validate_parse: 5 callbacks suppressed [ 200.736588][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 200.739886][T10799] infiniband syz0: added bond0 [ 200.744714][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 200.751623][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 200.755131][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 200.845399][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 200.847010][T10799] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 200.857835][T10799] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 200.865982][T10799] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 200.953723][T10804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10804 comm=syz.4.1534 [ 200.959335][T10805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10805 comm=syz.4.1534 [ 200.988275][T10799] RDS/IB: syz0: added [ 200.991191][T10799] smc: adding ib device syz0 with port count 1 [ 200.995424][T10799] smc: ib device syz0 port 1 has no pnetid [ 201.181909][T10804] veth5: entered allmulticast mode [ 201.260218][T10804] bond3: (slave veth5): Enslaving as an active interface with an up link [ 201.288805][ T41] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 201.408857][T10805] veth7: entered allmulticast mode [ 201.459901][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 201.465627][ T41] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.479707][T10805] bond3: (slave veth7): Enslaving as an active interface with an up link [ 201.481632][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.490038][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.496528][ T41] usb 10-1: config 0 descriptor?? [ 201.563675][T10808] bond3 (unregistering): (slave veth5): Releasing backup interface [ 201.575282][T10808] bond3 (unregistering): (slave veth7): Releasing backup interface [ 201.582285][T10808] bond3 (unregistering): Released all slaves [ 201.609587][T10818] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 201.728007][ T41] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 201.919391][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1538'. [ 202.308924][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.854190][ T34] usb 10-1: USB disconnect, device number 6 [ 202.871274][T10850] validate_nla: 3 callbacks suppressed [ 202.871298][T10850] netlink: 'syz.0.1546': attribute type 8 has an invalid length. [ 202.879802][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 203.094773][T10854] kvm: kvm [10853]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 203.098517][T10854] kvm: kvm [10853]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 203.134748][T10859] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 203.138239][T10859] SELinux: failed to load policy [ 203.196919][T10862] netlink: 'syz.5.1547': attribute type 4 has an invalid length. [ 203.519021][ T42] kauditd_printk_skb: 148 callbacks suppressed [ 203.519042][ T42] audit: type=1400 audit(1786462588.394:1497): avc: denied { node_bind } for pid=10888 comm="syz.0.1557" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 203.522244][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 203.536112][T10895] dlm: plock device version mismatch: kernel (1.2.0), user (3.0.3) [ 203.540124][ T42] audit: type=1400 audit(1786462588.414:1498): avc: denied { create } for pid=10892 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.540580][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 203.560289][ T42] audit: type=1400 audit(1786462588.414:1499): avc: denied { bind } for pid=10892 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.579364][ T42] audit: type=1400 audit(1786462588.414:1500): avc: denied { setopt } for pid=10892 comm="syz.5.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.586947][ T42] audit: type=1400 audit(1786462588.454:1501): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 203.626290][ T42] audit: type=1400 audit(1786462588.504:1502): avc: denied { create } for pid=10899 comm="syz.5.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.648871][ T42] audit: type=1400 audit(1786462588.504:1503): avc: denied { create } for pid=10900 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.656201][ T42] audit: type=1400 audit(1786462588.504:1504): avc: denied { ioctl } for pid=10900 comm="syz.0.1563" path="socket:[38692]" dev="sockfs" ino=38692 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.666575][ T42] audit: type=1400 audit(1786462588.504:1505): avc: denied { shutdown } for pid=10900 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.676879][ T42] audit: type=1400 audit(1786462588.504:1506): avc: denied { read } for pid=10900 comm="syz.0.1563" dev="nsfs" ino=4026532990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.690540][T10902] erspan0: entered promiscuous mode [ 203.693258][T10902] erspan0: entered allmulticast mode [ 203.956801][T10923] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1570'. [ 203.960892][T10923] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1570'. [ 204.302606][T10928] netlink: 'syz.4.1572': attribute type 21 has an invalid length. [ 204.750371][T10941] nbd: must specify a size in bytes for the device [ 204.953948][ T41] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 204.961781][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1579'. [ 205.017728][T10956] ip_tables: iptables: counters copy to user failed while replacing table [ 205.129316][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 205.134668][ T41] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.140129][ T41] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.155472][ T41] usb 9-1: config 0 has no interface number 0 [ 205.158539][ T41] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.164037][ T41] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.169280][ T41] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.174184][ T41] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.180154][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.187290][ T41] usb 9-1: config 0 descriptor?? [ 205.194987][ T41] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 205.449699][ T41] usb 9-1: USB disconnect, device number 11 [ 205.513658][ T41] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 205.518070][ T29] usb 8-1: USB disconnect, device number 6 [ 205.801141][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.806541][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.814219][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.826811][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.832635][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.196885][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.209089][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.415500][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.419723][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.458964][ T41] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 206.630241][ T41] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 206.635339][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.640402][ T41] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 206.644323][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.660330][ T41] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 206.682164][ T41] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 206.743461][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.746639][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.749788][T10961] bridge_slave_0: entered allmulticast mode [ 206.754258][T10961] bridge_slave_0: entered promiscuous mode [ 206.759360][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.762423][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.765838][T10961] bridge_slave_1: entered allmulticast mode [ 206.770489][T10961] bridge_slave_1: entered promiscuous mode [ 206.804283][T10961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.811672][T10961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.867217][T10961] team0: Port device team_slave_0 added [ 206.872442][T10961] team0: Port device team_slave_1 added [ 206.911887][T10961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.914997][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.926068][T10961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.933652][T10961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.936683][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.947211][T10961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.016748][T10961] hsr_slave_0: entered promiscuous mode [ 207.019016][T10987] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 207.020600][T10961] hsr_slave_1: entered promiscuous mode [ 207.022939][T10987] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 207.025287][T10961] debugfs: 'hsr0' already exists in 'hsr' [ 207.029908][T10961] Cannot create hsr debugfs directory [ 207.031267][T10987] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 207.139156][T10987] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 207.144067][T11004] TC_ACT_REPEAT abuse ? [ 207.148461][ T5822] usb 9-1: USB disconnect, device number 12 [ 207.179714][ T5822] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 207.184146][ T5822] spcp8x5 9-1:1.0: device disconnected [ 207.250474][T10961] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.256834][T10961] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 207.264258][T10961] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.379443][T10961] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.383573][T10961] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 207.388205][T10961] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.461153][T10961] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.464775][T10961] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 207.468069][T10961] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.549959][T10961] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.554258][T10961] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 207.559205][T10961] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.752304][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1596'. [ 207.848240][T11033] tmpfs: Bad value for 'mpol' [ 207.858551][T10961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.863155][T11033] tmpfs: Bad value for 'mpol' [ 207.868999][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.892878][T10961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.909466][ T5745] Bluetooth: hci1: command tx timeout [ 207.941772][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.946028][T10961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.954055][T11032] kvm: kvm [11030]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 207.955340][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.960664][T11032] kvm: kvm [11030]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 207.961981][T10961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.971019][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.087933][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.103876][T10961] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.114629][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.117927][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.122119][T11057] jffs2: notice: (11057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 208.142395][T11058] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 208.164674][ T6993] rpcbind: server 127.0.0.1 not responding, timed out [ 208.191983][T11058] bond4: entered promiscuous mode [ 208.194967][T11058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.204042][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.207037][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.554803][ T42] kauditd_printk_skb: 194 callbacks suppressed [ 208.554820][ T42] audit: type=1400 audit(2000000003.789:1701): avc: denied { create } for pid=11096 comm="syz.5.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.576595][ T42] audit: type=1400 audit(2000000003.809:1702): avc: denied { create } for pid=11108 comm="syz.0.1615" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.586868][ T42] audit: type=1400 audit(2000000003.809:1703): avc: denied { ioctl } for pid=11108 comm="syz.0.1615" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43014 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.655488][T10961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.681377][ T1036] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 208.710979][ T42] audit: type=1400 audit(2000000003.949:1704): avc: denied { unmount } for pid=10341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 208.732626][T10961] veth0_vlan: entered promiscuous mode [ 208.744479][T10961] veth1_vlan: entered promiscuous mode [ 208.773291][ T42] audit: type=1400 audit(2000000004.009:1705): avc: denied { ioctl } for pid=11121 comm="syz.5.1617" path="socket:[41548]" dev="sockfs" ino=41548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.784578][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1617'. [ 208.785026][T10961] veth0_macvtap: entered promiscuous mode [ 208.790051][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.792787][T10961] veth1_macvtap: entered promiscuous mode [ 208.804550][ T42] audit: type=1400 audit(2000000004.019:1706): avc: denied { read write } for pid=11123 comm="syz.0.1618" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.817238][ T42] audit: type=1400 audit(2000000004.019:1707): avc: denied { open } for pid=11123 comm="syz.0.1618" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.826360][T10961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.827517][ T42] audit: type=1400 audit(2000000004.019:1708): avc: denied { mount } for pid=11123 comm="syz.0.1618" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 208.839614][T10961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.845371][ T42] audit: type=1400 audit(2000000004.079:1709): avc: denied { read } for pid=11123 comm="syz.0.1618" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.858099][ T42] audit: type=1400 audit(2000000004.079:1710): avc: denied { open } for pid=11123 comm="syz.0.1618" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.859125][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.877907][ T1036] usb 9-1: Using ep0 maxpacket: 8 [ 208.895767][ T1036] usb 9-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 208.919227][ T1036] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 208.923409][ T1036] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.930817][ T1036] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.939265][ T8466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.944213][ T8466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.951283][ T1036] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.955395][ T1036] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.981237][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.014212][ T8466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.051242][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.055889][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.121073][ T6994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.124801][ T6994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.125637][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.134194][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.479042][ T29] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 209.661115][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 209.667782][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 209.672109][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.676410][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.681685][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.687344][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.700055][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 209.704426][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.709611][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.714647][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.719875][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.725513][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 209.728408][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.732223][ T34] IPVS: starting estimator thread 0... [ 209.732923][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.739668][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.746561][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1622'. [ 209.746887][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.760079][ T29] usb 8-1: string descriptor 0 read error: -22 [ 209.764201][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.782604][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 209.811923][T11143] usbtmc 9-1:16.0: simple usb_control_msg returned 0 [ 209.823329][T11143] f2fs: Unknown parameter 'grpquota!ÜþÆ9¥' [ 209.824269][T11142] IPVS: using max 28 ests per chain, 67200 per kthread [ 209.932675][T11148] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 209.980778][T11134] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 209.989026][ T5745] Bluetooth: hci1: command tx timeout [ 210.014633][ T1038] usb 8-1: USB disconnect, device number 7 [ 210.018074][ T5846] usb 9-1: USB disconnect, device number 13 [ 210.200477][T11162] syzkaller0: entered promiscuous mode [ 210.202999][T11162] syzkaller0: entered allmulticast mode [ 210.212705][T11162] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 210.216274][T11162] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1629'. [ 210.633110][T11178] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20001 [ 210.677002][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.689326][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.859353][T11184] ------------[ cut here ]------------ [ 210.864724][T11184] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 210.868538][T11184] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#0: syz.5.1631/11184 [ 210.873996][T11184] Modules linked in: [ 210.876692][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.5.1631 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.884337][T11184] Tainted: [L]=SOFTLOCKUP [ 210.886343][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.891004][T11184] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 210.894665][T11184] Code: 89 c5 89 c6 e8 f7 39 6a f8 45 85 ed 0f 85 be fb ff ff e8 79 3f 6a f8 48 8d 3d 92 50 90 07 ba 48 00 00 00 48 c7 c6 e0 35 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 3f 6a f8 48 8d bd 00 08 00 00 [ 210.904030][T11184] RSP: 0018:ffffc90005c3fa80 EFLAGS: 00010283 [ 210.912952][T11184] RAX: 000000000000029e RBX: ffff8880354c2000 RCX: ffffc90025e21000 [ 210.916566][T11184] RDX: 0000000000000048 RSI: ffffffff8d1835e0 RDI: ffffffff913084a0 [ 210.920422][T11184] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 210.925215][T11184] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 210.928494][T11184] R13: 0000000000000000 R14: ffff888022ed8568 R15: ffffc90005c3fbe0 [ 210.932423][T11184] FS: 00007fbe3e9f66c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 210.935766][T11184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.938633][T11184] CR2: 0000200000003000 CR3: 0000000012d7d000 CR4: 0000000000352ef0 [ 210.945502][T11184] Call Trace: [ 210.947252][T11184] [ 210.948969][T11184] io_register_zcrx+0xe94/0x1d30 [ 210.951308][T11184] ? __pfx_io_register_zcrx+0x10/0x10 [ 210.953641][T11184] ? lock_acquire+0x1b9/0x370 [ 210.955929][T11184] ? rcu_is_watching+0x12/0xc0 [ 210.958282][T11184] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 210.961208][T11184] ? futex_private_hash_put+0x115/0x1c0 [ 210.963426][T11184] ? __fget_files+0x215/0x3d0 [ 210.965317][T11184] ? __fget_files+0x215/0x3d0 [ 210.967192][T11184] __do_sys_io_uring_register+0x1193/0x1bc0 [ 210.969543][T11184] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 210.971838][T11184] ? __x64_sys_futex+0x34f/0x4d0 [ 210.973795][T11184] ? __x64_sys_futex+0x358/0x4d0 [ 210.975994][T11184] ? xfd_validate_state+0x129/0x190 [ 210.978432][T11184] do_syscall_64+0x115/0x870 [ 210.981138][T11184] ? clear_bhb_loop+0x70/0xc0 [ 210.983472][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.986205][T11184] RIP: 0033:0x7fbe4079e0d9 [ 210.988134][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.997699][T11184] RSP: 002b:00007fbe3e9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 211.002841][T11184] RAX: ffffffffffffffda RBX: 00007fbe40a26180 RCX: 00007fbe4079e0d9 [ 211.006961][T11184] RDX: 0000200000000180 RSI: 0000000000000020 RDI: 000000000000000a [ 211.010854][T11184] RBP: 00007fbe40835024 R08: 0000000000000000 R09: 0000000000000000 [ 211.014436][T11184] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 211.018123][T11184] R13: 00007fbe40a26218 R14: 00007fbe40a26180 R15: 00007ffd40270c38 [ 211.022413][T11184] [ 211.023998][T11184] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.027840][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.5.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.032455][T11184] Tainted: [L]=SOFTLOCKUP [ 211.034306][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.038613][T11184] Call Trace: [ 211.040061][T11184] [ 211.041459][T11184] dump_stack_lvl+0x100/0x190 [ 211.043792][T11184] vpanic+0x552/0x970 [ 211.045584][T11184] ? __pfx_vpanic+0x10/0x10 [ 211.048101][T11184] panic+0xd1/0xe0 [ 211.050019][T11184] ? __pfx_panic+0x10/0x10 [ 211.051950][T11184] check_panic_on_warn.cold+0x19/0x34 [ 211.054293][T11184] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 211.056892][T11184] __warn.cold+0x191/0x318 [ 211.058806][T11184] __report_bug+0x30f/0x440 [ 211.060665][T11184] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 211.063060][T11184] ? __pfx___report_bug+0x10/0x10 [ 211.065299][T11184] ? find_held_lock+0x2b/0x80 [ 211.067567][T11184] ? mark_held_locks+0x40/0x70 [ 211.069573][T11184] report_bug_entry+0xe1/0x290 [ 211.071584][T11184] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 211.074258][T11184] handle_bug+0x1cd/0x2a0 [ 211.076147][T11184] exc_invalid_op+0x17/0x50 [ 211.078021][T11184] asm_exc_invalid_op+0x1a/0x20 [ 211.080062][T11184] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 211.083058][T11184] Code: 89 c5 89 c6 e8 f7 39 6a f8 45 85 ed 0f 85 be fb ff ff e8 79 3f 6a f8 48 8d 3d 92 50 90 07 ba 48 00 00 00 48 c7 c6 e0 35 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 3f 6a f8 48 8d bd 00 08 00 00 [ 211.091020][T11184] RSP: 0018:ffffc90005c3fa80 EFLAGS: 00010283 [ 211.093589][T11184] RAX: 000000000000029e RBX: ffff8880354c2000 RCX: ffffc90025e21000 [ 211.096803][T11184] RDX: 0000000000000048 RSI: ffffffff8d1835e0 RDI: ffffffff913084a0 [ 211.100410][T11184] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 211.104065][T11184] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 211.107047][T11184] R13: 0000000000000000 R14: ffff888022ed8568 R15: ffffc90005c3fbe0 [ 211.110235][T11184] io_register_zcrx+0xe94/0x1d30 [ 211.112357][T11184] ? __pfx_io_register_zcrx+0x10/0x10 [ 211.114602][T11184] ? lock_acquire+0x1b9/0x370 [ 211.116649][T11184] ? rcu_is_watching+0x12/0xc0 [ 211.118703][T11184] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 211.121435][T11184] ? futex_private_hash_put+0x115/0x1c0 [ 211.124010][T11184] ? __fget_files+0x215/0x3d0 [ 211.126195][T11184] ? __fget_files+0x215/0x3d0 [ 211.128077][T11184] __do_sys_io_uring_register+0x1193/0x1bc0 [ 211.130309][T11184] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 211.132791][T11184] ? __x64_sys_futex+0x34f/0x4d0 [ 211.134903][T11184] ? __x64_sys_futex+0x358/0x4d0 [ 211.137089][T11184] ? xfd_validate_state+0x129/0x190 [ 211.139287][T11184] do_syscall_64+0x115/0x870 [ 211.141317][T11184] ? clear_bhb_loop+0x70/0xc0 [ 211.143286][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.145489][T11184] RIP: 0033:0x7fbe4079e0d9 [ 211.147439][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.155380][T11184] RSP: 002b:00007fbe3e9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 211.159228][T11184] RAX: ffffffffffffffda RBX: 00007fbe40a26180 RCX: 00007fbe4079e0d9 [ 211.162774][T11184] RDX: 0000200000000180 RSI: 0000000000000020 RDI: 000000000000000a [ 211.166070][T11184] RBP: 00007fbe40835024 R08: 0000000000000000 R09: 0000000000000000 [ 211.169536][T11184] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 211.173089][T11184] R13: 00007fbe40a26218 R14: 00007fbe40a26180 R15: 00007ffd40270c38 [ 211.176722][T11184] [ 211.179028][T11184] Kernel Offset: disabled [ 211.181057][T11184] Rebooting in 86400 seconds..